Edit tour

Windows Analysis Report
xbOnlYALvtUq.exe

Overview

General Information

Sample Name:	xbOnlYALvtUq.exe
Analysis ID:	1345566
MD5:	2bdc913d338e004ac337cfe9a44abc55
SHA1:	29feda66e04422c0d506048ea8123771269faa82
SHA256:	f2f0353f1f50aa9a76a1ab978430f1a6e85d95d8ce7ee66230beda0927863cfc
Tags:	exenjRat
Infos:

Detection

Njrat, zgRAT

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Found malware configuration

Multi AV Scanner detection for submitted file

Yara detected zgRAT

Malicious sample detected (through community Yara rule)

Yara detected Njrat

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Multi AV Scanner detection for domain / URL

Snort IDS alert for network traffic

Uses netsh to modify the Windows network and firewall settings

Connects to many ports of the same IP (likely port scanning)

.NET source code references suspicious native API functions

Contains functionality to log keystrokes (.Net Source)

Machine Learning detection for sample

.NET source code contains potential unpacker

.NET source code contains method to dynamically call methods (often used by packers)

C2 URLs / IPs found in malware configuration

Modifies the windows firewall

Uses 32bit PE files

Queries the volume information (name, serial number etc) of a device

Yara signature match

May sleep (evasive loops) to hinder dynamic analysis

Uses code obfuscation techniques (call, push, ret)

Internet Provider seen in connection with other malware

Detected potential crypto function

Stores large binary data to the registry

Sample execution stops while process was sleeping (likely an evasion)

IP address seen in connection with other malware

Abnormal high CPU Usage

Enables debug privileges

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Sample file is different than original file name gathered from version info

Detected TCP or UDP traffic on non-standard ports

Classification

Process Tree

System is w10x64

xbOnlYALvtUq.exe (PID: 3472 cmdline: C:\Users\user\Desktop\xbOnlYALvtUq.exe MD5: 2BDC913D338E004AC337CFE9A44ABC55)

netsh.exe (PID: 5148 cmdline: netsh firewall add allowedprogram "C:\Users\user\Desktop\xbOnlYALvtUq.exe" "xbOnlYALvtUq.exe" ENABLE MD5: 4E89A1A088BE715D6C946E55AB07C7DF)

conhost.exe (PID: 2316 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
NjRAT	RedPacket Security describes NJRat as "a remote access trojan (RAT) has capabilities to log keystrokes, access the victim's camera, steal credentials stored in browsers, open a reverse shell, upload/download files, view the victim's desktop, perform process, file, and registry manipulations, and capabilities to let the attacker update, uninstall, restart, close, disconnect the RAT and rename its campaign ID. Through the Command & Control (CnC) server software, the attacker has capabilities to create and configure the malware to spread through USB drives."It is supposedly popular with actors in the Middle East. Similar to other RATs, many leaked builders may be backdoored.	AQUATIC PANDA Earth Lusca Operation C-Major The Gorgon Group	http://blog.trendmicro.com/trendlabs-security-intelligence/new-rats-emerge-from-leaked-njw0rm-source-code/ http://blogs.360.cn/post/analysis-of-apt-c-37.html http://threatgeek.typepad.com/files/fta-1009---njrat-uncovered-1.pdf https://about.fb.com/news/2021/04/taking-action-against-hackers-in-palestine/ https://asec.ahnlab.com/1369	https://malpedia.caad.fkie.fraunhofer.de/details/win.njrat

Name	Description	Attribution	Blogpost URLs	Link
zgRAT	zgRAT is a Remote Access Trojan malware which sometimes drops other malware such as AgentTesla malware. zgRAT has an inforstealer use which targets browser information and cryptowallets.Usually spreads by USB or phishing emails with -zip/-lnk/.bat/.xlsx attachments and so on.	No Attribution	https://bazaar.abuse.ch/browse/signature/zgRAT/ https://kcm.trellix.com/corporate/index?page=content&id=KB96190&locale=en_US https://www.difesaesicurezza.com/cyber/cybercrime-rfq-dalla-turchia-veicola-agenttesla-e-zgrat/ https://www.fortinet.com/blog/threat-research/smokeloader-using-old-vulnerabilities	https://malpedia.caad.fkie.fraunhofer.de/details/win.zgrat

Malware Configuration

Threatname: Njrat

{"Host": "0.tcp.sa.ngrok.io", "Port": "13065", "Version": "0.7d", "Campaign ID": "HacKed", "Install Name": "server.exe", "Install Dir": "TEMP", "Network Seprator": "|'|'|"}

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
xbOnlYALvtUq.exe	JoeSecurity_Njrat	Yara detected Njrat	Joe Security
xbOnlYALvtUq.exe	Windows_Trojan_Njrat_30f3c220	unknown	unknown	0x3c9a:$a1: get_Registry 0x4d66:$a2: SEE_MASK_NOZONECHECKS 0x4e62:$a3: Download ERROR 0x4d28:$a4: cmd.exe /c ping 0 -n 2 & del " 0x4cba:$a5: netsh firewall delete allowedprogram "
xbOnlYALvtUq.exe	CN_disclosed_20180208_c	Detects malware from disclosed CN malware set	Florian Roth	0x4d28:$x1: cmd.exe /c ping 0 -n 2 & del " 0x4e80:$s3: Executed As 0x4e62:$s6: Download ERROR
xbOnlYALvtUq.exe	njrat1	Identify njRat	Brian Wallace @botnet_hunter	0x4d96:$a1: netsh firewall add allowedprogram 0x4d66:$a2: SEE_MASK_NOZONECHECKS 0x5010:$b1: [TAP] 0x4d28:$c3: cmd.exe /c ping
xbOnlYALvtUq.exe	Njrat	detect njRAT in memory	JPCERT/CC Incident Response Group	0x4d66:$reg: SEE_MASK_NOZONECHECKS 0x4e3e:$msg: Execute ERROR 0x4e9a:$msg: Execute ERROR 0x4d28:$ping: cmd.exe /c ping 0 -n 2 & del
xbOnlYALvtUq.exe	MALWARE_Win_NjRAT	Detects NjRAT / Bladabindi	ditekSHen	0x4cba:$s1: netsh firewall delete allowedprogram 0x4d96:$s2: netsh firewall add allowedprogram 0x4d28:$s3: 63 00 6D 00 64 00 2E 00 65 00 78 00 65 00 20 00 2F 00 63 00 20 00 70 00 69 00 6E 00 67 0x4e3e:$s4: Execute ERROR 0x4e9a:$s4: Execute ERROR 0x4e62:$s5: Download ERROR 0x4fc6:$s6: [kl]
Click to see the 1 entries

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
dump.pcap	JoeSecurity_Njrat_1	Yara detected Njrat	Joe Security

Memory Dumps

Source	Rule	Description	Author	Strings
00000000.00000000.1962163495.00000000007A2000.00000002.00000001.01000000.00000003.sdmp	JoeSecurity_Njrat	Yara detected Njrat	Joe Security
00000000.00000000.1962163495.00000000007A2000.00000002.00000001.01000000.00000003.sdmp	Windows_Trojan_Njrat_30f3c220	unknown	unknown	0x3a9a:$a1: get_Registry 0x4b66:$a2: SEE_MASK_NOZONECHECKS 0x4c62:$a3: Download ERROR 0x4b28:$a4: cmd.exe /c ping 0 -n 2 & del " 0x4aba:$a5: netsh firewall delete allowedprogram "
00000000.00000000.1962163495.00000000007A2000.00000002.00000001.01000000.00000003.sdmp	njrat1	Identify njRat	Brian Wallace @botnet_hunter	0x4b96:$a1: netsh firewall add allowedprogram 0x4b66:$a2: SEE_MASK_NOZONECHECKS 0x4e10:$b1: [TAP] 0x4b28:$c3: cmd.exe /c ping
00000000.00000000.1962163495.00000000007A2000.00000002.00000001.01000000.00000003.sdmp	Njrat	detect njRAT in memory	JPCERT/CC Incident Response Group	0x4b66:$reg: SEE_MASK_NOZONECHECKS 0x4c3e:$msg: Execute ERROR 0x4c9a:$msg: Execute ERROR 0x4b28:$ping: cmd.exe /c ping 0 -n 2 & del
00000000.00000002.4407298809.00000000059B0000.00000004.08000000.00040000.00000000.sdmp	JoeSecurity_zgRAT_1	Yara detected zgRAT	Joe Security
00000000.00000002.4405941872.0000000002E11000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_Njrat	Yara detected Njrat	Joe Security
Process Memory Space: xbOnlYALvtUq.exe PID: 3472	JoeSecurity_Njrat	Yara detected Njrat	Joe Security
Click to see the 2 entries

Unpacked PEs

Source	Rule	Description	Author	Strings
0.2.xbOnlYALvtUq.exe.59b0000.0.raw.unpack	JoeSecurity_zgRAT_1	Yara detected zgRAT	Joe Security
0.2.xbOnlYALvtUq.exe.59b0000.0.unpack	JoeSecurity_zgRAT_1	Yara detected zgRAT	Joe Security
0.0.xbOnlYALvtUq.exe.7a0000.0.unpack	JoeSecurity_Njrat	Yara detected Njrat	Joe Security
0.0.xbOnlYALvtUq.exe.7a0000.0.unpack	Windows_Trojan_Njrat_30f3c220	unknown	unknown	0x3c9a:$a1: get_Registry 0x4d66:$a2: SEE_MASK_NOZONECHECKS 0x4e62:$a3: Download ERROR 0x4d28:$a4: cmd.exe /c ping 0 -n 2 & del " 0x4cba:$a5: netsh firewall delete allowedprogram "
0.0.xbOnlYALvtUq.exe.7a0000.0.unpack	CN_disclosed_20180208_c	Detects malware from disclosed CN malware set	Florian Roth	0x4d28:$x1: cmd.exe /c ping 0 -n 2 & del " 0x4e80:$s3: Executed As 0x4e62:$s6: Download ERROR
0.0.xbOnlYALvtUq.exe.7a0000.0.unpack	njrat1	Identify njRat	Brian Wallace @botnet_hunter	0x4d96:$a1: netsh firewall add allowedprogram 0x4d66:$a2: SEE_MASK_NOZONECHECKS 0x5010:$b1: [TAP] 0x4d28:$c3: cmd.exe /c ping
0.0.xbOnlYALvtUq.exe.7a0000.0.unpack	Njrat	detect njRAT in memory	JPCERT/CC Incident Response Group	0x4d66:$reg: SEE_MASK_NOZONECHECKS 0x4e3e:$msg: Execute ERROR 0x4e9a:$msg: Execute ERROR 0x4d28:$ping: cmd.exe /c ping 0 -n 2 & del
0.0.xbOnlYALvtUq.exe.7a0000.0.unpack	MALWARE_Win_NjRAT	Detects NjRAT / Bladabindi	ditekSHen	0x4cba:$s1: netsh firewall delete allowedprogram 0x4d96:$s2: netsh firewall add allowedprogram 0x4d28:$s3: 63 00 6D 00 64 00 2E 00 65 00 78 00 65 00 20 00 2F 00 63 00 20 00 70 00 69 00 6E 00 67 0x4e3e:$s4: Execute ERROR 0x4e9a:$s4: Execute ERROR 0x4e62:$s5: Download ERROR 0x4fc6:$s6: [kl]
Click to see the 3 entries

Snort Signatures

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act) - Source IP: 192.168.2.5 - Destination IP: 18.228.115.60

Timestamp:	192.168.2.518.228.115.6049704130652825564 11/21/23-03:38:52.649286
SID:	2825564
Source Port:	49704
Destination Port:	13065
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) - Source IP: 192.168.2.5 - Destination IP: 18.228.115.60

Timestamp:	192.168.2.518.228.115.6049704130652825563 11/21/23-03:35:58.376585
SID:	2825563
Source Port:	49704
Destination Port:	13065
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN njrat ver 0.7d Malware CnC Callback Response (Remote Desktop) - Source IP: 192.168.2.5 - Destination IP: 18.228.115.60

Timestamp:	192.168.2.518.228.115.6049713130652022061 11/21/23-03:37:00.931357
SID:	2022061
Source Port:	49713
Destination Port:	13065
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.5 - Destination IP: 18.228.115.60

Timestamp:	192.168.2.518.228.115.6049704130652814860 11/21/23-03:38:53.381901
SID:	2814860
Source Port:	49704
Destination Port:	13065
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN njrat ver 0.7d Malware CnC Callback (Remote Desktop) - Source IP: 192.168.2.5 - Destination IP: 18.228.115.60

Timestamp:	192.168.2.518.228.115.6049713130652022060 11/21/23-03:36:22.077496
SID:	2022060
Source Port:	49713
Destination Port:	13065
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity Sending Screenshot (CAP) - Source IP: 192.168.2.5 - Destination IP: 18.228.115.60

Timestamp:	192.168.2.518.228.115.6049704130652825565 11/21/23-03:37:00.623314
SID:	2825565
Source Port:	49704
Destination Port:	13065
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.5 - Destination IP: 18.228.115.60

Timestamp:	192.168.2.518.228.115.6049704130652033132 11/21/23-03:35:58.171440
SID:	2033132
Source Port:	49704
Destination Port:	13065
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN njrat ver 0.7d Malware CnC Callback (Capture) - Source IP: 192.168.2.5 - Destination IP: 18.228.115.60

Timestamp:	192.168.2.518.228.115.6049704130652019214 11/21/23-03:37:00.623314
SID:	2019214
Source Port:	49704
Destination Port:	13065
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.5 - Destination IP: 18.228.115.60

Timestamp:	192.168.2.518.228.115.6049704130652814856 11/21/23-03:35:58.376585
SID:	2814856
Source Port:	49704
Destination Port:	13065
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN njrat ver 0.7d Malware CnC Callback Response (Get Passwords) - Source IP: 192.168.2.5 - Destination IP: 18.228.115.60

Timestamp:	192.168.2.518.228.115.6049704130652022059 11/21/23-03:36:21.801212
SID:	2022059
Source Port:	49704
Destination Port:	13065
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inv) - Source IP: 18.228.115.60 - Destination IP: 192.168.2.5

Timestamp:	18.228.115.60192.168.2.513065497042814858 11/21/23-03:36:20.299135
SID:	2814858
Source Port:	13065
Destination Port:	49704
Protocol:	TCP
Classtype:	A Network Trojan was detected

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Found malware configuration

Source: 00000000.00000000.1962163495.00000000007A2000.00000002.00000001.01000000.00000003.sdmp

Malware Configuration Extractor: Njrat {"Host": "0.tcp.sa.ngrok.io", "Port": "13065", "Version": "0.7d", "Campaign ID": "HacKed", "Install Name": "server.exe", "Install Dir": "TEMP", "Network Seprator": "|'|'|"}

Multi AV Scanner detection for submitted file

Source: xbOnlYALvtUq.exe	ReversingLabs: Detection: 92%
Source: xbOnlYALvtUq.exe	Virustotal: Detection: 87%			Perma Link

Yara detected Njrat

Source: Yara match	File source: dump.pcap, type: PCAP
Source: Yara match	File source: xbOnlYALvtUq.exe, type: SAMPLE
Source: Yara match	File source: 0.0.xbOnlYALvtUq.exe.7a0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000000.1962163495.00000000007A2000.00000002.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.4405941872.0000000002E11000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: xbOnlYALvtUq.exe PID: 3472, type: MEMORYSTR

Antivirus / Scanner detection for submitted sample

Source: xbOnlYALvtUq.exe

Avira: detected

Antivirus detection for URL or domain

Source: 0.tcp.sa.ngrok.io

Avira URL Cloud: Label: malware

Multi AV Scanner detection for domain / URL

Source: 0.tcp.sa.ngrok.io	Virustotal: Detection: 14%			Perma Link
Source: 0.tcp.sa.ngrok.io	Virustotal: Detection: 14%			Perma Link

Machine Learning detection for sample

Source: xbOnlYALvtUq.exe

Joe Sandbox ML: detected

Source: xbOnlYALvtUq.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: C:\Users\user\Desktop\xbOnlYALvtUq.exe

File opened: C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.9672_none_d08f9da24428a513\MSVCR80.dll

Jump to behavior

Source: xbOnlYALvtUq.exe

Static PE information: DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE

Networking

Snort IDS alert for network traffic

Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.5:49704 -> 18.228.115.60:13065
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.5:49704 -> 18.228.115.60:13065
Source: Traffic	Snort IDS: 2825563 ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) 192.168.2.5:49704 -> 18.228.115.60:13065
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.5:49704 -> 18.228.115.60:13065
Source: Traffic	Snort IDS: 2825564 ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act) 192.168.2.5:49704 -> 18.228.115.60:13065
Source: Traffic	Snort IDS: 2019214 ET TROJAN njrat ver 0.7d Malware CnC Callback (Capture) 192.168.2.5:49704 -> 18.228.115.60:13065
Source: Traffic	Snort IDS: 2825565 ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity Sending Screenshot (CAP) 192.168.2.5:49704 -> 18.228.115.60:13065
Source: Traffic	Snort IDS: 2814858 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inv) 18.228.115.60:13065 -> 192.168.2.5:49704
Source: Traffic	Snort IDS: 2022059 ET TROJAN njrat ver 0.7d Malware CnC Callback Response (Get Passwords) 192.168.2.5:49704 -> 18.228.115.60:13065
Source: Traffic	Snort IDS: 2022060 ET TROJAN njrat ver 0.7d Malware CnC Callback (Remote Desktop) 192.168.2.5:49713 -> 18.228.115.60:13065
Source: Traffic	Snort IDS: 2022061 ET TROJAN njrat ver 0.7d Malware CnC Callback Response (Remote Desktop) 192.168.2.5:49713 -> 18.228.115.60:13065

Connects to many ports of the same IP (likely port scanning)

Source: global traffic

TCP traffic: 18.228.115.60 ports 13065,0,1,3,5,6

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor

URLs: 0.tcp.sa.ngrok.io

Source: Joe Sandbox View

ASN Name: AMAZON-02US AMAZON-02US

Source: Joe Sandbox View

IP Address: 18.228.115.60 18.228.115.60

Source: global traffic

TCP traffic: 192.168.2.5:49704 -> 18.228.115.60:13065

Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: unknown

DNS traffic detected: queries for: 0.tcp.sa.ngrok.io

Key, Mouse, Clipboard, Microphone and Screen Capturing

Contains functionality to log keystrokes (.Net Source)

Source: xbOnlYALvtUq.exe, kl.cs

.Net Code: VKCodeToUnicode

E-Banking Fraud

Yara detected Njrat

Source: Yara match	File source: dump.pcap, type: PCAP
Source: Yara match	File source: xbOnlYALvtUq.exe, type: SAMPLE
Source: Yara match	File source: 0.0.xbOnlYALvtUq.exe.7a0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000000.1962163495.00000000007A2000.00000002.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.4405941872.0000000002E11000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: xbOnlYALvtUq.exe PID: 3472, type: MEMORYSTR

System Summary

Malicious sample detected (through community Yara rule)

Source: xbOnlYALvtUq.exe, type: SAMPLE	Matched rule: Windows_Trojan_Njrat_30f3c220 Author: unknown
Source: xbOnlYALvtUq.exe, type: SAMPLE	Matched rule: Detects malware from disclosed CN malware set Author: Florian Roth
Source: xbOnlYALvtUq.exe, type: SAMPLE	Matched rule: Identify njRat Author: Brian Wallace @botnet_hunter
Source: xbOnlYALvtUq.exe, type: SAMPLE	Matched rule: detect njRAT in memory Author: JPCERT/CC Incident Response Group
Source: xbOnlYALvtUq.exe, type: SAMPLE	Matched rule: Detects NjRAT / Bladabindi Author: ditekSHen
Source: 0.0.xbOnlYALvtUq.exe.7a0000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Njrat_30f3c220 Author: unknown
Source: 0.0.xbOnlYALvtUq.exe.7a0000.0.unpack, type: UNPACKEDPE	Matched rule: Detects malware from disclosed CN malware set Author: Florian Roth
Source: 0.0.xbOnlYALvtUq.exe.7a0000.0.unpack, type: UNPACKEDPE	Matched rule: Identify njRat Author: Brian Wallace @botnet_hunter
Source: 0.0.xbOnlYALvtUq.exe.7a0000.0.unpack, type: UNPACKEDPE	Matched rule: detect njRAT in memory Author: JPCERT/CC Incident Response Group
Source: 0.0.xbOnlYALvtUq.exe.7a0000.0.unpack, type: UNPACKEDPE	Matched rule: Detects NjRAT / Bladabindi Author: ditekSHen
Source: 00000000.00000000.1962163495.00000000007A2000.00000002.00000001.01000000.00000003.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Njrat_30f3c220 Author: unknown
Source: 00000000.00000000.1962163495.00000000007A2000.00000002.00000001.01000000.00000003.sdmp, type: MEMORY	Matched rule: Identify njRat Author: Brian Wallace @botnet_hunter
Source: 00000000.00000000.1962163495.00000000007A2000.00000002.00000001.01000000.00000003.sdmp, type: MEMORY	Matched rule: detect njRAT in memory Author: JPCERT/CC Incident Response Group

Source: xbOnlYALvtUq.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: xbOnlYALvtUq.exe, type: SAMPLE	Matched rule: Windows_Trojan_Njrat_30f3c220 reference_sample = 741a0f3954499c11f9eddc8df7c31e7c59ca41f1a7005646735b8b1d53438c1b, os = windows, severity = x86, creation_date = 2021-06-13, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Njrat, fingerprint = d15e131bca6beddcaecb20fffaff1784ad8a33a25e7ce90f7450d1a362908cc4, id = 30f3c220-b8dc-45a1-bcf0-027c2f76fa63, last_modified = 2021-10-04
Source: xbOnlYALvtUq.exe, type: SAMPLE	Matched rule: CN_disclosed_20180208_c date = 2018-02-08, hash1 = 17475d25d40c877284e73890a9dd55fccedc6a5a071c351a8c342c8ef7f9cea7, author = Florian Roth, description = Detects malware from disclosed CN malware set, reference = https://twitter.com/cyberintproject/status/961714165550342146, license = https://creativecommons.org/licenses/by-nc/4.0/
Source: xbOnlYALvtUq.exe, type: SAMPLE	Matched rule: njrat1 date = 2015-05-27, author = Brian Wallace @botnet_hunter, description = Identify njRat, author_email = bwall@ballastsecurity.net
Source: xbOnlYALvtUq.exe, type: SAMPLE	Matched rule: Njrat hash1 = d5f63213ce11798879520b0e9b0d1b68d55f7727758ec8c120e370699a41379d, author = JPCERT/CC Incident Response Group, description = detect njRAT in memory, rule_usage = memory scan
Source: xbOnlYALvtUq.exe, type: SAMPLE	Matched rule: MALWARE_Win_NjRAT author = ditekSHen, description = Detects NjRAT / Bladabindi
Source: 0.0.xbOnlYALvtUq.exe.7a0000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Njrat_30f3c220 reference_sample = 741a0f3954499c11f9eddc8df7c31e7c59ca41f1a7005646735b8b1d53438c1b, os = windows, severity = x86, creation_date = 2021-06-13, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Njrat, fingerprint = d15e131bca6beddcaecb20fffaff1784ad8a33a25e7ce90f7450d1a362908cc4, id = 30f3c220-b8dc-45a1-bcf0-027c2f76fa63, last_modified = 2021-10-04
Source: 0.0.xbOnlYALvtUq.exe.7a0000.0.unpack, type: UNPACKEDPE	Matched rule: CN_disclosed_20180208_c date = 2018-02-08, hash1 = 17475d25d40c877284e73890a9dd55fccedc6a5a071c351a8c342c8ef7f9cea7, author = Florian Roth, description = Detects malware from disclosed CN malware set, reference = https://twitter.com/cyberintproject/status/961714165550342146, license = https://creativecommons.org/licenses/by-nc/4.0/
Source: 0.0.xbOnlYALvtUq.exe.7a0000.0.unpack, type: UNPACKEDPE	Matched rule: njrat1 date = 2015-05-27, author = Brian Wallace @botnet_hunter, description = Identify njRat, author_email = bwall@ballastsecurity.net
Source: 0.0.xbOnlYALvtUq.exe.7a0000.0.unpack, type: UNPACKEDPE	Matched rule: Njrat hash1 = d5f63213ce11798879520b0e9b0d1b68d55f7727758ec8c120e370699a41379d, author = JPCERT/CC Incident Response Group, description = detect njRAT in memory, rule_usage = memory scan
Source: 0.0.xbOnlYALvtUq.exe.7a0000.0.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_NjRAT author = ditekSHen, description = Detects NjRAT / Bladabindi
Source: 00000000.00000000.1962163495.00000000007A2000.00000002.00000001.01000000.00000003.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Njrat_30f3c220 reference_sample = 741a0f3954499c11f9eddc8df7c31e7c59ca41f1a7005646735b8b1d53438c1b, os = windows, severity = x86, creation_date = 2021-06-13, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Njrat, fingerprint = d15e131bca6beddcaecb20fffaff1784ad8a33a25e7ce90f7450d1a362908cc4, id = 30f3c220-b8dc-45a1-bcf0-027c2f76fa63, last_modified = 2021-10-04
Source: 00000000.00000000.1962163495.00000000007A2000.00000002.00000001.01000000.00000003.sdmp, type: MEMORY	Matched rule: njrat1 date = 2015-05-27, author = Brian Wallace @botnet_hunter, description = Identify njRat, author_email = bwall@ballastsecurity.net
Source: 00000000.00000000.1962163495.00000000007A2000.00000002.00000001.01000000.00000003.sdmp, type: MEMORY	Matched rule: Njrat hash1 = d5f63213ce11798879520b0e9b0d1b68d55f7727758ec8c120e370699a41379d, author = JPCERT/CC Incident Response Group, description = detect njRAT in memory, rule_usage = memory scan

Source: C:\Users\user\Desktop\xbOnlYALvtUq.exe	Code function: 0_2_011C7920	0_2_011C7920
Source: C:\Users\user\Desktop\xbOnlYALvtUq.exe	Code function: 0_2_011C8B90	0_2_011C8B90
Source: C:\Users\user\Desktop\xbOnlYALvtUq.exe	Code function: 0_2_011C22D8	0_2_011C22D8
Source: C:\Users\user\Desktop\xbOnlYALvtUq.exe	Code function: 0_2_011C791C	0_2_011C791C
Source: C:\Users\user\Desktop\xbOnlYALvtUq.exe	Code function: 0_2_01098FD1	0_2_01098FD1

Source: C:\Users\user\Desktop\xbOnlYALvtUq.exe

Process Stats: CPU usage > 49%

Source: xbOnlYALvtUq.exe, 00000000.00000002.4405417692.0000000000CFE000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: OriginalFilenamemscorwks.dllT vs xbOnlYALvtUq.exe

Source: xbOnlYALvtUq.exe	ReversingLabs: Detection: 92%
Source: xbOnlYALvtUq.exe	Virustotal: Detection: 87%

Source: xbOnlYALvtUq.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: C:\Users\user\Desktop\xbOnlYALvtUq.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\xbOnlYALvtUq.exe C:\Users\user\Desktop\xbOnlYALvtUq.exe
Source: C:\Users\user\Desktop\xbOnlYALvtUq.exe	Process created: C:\Windows\SysWOW64\netsh.exe netsh firewall add allowedprogram "C:\Users\user\Desktop\xbOnlYALvtUq.exe" "xbOnlYALvtUq.exe" ENABLE
Source: C:\Windows\SysWOW64\netsh.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\xbOnlYALvtUq.exe	Process created: C:\Windows\SysWOW64\netsh.exe netsh firewall add allowedprogram "C:\Users\user\Desktop\xbOnlYALvtUq.exe" "xbOnlYALvtUq.exe" ENABLE	Jump to behavior

Source: C:\Users\user\Desktop\xbOnlYALvtUq.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{CF4CC405-E2C5-4DDD-B3CE-5E7582D8C9FA}\InprocServer32

Jump to behavior

Source: C:\Users\user\Desktop\xbOnlYALvtUq.exe	Code function: 0_2_01212662 AdjustTokenPrivileges,		0_2_01212662
Source: C:\Users\user\Desktop\xbOnlYALvtUq.exe	Code function: 0_2_0121262B AdjustTokenPrivileges,		0_2_0121262B

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@4/1@2/1

Source: xbOnlYALvtUq.exe	Static file information: TRID: Win32 Executable (generic) Net Framework (10011505/4) 49.79%
Source: C:\Users\user\Desktop\xbOnlYALvtUq.exe	Section loaded: C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\276d7f4a20a3c21c3bf6fc9bfc1915a2\mscorlib.ni.dll	Jump to behavior
Source: C:\Users\user\Desktop\xbOnlYALvtUq.exe	Section loaded: C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sorttbls.nlp	Jump to behavior
Source: C:\Users\user\Desktop\xbOnlYALvtUq.exe	Section loaded: C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sortkey.nlp	Jump to behavior

Source: C:\Users\user\Desktop\xbOnlYALvtUq.exe	Mutant created: \Sessions\1\BaseNamedObjects\5bfe00b9b88f2456727afb4cd20491af
Source: C:\Users\user\Desktop\xbOnlYALvtUq.exe	Mutant created: \Sessions\1\BaseNamedObjects\Global\.net clr networking
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:2316:120:WilError_03

Source: 0.2.xbOnlYALvtUq.exe.59b0000.0.raw.unpack, fPaOXJiiKVeLw8kPTa.cs	Cryptographic APIs: 'CreateDecryptor'
Source: 0.2.xbOnlYALvtUq.exe.59b0000.0.raw.unpack, fPaOXJiiKVeLw8kPTa.cs	Cryptographic APIs: 'CreateDecryptor'

Source: C:\Users\user\Desktop\xbOnlYALvtUq.exe

File opened: C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorrc.dll

Jump to behavior

Source: C:\Users\user\Desktop\xbOnlYALvtUq.exe

File opened: C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.9672_none_d08f9da24428a513\MSVCR80.dll

Jump to behavior

Source: xbOnlYALvtUq.exe

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR

Source: xbOnlYALvtUq.exe

Static PE information: DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE

Data Obfuscation

.NET source code contains potential unpacker

Source: xbOnlYALvtUq.exe, OK.cs

.Net Code: Plugin System.Reflection.Assembly.Load(byte[])

.NET source code contains method to dynamically call methods (often used by packers)

Source: 0.2.xbOnlYALvtUq.exe.59b0000.0.raw.unpack, fPaOXJiiKVeLw8kPTa.cs

.Net Code: typeof(Marshal).GetMethod("GetDelegateForFunctionPointer", new Type[2]{typeof(IntPtr),typeof(Type)})

Source: C:\Users\user\Desktop\xbOnlYALvtUq.exe

Code function: 0_2_011C443D push eax; iretd

0_2_011C4444

Source: 0.2.xbOnlYALvtUq.exe.59b0000.0.raw.unpack, capture.cs	High entropy of concatenated method names: 'BitBlt', 'lMmSjMGSG', 'r4vAhlCDO', 'rLK7KVLPF', 'RG8kvPtuW', 'SelectObject', 'LDy5AiAHV', 'peQ6NFdwP', 'i870d4mLF', 'screensize'
Source: 0.2.xbOnlYALvtUq.exe.59b0000.0.raw.unpack, A.cs	High entropy of concatenated method names: 'Sendb', 'Send', 'SB', 'BS', 'Start', 'RC', 'ind', 'fr', 'ud', 'getMD5Hash'
Source: 0.2.xbOnlYALvtUq.exe.59b0000.0.raw.unpack, fPaOXJiiKVeLw8kPTa.cs	High entropy of concatenated method names: 'zwiiLX9ZN29PA0lRZhE', 'W4fqvV9vOhCEmTPJrwY', 'qUfZLGCmVt', 'YuWN4m9LqcurZx6C2si', 'NUwGRm9Xp1e0kVGDAse', 'h261hO9qb8KmDrsQG9I', 'xHkcKn9s05tWG287mXG', 'JuQvGA9lSxh4MSDycel', 'puUjOq9tvOfYsW207rP', 'TU4Hh39wFa8O2YhyM91'
Source: 0.2.xbOnlYALvtUq.exe.59b0000.0.raw.unpack, jxhafrZjpCnscQ6PYZH.cs	High entropy of concatenated method names: 'xhYyy6R6G2', 'YoY2KV9gtFRFqEmkcHj', 'ugIhOv9u1peaZBlitnG', 'rX1Uk09PEXP823MlLdt', 'IuaoxE9fZjBDhCXswg0', 'IC3nh19BApjS7BbAltq'

Source: C:\Users\user\Desktop\xbOnlYALvtUq.exe

Key value created or modified: HKEY_CURRENT_USER\SOFTWARE\5bfe00b9b88f2456727afb4cd20491af 3fc6b884fbc29ec00482827c26669b2b

Jump to behavior

Source: C:\Users\user\Desktop\xbOnlYALvtUq.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\xbOnlYALvtUq.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\xbOnlYALvtUq.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\xbOnlYALvtUq.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\xbOnlYALvtUq.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\xbOnlYALvtUq.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\xbOnlYALvtUq.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\xbOnlYALvtUq.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\xbOnlYALvtUq.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\xbOnlYALvtUq.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\xbOnlYALvtUq.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\xbOnlYALvtUq.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\xbOnlYALvtUq.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\xbOnlYALvtUq.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\xbOnlYALvtUq.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\xbOnlYALvtUq.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\xbOnlYALvtUq.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\xbOnlYALvtUq.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\xbOnlYALvtUq.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\xbOnlYALvtUq.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\xbOnlYALvtUq.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\xbOnlYALvtUq.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\xbOnlYALvtUq.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\xbOnlYALvtUq.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\xbOnlYALvtUq.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\xbOnlYALvtUq.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\xbOnlYALvtUq.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\xbOnlYALvtUq.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\xbOnlYALvtUq.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\xbOnlYALvtUq.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\xbOnlYALvtUq.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\xbOnlYALvtUq.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\xbOnlYALvtUq.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\xbOnlYALvtUq.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\xbOnlYALvtUq.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\xbOnlYALvtUq.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\xbOnlYALvtUq.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\xbOnlYALvtUq.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\xbOnlYALvtUq.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\xbOnlYALvtUq.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\xbOnlYALvtUq.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\xbOnlYALvtUq.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\xbOnlYALvtUq.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\xbOnlYALvtUq.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Source: C:\Users\user\Desktop\xbOnlYALvtUq.exe TID: 5900

Thread sleep time: -105000s >= -30000s

Jump to behavior

Source: C:\Windows\System32\conhost.exe

Last function: Thread delayed

Source: C:\Users\user\Desktop\xbOnlYALvtUq.exe	Window / User API: threadDelayed 3729	Jump to behavior
Source: C:\Users\user\Desktop\xbOnlYALvtUq.exe	Window / User API: threadDelayed 1876	Jump to behavior
Source: C:\Users\user\Desktop\xbOnlYALvtUq.exe	Window / User API: threadDelayed 1943	Jump to behavior
Source: C:\Users\user\Desktop\xbOnlYALvtUq.exe	Window / User API: foregroundWindowGot 1767	Jump to behavior

Source: xbOnlYALvtUq.exe, 00000000.00000002.4405417692.0000000000D2F000.00000004.00000020.00020000.00000000.sdmp, netsh.exe, 00000002.00000002.2036777517.0000000000CC4000.00000004.00000020.00020000.00000000.sdmp, netsh.exe, 00000002.00000003.2036238088.0000000000CC1000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll

Source: C:\Users\user\Desktop\xbOnlYALvtUq.exe

Process token adjusted: Debug

Jump to behavior

Source: C:\Users\user\Desktop\xbOnlYALvtUq.exe

Memory allocated: page read and write | page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

.NET source code references suspicious native API functions

Source: xbOnlYALvtUq.exe, kl.cs	Reference to suspicious API methods: MapVirtualKey(a, 0u)
Source: xbOnlYALvtUq.exe, kl.cs	Reference to suspicious API methods: GetAsyncKeyState(num2)
Source: xbOnlYALvtUq.exe, OK.cs	Reference to suspicious API methods: capGetDriverDescriptionA(wDriver, ref lpszName, 100, ref lpszVer, 100)

Source: xbOnlYALvtUq.exe, 00000000.00000002.4405941872.0000000002ED6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Program Manager
Source: xbOnlYALvtUq.exe, 00000000.00000002.4405941872.0000000002ED6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Program Manager@9

Source: C:\Users\user\Desktop\xbOnlYALvtUq.exe	Queries volume information: C:\ VolumeInformation			Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Queries volume information: C:\ VolumeInformation			Jump to behavior

Source: C:\Users\user\Desktop\xbOnlYALvtUq.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Lowering of HIPS / PFW / Operating System Security Settings

Uses netsh to modify the Windows network and firewall settings

Source: C:\Users\user\Desktop\xbOnlYALvtUq.exe

Process created: C:\Windows\SysWOW64\netsh.exe netsh firewall add allowedprogram "C:\Users\user\Desktop\xbOnlYALvtUq.exe" "xbOnlYALvtUq.exe" ENABLE

Modifies the windows firewall

Source: C:\Users\user\Desktop\xbOnlYALvtUq.exe

Process created: C:\Windows\SysWOW64\netsh.exe netsh firewall add allowedprogram "C:\Users\user\Desktop\xbOnlYALvtUq.exe" "xbOnlYALvtUq.exe" ENABLE

Stealing of Sensitive Information

Yara detected zgRAT

Source: Yara match	File source: 0.2.xbOnlYALvtUq.exe.59b0000.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.xbOnlYALvtUq.exe.59b0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000002.4407298809.00000000059B0000.00000004.08000000.00040000.00000000.sdmp, type: MEMORY

Yara detected Njrat

Source: Yara match	File source: dump.pcap, type: PCAP
Source: Yara match	File source: xbOnlYALvtUq.exe, type: SAMPLE
Source: Yara match	File source: 0.0.xbOnlYALvtUq.exe.7a0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000000.1962163495.00000000007A2000.00000002.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.4405941872.0000000002E11000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: xbOnlYALvtUq.exe PID: 3472, type: MEMORYSTR

Remote Access Functionality

Yara detected zgRAT

Source: Yara match	File source: 0.2.xbOnlYALvtUq.exe.59b0000.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.xbOnlYALvtUq.exe.59b0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000002.4407298809.00000000059B0000.00000004.08000000.00040000.00000000.sdmp, type: MEMORY

Yara detected Njrat

Source: Yara match	File source: dump.pcap, type: PCAP
Source: Yara match	File source: xbOnlYALvtUq.exe, type: SAMPLE
Source: Yara match	File source: 0.0.xbOnlYALvtUq.exe.7a0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000000.1962163495.00000000007A2000.00000002.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.4405941872.0000000002E11000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: xbOnlYALvtUq.exe PID: 3472, type: MEMORYSTR

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact	Resource Development	Reconnaissance
Valid Accounts	1 Native API	Path Interception	1 Access Token Manipulation	1 Modify Registry	1 Input Capture	1 Security Software Discovery	Remote Services	1 Input Capture	Exfiltration Over Other Network Medium	1 Encrypted Channel	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Abuse Accessibility Features	Acquire Infrastructure	Gather Victim Identity Information
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	2 Process Injection	1 Virtualization/Sandbox Evasion	LSASS Memory	1 Virtualization/Sandbox Evasion	Remote Desktop Protocol	11 Archive Collected Data	Exfiltration Over Bluetooth	1 Non-Standard Port	SIM Card Swap	Obtain Device Cloud Backups	Network Denial of Service	Domains	Credentials
Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	21 Disable or Modify Tools	Security Account Manager	1 Process Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	1 Non-Application Layer Protocol			Data Encrypted for Impact	DNS Server	Email Addresses
Local Accounts	Cron	Login Hook	Login Hook	1 Access Token Manipulation	NTDS	1 Application Window Discovery	Distributed Component Object Model	Input Capture	Traffic Duplication	11 Application Layer Protocol			Data Destruction	Virtual Private Server	Employee Names
Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	2 Process Injection	LSA Secrets	12 System Information Discovery	SSH	Keylogging	Scheduled Transfer	Fallback Channels			Data Encrypted for Impact	Server	Gather Victim Network Information
Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 Deobfuscate/Decode Files or Information	Cached Domain Credentials	Wi-Fi Discovery	VNC	GUI Input Capture	Data Transfer Size Limits	Multiband Communication			Service Stop	Botnet	Domain Properties
External Remote Services	Systemd Timers	Startup Items	Startup Items	1 Obfuscated Files or Information	DCSync	Remote System Discovery	Windows Remote Management	Web Portal Capture	Exfiltration Over C2 Channel	Commonly Used Port			Inhibit System Recovery	Web Services	DNS
Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	2 Software Packing	Proc Filesystem	System Owner/User Discovery	Cloud Services	Credential API Hooking	Exfiltration Over Alternative Protocol	Application Layer Protocol			Defacement	Serverless	Network Trust Dependencies

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
xbOnlYALvtUq.exe	92%	ReversingLabs	ByteCode-MSIL.Backdoor.Bladabhindi
xbOnlYALvtUq.exe	88%	Virustotal		Browse
xbOnlYALvtUq.exe	100%	Avira	BDS/Bladabindi.ajoqp
xbOnlYALvtUq.exe	100%	Joe Sandbox ML

Source	Detection	Scanner	Label	Link
0.tcp.sa.ngrok.io	14%	Virustotal		Browse

URLs

Source	Detection	Scanner	Label	Link
0.tcp.sa.ngrok.io	100%	Avira URL Cloud	malware
0.tcp.sa.ngrok.io	14%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
0.tcp.sa.ngrok.io	18.228.115.60	true	true	14%, Virustotal, Browse	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
0.tcp.sa.ngrok.io	true	14%, Virustotal, Browse Avira URL Cloud: malware	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
18.228.115.60	0.tcp.sa.ngrok.io	United States		16509	AMAZON-02US	true

General Information

Joe Sandbox Version:	38.0.0 Ammolite
Analysis ID:	1345566
Start date and time:	2023-11-21 03:35:05 +01:00
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 6m 26s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	6
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample file name:	xbOnlYALvtUq.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@4/1@2/1
EGA Information:	Successful, ratio: 100%
HCA Information:	Successful, ratio: 100% Number of executed functions: 94 Number of non-executed functions: 1
Cookbook Comments:	Found application associated with file extension: .exe Override analysis time to 240000 for current running targets taking high CPU consumption

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe
Excluded domains from analysis (whitelisted): ocsp.digicert.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.

Simulations

Behavior and APIs

Time	Type	Description
03:36:29	API Interceptor	1098755x Sleep call for process: xbOnlYALvtUq.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
18.228.115.60	bREM.exe	Get hash	malicious	Njrat	Browse
	bREI.exe	Get hash	malicious	Remcos	Browse
	bREF.exe	Get hash	malicious	Remcos	Browse
	bREJ.exe	Get hash	malicious	Remcos	Browse
	bRoC.exe	Get hash	malicious	Njrat	Browse
	s1I8Ulbz55.exe	Get hash	malicious	Njrat	Browse
	KagRCB8ZhQ.exe	Get hash	malicious	Njrat	Browse
	r9yoXOkPES.exe	Get hash	malicious	Njrat	Browse
	bQNp.exe	Get hash	malicious	Njrat	Browse
	89S22heNS4.exe	Get hash	malicious	Njrat	Browse
	bQ0v.exe	Get hash	malicious	Njrat	Browse
	bQqN.exe	Get hash	malicious	Njrat	Browse
	bQoA.exe	Get hash	malicious	Njrat	Browse
	bQjc.exe	Get hash	malicious	AsyncRAT, DcRat	Browse
	bQh9.exe	Get hash	malicious	Njrat	Browse
	bQcb.exe	Get hash	malicious	Njrat	Browse
	bPTV.exe	Get hash	malicious	Njrat	Browse
	8Epcu3X9YF.exe	Get hash	malicious	Njrat	Browse
	bPAv.exe	Get hash	malicious	Njrat	Browse
	bP72.exe	Get hash	malicious	Njrat	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
0.tcp.sa.ngrok.io	xrLXOb0ukBAK.exe	Get hash	malicious	Remcos	Browse	18.229.248.167
	bREM.exe	Get hash	malicious	Njrat	Browse	18.228.115.60
	bREI.exe	Get hash	malicious	Remcos	Browse	18.228.115.60
	bREF.exe	Get hash	malicious	Remcos	Browse	18.229.248.167
	bREJ.exe	Get hash	malicious	Remcos	Browse	18.228.115.60
	TP5FS5NkvS.exe	Get hash	malicious	Njrat	Browse	18.231.93.153
	bR0o.exe	Get hash	malicious	Njrat	Browse	18.229.248.167
	bRoC.exe	Get hash	malicious	Njrat	Browse	18.228.115.60
	bRdP.exe	Get hash	malicious	Njrat	Browse	18.229.248.167
	s1I8Ulbz55.exe	Get hash	malicious	Njrat	Browse	54.94.248.37
	KagRCB8ZhQ.exe	Get hash	malicious	Njrat	Browse	18.229.146.63
	r9yoXOkPES.exe	Get hash	malicious	Njrat	Browse	18.228.115.60
	bQNp.exe	Get hash	malicious	Njrat	Browse	18.228.115.60
	bQGy.exe	Get hash	malicious	Njrat	Browse	18.231.93.153
	89S22heNS4.exe	Get hash	malicious	Njrat	Browse	18.229.248.167
	bQ5J.exe	Get hash	malicious	Njrat	Browse	18.229.146.63
	bQqN.exe	Get hash	malicious	Njrat	Browse	54.94.248.37
	bQoA.exe	Get hash	malicious	Njrat	Browse	54.94.248.37
	bQjc.exe	Get hash	malicious	AsyncRAT, DcRat	Browse	54.94.248.37
	bQh9.exe	Get hash	malicious	Njrat	Browse	18.228.115.60

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
AMAZON-02US	xrLXOb0ukBAK.exe	Get hash	malicious	Remcos	Browse	18.229.146.63
	https://www.areaprivata.net/	Get hash	malicious	Unknown	Browse	52.18.59.124
	https://switchology.me/	Get hash	malicious	Unknown	Browse	52.85.151.74
	https://drpatel.co.uk/wp-images/themes/Security_on_your_card_account.html	Get hash	malicious	HTMLPhisher	Browse	3.162.103.17
	https://rjtlawfirm.sharefile.com/d-3e8cb5040ece40a0	Get hash	malicious	HTMLPhisher	Browse	76.223.1.166
	https://att-yahoo-107847.weeblysite.com/	Get hash	malicious	Unknown	Browse	34.214.80.42
	http://tinyurl.com/baro25/5MfaSg63261fSbr304kosmckwnwc8116DREPAQIYBAMMYIE1738/15291V22	Get hash	malicious	Phisher	Browse	54.149.6.45
	Aging_05665outl.html	Get hash	malicious	HTMLPhisher	Browse	99.84.108.83
	https://fromtherestaurant.com/monterrey-burrito-company	Get hash	malicious	Unknown	Browse	108.138.61.23
	https://rjtlawfirm.sharefile.com/d-62e12d1d2a2e4037	Get hash	malicious	HTMLPhisher	Browse	76.223.1.166
	https://rjtlawfirm.sharefile.com/d-9543a8d6e3f84daf	Get hash	malicious	HTMLPhisher	Browse	76.223.1.166
	gUuUJFJB45.elf	Get hash	malicious	Unknown	Browse	18.158.120.205
	EMPR-SLEYENDjmxqJXUIjjgj.zip	Get hash	malicious	Unknown	Browse	15.229.86.93
	https://rjtlawfirm.sharefile.com/share/view/4e7ac2a69d944a41	Get hash	malicious	HTMLPhisher	Browse	76.223.1.166
	http://friendshipmale.com	Get hash	malicious	Unknown	Browse	18.154.230.210
	https://app.box.com/s/ac9nub4b2vaq9ovs9cq2h0pcn5kdn48t	Get hash	malicious	HTMLPhisher	Browse	52.85.150.135
	https://www.dropbox.com/l/scl/AAC-7Ad1t7alHod4bWUM8j4ISQwMQVO2O6o	Get hash	malicious	HTMLPhisher	Browse	99.83.173.21
	http://www.ne16.com/t/45507011/1604841578/98644976/1/1004740/?308eb2e4=dmlqYXkucGFuYXRpQHByb2JhdGlvbi5sYWNvdW50eS5nb3Y&f5d63f87=YXNob3c&x=935af066	Get hash	malicious	Unknown	Browse	54.215.244.243
	https://www.dropbox.com/l/scl/AACuDlz2s13jkdjWXdwUSYMr3sep5uQzgAY	Get hash	malicious	HTMLPhisher	Browse	75.2.10.96
	CourierRequest_signed.apk	Get hash	malicious	Unknown	Browse	13.224.214.25

Process:	C:\Windows\SysWOW64\netsh.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	313
Entropy (8bit):	4.971939296804078
Encrypted:	false
SSDEEP:	6:/ojfKsUTGN8Ypox42k9L+DbGMKeQE+vigqAZs2E+AYeDPO+Yswyha:wjPIGNrkHk9iaeIM6ADDPOHyha
MD5:	689E2126A85BF55121488295EE068FA1
SHA1:	09BAAA253A49D80C18326DFBCA106551EBF22DD6
SHA-256:	D968A966EF474068E41256321F77807A042F1965744633D37A203A705662EC25
SHA-512:	C3736A8FC7E6573FA1B26FE6A901C05EE85C55A4A276F8F569D9EADC9A58BEC507D1BB90DBF9EA62AE79A6783178C69304187D6B90441D82E46F5F56172B5C5C
Malicious:	false
Reputation:	high, very likely benign file
Preview:	..IMPORTANT: Command executed successfully...However, "netsh firewall" is deprecated;..use "netsh advfirewall firewall" instead...For more information on using "netsh advfirewall firewall" commands..instead of "netsh firewall", see KB article 947709..at https://go.microsoft.com/fwlink/?linkid=121488 .....Ok.....

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy (8bit):	5.520786184167281
TrID:	Win32 Executable (generic) Net Framework (10011505/4) 49.79% Win32 Executable (generic) a (10002005/4) 49.75% Generic CIL Executable (.NET, Mono, etc.) (73296/58) 0.36% Windows Screen Saver (13104/52) 0.07% Win16/32 Executable Delphi generic (2074/23) 0.01%
File name:	xbOnlYALvtUq.exe
File size:	24'064 bytes
MD5:	2bdc913d338e004ac337cfe9a44abc55
SHA1:	29feda66e04422c0d506048ea8123771269faa82
SHA256:	f2f0353f1f50aa9a76a1ab978430f1a6e85d95d8ce7ee66230beda0927863cfc
SHA512:	1a05879ce853814995762bc04d758bb2d976f17215dfa0b991c487302d94fc37ac250dff6da4cd168b713f19ca116f1f6b15652ef7d49b359fba337010478721
SSDEEP:	384:gcqbCK0l4h7o9SVyDGvENuh46AgJkOmMSW38mRvR6JZlbw8hqIusZzZ5p:f30py6vuxaRpcnuw
TLSH:	5CB21A4F3FA98856C57C17748AA5965003B091870423EE2FCCC564CBAFB3AD92D4CAF9
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...q.\e.................V..........~t... ........@.. ....................................@................................

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0x40747e
Entrypoint Section:	.text
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE
Time Stamp:	0x655C1071 [Tue Nov 21 02:05:37 2023 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	4
OS Version Minor:	0
File Version Major:	4
File Version Minor:	0
Subsystem Version Major:	4
Subsystem Version Minor:	0
Import Hash:	f34d5f2d4577ed6d9ceec516c1f5a744

Entrypoint Preview

Instruction
jmp dword ptr [00402000h]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x742c	0x4f	.text
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x8000	0x240	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0xa000	0xc	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x2000	0x8	.text
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x2008	0x48	.text
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x2000	0x5484	0x5600	False	0.4890079941860465	data	5.5674995224146695	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.rsrc	0x8000	0x240	0x400	False	0.310546875	data	4.966081339698093	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.reloc	0xa000	0xc	0x200	False	0.044921875	data	0.08153941234324169	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0x8058	0x1e7	XML 1.0 document, ASCII text, with CRLF line terminators			0.5338809034907598

Imports

DLL	Import
mscoree.dll	_CorExeMain

Network Behavior

Snort IDS Alerts

Timestamp	Protocol	SID	Message	Source Port	Dest Port	Source IP	Dest IP
192.168.2.518.228.115.6049704130652825564 11/21/23-03:38:52.649286	TCP	2825564	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act)	49704	13065	192.168.2.5	18.228.115.60
192.168.2.518.228.115.6049704130652825563 11/21/23-03:35:58.376585	TCP	2825563	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf)	49704	13065	192.168.2.5	18.228.115.60
192.168.2.518.228.115.6049713130652022061 11/21/23-03:37:00.931357	TCP	2022061	ET TROJAN njrat ver 0.7d Malware CnC Callback Response (Remote Desktop)	49713	13065	192.168.2.5	18.228.115.60
192.168.2.518.228.115.6049704130652814860 11/21/23-03:38:53.381901	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49704	13065	192.168.2.5	18.228.115.60
192.168.2.518.228.115.6049713130652022060 11/21/23-03:36:22.077496	TCP	2022060	ET TROJAN njrat ver 0.7d Malware CnC Callback (Remote Desktop)	49713	13065	192.168.2.5	18.228.115.60
192.168.2.518.228.115.6049704130652825565 11/21/23-03:37:00.623314	TCP	2825565	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity Sending Screenshot (CAP)	49704	13065	192.168.2.5	18.228.115.60
192.168.2.518.228.115.6049704130652033132 11/21/23-03:35:58.171440	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49704	13065	192.168.2.5	18.228.115.60
192.168.2.518.228.115.6049704130652019214 11/21/23-03:37:00.623314	TCP	2019214	ET TROJAN njrat ver 0.7d Malware CnC Callback (Capture)	49704	13065	192.168.2.5	18.228.115.60
192.168.2.518.228.115.6049704130652814856 11/21/23-03:35:58.376585	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49704	13065	192.168.2.5	18.228.115.60
192.168.2.518.228.115.6049704130652022059 11/21/23-03:36:21.801212	TCP	2022059	ET TROJAN njrat ver 0.7d Malware CnC Callback Response (Get Passwords)	49704	13065	192.168.2.5	18.228.115.60
18.228.115.60192.168.2.513065497042814858 11/21/23-03:36:20.299135	TCP	2814858	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inv)	13065	49704	18.228.115.60	192.168.2.5

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 21, 2023 03:35:57.857731104 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:35:58.062726974 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:35:58.062807083 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:35:58.171439886 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:35:58.376385927 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:35:58.376585007 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:35:58.581974030 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:04.333983898 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:04.382256031 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:04.444056988 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:04.649305105 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:04.649383068 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:04.854406118 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:13.268871069 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:13.319585085 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:13.377365112 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:13.582499981 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:16.291802883 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:16.329629898 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:16.534620047 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:19.305803061 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:19.342788935 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:19.547691107 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:20.299134970 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:20.299160957 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:20.299175024 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:20.299187899 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:20.299200058 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:20.299215078 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:20.299227953 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:20.299232006 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:20.299241066 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:20.299267054 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:20.299279928 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:20.314552069 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:20.314568996 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:20.314655066 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:20.504331112 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:20.504353046 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:20.504364014 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:20.504369974 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:20.504384995 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:20.504396915 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:20.504409075 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:20.504424095 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:20.504436970 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:20.504447937 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:20.504453897 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:20.504479885 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:20.504494905 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:20.504509926 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:20.504522085 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:20.504534006 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:20.504534006 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:20.504549026 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:20.504559040 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:20.504571915 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:20.504596949 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:20.519488096 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:20.519501925 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:20.519514084 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:20.519526005 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:20.519556999 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:20.519572973 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:20.709470987 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:20.709494114 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:20.709505081 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:20.709517002 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:20.709534883 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:20.709546089 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:20.709558964 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:20.709570885 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:20.709583044 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:20.709595919 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:20.709659100 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:20.709659100 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:20.709659100 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:21.801212072 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:21.868731976 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:22.006828070 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:22.075001955 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:22.075130939 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:22.077496052 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:22.282319069 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:22.337321043 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:22.357289076 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:22.357379913 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:22.377784014 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:22.462290049 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:22.507060051 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:22.538992882 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:22.582700014 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:22.582876921 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:22.743947983 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:22.743972063 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:22.743983030 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:22.744045973 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:22.744049072 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:22.744328022 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:22.787910938 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:22.949001074 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:22.949024916 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:22.949095011 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:22.949193001 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:22.949292898 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:22.949347019 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:23.154150009 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:23.154287100 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:23.154413939 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:23.163579941 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:23.257455111 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:23.359399080 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:23.359675884 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:23.368556023 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:23.382406950 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:23.462641954 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:23.566140890 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:23.587886095 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:24.929593086 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:24.992054939 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:25.136048079 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:25.136071920 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:25.147994041 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:25.197334051 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:25.197379112 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:25.226265907 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:25.353111029 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:25.353131056 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:25.366753101 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:25.432737112 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:25.571851015 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:25.571971893 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:25.572247982 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:25.585686922 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:25.777369976 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:25.790635109 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:25.790673971 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:25.790996075 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:25.995913982 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:26.101253986 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:26.163822889 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:26.210536957 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:26.306210041 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:26.306229115 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:26.368732929 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:26.415405989 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:26.415550947 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:26.429198027 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:26.620765924 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:26.634119034 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:26.634164095 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:26.634234905 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:26.710712910 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:26.839464903 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:26.882500887 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:26.916452885 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:26.916511059 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:26.991831064 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:27.054406881 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:27.087488890 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:27.087533951 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:27.087580919 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:27.197021961 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:27.197073936 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:27.197104931 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:27.197135925 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:27.259445906 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:27.259485960 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:27.259515047 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:27.259561062 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:27.259706974 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:27.319855928 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:27.464684963 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:27.464725971 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:27.524995089 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:28.387696028 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:28.388824940 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:28.593720913 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:28.835444927 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:28.960378885 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:29.040452957 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:29.165329933 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:29.165386915 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:29.165528059 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:29.179280043 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:29.370605946 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:29.384139061 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:29.384167910 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:29.384238958 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:29.429092884 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:29.589113951 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:29.633924961 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:29.633963108 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:30.898052931 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:30.976167917 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:31.038623095 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:31.103060007 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:31.103116035 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:31.181062937 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:31.243803978 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:31.243855953 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:31.244118929 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:31.257441044 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:31.449033976 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:31.462371111 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:31.462560892 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:31.507476091 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:31.667557955 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:31.712539911 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:31.712570906 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:32.007443905 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:32.054631948 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:32.116998911 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:32.212376118 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:32.259476900 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:32.259567976 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:32.321835995 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:32.322006941 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:32.464395046 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:32.464471102 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:32.526868105 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:32.526988029 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:32.669584990 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:32.669677019 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:32.731884003 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:32.732057095 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:32.874888897 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:32.875157118 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:32.882783890 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:32.937369108 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:32.960999012 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:33.038562059 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:33.087912083 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:33.088826895 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:33.166081905 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:33.166764975 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:33.243654966 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:33.243686914 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:33.243838072 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:33.320017099 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:33.451898098 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:33.525172949 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:34.882354975 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:34.991872072 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:35.087291002 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:35.196933031 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:35.197161913 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:35.210489988 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:35.402087927 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:35.415395021 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:35.415450096 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:35.415491104 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:35.492007017 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:35.620405912 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:35.697079897 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:36.961035013 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:37.084419012 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:37.106554985 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:37.166148901 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:37.166893959 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:37.289609909 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:37.289654016 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:37.311440945 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:37.319655895 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:37.371809959 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:37.524586916 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:37.524627924 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:37.524705887 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:37.617073059 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:37.663444996 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:37.710515976 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:37.732768059 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:37.822084904 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:37.868892908 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:37.879992962 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:37.880117893 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:37.915544033 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:37.915734053 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:38.120688915 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:39.055922985 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:39.261045933 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:39.261111975 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:39.466068029 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:39.466316938 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:39.671667099 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:39.788557053 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:39.835450888 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:39.835450888 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:39.897980928 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:39.993751049 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:39.993803978 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:40.040383101 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:40.040404081 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:40.040636063 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:40.103065968 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:40.116698027 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:40.245568991 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:40.321938992 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:40.321980953 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:40.322113037 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:40.322160959 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:40.391441107 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:40.391766071 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:40.527175903 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:40.527206898 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:40.527312040 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:40.596667051 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:40.601872921 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:40.647969007 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:40.726339102 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:40.732204914 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:40.806983948 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:40.807039022 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:40.853282928 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:40.931678057 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:40.931720972 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:40.932003021 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:40.960484982 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:41.137048960 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:41.165476084 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:42.507272005 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:42.648108959 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:42.713339090 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:42.853308916 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:42.853369951 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:42.853429079 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:42.853497028 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:42.866889000 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:43.058526039 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:43.058563948 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:43.058754921 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:43.071880102 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:43.071909904 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:43.263987064 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:43.264064074 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:43.469078064 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:43.469212055 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:43.674221992 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:44.585494041 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:44.648040056 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:44.790463924 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:44.790663958 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:44.852976084 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:44.853015900 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:44.897875071 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:44.995579004 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:45.102819920 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:45.102861881 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:45.102902889 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:45.103087902 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:45.307995081 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:45.308037996 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:45.308084011 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:45.512970924 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:45.513201952 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:45.663626909 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:45.718231916 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:45.868738890 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:45.868774891 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:45.868837118 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:45.896239996 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:46.073760986 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:46.085639000 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:46.101149082 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:46.290620089 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:46.290659904 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:46.290693045 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:46.335608959 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:46.397932053 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:46.413557053 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:46.460247040 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:46.476150990 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:46.495666027 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:46.540632010 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:46.540653944 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:46.603250027 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:46.681065083 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:46.681219101 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:46.681358099 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:46.773159981 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:46.886322021 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:46.978530884 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:48.319763899 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:48.382287025 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:48.524876118 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:48.524979115 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:48.587219000 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:48.587455988 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:48.729953051 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:48.730055094 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:48.792376041 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:48.792468071 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:48.935120106 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:48.935209990 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:48.997461081 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:48.997528076 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:49.140208006 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:49.140430927 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:49.202527046 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:49.345381021 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:50.413734913 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:50.523221970 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:50.618912935 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:50.728338003 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:50.728368044 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:50.728478909 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:50.741687059 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:50.933579922 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:50.946634054 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:50.946712971 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:50.946722984 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:50.946768999 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:51.151787996 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:51.151845932 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:51.152005911 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:51.357099056 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:51.445171118 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:51.569825888 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:51.650196075 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:51.774970055 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:51.775002956 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:51.775089979 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:51.788614988 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:51.980035067 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:51.993633032 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:51.993705988 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:52.038522005 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:52.199857950 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:52.243942976 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:52.243959904 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:52.273118973 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:52.351619959 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:52.478081942 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:52.522803068 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:52.556559086 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:52.727813959 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:52.728070974 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:52.741693020 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:52.933079958 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:52.946652889 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:53.054976940 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:53.260776043 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:54.960834980 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:55.165925026 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:56.961172104 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:57.169632912 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:57.169686079 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:57.169718981 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:57.169750929 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:57.169783115 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:57.169812918 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:57.169843912 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:57.169873953 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:57.169903040 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:57.169933081 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:57.169961929 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:57.169992924 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:57.170025110 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:57.170056105 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:57.170085907 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:57.170115948 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:57.170145035 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:57.170175076 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:57.170203924 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:57.170233965 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:57.170264006 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:57.170294046 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:57.170346975 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:57.335556984 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:57.397844076 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:57.460553885 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:57.538842916 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:57.541745901 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:57.602950096 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:57.632349968 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:57.665735960 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:57.679455042 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:57.746213913 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:57.757164955 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:57.837821960 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:57.838011026 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:57.884402037 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:57.962192059 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:58.042987108 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:58.043096066 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:58.054023981 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:58.248194933 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:58.259180069 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:58.259373903 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:58.398309946 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:58.421060085 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:58.421360970 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:58.464395046 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:58.475994110 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:58.554235935 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:58.603327990 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:58.603352070 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:58.626243114 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:58.681297064 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:58.759186029 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:58.759203911 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:36:58.804255962 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:36:59.009352922 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:00.304289103 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:00.429171085 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:00.509558916 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:00.552120924 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:00.600766897 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:00.623313904 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:00.634164095 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:00.634254932 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:00.634331942 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:00.648003101 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:00.725948095 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:00.828425884 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:00.828568935 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:00.839349985 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:00.853004932 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:00.853024960 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:00.931165934 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:00.931281090 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:00.931356907 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:00.944652081 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:01.033559084 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:01.033691883 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:01.136363029 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:01.149600983 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:01.238730907 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:01.441751003 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:01.441844940 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:01.446352005 CET	49713	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:01.651177883 CET	13065	49713	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:02.163789988 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:02.368886948 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:02.368964911 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:02.573786020 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:02.716638088 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:02.925158024 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:02.925256014 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:03.130348921 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:03.130583048 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:03.335603952 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:03.335822105 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:03.540785074 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:03.540971041 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:03.575814009 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:03.575886965 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:03.678117990 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:03.780807972 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:03.780939102 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:03.883111000 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:03.883210897 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:04.048013926 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:04.048155069 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:04.088140965 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:04.088243961 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:04.253041983 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:04.253139019 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:04.293093920 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:04.293159962 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:04.458072901 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:04.458277941 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:04.498059988 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:04.498289108 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:04.664444923 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:04.664642096 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:04.703355074 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:04.703435898 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:04.869596958 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:04.869790077 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:04.908313036 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:04.908416986 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:05.074681997 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:05.074810982 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:05.117475033 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:05.117537975 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:05.279808044 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:05.279908895 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:05.323266029 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:05.323323965 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:05.486105919 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:05.486337900 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:05.528192997 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:05.528376102 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:05.691299915 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:05.691382885 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:05.733434916 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:05.733552933 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:05.896471024 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:05.896617889 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:05.938613892 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:05.938714981 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:06.101507902 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:06.101656914 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:06.143785954 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:06.144009113 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:06.306723118 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:06.306946993 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:06.348834991 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:06.348923922 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:06.511957884 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:06.512064934 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:06.554013968 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:06.554228067 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:06.717044115 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:06.717360973 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:06.759094954 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:06.759284973 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:06.922441959 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:06.922579050 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:06.964229107 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:06.964574099 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:07.128324032 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:07.128537893 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:07.169512987 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:07.169687986 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:07.333646059 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:07.333780050 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:07.374659061 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:07.374752998 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:07.538780928 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:07.538896084 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:07.579595089 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:07.579667091 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:07.743719101 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:07.743813038 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:07.786714077 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:07.786813021 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:07.948626995 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:07.948748112 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:07.991909027 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:07.991991997 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:08.154592037 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:08.154694080 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:08.198101997 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:08.198157072 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:08.359878063 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:08.360090017 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:08.403158903 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:08.403299093 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:08.565218925 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:08.565332890 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:08.608223915 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:08.608300924 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:08.770246983 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:08.770320892 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:08.813395023 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:08.813477039 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:08.975524902 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:08.975812912 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:09.018615961 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:09.018908024 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:09.180831909 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:09.180929899 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:09.223879099 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:09.224162102 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:09.386141062 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:09.386225939 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:09.429040909 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:09.429136038 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:09.591239929 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:09.591346025 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:09.634490013 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:09.634612083 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:09.796793938 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:09.796950102 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:09.839361906 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:09.839421034 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:10.002022028 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:10.044272900 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:10.083491087 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:10.288300991 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:10.288394928 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:10.493268013 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:11.921694994 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:12.126827002 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:12.127094030 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:12.332096100 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:12.332413912 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:12.537333965 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:12.537456036 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:12.742388964 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:12.742491007 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:12.947318077 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:12.947453022 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:13.152390003 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:13.152565002 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:13.358138084 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:13.358436108 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:13.564551115 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:13.564646959 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:13.770442963 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:13.770575047 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:13.975558043 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:13.975701094 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:14.180627108 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:14.180733919 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:14.383642912 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:14.385850906 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:14.588854074 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:14.588876963 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:14.588984966 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:14.794047117 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:14.794157028 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:14.999164104 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:14.999412060 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:15.205137014 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:15.205513954 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:15.410461903 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:15.410691023 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:15.615550995 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:15.615874052 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:15.821903944 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:15.822017908 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:16.026987076 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:16.027200937 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:16.232142925 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:16.232430935 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:16.433023930 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:16.437273979 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:16.446212053 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:16.446326017 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:16.637871027 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:16.638122082 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:16.691920996 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:16.692017078 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:16.843014956 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:16.843465090 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:16.896832943 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:16.897228003 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:17.048415899 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:17.048532963 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:17.102875948 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:17.102952003 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:17.253400087 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:17.253496885 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:17.307863951 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:17.307938099 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:17.458307981 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:17.458437920 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:17.512733936 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:17.513065100 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:17.663288116 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:17.663407087 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:17.718348980 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:17.718415976 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:17.868258953 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:17.868458986 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:17.923317909 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:17.923405886 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:18.073417902 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:18.073558092 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:18.128732920 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:18.128817081 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:18.278595924 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:18.278764963 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:18.333653927 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:18.333911896 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:18.483678102 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:18.483922005 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:18.538758039 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:18.538852930 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:18.688868046 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:18.688946962 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:18.743823051 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:18.743988037 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:18.893795967 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:18.893906116 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:18.948930979 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:18.949079037 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:19.098786116 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:19.098946095 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:19.154253006 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:19.154587030 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:19.303769112 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:19.303869963 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:19.359580994 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:19.359852076 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:19.508865118 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:19.509102106 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:19.564735889 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:19.564894915 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:19.714087009 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:19.714170933 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:19.769944906 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:19.770034075 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:19.919168949 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:19.919239998 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:19.974832058 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:19.974916935 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:20.124200106 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:20.124382019 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:20.179781914 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:20.179953098 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:20.329318047 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:20.329519987 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:20.384845972 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:20.384907007 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:20.534447908 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:20.534555912 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:20.589822054 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:20.589962959 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:20.740983963 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:20.741297960 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:20.796370983 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:20.796570063 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:20.946213007 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:20.946460009 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:21.001435041 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:21.001502037 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:21.151314020 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:21.151472092 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:21.206342936 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:21.206433058 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:21.356304884 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:21.356434107 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:21.411220074 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:21.411389112 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:21.561389923 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:21.561487913 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:21.617990971 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:21.618052959 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:21.766450882 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:21.766679049 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:21.822949886 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:21.823251963 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:21.971699953 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:21.971803904 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:22.028429031 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:22.028534889 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:22.176681995 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:22.176784992 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:22.233325005 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:22.233392000 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:22.381618023 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:22.381962061 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:22.438139915 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:22.438220024 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:22.478526115 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:22.478647947 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:22.586765051 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:22.586944103 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:22.643016100 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:22.643172026 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:22.683427095 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:22.683634043 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:22.791794062 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:22.791924000 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:22.847990990 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:22.848068953 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:22.888421059 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:22.888504028 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:22.997908115 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:22.998008966 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:23.054270029 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:23.054415941 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:23.094933987 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:23.095119953 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:23.204582930 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:23.204787970 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:23.261163950 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:23.261370897 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:23.299993038 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:23.300113916 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:23.409673929 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:23.409763098 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:23.466444016 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:23.466533899 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:23.504905939 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:23.504992962 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:23.614999056 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:23.615206957 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:23.671422005 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:23.671494961 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:23.709816933 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:23.710076094 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:23.819984913 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:23.820099115 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:23.876342058 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:23.881011963 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:23.914838076 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:23.915070057 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:24.025032043 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:24.025114059 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:24.085840940 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:24.085932970 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:24.120304108 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:24.120469093 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:24.229954004 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:24.230175972 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:24.291100025 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:24.291332960 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:24.325404882 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:24.325568914 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:24.435069084 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:24.435231924 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:24.496294022 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:24.496469975 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:24.530613899 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:24.530699015 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:24.640088081 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:24.640194893 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:24.701350927 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:24.701497078 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:24.729384899 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:24.729446888 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:24.811924934 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:24.812036991 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:24.844994068 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:24.845077038 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:24.906475067 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:24.906646013 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:24.935300112 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:24.935364008 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:25.016835928 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:25.016902924 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:25.051713943 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:25.051786900 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:25.111709118 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:25.111768007 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:25.140322924 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:25.140381098 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:25.221721888 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:25.221807957 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:25.256640911 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:25.256716013 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:25.316564083 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:25.316869974 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:25.345217943 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:25.345309019 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:25.427618980 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:25.427695036 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:25.462447882 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:25.462549925 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:25.479909897 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:25.480009079 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:25.550204992 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:25.550390005 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:25.668541908 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:25.668642998 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:25.748229980 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:25.748305082 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:25.755198002 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:25.755263090 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:25.873536110 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:25.873636007 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:25.953124046 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:25.953206062 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:25.960418940 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:25.960472107 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:26.078403950 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:26.078500986 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:26.158427954 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:26.158524990 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:26.165236950 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:26.165385962 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:26.283289909 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:26.283359051 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:26.364098072 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:26.364170074 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:26.370258093 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:26.370321035 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:26.488955021 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:26.489041090 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:26.569725037 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:26.569813013 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:26.575766087 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:26.575828075 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:26.693818092 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:26.693934917 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:26.774719000 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:26.774863005 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:26.780620098 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:26.898942947 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:26.899019003 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:26.979722977 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:26.979809046 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:27.104923010 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:27.105319023 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:27.184828997 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:27.184919119 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:27.310256958 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:27.310386896 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:27.389919043 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:27.390069008 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:27.515870094 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:27.515950918 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:27.594929934 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:27.720792055 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:27.734148979 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:27.939021111 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:27.939109087 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:28.144072056 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:28.144196987 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:28.349247932 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:28.492670059 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:28.553822994 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:29.589802027 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:29.794821978 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:29.794976950 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:29.999908924 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:30.000240088 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:30.205197096 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:30.205281019 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:30.410197020 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:30.410350084 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:30.615215063 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:30.615343094 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:30.820281982 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:30.820377111 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:31.025445938 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:31.025805950 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:31.231034040 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:31.231326103 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:31.436243057 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:31.436381102 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:31.497678995 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:31.497863054 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:31.641235113 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:31.641357899 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:31.702879906 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:31.703058004 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:31.846292019 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:31.846544027 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:31.907905102 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:31.908143997 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:32.053039074 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:32.053273916 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:32.113116980 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:32.113199949 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:32.258488894 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:32.258773088 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:32.321840048 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:32.322132111 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:32.463771105 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:32.464083910 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:32.527178049 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:32.527252913 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:32.669846058 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:32.670038939 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:32.732208967 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:32.732494116 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:32.874902964 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:32.883785009 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:32.937303066 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:32.937423944 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:33.088637114 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:33.088742018 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:33.142731905 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:33.142797947 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:33.293607950 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:33.293751001 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:33.347831964 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:33.348017931 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:33.498658895 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:33.499016047 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:33.553101063 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:33.553433895 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:33.704035044 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:33.704116106 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:33.758348942 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:33.909056902 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:33.909256935 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:34.116214037 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:34.116477013 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:34.321399927 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:34.321536064 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:34.491452932 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:34.491691113 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:34.526411057 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:34.526488066 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:34.696603060 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:34.697007895 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:34.731549025 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:34.731789112 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:34.901959896 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:34.902162075 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:34.937036037 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:34.937127113 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:35.107080936 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:35.107198000 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:35.141958952 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:35.142050028 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:35.312072992 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:35.312369108 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:35.346869946 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:35.347062111 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:35.517256975 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:35.517472029 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:35.551858902 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:35.552073956 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:35.722856045 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:35.722978115 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:35.756946087 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:35.757081032 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:35.927880049 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:35.928179979 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:35.961990118 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:35.962240934 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:36.133099079 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:36.133306980 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:36.167066097 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:36.167119026 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:36.338203907 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:36.338340044 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:36.371934891 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:36.372014046 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:36.543154955 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:36.543329954 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:36.576792002 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:36.576880932 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:36.748199940 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:36.748292923 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:36.781681061 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:36.781743050 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:36.955916882 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:36.956064939 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:36.989577055 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:36.989717960 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:37.161082983 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:37.161546946 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:37.194700003 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:37.194885015 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:37.366647005 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:37.366750956 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:37.399822950 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:37.399884939 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:37.513339996 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:37.513540983 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:37.571831942 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:37.571938038 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:37.604695082 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:37.604773998 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:37.718375921 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:37.718481064 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:37.777010918 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:37.777096033 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:37.809523106 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:37.809612989 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:37.923777103 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:37.923883915 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:37.982167959 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:37.982244015 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:38.014432907 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:38.014492989 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:38.128756046 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:38.128878117 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:38.187316895 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:38.187520981 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:38.219273090 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:38.219353914 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:38.334014893 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:38.334199905 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:38.392828941 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:38.393069029 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:38.424254894 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:38.424454927 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:38.539143085 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:38.539231062 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:38.597985983 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:38.598062992 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:38.629364014 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:38.629487038 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:38.744194984 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:38.744318008 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:38.803014040 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:38.803236961 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:38.834717989 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:38.834903955 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:38.949157953 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:38.949377060 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:39.008130074 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:39.008203983 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:39.040132999 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:39.040230989 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:39.154215097 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:39.154299021 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:39.213028908 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:39.213109016 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:39.245043039 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:39.245151043 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:39.359148979 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:39.359266043 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:39.417970896 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:39.418046951 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:39.450036049 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:39.450342894 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:39.564089060 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:39.564215899 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:39.622875929 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:39.623089075 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:39.655181885 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:39.655335903 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:39.769161940 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:39.769248009 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:39.828032017 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:39.828217983 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:39.860229969 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:39.860313892 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:39.974097013 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:39.974185944 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:40.033106089 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:40.033180952 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:40.068177938 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:40.068304062 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:40.182584047 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:40.182671070 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:40.240947008 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:40.241084099 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:40.273386955 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:40.273622990 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:40.387712002 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:40.387794018 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:40.446532965 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:40.446674109 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:40.478471041 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:40.478619099 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:40.499831915 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:40.499974966 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:40.651437044 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:40.651570082 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:40.704958916 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:40.705023050 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:40.909915924 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:40.910011053 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:41.200061083 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:41.200360060 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:41.405314922 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:41.405438900 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:41.610424042 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:41.610534906 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:41.815403938 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:41.815645933 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:42.020667076 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:42.020951986 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:42.225856066 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:42.225986958 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:42.430979013 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:42.431164980 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:42.679933071 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:42.680032015 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:42.971920967 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:42.972018003 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:43.176959991 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:43.177064896 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:43.382061005 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:43.382150888 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:43.519362926 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:43.519507885 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:43.710108995 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:43.724406004 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:43.724545002 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:43.949625015 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:44.053783894 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:44.099910021 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:44.100029945 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:44.154479027 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:44.154700994 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:44.258671999 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:44.304848909 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:44.304862022 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:44.305176973 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:44.359534979 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:44.359854937 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:44.510071993 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:44.510163069 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:44.564874887 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:44.565035105 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:44.715265036 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:44.715420961 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:44.769998074 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:44.770168066 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:44.920430899 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:44.920650959 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:44.974994898 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:44.975277901 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:45.125524044 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:45.125706911 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:45.180093050 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:45.180186987 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:45.330646992 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:45.330857992 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:45.385158062 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:45.385492086 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:45.536072016 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:45.536267996 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:45.590306997 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:45.590516090 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:45.741136074 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:45.741312027 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:45.795353889 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:45.795523882 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:45.946305990 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:45.946643114 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:46.000422955 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:46.000729084 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:46.151640892 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:46.151902914 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:46.205693007 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:46.205764055 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:46.356821060 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:46.356946945 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:46.410588026 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:46.410770893 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:46.529324055 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:46.529438019 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:46.563931942 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:46.564100027 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:46.615678072 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:46.615834951 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:46.734221935 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:46.734345913 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:46.769015074 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:46.769085884 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:46.820745945 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:46.820807934 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:46.939248085 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:46.939356089 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:46.973886013 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:46.974035978 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:47.025823116 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:47.026021957 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:47.144273043 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:47.144646883 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:47.179016113 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:47.179207087 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:47.230999947 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:47.231118917 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:47.349631071 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:47.349791050 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:47.384133101 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:47.384196997 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:47.435950041 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:47.436037064 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:47.554761887 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:47.554868937 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:47.589323997 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:47.589390993 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:47.640929937 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:47.641020060 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:47.759766102 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:47.759867907 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:47.794261932 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:47.794378042 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:47.845813036 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:47.845976114 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:47.965429068 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:47.965512991 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:48.000327110 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:48.000385046 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:48.051810026 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:48.051899910 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:48.170350075 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:48.170419931 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:48.205322027 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:48.205502033 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:48.256985903 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:48.257086992 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:48.375325918 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:48.375621080 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:48.410434961 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:48.410736084 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:48.464791059 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:48.465082884 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:48.580517054 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:48.580619097 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:48.615734100 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:48.670180082 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:48.670331001 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:48.786168098 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:48.786375999 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:48.875441074 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:48.875622034 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:48.991359949 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:48.991559982 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:49.080535889 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:49.080719948 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:49.196464062 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:49.196561098 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:49.285836935 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:49.285976887 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:49.401482105 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:49.401812077 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:49.490964890 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:49.491319895 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:49.518603086 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:49.518841028 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:49.696208000 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:49.696352005 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:49.844011068 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:49.844257116 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:49.901225090 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:49.901422024 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:50.049077988 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:50.049343109 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:50.106304884 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:50.106599092 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:50.254210949 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:50.254467964 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:50.311395884 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:50.311465979 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:50.459373951 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:50.459605932 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:50.516285896 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:50.516375065 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:50.664473057 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:50.664730072 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:50.721499920 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:50.721698046 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:50.869685888 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:50.869946957 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:50.926655054 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:50.926753044 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:51.077176094 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:51.077424049 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:51.131751060 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:51.132003069 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:51.282512903 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:51.282604933 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:51.336786985 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:51.336868048 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:51.487512112 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:51.487632990 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:51.541667938 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:51.541731119 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:51.692460060 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:51.692550898 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:51.746661901 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:51.746757030 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:51.897695065 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:51.897897959 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:51.952042103 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:51.952132940 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:52.103074074 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:52.103179932 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:52.158185005 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:52.158262968 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:52.308171034 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:52.308271885 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:52.363039970 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:52.363143921 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:52.513591051 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:52.513732910 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:52.523451090 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:52.523525000 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:52.611881971 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:52.611979008 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:52.718518019 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:52.718604088 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:52.728235006 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:52.728311062 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:52.816876888 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:52.816962957 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:52.923470020 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:52.923582077 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:52.933679104 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:52.933862925 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:53.021749020 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:53.021962881 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:53.128494978 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:53.128734112 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:53.138670921 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:53.138746977 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:53.226833105 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:53.227082968 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:53.333760977 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:53.333858967 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:53.343521118 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:53.343601942 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:53.432246923 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:53.432430029 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:53.538773060 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:53.538995028 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:53.548418999 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:53.637358904 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:53.637552023 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:53.743921995 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:53.744034052 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:53.842592955 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:53.842837095 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:53.949143887 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:53.949256897 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:54.091873884 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:54.092089891 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:54.154115915 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:54.154225111 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:54.297024012 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:54.297120094 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:54.359116077 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:54.359309912 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:54.564203024 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:54.564326048 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:54.769231081 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:54.769498110 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:55.015795946 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:55.069364071 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:55.091902971 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:55.092006922 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:55.221223116 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:55.221451044 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:55.297068119 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:55.297207117 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:55.426368952 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:55.426716089 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:55.502043962 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:55.502227068 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:55.528215885 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:55.528399944 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:55.707145929 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:55.707396984 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:55.831953049 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:55.832072020 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:55.912765980 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:55.912939072 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:56.037055016 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:56.037381887 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:56.117855072 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:56.118105888 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:56.242373943 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:56.242470980 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:56.323014021 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:56.323128939 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:56.447320938 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:56.447540045 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:56.527986050 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:56.528110027 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:56.652496099 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:56.652703047 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:56.733010054 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:56.733318090 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:56.857635021 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:56.857752085 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:56.938101053 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:56.938224077 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:57.062726974 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:57.062915087 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:57.143218040 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:57.143402100 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:57.267940998 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:57.268122911 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:57.348382950 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:57.348454952 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:57.472974062 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:57.473093987 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:57.553358078 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:57.553452015 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:57.677917957 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:57.678147078 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:57.758368015 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:57.758600950 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:57.882983923 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:57.883083105 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:57.963563919 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:57.963644028 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:58.088006020 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:58.088102102 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:58.168508053 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:58.168607950 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:58.293014050 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:58.293106079 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:58.373614073 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:58.373874903 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:58.498085022 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:58.498183012 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:58.537622929 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:58.537700891 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:58.578730106 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:58.578821898 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:58.703059912 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:58.703252077 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:58.742521048 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:58.742721081 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:58.783647060 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:58.783755064 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:58.908200979 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:58.908317089 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:58.947540998 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:58.947640896 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:58.988554001 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:58.988648891 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:59.113231897 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:59.113310099 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:59.152518034 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:59.152595997 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:59.193579912 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:59.193681002 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:59.318205118 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:59.318312883 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:59.357465982 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:59.357556105 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:59.398499012 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:59.398708105 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:59.523267984 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:59.523428917 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:59.562516928 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:59.562657118 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:59.603637934 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:59.603725910 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:59.728319883 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:59.728427887 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:59.767522097 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:59.767616034 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:59.808712006 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:59.808809042 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:59.933293104 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:59.933568001 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:37:59.973325968 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:37:59.973519087 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:00.013745070 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:00.013941050 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:00.138423920 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:00.138542891 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:00.178348064 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:00.178455114 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:00.218847036 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:00.219042063 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:00.343477011 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:00.343604088 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:00.383245945 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:00.383435011 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:00.423944950 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:00.424160004 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:00.548855066 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:00.549067974 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:00.588299990 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:00.588403940 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:00.629055977 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:00.629165888 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:00.753967047 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:00.754055023 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:00.793399096 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:00.793582916 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:00.834094048 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:00.958964109 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:00.959053993 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:00.998486996 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:00.998698950 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:01.164021015 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:01.164144993 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:01.203612089 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:01.203795910 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:01.369045973 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:01.369362116 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:01.408622980 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:01.408837080 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:01.546425104 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:01.546525955 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:01.574470043 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:01.574634075 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:01.613748074 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:01.613882065 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:01.751383066 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:01.751487970 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:01.779581070 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:01.779659986 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:01.818861008 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:01.818916082 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:01.956780910 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:01.956983089 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:01.984918118 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:01.985181093 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:02.023884058 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:02.024138927 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:02.162606955 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:02.162784100 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:02.190172911 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:02.190354109 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:02.229053020 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:02.229182959 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:02.367777109 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:02.367902040 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:02.395427942 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:02.395590067 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:02.434187889 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:02.434288979 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:02.573157072 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:02.573350906 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:02.600544930 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:02.600749969 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:02.639408112 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:02.639472008 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:02.778321981 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:02.778533936 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:02.805605888 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:02.805913925 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:02.844290972 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:02.844400883 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:02.983560085 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:02.983675003 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:03.010838985 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:03.011007071 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:03.049381971 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:03.049467087 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:03.188780069 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:03.189193964 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:03.215847015 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:03.215940952 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:03.254517078 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:03.254607916 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:03.394398928 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:03.394704103 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:03.420986891 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:03.421180010 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:03.459644079 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:03.459948063 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:03.599806070 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:03.600004911 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:03.626082897 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:03.626265049 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:03.664884090 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:03.665116072 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:03.804966927 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:03.805057049 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:03.831088066 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:03.831160069 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:03.870129108 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:03.870213985 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:04.009982109 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:04.010097980 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:04.036114931 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:04.036376953 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:04.075082064 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:04.075184107 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:04.215065002 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:04.215394020 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:04.241226912 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:04.241463900 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:04.280046940 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:04.280405998 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:04.420371056 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:04.420459032 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:04.446429014 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:04.446484089 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:04.485280991 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:04.485415936 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:04.559880018 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:04.560241938 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:04.625439882 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:04.625605106 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:04.651293993 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:04.651376963 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:04.690464020 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:04.690562010 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:04.765104055 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:04.765280962 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:04.830463886 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:04.830624104 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:04.856203079 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:04.856368065 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:04.895632029 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:04.895692110 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:04.970117092 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:04.970191956 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:05.035456896 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:05.035531044 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:05.061291933 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:05.061359882 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:05.100585938 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:05.100657940 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:05.175221920 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:05.175304890 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:05.240504026 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:05.240592957 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:05.266165018 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:05.266232967 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:05.305522919 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:05.305617094 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:05.380111933 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:05.380204916 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:05.445523977 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:05.445595026 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:05.471107006 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:05.471177101 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:05.510514021 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:05.510592937 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:05.585041046 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:05.585107088 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:05.650564909 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:05.650732994 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:05.676081896 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:05.676235914 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:05.715430021 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:05.715707064 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:05.790172100 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:05.790354013 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:05.855616093 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:05.855751991 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:05.881072998 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:05.881145954 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:05.920517921 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:05.920653105 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:05.995212078 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:05.995306015 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:06.060606956 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:06.060822010 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:06.085927963 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:06.086091042 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:06.125507116 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:06.125569105 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:06.202647924 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:06.202910900 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:06.268203974 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:06.268585920 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:06.293428898 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:06.293482065 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:06.332942963 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:06.333025932 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:06.407996893 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:06.408145905 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:06.473390102 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:06.473632097 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:06.498244047 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:06.498342037 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:06.537817955 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:06.537908077 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:06.613560915 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:06.613635063 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:06.678414106 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:06.678488016 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:06.703136921 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:06.703200102 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:06.742737055 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:06.742810011 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:06.818429947 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:06.818671942 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:06.883326054 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:06.883569002 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:06.908015966 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:06.908247948 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:06.947731972 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:06.947911978 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:07.023530960 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:07.023766041 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:07.088637114 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:07.088787079 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:07.113539934 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:07.113841057 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:07.152785063 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:07.152940035 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:07.228595972 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:07.228715897 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:07.293656111 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:07.293731928 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:07.318634987 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:07.318700075 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:07.357815027 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:07.357908010 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:07.433646917 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:07.433727026 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:07.498554945 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:07.498687029 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:07.523423910 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:07.523493052 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:07.562660933 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:07.562788963 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:07.571724892 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:07.571799994 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:07.703572035 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:07.703692913 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:07.767575026 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:07.767668962 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:07.840055943 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:07.840145111 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:07.908869982 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:07.909087896 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:07.972461939 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:07.972556114 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:08.045222044 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:08.045407057 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:08.114142895 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:08.114505053 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:08.177428961 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:08.177844048 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:08.250315905 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:08.250514030 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:08.319430113 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:08.319513083 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:08.382781029 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:08.383038044 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:08.455418110 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:08.455492973 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:08.524369955 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:08.524477005 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:08.588026047 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:08.588213921 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:08.660321951 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:08.660422087 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:08.729343891 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:08.729433060 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:08.793040991 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:08.793247938 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:08.865273952 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:08.865463972 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:08.934254885 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:08.934498072 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:08.998084068 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:08.998349905 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:09.070329905 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:09.070480108 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:09.139431953 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:09.139581919 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:09.203284979 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:09.203480959 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:09.275409937 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:09.275585890 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:09.344928980 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:09.345197916 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:09.408878088 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:09.409271955 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:09.480591059 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:09.480895996 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:09.550160885 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:09.550257921 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:09.614176035 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:09.614248991 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:09.685777903 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:09.685868979 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:09.755115032 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:09.755203962 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:09.819145918 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:09.819258928 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:09.891092062 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:09.891185045 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:09.960141897 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:09.960263968 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:10.024108887 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:10.024224043 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:10.095983982 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:10.096072912 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:10.166080952 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:10.166148901 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:10.229279995 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:10.229458094 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:10.301109076 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:10.301197052 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:10.370989084 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:10.371103048 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:10.434374094 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:10.434653044 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:10.506023884 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:10.506211042 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:10.573323965 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:10.573522091 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:10.576118946 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:10.576195002 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:10.639519930 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:10.639801979 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:10.711210966 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:10.711393118 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:10.778409004 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:10.778474092 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:10.780947924 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:10.780998945 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:10.844784021 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:10.844904900 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:10.916245937 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:10.916310072 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:10.983347893 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:10.983515024 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:10.985735893 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:10.985816956 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:11.049825907 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:11.049954891 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:11.124617100 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:11.124711037 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:11.190642118 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:11.190746069 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:11.193476915 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:11.258133888 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:11.258316040 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:11.332921982 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:11.333000898 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:11.398999929 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:11.399063110 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:11.466958046 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:11.467032909 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:11.541430950 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:11.541531086 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:11.607620001 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:11.607695103 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:11.671994925 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:11.672228098 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:11.746299982 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:11.746419907 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:11.812489033 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:11.812561989 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:11.877068043 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:11.877381086 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:11.951334000 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:11.951404095 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:12.017417908 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:12.017496109 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:12.082356930 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:12.082621098 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:12.156682014 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:12.156795025 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:12.222383976 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:12.222569942 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:12.287524939 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:12.287689924 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:12.362304926 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:12.362409115 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:12.427465916 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:12.427670002 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:12.492489100 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:12.492643118 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:12.567373991 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:12.567446947 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:12.632484913 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:12.632555008 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:12.697458982 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:12.697547913 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:12.772243977 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:12.772576094 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:12.837515116 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:12.837832928 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:12.902482986 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:12.902751923 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:12.977361917 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:12.977521896 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:13.044190884 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:13.044312000 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:13.107613087 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:13.107747078 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:13.182322979 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:13.182434082 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:13.249176025 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:13.249248028 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:13.313347101 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:13.313427925 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:13.387248039 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:13.387440920 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:13.455214024 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:13.455492973 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:13.518364906 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:13.518512964 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:13.560497999 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:13.560698986 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:13.592363119 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:13.592551947 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:13.660393000 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:13.660571098 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:13.723418951 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:13.723498106 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:13.766242027 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:13.766313076 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:13.797358036 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:13.797437906 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:13.865499020 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:13.865611076 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:13.929078102 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:13.929168940 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:13.971097946 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:13.971184015 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:14.002350092 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:14.002468109 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:14.070391893 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:14.070497990 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:14.133964062 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:14.134109974 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:14.175961971 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:14.176080942 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:14.207252026 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:14.207425117 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:14.275320053 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:14.275466919 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:14.338908911 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:14.338980913 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:14.380878925 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:14.381052017 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:14.413141012 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:14.413212061 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:14.480284929 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:14.480427027 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:14.543761969 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:14.543838024 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:14.585869074 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:14.586098909 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:14.618024111 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:14.618280888 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:14.685329914 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:14.685400963 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:14.748723984 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:14.748843908 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:14.790946007 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:14.791204929 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:14.823129892 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:14.823276043 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:14.891304016 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:14.953757048 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:14.953824997 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:14.996290922 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:14.996433973 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:15.028110981 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:15.028232098 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:15.159275055 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:15.159396887 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:15.201973915 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:15.202047110 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:15.234148026 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:15.234224081 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:15.365261078 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:15.407851934 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:15.440226078 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:15.567116976 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:15.772061110 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:15.772177935 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:15.981057882 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:15.981220007 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:16.186254978 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:16.577013969 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:16.647389889 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:17.440296888 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:17.645334005 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:17.645459890 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:17.850363970 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:17.850578070 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:18.055450916 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:18.055548906 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:18.260534048 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:18.260656118 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:18.465537071 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:18.465691090 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:18.670696020 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:18.670803070 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:18.875708103 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:18.877846003 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:19.082892895 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:19.083013058 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:19.287857056 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:19.287945032 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:19.493021965 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:19.493136883 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:19.577145100 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:19.577235937 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:19.698076010 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:19.698263884 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:19.782167912 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:19.782411098 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:19.903141975 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:19.903315067 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:19.987307072 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:19.987581968 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:20.108154058 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:20.108263016 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:20.192426920 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:20.192517996 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:20.313054085 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:20.313158989 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:20.397356033 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:20.397422075 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:20.518047094 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:20.518218994 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:20.603178978 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:20.603270054 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:20.723061085 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:20.723263979 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:20.808243036 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:20.808423996 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:20.928188086 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:20.928441048 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:21.013308048 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:21.013386011 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:21.133392096 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:21.133555889 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:21.218314886 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:21.218537092 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:21.338521004 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:21.338763952 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:21.423434973 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:21.423680067 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:21.543739080 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:21.543927908 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:21.628531933 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:21.628618002 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:21.748744011 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:21.748852015 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:21.833441973 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:21.833616018 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:21.953661919 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:21.953773022 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:22.038502932 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:22.038697004 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:22.159915924 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:22.160026073 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:22.244204998 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:22.244302034 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:22.366466999 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:22.366622925 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:22.449202061 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:22.449347973 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:22.571628094 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:22.571871996 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:22.571890116 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:22.616328001 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:22.699933052 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:22.700056076 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:22.777309895 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:22.777385950 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:22.904961109 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:22.905078888 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:22.982376099 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:22.982470036 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:23.109939098 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:23.110058069 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:23.187340021 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:23.187443972 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:23.315033913 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:23.315305948 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:23.392427921 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:23.392497063 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:23.520293951 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:23.520464897 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:23.597527981 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:23.597841024 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:23.725492001 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:23.725706100 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:23.802740097 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:23.802845955 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:23.930727005 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:23.930958033 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:24.007699966 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:24.007775068 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:24.135880947 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:24.136105061 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:24.212722063 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:24.212845087 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:24.340954065 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:24.341054916 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:24.417740107 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:24.417898893 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:24.545933962 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:24.546055079 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:24.622725964 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:24.622792006 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:24.750972986 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:24.751086950 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:24.827789068 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:24.827991009 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:24.956161022 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:24.956331968 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:25.032872915 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:25.033056021 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:25.161254883 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:25.161382914 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:25.238570929 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:25.238761902 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:25.366236925 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:25.366357088 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:25.443624973 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:25.443856001 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:25.570173979 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:25.570286036 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:25.571314096 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:25.648682117 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:25.648844957 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:25.775079012 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:25.775243998 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:25.853651047 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:25.853930950 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:25.980212927 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:25.980321884 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:26.058837891 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:26.059212923 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:26.185301065 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:26.185453892 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:26.264055967 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:26.264487982 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:26.390244007 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:26.390360117 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:26.469336033 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:26.469449043 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:26.595283031 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:26.595405102 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:26.674277067 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:26.674388885 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:26.800327063 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:26.800452948 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:26.879347086 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:26.880359888 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:27.005260944 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:27.005373955 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:27.085289001 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:27.085371971 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:27.211730957 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:27.211955070 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:27.291517973 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:27.291691065 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:27.416965008 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:27.417216063 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:27.496762037 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:27.496864080 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:27.622514009 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:27.622668982 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:27.701636076 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:27.701812983 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:27.829097033 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:27.829252005 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:27.906721115 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:27.906934977 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:28.034137964 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:28.034265995 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:28.111794949 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:28.111928940 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:28.239157915 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:28.239335060 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:28.316972971 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:28.317044973 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:28.444344044 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:28.444531918 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:28.522227049 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:28.522460938 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:28.574203014 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:28.574398041 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:28.650166988 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:28.650346994 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:28.727495909 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:28.727615118 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:28.779397011 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:28.779521942 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:28.855285883 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:28.855386972 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:28.932619095 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:28.932682037 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:28.984581947 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:28.984663010 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:29.060272932 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:29.060350895 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:29.137521029 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:29.137733936 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:29.189553976 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:29.189657927 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:29.265214920 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:29.265408039 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:29.342561960 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:29.342756987 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:29.394615889 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:29.394860029 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:29.470395088 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:29.470474958 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:29.547739029 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:29.547911882 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:29.599975109 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:29.600147009 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:29.675339937 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:29.675436020 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:29.752980947 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:29.753175974 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:29.805315971 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:29.805398941 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:29.881751060 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:29.881937027 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:29.958237886 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:29.958400011 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:30.010433912 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:30.010507107 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:30.086879969 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:30.087055922 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:30.163278103 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:30.163367033 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:30.215516090 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:30.215677023 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:30.292102098 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:30.292190075 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:30.368244886 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:30.368370056 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:30.420433998 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:30.420557976 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:30.497036934 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:30.497282028 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:30.573215961 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:30.573329926 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:30.626281023 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:30.626344919 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:30.702064991 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:30.702306032 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:30.778357983 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:30.778595924 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:30.831152916 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:30.831450939 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:30.907429934 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:30.907505035 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:30.983513117 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:30.983939886 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:31.036329031 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:31.036458969 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:31.112577915 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:31.112806082 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:31.189057112 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:31.189124107 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:31.246248007 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:31.246315956 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:31.317663908 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:31.317779064 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:31.394040108 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:31.394140005 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:31.451134920 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:31.451241970 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:31.525887012 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:31.526086092 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:31.568850994 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:31.568938971 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:31.598934889 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:31.599117994 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:31.656023979 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:31.656121969 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:31.730885029 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:31.730957985 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:31.773715973 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:31.773775101 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:31.804007053 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:31.804076910 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:31.860887051 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:31.861073017 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:31.935765028 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:31.935868025 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:31.978590965 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:31.978667021 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:32.008843899 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:32.008899927 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:32.065921068 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:32.065996885 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:32.140659094 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:32.140774965 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:32.183480024 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:32.183574915 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:32.213684082 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:32.213766098 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:32.270879030 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:32.270973921 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:32.345865965 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:32.345933914 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:32.388457060 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:32.388534069 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:32.418886900 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:32.419212103 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:32.475888968 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:32.476052046 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:32.550812960 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:32.550955057 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:32.593321085 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:32.593427896 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:32.625001907 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:32.625272989 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:32.681874037 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:32.682053089 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:32.755796909 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:32.756007910 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:32.798209906 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:32.798444986 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:32.830096006 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:32.830387115 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:32.886869907 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:32.887053967 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:32.960839987 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:32.960910082 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:33.003658056 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:33.003720045 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:33.035206079 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:33.035300970 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:33.091895103 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:33.092020035 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:33.166376114 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:33.166532993 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:33.208605051 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:33.208795071 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:33.241175890 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:33.243875980 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:33.296844006 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:33.297018051 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:33.371464968 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:33.371543884 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:33.413676023 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:33.413835049 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:33.448848963 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:33.448941946 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:33.501768112 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:33.502134085 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:33.576386929 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:33.576555967 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:33.618952036 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:33.619143963 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:33.654583931 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:33.654820919 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:33.707118034 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:33.707365036 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:33.781469107 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:33.781599998 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:33.826859951 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:33.827034950 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:33.859747887 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:33.859827995 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:33.913088083 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:33.913192987 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:33.986457109 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:33.986599922 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:34.031861067 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:34.031987906 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:34.064639091 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:34.064821005 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:34.118016005 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:34.118129969 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:34.191395044 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:34.191461086 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:34.236882925 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:34.236963987 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:34.269701958 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:34.269818068 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:34.322920084 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:34.323034048 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:34.396348000 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:34.396465063 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:34.441730022 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:34.441910982 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:34.474721909 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:34.474786043 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:34.527837038 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:34.528130054 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:34.601265907 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:34.601464987 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:34.602818966 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:34.647486925 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:34.679553986 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:34.679723978 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:34.806355953 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:34.806479931 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:35.011375904 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:35.011487961 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:35.297306061 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:35.319417953 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:35.415890932 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:35.415978909 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:35.502271891 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:35.502499104 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:35.571852922 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:35.572083950 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:35.620889902 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:35.621283054 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:35.707428932 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:35.707556963 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:35.776930094 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:35.777045965 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:35.827378988 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:35.827477932 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:35.912410975 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:35.912534952 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:35.981904030 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:35.981986046 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:36.032545090 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:36.032749891 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:36.117764950 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:36.117882013 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:36.186918974 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:36.187156916 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:36.237648010 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:36.237966061 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:36.322822094 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:36.323055983 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:36.393085003 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:36.393228054 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:36.443042994 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:36.443176031 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:36.528049946 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:36.528242111 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:36.598297119 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:36.598514080 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:36.648087978 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:36.648154020 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:36.737389088 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:36.737493038 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:36.803607941 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:36.803764105 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:36.853029966 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:36.853143930 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:36.942527056 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:36.942738056 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:37.009169102 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:37.009422064 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:37.058536053 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:37.058638096 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:37.147624016 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:37.147756100 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:37.214440107 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:37.214673996 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:37.263544083 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:37.263632059 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:37.352710962 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:37.352901936 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:37.419796944 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:37.420041084 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:37.468563080 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:37.468765974 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:37.560261011 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:37.560466051 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:37.590805054 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:37.590966940 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:37.675311089 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:37.675414085 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:37.795844078 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:37.795950890 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:38.000957966 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:38.001080990 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:38.303678036 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:38.395958900 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:38.396213055 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:38.551922083 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:38.552031040 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:38.601305008 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:38.601485014 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:38.756979942 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:38.757098913 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:38.806382895 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:38.806483030 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:38.962090015 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:38.962223053 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:39.011460066 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:39.011538029 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:39.167188883 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:39.167280912 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:39.216536045 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:39.216620922 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:39.372984886 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:39.373210907 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:39.421508074 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:39.421801090 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:39.578232050 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:39.578514099 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:39.626705885 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:39.626846075 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:39.783533096 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:39.783624887 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:39.831840992 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:39.831933022 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:39.988640070 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:39.988785982 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:40.036923885 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:40.037012100 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:40.193788052 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:40.193919897 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:40.241909981 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:40.242022991 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:40.398896933 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:40.398986101 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:40.448317051 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:40.591415882 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:40.591506958 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:40.603907108 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:40.604000092 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:40.796763897 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:40.797020912 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:40.809112072 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:40.809189081 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:41.002060890 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:41.002293110 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:41.014131069 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:41.014197111 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:41.207377911 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:41.207516909 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:41.218990088 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:41.219054937 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:41.412467957 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:41.412769079 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:41.423990011 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:41.424149036 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:41.617671967 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:41.617750883 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:41.628915071 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:41.822700977 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:41.822922945 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:42.027961016 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:42.028083086 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:42.233145952 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:42.233325005 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:42.438288927 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:42.438412905 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:42.643446922 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:42.643671036 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:42.850955009 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:42.851056099 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:43.056200981 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:43.056411982 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:43.261406898 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:43.261545897 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:43.466485977 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:43.466612101 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:43.576829910 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:43.576930046 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:43.671816111 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:43.672064066 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:43.782167912 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:43.782402039 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:43.877078056 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:43.877178907 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:43.987416983 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:43.987526894 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:44.082191944 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:44.082272053 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:44.192586899 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:44.192718983 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:44.287401915 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:44.287651062 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:44.397819042 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:44.398088932 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:44.492810011 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:44.493022919 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:44.603077888 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:44.603202105 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:44.697869062 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:44.697988987 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:44.808377028 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:44.808480024 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:44.902889013 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:44.903024912 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:45.013355017 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:45.013444901 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:45.107970953 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:45.108082056 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:45.218533039 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:45.218770981 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:45.313003063 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:45.313066006 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:45.423651934 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:45.423753977 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:45.517865896 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:45.518040895 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:45.628719091 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:45.628983021 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:45.723133087 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:45.723239899 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:45.834016085 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:45.834156990 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:45.928183079 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:45.928294897 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:46.039113998 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:46.039292097 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:46.133198023 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:46.133300066 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:46.244123936 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:46.244246960 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:46.338599920 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:46.338704109 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:46.449059010 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:46.449139118 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:46.543545961 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:46.543706894 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:46.611723900 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:46.611924887 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:46.653959990 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:46.654053926 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:46.748522997 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:46.748641968 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:46.816816092 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:46.816917896 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:46.858860016 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:46.858963013 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:46.953458071 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:46.953663111 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:47.021790028 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:47.021893024 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:47.064111948 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:47.064169884 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:47.158541918 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:47.158807039 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:47.226922035 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:47.227133989 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:47.269042015 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:47.269145012 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:47.363637924 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:47.363775015 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:47.432002068 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:47.432116032 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:47.473999977 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:47.474076033 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:47.568593025 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:47.568684101 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:47.637025118 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:47.637136936 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:47.678870916 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:47.678925037 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:47.775358915 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:47.775449038 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:47.842030048 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:47.842128992 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:47.883709908 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:47.883795977 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:47.980340004 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:47.980487108 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:48.047020912 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:48.047115088 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:48.088650942 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:48.088730097 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:48.185297012 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:48.185465097 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:48.252064943 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:48.252125025 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:48.293740988 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:48.293817043 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:48.390348911 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:48.390475988 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:48.457047939 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:48.457262039 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:48.498717070 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:48.498799086 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:48.595422983 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:48.595619917 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:48.662113905 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:48.662301064 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:48.703630924 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:48.703798056 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:48.800609112 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:48.800703049 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:48.867163897 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:48.867218018 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:48.908607006 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:48.908680916 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:49.005532980 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:49.005656958 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:49.072036028 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:49.072190046 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:49.113432884 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:49.113523960 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:49.210479021 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:49.210592985 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:49.277199030 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:49.277374983 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:49.318356037 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:49.318564892 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:49.415453911 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:49.415520906 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:49.482327938 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:49.482459068 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:49.523401976 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:49.523576975 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:49.620404005 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:49.620618105 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:49.627392054 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:49.627501011 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:49.727952957 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:49.728106976 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:49.728341103 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:49.827275038 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:49.827378035 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:49.832319975 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:49.832376003 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:49.933265924 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:49.933389902 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:50.032488108 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:50.032633066 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:50.037358046 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:50.037430048 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:50.138245106 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:50.138361931 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:50.237502098 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:50.237641096 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:50.242202044 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:50.242355108 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:50.343255043 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:50.343463898 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:50.447114944 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:50.447264910 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:50.548347950 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:50.548453093 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:50.695924997 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:50.696105003 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:50.753463030 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:50.753797054 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:50.958821058 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:50.958944082 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:51.166865110 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:51.263829947 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:51.264137030 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:51.371773958 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:51.372123003 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:51.469496965 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:51.469598055 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:51.577050924 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:51.577195883 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:51.674403906 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:51.674489021 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:51.782072067 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:51.782161951 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:51.987097979 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:51.987303972 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:52.228792906 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:52.287998915 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:52.395864964 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:52.396092892 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:52.433801889 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:52.434035063 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:52.601026058 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:52.601167917 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:52.638849020 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:52.639105082 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:52.649075031 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:52.649286032 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:52.844762087 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:52.844894886 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:52.935966015 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:52.936085939 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:52.972722054 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:52.972832918 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:53.049729109 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:53.141094923 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:53.381901026 CET	49704	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:53.586880922 CET	13065	49704	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:55.122236013 CET	49716	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:55.327188015 CET	13065	49716	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:55.834906101 CET	49716	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:56.039938927 CET	13065	49716	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:56.553630114 CET	49716	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:56.758810997 CET	13065	49716	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:57.272552967 CET	49716	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:57.477641106 CET	13065	49716	18.228.115.60	192.168.2.5
Nov 21, 2023 03:38:57.991081953 CET	49716	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:38:58.196108103 CET	13065	49716	18.228.115.60	192.168.2.5
Nov 21, 2023 03:39:00.215385914 CET	49717	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:39:00.420480013 CET	13065	49717	18.228.115.60	192.168.2.5
Nov 21, 2023 03:39:00.928601027 CET	49717	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:39:01.133655071 CET	13065	49717	18.228.115.60	192.168.2.5
Nov 21, 2023 03:39:01.647296906 CET	49717	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:39:01.853108883 CET	13065	49717	18.228.115.60	192.168.2.5
Nov 21, 2023 03:39:02.366172075 CET	49717	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:39:02.571702957 CET	13065	49717	18.228.115.60	192.168.2.5
Nov 21, 2023 03:39:03.084779024 CET	49717	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:39:03.289807081 CET	13065	49717	18.228.115.60	192.168.2.5
Nov 21, 2023 03:39:05.305675030 CET	49718	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:39:05.510667086 CET	13065	49718	18.228.115.60	192.168.2.5
Nov 21, 2023 03:39:06.100419998 CET	49718	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:39:06.305416107 CET	13065	49718	18.228.115.60	192.168.2.5
Nov 21, 2023 03:39:06.897608995 CET	49718	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:39:07.102777958 CET	13065	49718	18.228.115.60	192.168.2.5
Nov 21, 2023 03:39:07.803528070 CET	49718	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:39:08.008531094 CET	13065	49718	18.228.115.60	192.168.2.5
Nov 21, 2023 03:39:08.600409031 CET	49718	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:39:08.805324078 CET	13065	49718	18.228.115.60	192.168.2.5
Nov 21, 2023 03:39:10.820693016 CET	49719	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:39:11.025751114 CET	13065	49719	18.228.115.60	192.168.2.5
Nov 21, 2023 03:39:11.538045883 CET	49719	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:39:11.743350029 CET	13065	49719	18.228.115.60	192.168.2.5
Nov 21, 2023 03:39:12.256699085 CET	49719	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:39:12.462124109 CET	13065	49719	18.228.115.60	192.168.2.5
Nov 21, 2023 03:39:12.975492954 CET	49719	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:39:13.180802107 CET	13065	49719	18.228.115.60	192.168.2.5
Nov 21, 2023 03:39:13.694242001 CET	49719	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:39:13.899228096 CET	13065	49719	18.228.115.60	192.168.2.5
Nov 21, 2023 03:39:15.914566040 CET	49720	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:39:16.119615078 CET	13065	49720	18.228.115.60	192.168.2.5
Nov 21, 2023 03:39:16.788072109 CET	49720	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:39:16.993319988 CET	13065	49720	18.228.115.60	192.168.2.5
Nov 21, 2023 03:39:17.600394964 CET	49720	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:39:17.805490971 CET	13065	49720	18.228.115.60	192.168.2.5
Nov 21, 2023 03:39:18.397490978 CET	49720	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:39:18.602761984 CET	13065	49720	18.228.115.60	192.168.2.5
Nov 21, 2023 03:39:19.303543091 CET	49720	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:39:19.508610964 CET	13065	49720	18.228.115.60	192.168.2.5
Nov 21, 2023 03:39:21.524945021 CET	49721	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:39:21.730058908 CET	13065	49721	18.228.115.60	192.168.2.5
Nov 21, 2023 03:39:22.241036892 CET	49721	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:39:22.446316004 CET	13065	49721	18.228.115.60	192.168.2.5
Nov 21, 2023 03:39:22.959747076 CET	49721	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:39:23.164966106 CET	13065	49721	18.228.115.60	192.168.2.5
Nov 21, 2023 03:39:23.678514957 CET	49721	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:39:23.883476973 CET	13065	49721	18.228.115.60	192.168.2.5
Nov 21, 2023 03:39:24.397293091 CET	49721	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:39:24.602351904 CET	13065	49721	18.228.115.60	192.168.2.5
Nov 21, 2023 03:39:26.618743896 CET	49722	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:39:26.824132919 CET	13065	49722	18.228.115.60	192.168.2.5
Nov 21, 2023 03:39:27.334834099 CET	49722	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:39:27.540082932 CET	13065	49722	18.228.115.60	192.168.2.5
Nov 21, 2023 03:39:28.053679943 CET	49722	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:39:28.258702993 CET	13065	49722	18.228.115.60	192.168.2.5
Nov 21, 2023 03:39:28.772289991 CET	49722	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:39:28.977596045 CET	13065	49722	18.228.115.60	192.168.2.5
Nov 21, 2023 03:39:29.490984917 CET	49722	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:39:29.696079016 CET	13065	49722	18.228.115.60	192.168.2.5
Nov 21, 2023 03:39:31.711848021 CET	49723	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:39:31.916816950 CET	13065	49723	18.228.115.60	192.168.2.5
Nov 21, 2023 03:39:32.428503990 CET	49723	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:39:32.633445978 CET	13065	49723	18.228.115.60	192.168.2.5
Nov 21, 2023 03:39:33.147244930 CET	49723	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:39:33.352159023 CET	13065	49723	18.228.115.60	192.168.2.5
Nov 21, 2023 03:39:33.865983009 CET	49723	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:39:34.070944071 CET	13065	49723	18.228.115.60	192.168.2.5
Nov 21, 2023 03:39:34.584718943 CET	49723	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:39:34.789625883 CET	13065	49723	18.228.115.60	192.168.2.5
Nov 21, 2023 03:39:37.463357925 CET	49724	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:39:37.668632984 CET	13065	49724	18.228.115.60	192.168.2.5
Nov 21, 2023 03:39:38.288081884 CET	49724	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:39:38.493123055 CET	13065	49724	18.228.115.60	192.168.2.5
Nov 21, 2023 03:39:39.084933996 CET	49724	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:39:39.291188955 CET	13065	49724	18.228.115.60	192.168.2.5
Nov 21, 2023 03:39:39.881618023 CET	49724	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:39:40.086622000 CET	13065	49724	18.228.115.60	192.168.2.5
Nov 21, 2023 03:39:40.787854910 CET	49724	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:39:40.992970943 CET	13065	49724	18.228.115.60	192.168.2.5
Nov 21, 2023 03:39:43.009025097 CET	49725	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:39:43.213886023 CET	13065	49725	18.228.115.60	192.168.2.5
Nov 21, 2023 03:39:43.787942886 CET	49725	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:39:43.993637085 CET	13065	49725	18.228.115.60	192.168.2.5
Nov 21, 2023 03:39:44.506558895 CET	49725	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:39:44.711920977 CET	13065	49725	18.228.115.60	192.168.2.5
Nov 21, 2023 03:39:45.225450039 CET	49725	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:39:45.430439949 CET	13065	49725	18.228.115.60	192.168.2.5
Nov 21, 2023 03:39:45.944077015 CET	49725	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:39:46.148859978 CET	13065	49725	18.228.115.60	192.168.2.5
Nov 21, 2023 03:39:48.167280912 CET	49726	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:39:48.372323036 CET	13065	49726	18.228.115.60	192.168.2.5
Nov 21, 2023 03:39:48.881817102 CET	49726	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:39:49.086819887 CET	13065	49726	18.228.115.60	192.168.2.5
Nov 21, 2023 03:39:49.600317001 CET	49726	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:39:49.805304050 CET	13065	49726	18.228.115.60	192.168.2.5
Nov 21, 2023 03:39:50.319082022 CET	49726	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:39:50.523998022 CET	13065	49726	18.228.115.60	192.168.2.5
Nov 21, 2023 03:39:51.037786961 CET	49726	13065	192.168.2.5	18.228.115.60
Nov 21, 2023 03:39:51.242611885 CET	13065	49726	18.228.115.60	192.168.2.5

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 21, 2023 03:35:57.720849991 CET	51190	53	192.168.2.5	1.1.1.1
Nov 21, 2023 03:35:57.854358912 CET	53	51190	1.1.1.1	192.168.2.5
Nov 21, 2023 03:38:54.977996111 CET	55302	53	192.168.2.5	1.1.1.1
Nov 21, 2023 03:38:55.118987083 CET	53	55302	1.1.1.1	192.168.2.5

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 21, 2023 03:35:57.720849991 CET	192.168.2.5	1.1.1.1	0x8c05	Standard query (0)	0.tcp.sa.ngrok.io	A (IP address)	IN (0x0001)	false
Nov 21, 2023 03:38:54.977996111 CET	192.168.2.5	1.1.1.1	0x7659	Standard query (0)	0.tcp.sa.ngrok.io	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Nov 21, 2023 03:35:57.854358912 CET	1.1.1.1	192.168.2.5	0x8c05	No error (0)	0.tcp.sa.ngrok.io		18.228.115.60	A (IP address)	IN (0x0001)	false
Nov 21, 2023 03:38:55.118987083 CET	1.1.1.1	192.168.2.5	0x7659	No error (0)	0.tcp.sa.ngrok.io		18.228.115.60	A (IP address)	IN (0x0001)	false

Target ID:	0
Start time:	03:35:47
Start date:	21/11/2023
Path:	C:\Users\user\Desktop\xbOnlYALvtUq.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\Desktop\xbOnlYALvtUq.exe
Imagebase:	0x7a0000
File size:	24'064 bytes
MD5 hash:	2BDC913D338E004AC337CFE9A44ABC55
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	.Net C# or VB.NET
Yara matches:	Rule: JoeSecurity_Njrat, Description: Yara detected Njrat, Source: 00000000.00000000.1962163495.00000000007A2000.00000002.00000001.01000000.00000003.sdmp, Author: Joe Security Rule: Windows_Trojan_Njrat_30f3c220, Description: unknown, Source: 00000000.00000000.1962163495.00000000007A2000.00000002.00000001.01000000.00000003.sdmp, Author: unknown Rule: njrat1, Description: Identify njRat, Source: 00000000.00000000.1962163495.00000000007A2000.00000002.00000001.01000000.00000003.sdmp, Author: Brian Wallace @botnet_hunter Rule: Njrat, Description: detect njRAT in memory, Source: 00000000.00000000.1962163495.00000000007A2000.00000002.00000001.01000000.00000003.sdmp, Author: JPCERT/CC Incident Response Group Rule: JoeSecurity_zgRAT_1, Description: Yara detected zgRAT, Source: 00000000.00000002.4407298809.00000000059B0000.00000004.08000000.00040000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Njrat, Description: Yara detected Njrat, Source: 00000000.00000002.4405941872.0000000002E11000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	03:35:54
Start date:	21/11/2023
Path:	C:\Windows\SysWOW64\netsh.exe
Wow64 process (32bit):	true
Commandline:	netsh firewall add allowedprogram "C:\Users\user\Desktop\xbOnlYALvtUq.exe" "xbOnlYALvtUq.exe" ENABLE
Imagebase:	0x1080000
File size:	82'432 bytes
MD5 hash:	4E89A1A088BE715D6C946E55AB07C7DF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	03:35:54
Start date:	21/11/2023
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Execution Graph

Execution Coverage:	14.8%
Dynamic/Decrypted Code Coverage:	100%
Signature Coverage:	2.2%
Total number of Nodes:	139
Total number of Limit Nodes:	5

Executed Functions

Function 011C22D8 Relevance: 3.9, Strings: 2, Instructions: 1370
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

, xrefs: 011C2FAF
, xrefs: 011C2FB9

Memory Dump Source

Source File: 00000000.00000002.4405808531.00000000011C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 011C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_11c0000_xbOnlYALvtUq.jbxd

Similarity

API ID:
String ID: $
API String ID: 0-227171996
Opcode ID: b961f0575f9f0787b3d0725ee00d2ddca0c0d05df65271e21a0d3363e34a0c26
Instruction ID: ed1e755afd5adfd8e85155d00388569a872ba529357e545f7c57937cc8ab2c11
Opcode Fuzzy Hash: b961f0575f9f0787b3d0725ee00d2ddca0c0d05df65271e21a0d3363e34a0c26
Instruction Fuzzy Hash: 1DB29A34B002248FCB18EF35C855BAE77A2BFA8714F1181A9E6099B3A5DF35DD41CB91

Uniqueness

Uniqueness Score: -1.00%

Function 011C7920 Relevance: 1.6, Strings: 1, Instructions: 327COMMON

Download Yara Rule

Strings

aA{, xrefs: 011C7AD0

Memory Dump Source

Source File: 00000000.00000002.4405808531.00000000011C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 011C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_11c0000_xbOnlYALvtUq.jbxd

Similarity

API ID:
String ID: aA{
API String ID: 0-3244006567
Opcode ID: 7e451115bf3b72d1c7208fe6c19604f3de046e63d1186489ff4e5a365997ea9e
Instruction ID: 75e19ef04b78257272e17b83a187bb8806ceab68a33096a348570d9a8db55b37
Opcode Fuzzy Hash: 7e451115bf3b72d1c7208fe6c19604f3de046e63d1186489ff4e5a365997ea9e
Instruction Fuzzy Hash: 21C19F71A0011A8BCB19CF99C8906AEFBF2FF94304F19C569D455EB246D770D982CF94

Uniqueness

Uniqueness Score: -1.00%

Function 0121262B Relevance: 1.6, APIs: 1, Instructions: 75COMMON

Download Yara Rule

APIs

AdjustTokenPrivileges.KERNELBASE(?,?,?,?,?,?), ref: 012126AB

Memory Dump Source

Source File: 00000000.00000002.4405864529.0000000001210000.00000040.00000800.00020000.00000000.sdmp, Offset: 01210000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1210000_xbOnlYALvtUq.jbxd

Similarity

API ID: AdjustPrivilegesToken
String ID:
API String ID: 2874748243-0
Opcode ID: 87b83dd488308299026d0bc129bf7a71ba5e68c7f50fa0b2cf996b9eb799b576
Instruction ID: 4258fc7a884995127e1230fef6f94adf6b23eefa8893dfc9777f510a324346b4
Opcode Fuzzy Hash: 87b83dd488308299026d0bc129bf7a71ba5e68c7f50fa0b2cf996b9eb799b576
Instruction Fuzzy Hash: 90218B755097809FDB22CF25DC44B52BFF4EF16310F18889AE9858B5A3D271E908DB62

Uniqueness

Uniqueness Score: -1.00%

Function 01212662 Relevance: 1.6, APIs: 1, Instructions: 52COMMON

Download Yara Rule

APIs

AdjustTokenPrivileges.KERNELBASE(?,?,?,?,?,?), ref: 012126AB

Memory Dump Source

Source File: 00000000.00000002.4405864529.0000000001210000.00000040.00000800.00020000.00000000.sdmp, Offset: 01210000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1210000_xbOnlYALvtUq.jbxd

Similarity

API ID: AdjustPrivilegesToken
String ID:
API String ID: 2874748243-0
Opcode ID: e6c068831ca38af174e7a5bb712c317bec9a86efbc5469bbd7464ec71f5ec398
Instruction ID: f44e736d659590652f1d8541d3ebffe01fb85cfe40de734b12ef39357b37a0c1
Opcode Fuzzy Hash: e6c068831ca38af174e7a5bb712c317bec9a86efbc5469bbd7464ec71f5ec398
Instruction Fuzzy Hash: 88119E71610644DFDB21CF15D884B62FBE8EF18220F18C8AAEE458B666D375E418DF61

Uniqueness

Uniqueness Score: -1.00%

Function 011C8B90 Relevance: .2, Instructions: 242COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4405808531.00000000011C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 011C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_11c0000_xbOnlYALvtUq.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d5a61186a4d0510e1c29a4d4c3947cd292ad91e8da31ba9cbb1ad3a47c04f5bd
Instruction ID: 4800dc952905b02da4fe757bd12abff1f44c9f2be1c299310acd0949c7d186f4
Opcode Fuzzy Hash: d5a61186a4d0510e1c29a4d4c3947cd292ad91e8da31ba9cbb1ad3a47c04f5bd
Instruction Fuzzy Hash: 21A15E70A00115CFD718DF29C488BAEB7F2FFA8B14F1581A9D5059B6A9CBB49C85CF42

Uniqueness

Uniqueness Score: -1.00%

Function 0121063F Relevance: 1.6, APIs: 1, Instructions: 116
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000000.00000002.4405864529.0000000001210000.00000040.00000800.00020000.00000000.sdmp, Offset: 01210000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1210000_xbOnlYALvtUq.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 294da1d603a27bb2b4ad02fa1329cae1d75be6c24c89363d522cc3969165463a
Instruction ID: b5df1db4fce19c52785f05d65a23cb9d13366990f0eff60874a27c5877862a0a
Opcode Fuzzy Hash: 294da1d603a27bb2b4ad02fa1329cae1d75be6c24c89363d522cc3969165463a
Instruction Fuzzy Hash: 2541D1724093C06FD713CB258C45B92BFB4EF17224F0944DBE9848B2A3D265A90DC772

Uniqueness

Uniqueness Score: -1.00%

Function 011C0B68 Relevance: 1.6, APIs: 1, Instructions: 110
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

KiUserExceptionDispatcher.NTDLL ref: 011C0B8F

Memory Dump Source

Source File: 00000000.00000002.4405808531.00000000011C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 011C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_11c0000_xbOnlYALvtUq.jbxd

Similarity

API ID: DispatcherExceptionUser
String ID:
API String ID: 6842923-0
Opcode ID: 19a4b4a515d2575deb28c412247a8563ac9b36b6b45dc7a8514e2998099d4ea6
Instruction ID: a4e66255da0c375f1b8b14a92b2bf8584c7d89bfdd44b4448fac99a9584a331a
Opcode Fuzzy Hash: 19a4b4a515d2575deb28c412247a8563ac9b36b6b45dc7a8514e2998099d4ea6
Instruction Fuzzy Hash: A741BE35A00200CFCB08EF78C9846ADB7B6BF98204B1480BDD809DB359DB35CD85CBA0

Uniqueness

Uniqueness Score: -1.00%

Function 011C0B58 Relevance: 1.6, APIs: 1, Instructions: 107
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

KiUserExceptionDispatcher.NTDLL ref: 011C0B8F

Memory Dump Source

Source File: 00000000.00000002.4405808531.00000000011C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 011C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_11c0000_xbOnlYALvtUq.jbxd

Similarity

API ID: DispatcherExceptionUser
String ID:
API String ID: 6842923-0
Opcode ID: 39c5d6f04fe3aa1045650c07b8565f6be123a8bfd1f9bd00a46549af01104271
Instruction ID: 7585843ce2ecb862e7428aa22569b776b62bc83b4eba15bf5ed95c9c05921c8b
Opcode Fuzzy Hash: 39c5d6f04fe3aa1045650c07b8565f6be123a8bfd1f9bd00a46549af01104271
Instruction Fuzzy Hash: 97418E35A00301CFCB08DF38C59569DBBF6AF98604B1480ADE949DB39ADB35DD85CBA4

Uniqueness

Uniqueness Score: -1.00%

Function 0108B8CA Relevance: 1.6, APIs: 1, Instructions: 103
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileW.KERNELBASE(?,?,?,?,?,?), ref: 0108B989

Memory Dump Source

Source File: 00000000.00000002.4405597889.000000000108A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0108A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_108a000_xbOnlYALvtUq.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: c25741f109844d5892811ff3b4d9f1d5c9b7f39e653fc648eff00d7dac79239d
Instruction ID: e855cad7d8af7b345422b029fcb117f9fdd15c546b776f79944400683419be3e
Opcode Fuzzy Hash: c25741f109844d5892811ff3b4d9f1d5c9b7f39e653fc648eff00d7dac79239d
Instruction Fuzzy Hash: 9031A2B1508380AFE712CB65CC40B62BFE8EF06314F08849EE9C58B653D375E409DB61

Uniqueness

Uniqueness Score: -1.00%

Function 01212136 Relevance: 1.6, APIs: 1, Instructions: 99
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegCreateKeyExW.KERNELBASE(?,00000E24), ref: 012121FD

Memory Dump Source

Source File: 00000000.00000002.4405864529.0000000001210000.00000040.00000800.00020000.00000000.sdmp, Offset: 01210000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1210000_xbOnlYALvtUq.jbxd

Similarity

API ID: Create
String ID:
API String ID: 2289755597-0
Opcode ID: ac7bb16dd241d6b61a11b44d732766f3ea8ea119608411e08edd4bd46af24ce7
Instruction ID: fb0e5045681dea6ce7e9ee2b53c111046e9e34fdad77fb1f5c8dcdc72082ed6a
Opcode Fuzzy Hash: ac7bb16dd241d6b61a11b44d732766f3ea8ea119608411e08edd4bd46af24ce7
Instruction Fuzzy Hash: E4318F72504344AFE722CB65CC44FA7BFFCEF15210F08859AFA859B652D324E548CB61

Uniqueness

Uniqueness Score: -1.00%

Function 0108BE37 Relevance: 1.6, APIs: 1, Instructions: 98
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegQueryValueExW.KERNELBASE(?,00000E24,?,?), ref: 0108BEFE

Memory Dump Source

Source File: 00000000.00000002.4405597889.000000000108A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0108A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_108a000_xbOnlYALvtUq.jbxd

Similarity

API ID: QueryValue
String ID:
API String ID: 3660427363-0
Opcode ID: 040361a81cf63f872a2d3a2337ab84fd30a95b192f6a72edb11d4f15b8aba0f2
Instruction ID: a996b6d4f75a1a9d7f8a9289a1f1554eaa3858f338124d633a6d2f5d124c4e0c
Opcode Fuzzy Hash: 040361a81cf63f872a2d3a2337ab84fd30a95b192f6a72edb11d4f15b8aba0f2
Instruction Fuzzy Hash: B9318F6510E7C06FD3139B358C61A61BFB4EF47610B0E85CBD8C49B5A3D129A909D7B2

Uniqueness

Uniqueness Score: -1.00%

Function 0108A7C7 Relevance: 1.6, APIs: 1, Instructions: 95
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegOpenKeyExW.KERNELBASE(?,00000E24), ref: 0108A879

Memory Dump Source

Source File: 00000000.00000002.4405597889.000000000108A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0108A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_108a000_xbOnlYALvtUq.jbxd

Similarity

API ID: Open
String ID:
API String ID: 71445658-0
Opcode ID: c205d88f9bef3dd420e9993ce85b1e7d2d98191fee280a396f55996dba5020b8
Instruction ID: 834ed77a2656e093e70af4533ab459a0bfa391f358546f9e9d62983b58432022
Opcode Fuzzy Hash: c205d88f9bef3dd420e9993ce85b1e7d2d98191fee280a396f55996dba5020b8
Instruction Fuzzy Hash: 773195B1508384AFE7228B65DC44FA7BFFCEF16214F08449BE9849B653D264E509C771

Uniqueness

Uniqueness Score: -1.00%

Function 01210D54 Relevance: 1.6, APIs: 1, Instructions: 93
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

getaddrinfo.WS2_32(?,00000E24), ref: 01210E1B

Memory Dump Source

Source File: 00000000.00000002.4405864529.0000000001210000.00000040.00000800.00020000.00000000.sdmp, Offset: 01210000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1210000_xbOnlYALvtUq.jbxd

Similarity

API ID: getaddrinfo
String ID:
API String ID: 300660673-0
Opcode ID: 58a37f6a9399cf26c734915da89c59562b9bc3988b9f58929947ec36aad16005
Instruction ID: 069af46b14b637d7097824a499d8c9ee4273b38bbefdf7712870b3a6dcda9d60
Opcode Fuzzy Hash: 58a37f6a9399cf26c734915da89c59562b9bc3988b9f58929947ec36aad16005
Instruction Fuzzy Hash: 0531B1B1504344AFE721DB61DC44FA7FBACEF04714F04889AFA489B282D3B4A94CCB61

Uniqueness

Uniqueness Score: -1.00%

Function 01210C4C Relevance: 1.6, APIs: 1, Instructions: 92
timeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetProcessTimes.KERNELBASE(?,00000E24,3DE27A2D,00000000,00000000,00000000,00000000), ref: 01210CE9

Memory Dump Source

Source File: 00000000.00000002.4405864529.0000000001210000.00000040.00000800.00020000.00000000.sdmp, Offset: 01210000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1210000_xbOnlYALvtUq.jbxd

Similarity

API ID: ProcessTimes
String ID:
API String ID: 1995159646-0
Opcode ID: 1b5be99493a7d9fba20d2ea3c51581e449ccfc688d90234437079fb51d2218d3
Instruction ID: 2546fc3f09a69862e65380630e2c8c978e55ad641983aafd1d0db21fd610b4aa
Opcode Fuzzy Hash: 1b5be99493a7d9fba20d2ea3c51581e449ccfc688d90234437079fb51d2218d3
Instruction Fuzzy Hash: C431F4725097806FD722CF25DC44B96BFB8EF16320F0884DAE8848F193D260A549CB65

Uniqueness

Uniqueness Score: -1.00%

Function 01210548 Relevance: 1.6, APIs: 1, Instructions: 89
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ConvertStringSecurityDescriptorToSecurityDescriptorW.ADVAPI32(?,00000E24), ref: 012105DF

Memory Dump Source

Source File: 00000000.00000002.4405864529.0000000001210000.00000040.00000800.00020000.00000000.sdmp, Offset: 01210000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1210000_xbOnlYALvtUq.jbxd

Similarity

API ID: DescriptorSecurity$ConvertString
String ID:
API String ID: 3907675253-0
Opcode ID: 9e4e4b907d1967ff251cb2f39967fb3981a70a46cecb9756a0e9e6f5fd9ebb89
Instruction ID: 39eeab68477c9cef3074e3b1da6fd60d44103311028239c050c37a48e936c62e
Opcode Fuzzy Hash: 9e4e4b907d1967ff251cb2f39967fb3981a70a46cecb9756a0e9e6f5fd9ebb89
Instruction Fuzzy Hash: 9C31BF71504385AFE722CB25DC44FA7BFE8EF05220F0888AAF944DB252D364E848CB61

Uniqueness

Uniqueness Score: -1.00%

Function 0108A612 Relevance: 1.6, APIs: 1, Instructions: 89
synchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateMutexW.KERNELBASE(?,?), ref: 0108A6B9

Memory Dump Source

Source File: 00000000.00000002.4405597889.000000000108A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0108A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_108a000_xbOnlYALvtUq.jbxd

Similarity

API ID: CreateMutex
String ID:
API String ID: 1964310414-0
Opcode ID: 76360fae2065f7b9184a74bec8bc60b5b901f2a558cfe6d8148bbe4bcce08ed8
Instruction ID: ec2a5bc773fa6e938ce32f1670eadea272c5d69e6bcc31649850100cdcd3f0f1
Opcode Fuzzy Hash: 76360fae2065f7b9184a74bec8bc60b5b901f2a558cfe6d8148bbe4bcce08ed8
Instruction Fuzzy Hash: 3F31A4B15097806FE712DB25CC45B56BFF8EF06214F08849AE9848B293D375E909C761

Uniqueness

Uniqueness Score: -1.00%

Function 01212162 Relevance: 1.6, APIs: 1, Instructions: 86
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegCreateKeyExW.KERNELBASE(?,00000E24), ref: 012121FD

Memory Dump Source

Source File: 00000000.00000002.4405864529.0000000001210000.00000040.00000800.00020000.00000000.sdmp, Offset: 01210000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1210000_xbOnlYALvtUq.jbxd

Similarity

API ID: Create
String ID:
API String ID: 2289755597-0
Opcode ID: 4fba10d8b0cb55707f72883203d977e1331f459cf337be0016fa8a8c4c2a63c6
Instruction ID: 53ff5862bda7163996ff7bfb7c8fc98981206dbee0f3df464b81720b8fc06527
Opcode Fuzzy Hash: 4fba10d8b0cb55707f72883203d977e1331f459cf337be0016fa8a8c4c2a63c6
Instruction Fuzzy Hash: F321CC76200204EFEB21CA15CC44FABBBECEF28224F08841AFA45D6652E330E5488A61

Uniqueness

Uniqueness Score: -1.00%

Function 0108A8C1 Relevance: 1.6, APIs: 1, Instructions: 86
windowtimeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

SendMessageTimeoutA.USER32(?,00000E24), ref: 0108A97D

Memory Dump Source

Source File: 00000000.00000002.4405597889.000000000108A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0108A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_108a000_xbOnlYALvtUq.jbxd

Similarity

API ID: MessageSendTimeout
String ID:
API String ID: 1599653421-0
Opcode ID: 1283d63f13c551b2f485c01a894fbb5fad1ab8cd64a1214641c2f4f24a69d3da
Instruction ID: e3cd38f9d3dad079b94523ecf3c0f04606432403e487820cf13edfd6a189688d
Opcode Fuzzy Hash: 1283d63f13c551b2f485c01a894fbb5fad1ab8cd64a1214641c2f4f24a69d3da
Instruction Fuzzy Hash: 3831C271109780AFEB228F61DC45FA6FFB8EF06324F08849EE9858B553D275A409CB65

Uniqueness

Uniqueness Score: -1.00%

Function 0108A361 Relevance: 1.6, APIs: 1, Instructions: 85
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegQueryValueExW.KERNELBASE(?,00000E24,3DE27A2D,00000000,00000000,00000000,00000000), ref: 0108A40C

Memory Dump Source

Source File: 00000000.00000002.4405597889.000000000108A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0108A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_108a000_xbOnlYALvtUq.jbxd

Similarity

API ID: QueryValue
String ID:
API String ID: 3660427363-0
Opcode ID: e8b7804802beb33f7dc1556025fa2d59cf6495407736fd3403e5d4a8effc6dc9
Instruction ID: 1676f6d421c632dc7741d8108af7329b4b3ac897fbd872b0b64f996c04cee6e5
Opcode Fuzzy Hash: e8b7804802beb33f7dc1556025fa2d59cf6495407736fd3403e5d4a8effc6dc9
Instruction Fuzzy Hash: 54318075509740AFE722CF15CC84F92BFF8EF05610F0884DAE9859B692D364E909CB61

Uniqueness

Uniqueness Score: -1.00%

Function 01210D76 Relevance: 1.6, APIs: 1, Instructions: 84COMMON

Download Yara Rule

APIs

getaddrinfo.WS2_32(?,00000E24), ref: 01210E1B

Memory Dump Source

Source File: 00000000.00000002.4405864529.0000000001210000.00000040.00000800.00020000.00000000.sdmp, Offset: 01210000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1210000_xbOnlYALvtUq.jbxd

Similarity

API ID: getaddrinfo
String ID:
API String ID: 300660673-0
Opcode ID: 938f106b2c2822832bbff7f8535114f660af6e696c5766c7cfa839a99431f761
Instruction ID: cc572daa7061b2bd1094f31ba93cd66ed19c051a0b60aafffc1bbcf25ba110b6
Opcode Fuzzy Hash: 938f106b2c2822832bbff7f8535114f660af6e696c5766c7cfa839a99431f761
Instruction Fuzzy Hash: D721F371100204AEEB31DF51CD44FA6FBECEF14714F04885AFA489A282D7B4E54C8B71

Uniqueness

Uniqueness Score: -1.00%

Function 01214353 Relevance: 1.6, APIs: 1, Instructions: 81networkCOMMON

Download Yara Rule

APIs

WSAEventSelect.WS2_32(?,00000E24,3DE27A2D,00000000,00000000,00000000,00000000), ref: 012143EB

Memory Dump Source

Source File: 00000000.00000002.4405864529.0000000001210000.00000040.00000800.00020000.00000000.sdmp, Offset: 01210000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1210000_xbOnlYALvtUq.jbxd

Similarity

API ID: EventSelect
String ID:
API String ID: 31538577-0
Opcode ID: fa711fc4e0ad0a5ea08fd73728e22185a2677ecea873ed8baae7f013326d5819
Instruction ID: 0dfd4a038497ea6e8455de66c142434037bcb0d3dbe6fe032a4b0a4c40d66e72
Opcode Fuzzy Hash: fa711fc4e0ad0a5ea08fd73728e22185a2677ecea873ed8baae7f013326d5819
Instruction Fuzzy Hash: 0B21ADB14093C46FD712CB21DC54B96BFB8EF56314F0884DAE9849B193D374A508CBA2

Uniqueness

Uniqueness Score: -1.00%

Function 012110C8 Relevance: 1.6, APIs: 1, Instructions: 81COMMON

Download Yara Rule

APIs

GetVolumeInformationA.KERNELBASE(?,00000E24,?,?), ref: 0121116E

Memory Dump Source

Source File: 00000000.00000002.4405864529.0000000001210000.00000040.00000800.00020000.00000000.sdmp, Offset: 01210000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1210000_xbOnlYALvtUq.jbxd

Similarity

API ID: InformationVolume
String ID:
API String ID: 2039140958-0
Opcode ID: 75f92cede30f3cb1c3fa9e01addfdb50538da2fe837e2c18ca34b739ec48e1d2
Instruction ID: b18082f9320c0966fd498713affcfd782bcf9fbbda87343b2781bfd9c94bab49
Opcode Fuzzy Hash: 75f92cede30f3cb1c3fa9e01addfdb50538da2fe837e2c18ca34b739ec48e1d2
Instruction Fuzzy Hash: 4D316F7150D3C06FD3128B258C55B62BFB8EF47610F0981DBE884DF693D225A959C7A2

Uniqueness

Uniqueness Score: -1.00%

Function 012123D5 Relevance: 1.6, APIs: 1, Instructions: 80COMMON

Download Yara Rule

APIs

select.WS2_32(?,?,?,?,?), ref: 01212464

Memory Dump Source

Source File: 00000000.00000002.4405864529.0000000001210000.00000040.00000800.00020000.00000000.sdmp, Offset: 01210000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1210000_xbOnlYALvtUq.jbxd

Similarity

API ID: select
String ID:
API String ID: 1274211008-0
Opcode ID: b1b77c00344e59004d6062c45f02af8164cadb6887b44ea7f4548a06f5172b39
Instruction ID: 8e09191846cddbf186b32a8b466d000345902d5e28f3197cabeb0ef9e61ae63d
Opcode Fuzzy Hash: b1b77c00344e59004d6062c45f02af8164cadb6887b44ea7f4548a06f5172b39
Instruction Fuzzy Hash: C1216B755083849FDB22CF29DC44B92BFF8EF0A314F0884DAE984CB163D264E908CB61

Uniqueness

Uniqueness Score: -1.00%

Function 0108B9E0 Relevance: 1.6, APIs: 1, Instructions: 80COMMON

Download Yara Rule

APIs

GetFileType.KERNELBASE(?,00000E24,3DE27A2D,00000000,00000000,00000000,00000000), ref: 0108BA75

Memory Dump Source

Source File: 00000000.00000002.4405597889.000000000108A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0108A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_108a000_xbOnlYALvtUq.jbxd

Similarity

API ID: FileType
String ID:
API String ID: 3081899298-0
Opcode ID: 364878ed19337542d9f2fa78879c891601f590402db21d7eb0fa7ff6eb7ba9d3
Instruction ID: f08ba8915df321322134f6ad86a20cefc5f8cfbe1f757699e8658a1324579880
Opcode Fuzzy Hash: 364878ed19337542d9f2fa78879c891601f590402db21d7eb0fa7ff6eb7ba9d3
Instruction Fuzzy Hash: 16210AB55097806FE713CB25DC41BA2BFBCEF57724F0880DAE9809B293D2649909C771

Uniqueness

Uniqueness Score: -1.00%

Function 012127AD Relevance: 1.6, APIs: 1, Instructions: 79COMMON

Download Yara Rule

APIs

GetExitCodeProcess.KERNELBASE(?,00000E24,3DE27A2D,00000000,00000000,00000000,00000000), ref: 01212834

Memory Dump Source

Source File: 00000000.00000002.4405864529.0000000001210000.00000040.00000800.00020000.00000000.sdmp, Offset: 01210000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1210000_xbOnlYALvtUq.jbxd

Similarity

API ID: CodeExitProcess
String ID:
API String ID: 3861947596-0
Opcode ID: 4f4c191cea2bd027b6ea11790201269e764d2db36ef1967b62687cd10a46eeb3
Instruction ID: 101cf6d68bb1fc18585b9d68539054be94e79e36c0f879a1af8fe4e0f70fc7a6
Opcode Fuzzy Hash: 4f4c191cea2bd027b6ea11790201269e764d2db36ef1967b62687cd10a46eeb3
Instruction Fuzzy Hash: 0F21B071509380AFE712CB24CC44B96BFA8EF02224F1884DAE944DB293D264A908CB71

Uniqueness

Uniqueness Score: -1.00%

Function 01210012 Relevance: 1.6, APIs: 1, Instructions: 77networkCOMMON

Download Yara Rule

APIs

WSASocketW.WS2_32(?,?,?,?,?), ref: 0121009E

Memory Dump Source

Source File: 00000000.00000002.4405864529.0000000001210000.00000040.00000800.00020000.00000000.sdmp, Offset: 01210000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1210000_xbOnlYALvtUq.jbxd

Similarity

API ID: Socket
String ID:
API String ID: 38366605-0
Opcode ID: e4240233f3f9269cb8b68946799cc10aae6e28b71c4caac2db1694b518ed7f25
Instruction ID: 007ee7d59587d4db974c405b3063cb6e64e083267893e89dfb0ce260a17bcdf0
Opcode Fuzzy Hash: e4240233f3f9269cb8b68946799cc10aae6e28b71c4caac2db1694b518ed7f25
Instruction Fuzzy Hash: F9219E71505384AFD722CF65CC44F96FFF8EF05220F08889EE9859B652D375A408CB61

Uniqueness

Uniqueness Score: -1.00%

Function 01213B4E Relevance: 1.6, APIs: 1, Instructions: 77registryCOMMON

Download Yara Rule

APIs

RegSetValueExW.KERNELBASE(?,00000E24,3DE27A2D,00000000,00000000,00000000,00000000), ref: 01213BE8

Memory Dump Source

Source File: 00000000.00000002.4405864529.0000000001210000.00000040.00000800.00020000.00000000.sdmp, Offset: 01210000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1210000_xbOnlYALvtUq.jbxd

Similarity

API ID: Value
String ID:
API String ID: 3702945584-0
Opcode ID: 2041eb02b320e729a3f3bf8e0060ade1e0b393f5ecdb1c5f877363329964f5f1
Instruction ID: 882f8b039e7421d57c3774d6841ee239bbb94533293b5feaaf9f359c1190d9d1
Opcode Fuzzy Hash: 2041eb02b320e729a3f3bf8e0060ade1e0b393f5ecdb1c5f877363329964f5f1
Instruction Fuzzy Hash: 0A219071504784AFE722CB55CC44FA7FFF8EF15620F08849AEA859B692D364E908CB71

Uniqueness

Uniqueness Score: -1.00%

Function 0108A462 Relevance: 1.6, APIs: 1, Instructions: 77registryCOMMON

Download Yara Rule

APIs

RegSetValueExW.KERNELBASE(?,00000E24,3DE27A2D,00000000,00000000,00000000,00000000), ref: 0108A4F8

Memory Dump Source

Source File: 00000000.00000002.4405597889.000000000108A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0108A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_108a000_xbOnlYALvtUq.jbxd

Similarity

API ID: Value
String ID:
API String ID: 3702945584-0
Opcode ID: bbd8e9184c49d27cc3ae98fe48cedcd973a7b42582b3f347825aeeab0c20bd92
Instruction ID: 6e55286a469c0a14df0079b4773e17590d4e27e172baa3b1b6cd6819a5c98dd5
Opcode Fuzzy Hash: bbd8e9184c49d27cc3ae98fe48cedcd973a7b42582b3f347825aeeab0c20bd92
Instruction Fuzzy Hash: CA21A1B2508380AFD7228B15CC44FA7BFF8EF45620F08849AE985DB652D364E548CB71

Uniqueness

Uniqueness Score: -1.00%

Function 0121056E Relevance: 1.6, APIs: 1, Instructions: 76COMMON

Download Yara Rule

APIs

ConvertStringSecurityDescriptorToSecurityDescriptorW.ADVAPI32(?,00000E24), ref: 012105DF

Memory Dump Source

Source File: 00000000.00000002.4405864529.0000000001210000.00000040.00000800.00020000.00000000.sdmp, Offset: 01210000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1210000_xbOnlYALvtUq.jbxd

Similarity

API ID: DescriptorSecurity$ConvertString
String ID:
API String ID: 3907675253-0
Opcode ID: ec46b4c9f42213afe464e0d7c22495eb9661b062bd160da6ebf41ac3a8e53939
Instruction ID: d65b04142ed413eceabf33227d79b47fe1bbd899501aba8944c63c346a85e882
Opcode Fuzzy Hash: ec46b4c9f42213afe464e0d7c22495eb9661b062bd160da6ebf41ac3a8e53939
Instruction Fuzzy Hash: 43210471600204AFE720DF25DC41BABFBECEF14210F08886AF945DB642D374E8488A75

Uniqueness

Uniqueness Score: -1.00%

Function 012124A4 Relevance: 1.6, APIs: 1, Instructions: 76COMMON

Download Yara Rule

APIs

LookupPrivilegeValueW.ADVAPI32(?,?,?), ref: 0121252A

Memory Dump Source

Source File: 00000000.00000002.4405864529.0000000001210000.00000040.00000800.00020000.00000000.sdmp, Offset: 01210000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1210000_xbOnlYALvtUq.jbxd

Similarity

API ID: LookupPrivilegeValue
String ID:
API String ID: 3899507212-0
Opcode ID: 9da11d5f010470d39cce615f8906a01775382813d48384d71de6b7a69aa66281
Instruction ID: 1479be35ac5a1834620330fcab26b2556e20161fd9e4608d60178cc1862c29d4
Opcode Fuzzy Hash: 9da11d5f010470d39cce615f8906a01775382813d48384d71de6b7a69aa66281
Instruction Fuzzy Hash: 3321A1B26093809FD712CB25DC54B52BFE8AF56624F1C84DEE949CB253D225E808CB71

Uniqueness

Uniqueness Score: -1.00%

Function 0108B90A Relevance: 1.6, APIs: 1, Instructions: 76fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNELBASE(?,?,?,?,?,?), ref: 0108B989

Memory Dump Source

Source File: 00000000.00000002.4405597889.000000000108A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0108A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_108a000_xbOnlYALvtUq.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: ef8a07958496b2428786c6ba1fda6665b4720dc7d752c863048c546dbea30b60
Instruction ID: e21d892c4312ce23f2ed944069ca08eee4a92baa346664631d99895fdab65d43
Opcode Fuzzy Hash: ef8a07958496b2428786c6ba1fda6665b4720dc7d752c863048c546dbea30b60
Instruction Fuzzy Hash: 2721B271504204AFEB21DF65CC44B66FBE8EF15224F08846EE9C58B752D371E408CB61

Uniqueness

Uniqueness Score: -1.00%

Function 01210462 Relevance: 1.6, APIs: 1, Instructions: 75registryCOMMON

Download Yara Rule

APIs

RegQueryValueExW.KERNELBASE(?,00000E24,3DE27A2D,00000000,00000000,00000000,00000000), ref: 012104F4

Memory Dump Source

Source File: 00000000.00000002.4405864529.0000000001210000.00000040.00000800.00020000.00000000.sdmp, Offset: 01210000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1210000_xbOnlYALvtUq.jbxd

Similarity

API ID: QueryValue
String ID:
API String ID: 3660427363-0
Opcode ID: 9423397278f2930db575a508c8a1e993ba51b4e70c3d168b3a192a49ca800a30
Instruction ID: bcac23c41ef25852d596d5354c8f406f02539031aa4beddf57ab0f7967682309
Opcode Fuzzy Hash: 9423397278f2930db575a508c8a1e993ba51b4e70c3d168b3a192a49ca800a30
Instruction Fuzzy Hash: 9B218C72504340AFE722CB15DC44FA7BBF8EF19620F08849AEA459B292D264E548CB75

Uniqueness

Uniqueness Score: -1.00%

Function 0108A7FA Relevance: 1.6, APIs: 1, Instructions: 74registryCOMMON

Download Yara Rule

APIs

RegOpenKeyExW.KERNELBASE(?,00000E24), ref: 0108A879

Memory Dump Source

Source File: 00000000.00000002.4405597889.000000000108A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0108A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_108a000_xbOnlYALvtUq.jbxd

Similarity

API ID: Open
String ID:
API String ID: 71445658-0
Opcode ID: 9551d2353e46ab0f4bceb2183d14285e93b978f07128d9cbf7f87698a40becb0
Instruction ID: 4534da2654fc4bda0cbfacd1b9e8a60ceead7ccde7aeed486fae70c14e5c1511
Opcode Fuzzy Hash: 9551d2353e46ab0f4bceb2183d14285e93b978f07128d9cbf7f87698a40becb0
Instruction Fuzzy Hash: 2121D172604204EEE7219B55CC44FABFBECEF14224F04845AE9859BA42D774E5098AB1

Uniqueness

Uniqueness Score: -1.00%

Function 0121297B Relevance: 1.6, APIs: 1, Instructions: 73COMMON

Download Yara Rule

APIs

SetProcessWorkingSetSize.KERNEL32(?,00000E24,3DE27A2D,00000000,00000000,00000000,00000000), ref: 012129F7

Memory Dump Source

Source File: 00000000.00000002.4405864529.0000000001210000.00000040.00000800.00020000.00000000.sdmp, Offset: 01210000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1210000_xbOnlYALvtUq.jbxd

Similarity

API ID: ProcessSizeWorking
String ID:
API String ID: 3584180929-0
Opcode ID: 13c17d9e89ad4a8b47d0b639cabd2ba800eaeaa62ea787cbc4b703b3273856fb
Instruction ID: 0e961f93347d00b71fc050ce30647c47c518cf92b7ac91a83c4b645e704b9ba3
Opcode Fuzzy Hash: 13c17d9e89ad4a8b47d0b639cabd2ba800eaeaa62ea787cbc4b703b3273856fb
Instruction Fuzzy Hash: 4821C271508380AFD722CB25CC44FA7BFA8EF55220F08849AE944DB252D374E508CB65

Uniqueness

Uniqueness Score: -1.00%

Function 01212897 Relevance: 1.6, APIs: 1, Instructions: 73COMMON

Download Yara Rule

APIs

GetProcessWorkingSetSize.KERNEL32(?,00000E24,3DE27A2D,00000000,00000000,00000000,00000000), ref: 01212913

Memory Dump Source

Source File: 00000000.00000002.4405864529.0000000001210000.00000040.00000800.00020000.00000000.sdmp, Offset: 01210000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1210000_xbOnlYALvtUq.jbxd

Similarity

API ID: ProcessSizeWorking
String ID:
API String ID: 3584180929-0
Opcode ID: 13c17d9e89ad4a8b47d0b639cabd2ba800eaeaa62ea787cbc4b703b3273856fb
Instruction ID: 68e3c105450f584865421107cf05e5cf3ca63f1ee4aa509deb08aac99c592b0c
Opcode Fuzzy Hash: 13c17d9e89ad4a8b47d0b639cabd2ba800eaeaa62ea787cbc4b703b3273856fb
Instruction Fuzzy Hash: 8421C271509384AFD712CB25CC44FA7BFA8EF56220F08849BE944DB252D374E508CB65

Uniqueness

Uniqueness Score: -1.00%

Function 01210995 Relevance: 1.6, APIs: 1, Instructions: 72COMMON

Download Yara Rule

APIs

shutdown.WS2_32(?,00000E24,3DE27A2D,00000000,00000000,00000000,00000000), ref: 01210A18

Memory Dump Source

Source File: 00000000.00000002.4405864529.0000000001210000.00000040.00000800.00020000.00000000.sdmp, Offset: 01210000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1210000_xbOnlYALvtUq.jbxd

Similarity

API ID: shutdown
String ID:
API String ID: 2510479042-0
Opcode ID: 09731a4b7b3287ae1d7e897a9e45947dec2f0f6a4a46048ab19abb35ec03fd9f
Instruction ID: 81599c7b4eefbc7cb8601d30f05d03c0f22711a4f025d903c497ab50509421aa
Opcode Fuzzy Hash: 09731a4b7b3287ae1d7e897a9e45947dec2f0f6a4a46048ab19abb35ec03fd9f
Instruction Fuzzy Hash: 2421D4B1409380AFD712CB20CC44B96FFB8EF46220F0884DBE9849F253D378A548CB62

Uniqueness

Uniqueness Score: -1.00%

Function 0108A646 Relevance: 1.6, APIs: 1, Instructions: 72synchronizationCOMMON

Download Yara Rule

APIs

CreateMutexW.KERNELBASE(?,?), ref: 0108A6B9

Memory Dump Source

Source File: 00000000.00000002.4405597889.000000000108A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0108A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_108a000_xbOnlYALvtUq.jbxd

Similarity

API ID: CreateMutex
String ID:
API String ID: 1964310414-0
Opcode ID: 07624226dd5ba856629c9defaed6675588b1df162ef83a4311ca26479a47404e
Instruction ID: c10796ffe99aa82ccc74b31ce4607b52f9b828799620a26f211c7312d5b9b786
Opcode Fuzzy Hash: 07624226dd5ba856629c9defaed6675588b1df162ef83a4311ca26479a47404e
Instruction Fuzzy Hash: 3621C271604200AFE720EF25CC85BA6FBE8EF14324F0884AAE9858B742D771E409CB71

Uniqueness

Uniqueness Score: -1.00%

Function 0108BCC2 Relevance: 1.6, APIs: 1, Instructions: 70fileCOMMON

Download Yara Rule

APIs

ReadFile.KERNELBASE(?,00000E24,3DE27A2D,00000000,00000000,00000000,00000000), ref: 0108BD41

Memory Dump Source

Source File: 00000000.00000002.4405597889.000000000108A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0108A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_108a000_xbOnlYALvtUq.jbxd

Similarity

API ID: FileRead
String ID:
API String ID: 2738559852-0
Opcode ID: 60a67308433601346b9833530a902520821b99075a8eb6ffc2d8fd5e33e6c5c0
Instruction ID: 3a3a2fee55ab42932ec5bb892527514be8d81d0e89bf893e2c79228e76a5458f
Opcode Fuzzy Hash: 60a67308433601346b9833530a902520821b99075a8eb6ffc2d8fd5e33e6c5c0
Instruction Fuzzy Hash: 6321CF71408380AFDB22CF51CC44F97FFB8EF45220F08849AE9849B252D374A408CBB2

Uniqueness

Uniqueness Score: -1.00%

Function 0121230F Relevance: 1.6, APIs: 1, Instructions: 69COMMON

Download Yara Rule

APIs

ioctlsocket.WS2_32(?,00000E24,3DE27A2D,00000000,00000000,00000000,00000000), ref: 0121238B

Memory Dump Source

Source File: 00000000.00000002.4405864529.0000000001210000.00000040.00000800.00020000.00000000.sdmp, Offset: 01210000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1210000_xbOnlYALvtUq.jbxd

Similarity

API ID: ioctlsocket
String ID:
API String ID: 3577187118-0
Opcode ID: 6108e9c4371852932f63933dabdb76e065a4afd3dcc13091fe672f6317296f76
Instruction ID: b447d73376bfbd9aa28e657b235d2829430fbc7fe58de7052e8a6f307ced4e73
Opcode Fuzzy Hash: 6108e9c4371852932f63933dabdb76e065a4afd3dcc13091fe672f6317296f76
Instruction Fuzzy Hash: A9219F71509384AFD722CB11CC44F96FFA8EF55224F08849BE9449B252D374A508CB71

Uniqueness

Uniqueness Score: -1.00%

Function 0108A392 Relevance: 1.6, APIs: 1, Instructions: 69registryCOMMON

Download Yara Rule

APIs

RegQueryValueExW.KERNELBASE(?,00000E24,3DE27A2D,00000000,00000000,00000000,00000000), ref: 0108A40C

Memory Dump Source

Source File: 00000000.00000002.4405597889.000000000108A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0108A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_108a000_xbOnlYALvtUq.jbxd

Similarity

API ID: QueryValue
String ID:
API String ID: 3660427363-0
Opcode ID: 8f2648026e92bb2d36963c0fe0566dc48f24180927624207ca1f763117b7c6d8
Instruction ID: 80dbc8ec41fd94d266fdd3f1038aa05a05f4368ac3c39f914b37c906eeef2c74
Opcode Fuzzy Hash: 8f2648026e92bb2d36963c0fe0566dc48f24180927624207ca1f763117b7c6d8
Instruction Fuzzy Hash: 2D219D71604600AEEB60DE19CC84FA6BBECEF54620F04C49AE9859BA52D760E809CA71

Uniqueness

Uniqueness Score: -1.00%

Function 01210F26 Relevance: 1.6, APIs: 1, Instructions: 67networkCOMMON

Download Yara Rule

APIs

WSAConnect.WS2_32(?,?,?,?,?,?,?), ref: 01210FA2

Memory Dump Source

Source File: 00000000.00000002.4405864529.0000000001210000.00000040.00000800.00020000.00000000.sdmp, Offset: 01210000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1210000_xbOnlYALvtUq.jbxd

Similarity

API ID: Connect
String ID:
API String ID: 3144859779-0
Opcode ID: 4dab460dbac554b678c53c4621eee17be9e8a41686924420f602f6c9ed3e24e8
Instruction ID: cc3b85460875d954ce818a64037a3a24fe766990d4263e7fdbc0184293273b2f
Opcode Fuzzy Hash: 4dab460dbac554b678c53c4621eee17be9e8a41686924420f602f6c9ed3e24e8
Instruction Fuzzy Hash: C5215071508784AFDB22CF65DC44B52FFF4EF06310F08849AE9858B563D375A458DB61

Uniqueness

Uniqueness Score: -1.00%

Function 01210032 Relevance: 1.6, APIs: 1, Instructions: 67networkCOMMON

Download Yara Rule

APIs

WSASocketW.WS2_32(?,?,?,?,?), ref: 0121009E

Memory Dump Source

Source File: 00000000.00000002.4405864529.0000000001210000.00000040.00000800.00020000.00000000.sdmp, Offset: 01210000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1210000_xbOnlYALvtUq.jbxd

Similarity

API ID: Socket
String ID:
API String ID: 38366605-0
Opcode ID: 6e42bf897c3cea8f269c8babf59c55fff7bba212f09fc260260301435c762cc9
Instruction ID: 3b32d07a8c2dc4d00d99a312cfd2ffb09fb57212c7bd6b520c9215df5c2b7aa5
Opcode Fuzzy Hash: 6e42bf897c3cea8f269c8babf59c55fff7bba212f09fc260260301435c762cc9
Instruction Fuzzy Hash: C421F371500244AFEB21DF55CD45FA6FBE8EF14324F04885EE9458B652D3B1E448CB76

Uniqueness

Uniqueness Score: -1.00%

Function 0121071E Relevance: 1.6, APIs: 1, Instructions: 67fileCOMMON

Download Yara Rule

APIs

MapViewOfFile.KERNELBASE ref: 01210792

Memory Dump Source

Source File: 00000000.00000002.4405864529.0000000001210000.00000040.00000800.00020000.00000000.sdmp, Offset: 01210000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1210000_xbOnlYALvtUq.jbxd

Similarity

API ID: FileView
String ID:
API String ID: 3314676101-0
Opcode ID: de89d3badc29257d93424b39b93c7a7a9074c51327702ce8dc840fd1dd8d3af6
Instruction ID: 90b7313291c3a535d15a6b8b7cf597315e1a05c0c5ad861243f04f3307acc63f
Opcode Fuzzy Hash: de89d3badc29257d93424b39b93c7a7a9074c51327702ce8dc840fd1dd8d3af6
Instruction Fuzzy Hash: B421DE71500204AFE721CF15CC85FA6FBE8EF28224F04845EE9458B642D371E549CBA5

Uniqueness

Uniqueness Score: -1.00%

Function 0121138A Relevance: 1.6, APIs: 1, Instructions: 66libraryCOMMON

Download Yara Rule

APIs

LoadLibraryA.KERNELBASE(?,00000E24), ref: 01211413

Memory Dump Source

Source File: 00000000.00000002.4405864529.0000000001210000.00000040.00000800.00020000.00000000.sdmp, Offset: 01210000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1210000_xbOnlYALvtUq.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: ee4e5cd85e163490137395ac99feaca44663c673a18e7b3dc2170a29dc587e72
Instruction ID: 6600f7a08710f52020791ee3a27c9362251d6ecf7f59be0a5aac980e6b33f916
Opcode Fuzzy Hash: ee4e5cd85e163490137395ac99feaca44663c673a18e7b3dc2170a29dc587e72
Instruction Fuzzy Hash: 2B11D6715043406FE722CB15DC85FA6FFB8EF45720F08849AFA449B692D2B4A948CB66

Uniqueness

Uniqueness Score: -1.00%

Function 0108A902 Relevance: 1.6, APIs: 1, Instructions: 66windowtimeCOMMON

Download Yara Rule

APIs

SendMessageTimeoutA.USER32(?,00000E24), ref: 0108A97D

Memory Dump Source

Source File: 00000000.00000002.4405597889.000000000108A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0108A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_108a000_xbOnlYALvtUq.jbxd

Similarity

API ID: MessageSendTimeout
String ID:
API String ID: 1599653421-0
Opcode ID: d7af35069ffbe79f45540610e53f8c45bb0cb23da3caed7f074a6754fd024968
Instruction ID: e23a0c08104fcd6db5de0d03b0637cbb63bb8658a2724c157161a61d2692a4a5
Opcode Fuzzy Hash: d7af35069ffbe79f45540610e53f8c45bb0cb23da3caed7f074a6754fd024968
Instruction Fuzzy Hash: DD21D271504600AFEB219F51DC40FA6FBA8EF14720F04845AEE859AA52D375E418CB71

Uniqueness

Uniqueness Score: -1.00%

Function 01213B76 Relevance: 1.6, APIs: 1, Instructions: 65registryCOMMON

Download Yara Rule

APIs

RegSetValueExW.KERNELBASE(?,00000E24,3DE27A2D,00000000,00000000,00000000,00000000), ref: 01213BE8

Memory Dump Source

Source File: 00000000.00000002.4405864529.0000000001210000.00000040.00000800.00020000.00000000.sdmp, Offset: 01210000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1210000_xbOnlYALvtUq.jbxd

Similarity

API ID: Value
String ID:
API String ID: 3702945584-0
Opcode ID: 425d827e70a6ae772b08ca65bffe4969e004591e289bd088ddf0c6d494d4909e
Instruction ID: 9bc7d57b8c3143a5c54115d9750eb8991c8188aa630374cd33799f00c5ff99ed
Opcode Fuzzy Hash: 425d827e70a6ae772b08ca65bffe4969e004591e289bd088ddf0c6d494d4909e
Instruction Fuzzy Hash: 9C11AC72610204AFE721CF16CC41FA7FBECFF24620F04849AEA459B656E770E508CAB1

Uniqueness

Uniqueness Score: -1.00%

Function 01210482 Relevance: 1.6, APIs: 1, Instructions: 65registryCOMMON

Download Yara Rule

APIs

RegQueryValueExW.KERNELBASE(?,00000E24,3DE27A2D,00000000,00000000,00000000,00000000), ref: 012104F4

Memory Dump Source

Source File: 00000000.00000002.4405864529.0000000001210000.00000040.00000800.00020000.00000000.sdmp, Offset: 01210000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1210000_xbOnlYALvtUq.jbxd

Similarity

API ID: QueryValue
String ID:
API String ID: 3660427363-0
Opcode ID: f222af2c0bc4b2c4fccc609b26a5d0352ec0601555b720158348abec623be9a9
Instruction ID: 1661691d6ddab9c5ec01f8d0906d7899bd10fd3b15c5cc770caff0634a345f91
Opcode Fuzzy Hash: f222af2c0bc4b2c4fccc609b26a5d0352ec0601555b720158348abec623be9a9
Instruction Fuzzy Hash: AB11AC72510200AFEB21CF15DC84FA7FBE8EF28720F08845AEA459A656D774E548CAB5

Uniqueness

Uniqueness Score: -1.00%

Function 012131C1 Relevance: 1.6, APIs: 1, Instructions: 65libraryCOMMON

Download Yara Rule

APIs

LoadLibraryShim.MSCOREE(?,?,?,?), ref: 0121323D

Memory Dump Source

Source File: 00000000.00000002.4405864529.0000000001210000.00000040.00000800.00020000.00000000.sdmp, Offset: 01210000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1210000_xbOnlYALvtUq.jbxd

Similarity

API ID: LibraryLoadShim
String ID:
API String ID: 1475914169-0
Opcode ID: b22dfd41856bbeb2330829796cdbc8f5141f9f9e174c2a6fc8c16cf73eb2cbeb
Instruction ID: 707421fba57796ef2fe528f6d29ff443e7c98ea729d04b63eb446b4d87896775
Opcode Fuzzy Hash: b22dfd41856bbeb2330829796cdbc8f5141f9f9e174c2a6fc8c16cf73eb2cbeb
Instruction Fuzzy Hash: A12163B55097805FD722CB25DC45B62BFF8FF56624F08848AED848B253D265E908CB61

Uniqueness

Uniqueness Score: -1.00%

Function 0108A486 Relevance: 1.6, APIs: 1, Instructions: 65registryCOMMON

Download Yara Rule

APIs

RegSetValueExW.KERNELBASE(?,00000E24,3DE27A2D,00000000,00000000,00000000,00000000), ref: 0108A4F8

Memory Dump Source

Source File: 00000000.00000002.4405597889.000000000108A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0108A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_108a000_xbOnlYALvtUq.jbxd

Similarity

API ID: Value
String ID:
API String ID: 3702945584-0
Opcode ID: f109fb7e28f4e47313561334e0ab961f4fe3ba58800dd24b234cad79ef393bb9
Instruction ID: 8721016d4be525ee60038970a66eafb979c0f83cc54b4e0cd7a7e73130040a96
Opcode Fuzzy Hash: f109fb7e28f4e47313561334e0ab961f4fe3ba58800dd24b234cad79ef393bb9
Instruction Fuzzy Hash: A911B1B2604600AFEB21DE15DC44FA7FBECEF54620F04845AED859BA42D770E5488A71

Uniqueness

Uniqueness Score: -1.00%

Function 01210C8A Relevance: 1.6, APIs: 1, Instructions: 64timeCOMMON

Download Yara Rule

APIs

GetProcessTimes.KERNELBASE(?,00000E24,3DE27A2D,00000000,00000000,00000000,00000000), ref: 01210CE9

Memory Dump Source

Source File: 00000000.00000002.4405864529.0000000001210000.00000040.00000800.00020000.00000000.sdmp, Offset: 01210000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1210000_xbOnlYALvtUq.jbxd

Similarity

API ID: ProcessTimes
String ID:
API String ID: 1995159646-0
Opcode ID: d25e8c7bf90a98c7a2951e762072a4212ba61b38985c8005de29dba6c6c012b8
Instruction ID: 517e8cfde1cdf9628e3ccc99e21dea10458138ada5f844572ddc3e80beaeeec6
Opcode Fuzzy Hash: d25e8c7bf90a98c7a2951e762072a4212ba61b38985c8005de29dba6c6c012b8
Instruction Fuzzy Hash: 5011DD72600200AFEB21CF55DC45FABFBE8EF24324F04846AEA058A656D371E448CBA5

Uniqueness

Uniqueness Score: -1.00%

Function 012128BA Relevance: 1.6, APIs: 1, Instructions: 62COMMON

Download Yara Rule

APIs

GetProcessWorkingSetSize.KERNEL32(?,00000E24,3DE27A2D,00000000,00000000,00000000,00000000), ref: 01212913

Memory Dump Source

Source File: 00000000.00000002.4405864529.0000000001210000.00000040.00000800.00020000.00000000.sdmp, Offset: 01210000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1210000_xbOnlYALvtUq.jbxd

Similarity

API ID: ProcessSizeWorking
String ID:
API String ID: 3584180929-0
Opcode ID: 30d45dd3c19127385a45061d69d807fedea5022706f3fdda2191a9f49230a6b6
Instruction ID: b918e6c98e2d493288d4f9a41b1fa59eaceb6d7c35e97510bc61ed0020ddf9f0
Opcode Fuzzy Hash: 30d45dd3c19127385a45061d69d807fedea5022706f3fdda2191a9f49230a6b6
Instruction Fuzzy Hash: 3E11E271600205AFE711CB15CC45BAABBECEF25324F14846AE9059B645D370E4088BB5

Uniqueness

Uniqueness Score: -1.00%

Function 0121299E Relevance: 1.6, APIs: 1, Instructions: 62COMMON

Download Yara Rule

APIs

SetProcessWorkingSetSize.KERNEL32(?,00000E24,3DE27A2D,00000000,00000000,00000000,00000000), ref: 012129F7

Memory Dump Source

Source File: 00000000.00000002.4405864529.0000000001210000.00000040.00000800.00020000.00000000.sdmp, Offset: 01210000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1210000_xbOnlYALvtUq.jbxd

Similarity

API ID: ProcessSizeWorking
String ID:
API String ID: 3584180929-0
Opcode ID: 30d45dd3c19127385a45061d69d807fedea5022706f3fdda2191a9f49230a6b6
Instruction ID: 3cf403e2b5d9f1fe3a3b018df98e30abb8179aed99c11a2b85f9638fc76e746b
Opcode Fuzzy Hash: 30d45dd3c19127385a45061d69d807fedea5022706f3fdda2191a9f49230a6b6
Instruction Fuzzy Hash: A811B272500200AFE721CF15DC45BA6BBE8EF25224F14846AED059B641D774E5088AA5

Uniqueness

Uniqueness Score: -1.00%

Function 012127DE Relevance: 1.6, APIs: 1, Instructions: 61COMMON

Download Yara Rule

APIs

GetExitCodeProcess.KERNELBASE(?,00000E24,3DE27A2D,00000000,00000000,00000000,00000000), ref: 01212834

Memory Dump Source

Source File: 00000000.00000002.4405864529.0000000001210000.00000040.00000800.00020000.00000000.sdmp, Offset: 01210000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1210000_xbOnlYALvtUq.jbxd

Similarity

API ID: CodeExitProcess
String ID:
API String ID: 3861947596-0
Opcode ID: f0b2814b6591da4a160c39e988582c7aef77a4de29b2288806dd64f9f2a1bda0
Instruction ID: 5d373c438d618a4722c4448b898126675b66798744dde6588553cec9b7f19076
Opcode Fuzzy Hash: f0b2814b6591da4a160c39e988582c7aef77a4de29b2288806dd64f9f2a1bda0
Instruction Fuzzy Hash: DE11E371610200AFEB11CB15DC45BAABBECDF24224F14C46AFD05DB681D774E508CAB5

Uniqueness

Uniqueness Score: -1.00%

Function 0108AF93 Relevance: 1.6, APIs: 1, Instructions: 61COMMON

Download Yara Rule

APIs

DuplicateHandle.KERNELBASE(?,?,?,?,?,?,?), ref: 0108AFFE

Memory Dump Source

Source File: 00000000.00000002.4405597889.000000000108A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0108A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_108a000_xbOnlYALvtUq.jbxd

Similarity

API ID: DuplicateHandle
String ID:
API String ID: 3793708945-0
Opcode ID: d4fbd814fb67f81b0394733bea622849fa19eecedc983b2d2170178fc9d140d7
Instruction ID: 9be1812ecdcd6427df5aa687328366507f4f90e4f9cec2d6bdb963a2e378c23e
Opcode Fuzzy Hash: d4fbd814fb67f81b0394733bea622849fa19eecedc983b2d2170178fc9d140d7
Instruction Fuzzy Hash: 8A116071409780AFDB228F55DC44B62FFF4EF4A220F0888DEED858B563D275A419DB61

Uniqueness

Uniqueness Score: -1.00%

Function 0108A2D2 Relevance: 1.6, APIs: 1, Instructions: 61COMMON

Download Yara Rule

APIs

SetErrorMode.KERNELBASE(?), ref: 0108A330

Memory Dump Source

Source File: 00000000.00000002.4405597889.000000000108A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0108A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_108a000_xbOnlYALvtUq.jbxd

Similarity

API ID: ErrorMode
String ID:
API String ID: 2340568224-0
Opcode ID: 7b14476c9a9c1f93888aa8526fcdfb53e73e09815216f7b74bc0ed98f57d3738
Instruction ID: 993263a1ab0ff12e85abec78f0349cf3622377a3f48ef689bd7b75749599eb0d
Opcode Fuzzy Hash: 7b14476c9a9c1f93888aa8526fcdfb53e73e09815216f7b74bc0ed98f57d3738
Instruction Fuzzy Hash: 1A112C7150E3C09FD7138B259C54A52BFB49F47620F0980DBEDC48F5A3D2655808DB62

Uniqueness

Uniqueness Score: -1.00%

Function 0108BCE2 Relevance: 1.6, APIs: 1, Instructions: 60fileCOMMON

Download Yara Rule

APIs

ReadFile.KERNELBASE(?,00000E24,3DE27A2D,00000000,00000000,00000000,00000000), ref: 0108BD41

Memory Dump Source

Source File: 00000000.00000002.4405597889.000000000108A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0108A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_108a000_xbOnlYALvtUq.jbxd

Similarity

API ID: FileRead
String ID:
API String ID: 2738559852-0
Opcode ID: 0e3e3a783de8ac7eb7771b22e2917edbd1a58868d48784955a136d1e2ee179cf
Instruction ID: d28dccbd707eb5350f699ce14f6c88a6d829cde69858c3e2e5c6e41f658e06ec
Opcode Fuzzy Hash: 0e3e3a783de8ac7eb7771b22e2917edbd1a58868d48784955a136d1e2ee179cf
Instruction Fuzzy Hash: 3A110471504300AFEB21DF51CC40FAAFBE8EF14324F04845AED859B652D370E4088BB2

Uniqueness

Uniqueness Score: -1.00%

Function 012103BE Relevance: 1.6, APIs: 1, Instructions: 59COMMON

Download Yara Rule

APIs

GetComputerNameW.KERNEL32(?,00000E24,?,?), ref: 0121043A

Memory Dump Source

Source File: 00000000.00000002.4405864529.0000000001210000.00000040.00000800.00020000.00000000.sdmp, Offset: 01210000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1210000_xbOnlYALvtUq.jbxd

Similarity

API ID: ComputerName
String ID:
API String ID: 3545744682-0
Opcode ID: f7bac245f625bebad969bbbc43164e2dc67ff74363a7e177e74157c3dc428bba
Instruction ID: e9d5e3e91b6f9cff20ff9a484534c75b64938e6c870f3688f3c040360a141b4f
Opcode Fuzzy Hash: f7bac245f625bebad969bbbc43164e2dc67ff74363a7e177e74157c3dc428bba
Instruction Fuzzy Hash: 0F11C8B15093806FD315DB25CC45F26FFB4EF86620F09818FE8489B693D625B915CBA2

Uniqueness

Uniqueness Score: -1.00%

Function 01212332 Relevance: 1.6, APIs: 1, Instructions: 58COMMON

Download Yara Rule

APIs

ioctlsocket.WS2_32(?,00000E24,3DE27A2D,00000000,00000000,00000000,00000000), ref: 0121238B

Memory Dump Source

Source File: 00000000.00000002.4405864529.0000000001210000.00000040.00000800.00020000.00000000.sdmp, Offset: 01210000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1210000_xbOnlYALvtUq.jbxd

Similarity

API ID: ioctlsocket
String ID:
API String ID: 3577187118-0
Opcode ID: 2b59222ea393288a90ce05a7b90617bbde775adb523c1ebaf4ebaae579bc25d7
Instruction ID: 2a75d96ea1e4512a11cfca594c5df523fa0b1db6f0574ea3a29ac8be53a57bee
Opcode Fuzzy Hash: 2b59222ea393288a90ce05a7b90617bbde775adb523c1ebaf4ebaae579bc25d7
Instruction Fuzzy Hash: DF11CE71500204AFEB21CF55DC84BAAFBE8EF24324F14846AEE059B646D374E4088AB1

Uniqueness

Uniqueness Score: -1.00%

Function 01214392 Relevance: 1.6, APIs: 1, Instructions: 58networkCOMMON

Download Yara Rule

APIs

WSAEventSelect.WS2_32(?,00000E24,3DE27A2D,00000000,00000000,00000000,00000000), ref: 012143EB

Memory Dump Source

Source File: 00000000.00000002.4405864529.0000000001210000.00000040.00000800.00020000.00000000.sdmp, Offset: 01210000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1210000_xbOnlYALvtUq.jbxd

Similarity

API ID: EventSelect
String ID:
API String ID: 31538577-0
Opcode ID: 2b59222ea393288a90ce05a7b90617bbde775adb523c1ebaf4ebaae579bc25d7
Instruction ID: 01667fc7d0ab2d0c9f4361541cd142899b8c4ac89c278dcd7bfc3148f3fcf202
Opcode Fuzzy Hash: 2b59222ea393288a90ce05a7b90617bbde775adb523c1ebaf4ebaae579bc25d7
Instruction Fuzzy Hash: 3511E071500244AFEB21DF55DC84FA6FBE8EF24324F14C46AEE089B642D374E4088AB2

Uniqueness

Uniqueness Score: -1.00%

Function 012109C2 Relevance: 1.6, APIs: 1, Instructions: 57COMMON

Download Yara Rule

APIs

shutdown.WS2_32(?,00000E24,3DE27A2D,00000000,00000000,00000000,00000000), ref: 01210A18

Memory Dump Source

Source File: 00000000.00000002.4405864529.0000000001210000.00000040.00000800.00020000.00000000.sdmp, Offset: 01210000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1210000_xbOnlYALvtUq.jbxd

Similarity

API ID: shutdown
String ID:
API String ID: 2510479042-0
Opcode ID: 90171707723fa74690220f0cb341a729d7c37b54f1493856b3495218455899b3
Instruction ID: 24475ae9ceb8b760d525eb1fc91f359f70873f89fdecfc5b8025e1e0d3dba8ee
Opcode Fuzzy Hash: 90171707723fa74690220f0cb341a729d7c37b54f1493856b3495218455899b3
Instruction Fuzzy Hash: F4110272500204AFEB11CF15CC84BAAFBE8EF25324F04C4AAEE049F242D374E4488BB5

Uniqueness

Uniqueness Score: -1.00%

Function 012113AA Relevance: 1.6, APIs: 1, Instructions: 56libraryCOMMON

Download Yara Rule

APIs

LoadLibraryA.KERNELBASE(?,00000E24), ref: 01211413

Memory Dump Source

Source File: 00000000.00000002.4405864529.0000000001210000.00000040.00000800.00020000.00000000.sdmp, Offset: 01210000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1210000_xbOnlYALvtUq.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: 63493bb052d15a442424985308c9a89e3090176c6134e633206b8829aca53d7b
Instruction ID: b84e9b4f3c60f46e292929dce4ebeb24cc522025b1b99fb24f390a1c948674e8
Opcode Fuzzy Hash: 63493bb052d15a442424985308c9a89e3090176c6134e633206b8829aca53d7b
Instruction Fuzzy Hash: 7A112571510200AEE721DB15DC41FB6FBE8DF24B24F04C09AEE045B786D3B4E5588AA2

Uniqueness

Uniqueness Score: -1.00%

Function 0108A720 Relevance: 1.6, APIs: 1, Instructions: 56COMMON

Download Yara Rule

APIs

FindCloseChangeNotification.KERNELBASE(?), ref: 0108A780

Memory Dump Source

Source File: 00000000.00000002.4405597889.000000000108A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0108A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_108a000_xbOnlYALvtUq.jbxd

Similarity

API ID: ChangeCloseFindNotification
String ID:
API String ID: 2591292051-0
Opcode ID: c37212cc3b7f954166cceae54fc7eef90caa2cfbba020dbde92abf5d50caea0f
Instruction ID: 40ffaa40b4b0d1bca5c8576eb399e189af10323cfc144e94b140b726e8880970
Opcode Fuzzy Hash: c37212cc3b7f954166cceae54fc7eef90caa2cfbba020dbde92abf5d50caea0f
Instruction Fuzzy Hash: C81191B15093849FD712CF65DD85B52BFB8EF46220F0884EBED858B653D375A808CB61

Uniqueness

Uniqueness Score: -1.00%

Function 0121240E Relevance: 1.6, APIs: 1, Instructions: 55COMMON

Download Yara Rule

APIs

select.WS2_32(?,?,?,?,?), ref: 01212464

Memory Dump Source

Source File: 00000000.00000002.4405864529.0000000001210000.00000040.00000800.00020000.00000000.sdmp, Offset: 01210000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1210000_xbOnlYALvtUq.jbxd

Similarity

API ID: select
String ID:
API String ID: 1274211008-0
Opcode ID: afef4388f9fc769ff4dc79d9b4197cd0a980ef29457f8c4995a4b2edf2deca26
Instruction ID: a57da5751b8e95a5daeaa3b53a9866e8481dd8d232556d48c151e09336bca047
Opcode Fuzzy Hash: afef4388f9fc769ff4dc79d9b4197cd0a980ef29457f8c4995a4b2edf2deca26
Instruction Fuzzy Hash: D1116D75610244DFEB20CF19D884B52FBF8EF18710F1884AAEE49CB656D374E408CB61

Uniqueness

Uniqueness Score: -1.00%

Function 0108ABC1 Relevance: 1.6, APIs: 1, Instructions: 55comCOMMON

Download Yara Rule

APIs

OleInitialize.OLE32(?), ref: 0108AC20

Memory Dump Source

Source File: 00000000.00000002.4405597889.000000000108A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0108A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_108a000_xbOnlYALvtUq.jbxd

Similarity

API ID: Initialize
String ID:
API String ID: 2538663250-0
Opcode ID: 9a70969f5dd0551167617589d18d71ef663a7152b5434e21fc9ba300f5dd6f4f
Instruction ID: 8f59e8284835ee2a57e442affd7f9561738b9b5296979411f3be82303c9c3b3a
Opcode Fuzzy Hash: 9a70969f5dd0551167617589d18d71ef663a7152b5434e21fc9ba300f5dd6f4f
Instruction Fuzzy Hash: 13112E715093C49FDB12CB65D844A52BFF4EF46220F0984DBDD858F563C275A848CB61

Uniqueness

Uniqueness Score: -1.00%

Function 0108A078 Relevance: 1.6, APIs: 1, Instructions: 54networkCOMMON

Download Yara Rule

APIs

send.WS2_32(?,?,?,?), ref: 0108A0D5

Memory Dump Source

Source File: 00000000.00000002.4405597889.000000000108A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0108A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_108a000_xbOnlYALvtUq.jbxd

Similarity

API ID: send
String ID:
API String ID: 2809346765-0
Opcode ID: 87b4549fff24c5557afeaa706834607e93172846196718f0bdaff0dd3d6d85b9
Instruction ID: 2b3d405016c8a57a65067fb6f06fbbd4cdc7e8b874b8e6021703085737f51eab
Opcode Fuzzy Hash: 87b4549fff24c5557afeaa706834607e93172846196718f0bdaff0dd3d6d85b9
Instruction Fuzzy Hash: 8F116D71509780AFDB22CF25DC44B52FFB4EF46224F0888DEED858B553D275A418CB62

Uniqueness

Uniqueness Score: -1.00%

Function 012124E2 Relevance: 1.6, APIs: 1, Instructions: 53COMMON

Download Yara Rule

APIs

LookupPrivilegeValueW.ADVAPI32(?,?,?), ref: 0121252A

Memory Dump Source

Source File: 00000000.00000002.4405864529.0000000001210000.00000040.00000800.00020000.00000000.sdmp, Offset: 01210000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1210000_xbOnlYALvtUq.jbxd

Similarity

API ID: LookupPrivilegeValue
String ID:
API String ID: 3899507212-0
Opcode ID: cb2082a34b5619292ff462d707c47e57a8bfd46b73ea9b1423da73f4e92fec66
Instruction ID: c19cb4ab43dc36915ca38b504b9b6d89c2a27252d1f0bd60104f4ccc987dc2ba
Opcode Fuzzy Hash: cb2082a34b5619292ff462d707c47e57a8bfd46b73ea9b1423da73f4e92fec66
Instruction Fuzzy Hash: 6311A5B1A10201DFDB54CF29E895B56FBE8EF14620F18C46AED06CB746D770E404CA61

Uniqueness

Uniqueness Score: -1.00%

Function 0108BA22 Relevance: 1.6, APIs: 1, Instructions: 52COMMON

Download Yara Rule

APIs

GetFileType.KERNELBASE(?,00000E24,3DE27A2D,00000000,00000000,00000000,00000000), ref: 0108BA75

Memory Dump Source

Source File: 00000000.00000002.4405597889.000000000108A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0108A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_108a000_xbOnlYALvtUq.jbxd

Similarity

API ID: FileType
String ID:
API String ID: 3081899298-0
Opcode ID: e1f4fef0f956df58de2e1a2de6f20ee1efa6c19759df0ede0abb7eab828c1900
Instruction ID: 3a32adf69fac7cb4fc846b0687f311ea68a8b34b8c27f29d3b5638c272f93439
Opcode Fuzzy Hash: e1f4fef0f956df58de2e1a2de6f20ee1efa6c19759df0ede0abb7eab828c1900
Instruction Fuzzy Hash: B301D271504200AEE720DB05DC84FAAFBE8DF65625F08C09AED849B742D774E508CAB5

Uniqueness

Uniqueness Score: -1.00%

Function 01210F56 Relevance: 1.5, APIs: 1, Instructions: 49networkCOMMON

Download Yara Rule

APIs

WSAConnect.WS2_32(?,?,?,?,?,?,?), ref: 01210FA2

Memory Dump Source

Source File: 00000000.00000002.4405864529.0000000001210000.00000040.00000800.00020000.00000000.sdmp, Offset: 01210000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1210000_xbOnlYALvtUq.jbxd

Similarity

API ID: Connect
String ID:
API String ID: 3144859779-0
Opcode ID: 36af3e5e31493a9c50fc0c7eccc0e72f3c644aa0f5f9959bc9b1aabead6912ca
Instruction ID: d8586a64ce843511f4a13ea3ddb1a2e5cb7ae810493cad16400b3263add8bb5c
Opcode Fuzzy Hash: 36af3e5e31493a9c50fc0c7eccc0e72f3c644aa0f5f9959bc9b1aabead6912ca
Instruction Fuzzy Hash: 7A11CE715102049FDB20CF55C845BA2FBE4EF18320F08C4AAEE498B626D771E458DF62

Uniqueness

Uniqueness Score: -1.00%

Function 0121111E Relevance: 1.5, APIs: 1, Instructions: 47COMMON

Download Yara Rule

APIs

GetVolumeInformationA.KERNELBASE(?,00000E24,?,?), ref: 0121116E

Memory Dump Source

Source File: 00000000.00000002.4405864529.0000000001210000.00000040.00000800.00020000.00000000.sdmp, Offset: 01210000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1210000_xbOnlYALvtUq.jbxd

Similarity

API ID: InformationVolume
String ID:
API String ID: 2039140958-0
Opcode ID: b6c334f2718261ad4af7d4f0b5f4b2007281d4ac684ca80f2caa55c0bcd073a3
Instruction ID: 3968995b6cce3d163fb66ce4690bd4aab7d2a2a3b0071d4ca8eb950974b8a873
Opcode Fuzzy Hash: b6c334f2718261ad4af7d4f0b5f4b2007281d4ac684ca80f2caa55c0bcd073a3
Instruction Fuzzy Hash: 02015EB1600600AFD314DF16DC45B66FBA8EB88A20F14855AED099B742D731F915CBE5

Uniqueness

Uniqueness Score: -1.00%

Function 012131F2 Relevance: 1.5, APIs: 1, Instructions: 46libraryCOMMON

Download Yara Rule

APIs

LoadLibraryShim.MSCOREE(?,?,?,?), ref: 0121323D

Memory Dump Source

Source File: 00000000.00000002.4405864529.0000000001210000.00000040.00000800.00020000.00000000.sdmp, Offset: 01210000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1210000_xbOnlYALvtUq.jbxd

Similarity

API ID: LibraryLoadShim
String ID:
API String ID: 1475914169-0
Opcode ID: bd43d0dd958fc84a58cc95ed5ba0432b826a3bcb0a502d96215c24048d16663d
Instruction ID: 4a622b8758bc7f94751281f8602972d89048ad625cbc4f3d75f208aa759ac3a6
Opcode Fuzzy Hash: bd43d0dd958fc84a58cc95ed5ba0432b826a3bcb0a502d96215c24048d16663d
Instruction Fuzzy Hash: 4B0192716102009FDB20EF19DC45BA2FBE8FF25630F08C099DE458B756D370E818CA61

Uniqueness

Uniqueness Score: -1.00%

Function 0108AFBA Relevance: 1.5, APIs: 1, Instructions: 45COMMON

Download Yara Rule

APIs

DuplicateHandle.KERNELBASE(?,?,?,?,?,?,?), ref: 0108AFFE

Memory Dump Source

Source File: 00000000.00000002.4405597889.000000000108A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0108A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_108a000_xbOnlYALvtUq.jbxd

Similarity

API ID: DuplicateHandle
String ID:
API String ID: 3793708945-0
Opcode ID: 19b3f9e34ec2422a3d58129725522b9e07bf9db30094a59397f5d5142c3759ec
Instruction ID: e9de59253ed5bb66fd97e434934b1d756167452fc087fb3dc012fd1b334ef00c
Opcode Fuzzy Hash: 19b3f9e34ec2422a3d58129725522b9e07bf9db30094a59397f5d5142c3759ec
Instruction Fuzzy Hash: FA01AD725046009FDB21DF55D844B56FFE0EF08320F08C89EED894A652D372E018DF62

Uniqueness

Uniqueness Score: -1.00%

Function 012103EA Relevance: 1.5, APIs: 1, Instructions: 43COMMON

Download Yara Rule

APIs

GetComputerNameW.KERNEL32(?,00000E24,?,?), ref: 0121043A

Memory Dump Source

Source File: 00000000.00000002.4405864529.0000000001210000.00000040.00000800.00020000.00000000.sdmp, Offset: 01210000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1210000_xbOnlYALvtUq.jbxd

Similarity

API ID: ComputerName
String ID:
API String ID: 3545744682-0
Opcode ID: 4ee9316a4cb987d1e55ff6bc446f6e482a5acec84c754dec044db9914d8d7843
Instruction ID: bc4098e7d7e0545a821df5507ab0c62b35957f4d9f777b4cdf79f73213522787
Opcode Fuzzy Hash: 4ee9316a4cb987d1e55ff6bc446f6e482a5acec84c754dec044db9914d8d7843
Instruction Fuzzy Hash: 75016271500600AFD314DF16DC46B66FBE8FB88A20F14815AED089BB41D775F915CBE5

Uniqueness

Uniqueness Score: -1.00%

Function 0108BEAE Relevance: 1.5, APIs: 1, Instructions: 43registryCOMMON

Download Yara Rule

APIs

RegQueryValueExW.KERNELBASE(?,00000E24,?,?), ref: 0108BEFE

Memory Dump Source

Source File: 00000000.00000002.4405597889.000000000108A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0108A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_108a000_xbOnlYALvtUq.jbxd

Similarity

API ID: QueryValue
String ID:
API String ID: 3660427363-0
Opcode ID: f25bc7af363ff985de8bf07dcf500e4e5d838f809433d0bba147b3d12249e981
Instruction ID: 1e0088bea23995efef7faa5a1d607a91057c45068a368a86df02a52a82a1619a
Opcode Fuzzy Hash: f25bc7af363ff985de8bf07dcf500e4e5d838f809433d0bba147b3d12249e981
Instruction Fuzzy Hash: 16016271500600AFD314DF16DC46B66FBE8FB88A20F14815AED089BB42D771F915CBE5

Uniqueness

Uniqueness Score: -1.00%

Function 0108A74E Relevance: 1.5, APIs: 1, Instructions: 43COMMON

Download Yara Rule

APIs

FindCloseChangeNotification.KERNELBASE(?), ref: 0108A780

Memory Dump Source

Source File: 00000000.00000002.4405597889.000000000108A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0108A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_108a000_xbOnlYALvtUq.jbxd

Similarity

API ID: ChangeCloseFindNotification
String ID:
API String ID: 2591292051-0
Opcode ID: a28a1715aca181db8ddd07f80eef863de33433d61f9eb0c83c268acd94f60c7b
Instruction ID: a4cff49285fb439167b941cc35708cb6d5c7428cb20c70b33881f3686e805972
Opcode Fuzzy Hash: a28a1715aca181db8ddd07f80eef863de33433d61f9eb0c83c268acd94f60c7b
Instruction Fuzzy Hash: 13017175604240CFDB50EF15D985766FBE4EF05620F08C4ABDD868B652D375E404DAA1

Uniqueness

Uniqueness Score: -1.00%

Function 0108A09A Relevance: 1.5, APIs: 1, Instructions: 42networkCOMMON

Download Yara Rule

APIs

send.WS2_32(?,?,?,?), ref: 0108A0D5

Memory Dump Source

Source File: 00000000.00000002.4405597889.000000000108A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0108A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_108a000_xbOnlYALvtUq.jbxd

Similarity

API ID: send
String ID:
API String ID: 2809346765-0
Opcode ID: 8d3ecf21cd7d42ab6281167c46c125ebb058f163c884c04522a847b82ea7294b
Instruction ID: 8633355787a3be94fd80da96d4ca92ff13f9b4fd7c99fd0ebc7edcd86526429b
Opcode Fuzzy Hash: 8d3ecf21cd7d42ab6281167c46c125ebb058f163c884c04522a847b82ea7294b
Instruction Fuzzy Hash: C901CC71604640CFDB60DF15D844B65FBE0EF04320F08C49AED898BA52D371E058CF62

Uniqueness

Uniqueness Score: -1.00%

Function 0108ABEE Relevance: 1.5, APIs: 1, Instructions: 39comCOMMON

Download Yara Rule

APIs

OleInitialize.OLE32(?), ref: 0108AC20

Memory Dump Source

Source File: 00000000.00000002.4405597889.000000000108A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0108A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_108a000_xbOnlYALvtUq.jbxd

Similarity

API ID: Initialize
String ID:
API String ID: 2538663250-0
Opcode ID: c45a6a1d55a38221fde1d6bf9608026ad68f79a1a6e12e8c626c4483e8a8baff
Instruction ID: f6a9651f17b103ee4d18c9e65d4103bb1c2eefd03cfd7abd383d739d65c8c39e
Opcode Fuzzy Hash: c45a6a1d55a38221fde1d6bf9608026ad68f79a1a6e12e8c626c4483e8a8baff
Instruction Fuzzy Hash: C701AD71A08248CFDB50DF15D884766FBE4EF05220F08C4ABDD898F742D379E448CAA2

Uniqueness

Uniqueness Score: -1.00%

Function 0108A2FE Relevance: 1.5, APIs: 1, Instructions: 35COMMON

Download Yara Rule

APIs

SetErrorMode.KERNELBASE(?), ref: 0108A330

Memory Dump Source

Source File: 00000000.00000002.4405597889.000000000108A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0108A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_108a000_xbOnlYALvtUq.jbxd

Similarity

API ID: ErrorMode
String ID:
API String ID: 2340568224-0
Opcode ID: 08a5375dbc8d12313c9103ded1587d73948dec388dae5a82c3d5be22f85d3ad3
Instruction ID: 83a7c60a538d9e8c9d5f4413bbcc402f7f95b0944b21b117d290b87ea53a2f09
Opcode Fuzzy Hash: 08a5375dbc8d12313c9103ded1587d73948dec388dae5a82c3d5be22f85d3ad3
Instruction Fuzzy Hash: 41F08C75A08240CFDB50DF09D884765FBE4EF05620F08C09AED894BB52D2B5E408CAA2

Uniqueness

Uniqueness Score: -1.00%

Function 055616B0 Relevance: .1, Instructions: 75COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4407093181.0000000005560000.00000040.00000800.00020000.00000000.sdmp, Offset: 05560000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5560000_xbOnlYALvtUq.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 88b4c62d5de230a0ecf8b0ad927181b9ed957fd0a095ff19c265289a16cc7764
Instruction ID: f0da7d2f15629756b6d9e020692d2c7df8cd3deedb7c64095e28f045ea660fb0
Opcode Fuzzy Hash: 88b4c62d5de230a0ecf8b0ad927181b9ed957fd0a095ff19c265289a16cc7764
Instruction Fuzzy Hash: 4E21F9B55083419FC301CF29D841A5BFFF4EB89664F05899EF888D7212E235E944CF62

Uniqueness

Uniqueness Score: -1.00%

Function 011F07DC Relevance: .1, Instructions: 65COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4405839246.00000000011F0000.00000040.00000020.00020000.00000000.sdmp, Offset: 011F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_11f0000_xbOnlYALvtUq.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8e4831bf1aa9f0bae595ca6c11656b3b15ac207f6aaad2c9a0a671e227d2edc3
Instruction ID: 0b6a4da4f11541e259915e1e6920f37b8c3f0f0b3d9689a29df06c46a6e6db59
Opcode Fuzzy Hash: 8e4831bf1aa9f0bae595ca6c11656b3b15ac207f6aaad2c9a0a671e227d2edc3
Instruction Fuzzy Hash: 9121803150D3C08FCB078B20C850B95BFB1AF47214F1985DED4858B663C33A8846DB52

Uniqueness

Uniqueness Score: -1.00%

Function 05561E30 Relevance: .1, Instructions: 60COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4407093181.0000000005560000.00000040.00000800.00020000.00000000.sdmp, Offset: 05560000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5560000_xbOnlYALvtUq.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 809dcef1369d34c323e4018fd89ea97340c61e04dcf10031d1a904130f3117e9
Instruction ID: 4ba8191bd6f102031062c287d281283815073da6e5c336ff50ebd9c6338b7f1a
Opcode Fuzzy Hash: 809dcef1369d34c323e4018fd89ea97340c61e04dcf10031d1a904130f3117e9
Instruction Fuzzy Hash: 1511BAB5908341AFD340CF19D840A5BFBE4FB98664F04895EF998D7311D231E9148FA2

Uniqueness

Uniqueness Score: -1.00%

Function 011F0814 Relevance: .1, Instructions: 59COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4405839246.00000000011F0000.00000040.00000020.00020000.00000000.sdmp, Offset: 011F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_11f0000_xbOnlYALvtUq.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7058faf1061ff65d5365dc29cf809a93b6ae04d9e8916947b52242e2c2adfbd0
Instruction ID: f9a534842b1bdf444398ddfc08f3dfebf9b8e4e2df7a1c8a84522228d807f968
Opcode Fuzzy Hash: 7058faf1061ff65d5365dc29cf809a93b6ae04d9e8916947b52242e2c2adfbd0
Instruction Fuzzy Hash: 4911E430A042809FD719CB14D940B56BBE6AB8D708F24C9ACF6490BB43C777D812CA81

Uniqueness

Uniqueness Score: -1.00%

Function 0109AFBC Relevance: .1, Instructions: 52COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4405619241.0000000001092000.00000040.00000800.00020000.00000000.sdmp, Offset: 01092000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1092000_xbOnlYALvtUq.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b9e25aabe276b578eba88f2a09300e8b53a93e85635cfff99eee05713528d843
Instruction ID: 883db9c95d90a3de06b4ad8ae92a888a3e18363c645da5369490976cc27d7f1e
Opcode Fuzzy Hash: b9e25aabe276b578eba88f2a09300e8b53a93e85635cfff99eee05713528d843
Instruction Fuzzy Hash: AC11BAB5908301AFD350CF09DC41E5BFBE8EB98660F04C95EF95997311D271E9188FA2

Uniqueness

Uniqueness Score: -1.00%

Function 05561CD4 Relevance: .1, Instructions: 52COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4407093181.0000000005560000.00000040.00000800.00020000.00000000.sdmp, Offset: 05560000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5560000_xbOnlYALvtUq.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0d9e69cd279a9e64901f1e9649d937b5fe07ed008dd647d7d6a025ea183320db
Instruction ID: e53a58446a61daec27efe97acfface48c862c83fcbd4ac47e23b92d2f4a11eac
Opcode Fuzzy Hash: 0d9e69cd279a9e64901f1e9649d937b5fe07ed008dd647d7d6a025ea183320db
Instruction Fuzzy Hash: C011FAB5908301AFD350CF09DC80E5BFBE8EB88660F04C81EF95897311D231E9088FA2

Uniqueness

Uniqueness Score: -1.00%

Function 05563170 Relevance: .0, Instructions: 48COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4407093181.0000000005560000.00000040.00000800.00020000.00000000.sdmp, Offset: 05560000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5560000_xbOnlYALvtUq.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0135d8013d95754bf8bd4c0d134c4a28f4ac11815205b5478f11854a0b90d29d
Instruction ID: d42cc6f0c2f9d425717a7957bbc5c37810a21ec646272c823ac8c656c66db87e
Opcode Fuzzy Hash: 0135d8013d95754bf8bd4c0d134c4a28f4ac11815205b5478f11854a0b90d29d
Instruction Fuzzy Hash: 1F0140B65043406FD310CF05DC41E57FBE8EB85660F04C95EF94897311D271E918CBA2

Uniqueness

Uniqueness Score: -1.00%

Function 011F05E0 Relevance: .0, Instructions: 46COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4405839246.00000000011F0000.00000040.00000020.00020000.00000000.sdmp, Offset: 011F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_11f0000_xbOnlYALvtUq.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 10912683027035b4ae26d4d2e1ebd3ebcd355005bcd4c122a4ce64f22ed0aac4
Instruction ID: d5732b953f86068220c63ca74bd97d7276cfa28384fdf614f5418c021e11210d
Opcode Fuzzy Hash: 10912683027035b4ae26d4d2e1ebd3ebcd355005bcd4c122a4ce64f22ed0aac4
Instruction Fuzzy Hash: E20186B65097845FD712CF16EC44862FFF8EB9A620709C49FEC498B652D235A908CB62

Uniqueness

Uniqueness Score: -1.00%

Function 011F08D0 Relevance: .0, Instructions: 31COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4405839246.00000000011F0000.00000040.00000020.00020000.00000000.sdmp, Offset: 011F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_11f0000_xbOnlYALvtUq.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f49e64c1c7cde23d74d22c851c89d32bf56acabb4e040a8b59e937fac7f47b6d
Instruction ID: ab3796f587e2fa022bd7f72a5a43b96274b5556a42c45de7416944525daa2ca9
Opcode Fuzzy Hash: f49e64c1c7cde23d74d22c851c89d32bf56acabb4e040a8b59e937fac7f47b6d
Instruction Fuzzy Hash: 7EF0FB35504644DFC706CF04D580B15FBA2EB89718F24CAADE94917A52C7379812DA81

Uniqueness

Uniqueness Score: -1.00%

Function 011F0606 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4405839246.00000000011F0000.00000040.00000020.00020000.00000000.sdmp, Offset: 011F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_11f0000_xbOnlYALvtUq.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b28539b63d07107ec222ea68f77864c3542c91200b40aef94700ae2c433c6c87
Instruction ID: ed1a6d56e27cbef87882742bacc259d7d69f961dace00367ac5243125862ead3
Opcode Fuzzy Hash: b28539b63d07107ec222ea68f77864c3542c91200b40aef94700ae2c433c6c87
Instruction Fuzzy Hash: 02E092B66006004B9750DF0BEC41462F7E8EB88630708C07FDC0D8B701E635B508CEA5

Uniqueness

Uniqueness Score: -1.00%

Function 0109B00B Relevance: .0, Instructions: 26COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4405619241.0000000001092000.00000040.00000800.00020000.00000000.sdmp, Offset: 01092000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1092000_xbOnlYALvtUq.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3a48a2a1bb2e52fcb3278f95a5bbff80893e549423d7329ceb7d8f06b98e0de9
Instruction ID: 8ebe022e039cbc0cca5b5554fb85c72846952b5b824099c3563ea50eb206d83c
Opcode Fuzzy Hash: 3a48a2a1bb2e52fcb3278f95a5bbff80893e549423d7329ceb7d8f06b98e0de9
Instruction Fuzzy Hash: A2E0DFF29402046BD3109F06AC46F62FB98DB54A30F08C56BED085B742E172B5148AF1

Uniqueness

Uniqueness Score: -1.00%

Function 05561747 Relevance: .0, Instructions: 26COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4407093181.0000000005560000.00000040.00000800.00020000.00000000.sdmp, Offset: 05560000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5560000_xbOnlYALvtUq.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 73748cd30ebdfb2acb78094dcf749aadfd9a04a3ce3a0a386053c78f96c65998
Instruction ID: dc6db7753a13eb27c2b04fd14be3456df24a09984014f522ea06de7833732887
Opcode Fuzzy Hash: 73748cd30ebdfb2acb78094dcf749aadfd9a04a3ce3a0a386053c78f96c65998
Instruction Fuzzy Hash: 3CE0DFF29002006BD210EF06AC46F63FBD8DB94A30F08C46BED081B702E172B614CEE1

Uniqueness

Uniqueness Score: -1.00%

Function 05561D23 Relevance: .0, Instructions: 26COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4407093181.0000000005560000.00000040.00000800.00020000.00000000.sdmp, Offset: 05560000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5560000_xbOnlYALvtUq.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7749fda7c7bac7596c640a2d3dab74c40175ab277ca738291c4b56c6a64bec1c
Instruction ID: a6e4b6d56bcf930ea736814e44c1bce7126fc1e258a5e8c10f7973846a8c7a1b
Opcode Fuzzy Hash: 7749fda7c7bac7596c640a2d3dab74c40175ab277ca738291c4b56c6a64bec1c
Instruction Fuzzy Hash: DDE0DFF2900204ABD250AF06AC86F63FBE8DB54A30F08C46BED0C1B702E172B5148AF1

Uniqueness

Uniqueness Score: -1.00%

Function 05561E9B Relevance: .0, Instructions: 26COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4407093181.0000000005560000.00000040.00000800.00020000.00000000.sdmp, Offset: 05560000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5560000_xbOnlYALvtUq.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5e494cb6c7d70126e6d7168cea75de2ccce32186159b2883b57439198978e041
Instruction ID: 54e1073a4db9ceede2ecb099543c2672a8f4e5e14fb33ab08dbbcf44ef700361
Opcode Fuzzy Hash: 5e494cb6c7d70126e6d7168cea75de2ccce32186159b2883b57439198978e041
Instruction Fuzzy Hash: 6AE0DFF29402006BD3109F06AC46FA2FBD8DB94A34F08C46BED081B742E172B5288AE1

Uniqueness

Uniqueness Score: -1.00%

Function 055631AF Relevance: .0, Instructions: 26COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4407093181.0000000005560000.00000040.00000800.00020000.00000000.sdmp, Offset: 05560000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5560000_xbOnlYALvtUq.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c200e8181392688e8860a79547ac0fe213073f95290d9d353fd6230bf2b8a5f6
Instruction ID: 39f2eb1f0ba7eb44192012c107b00df06398ebf327c5cfb912da267106eded3c
Opcode Fuzzy Hash: c200e8181392688e8860a79547ac0fe213073f95290d9d353fd6230bf2b8a5f6
Instruction Fuzzy Hash: E8E0D8F254020067D2509F069C45F62FB9CDB54930F04C557ED081B742D176B5148EF5

Uniqueness

Uniqueness Score: -1.00%

Function 010823F4 Relevance: .0, Instructions: 15COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4405587101.0000000001082000.00000040.00000800.00020000.00000000.sdmp, Offset: 01082000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1082000_xbOnlYALvtUq.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8bca7749f678aa1c8fca6cbbe8bf486d610f0d65b9c34832cac63cf3aa88fe84
Instruction ID: aa6ba8f3abe6683c9ac41634177682cdd1081f8139c3bee6c04ed6ecf9ca4195
Opcode Fuzzy Hash: 8bca7749f678aa1c8fca6cbbe8bf486d610f0d65b9c34832cac63cf3aa88fe84
Instruction Fuzzy Hash: FED02E392096C04FE322AB0CC1A4B853BE4AB60704F0A00FAA8808B763CB68D4C0C220

Uniqueness

Uniqueness Score: -1.00%

Function 010823BC Relevance: .0, Instructions: 14COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4405587101.0000000001082000.00000040.00000800.00020000.00000000.sdmp, Offset: 01082000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1082000_xbOnlYALvtUq.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1003c79afc2dc950afa317fb73763063e9d024aa7d6f45e5564ea90b475d641d
Instruction ID: 70e596f00595bf64afbf672587099723b9e55da8cf28449516dc32ca1b28433d
Opcode Fuzzy Hash: 1003c79afc2dc950afa317fb73763063e9d024aa7d6f45e5564ea90b475d641d
Instruction Fuzzy Hash: 11D05E342052814BD766EA0CC6E4F593BD4AB50B14F0684E8BC908B762C7A8D9C0CA00

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Function 011C791C Relevance: 1.4, Strings: 1, Instructions: 192COMMON

Download Yara Rule

Strings

aA{, xrefs: 011C7AD0

Memory Dump Source

Source File: 00000000.00000002.4405808531.00000000011C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 011C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_11c0000_xbOnlYALvtUq.jbxd

Similarity

API ID:
String ID: aA{
API String ID: 0-3244006567
Opcode ID: 5541040eca6a1ba369908fad717dbee24e41f9b843975f069bff54ac837015c0
Instruction ID: f632c619b0d31bba79a729cfa0d4809ed99af92179d13cb4a964f9ead3d8bcd8
Opcode Fuzzy Hash: 5541040eca6a1ba369908fad717dbee24e41f9b843975f069bff54ac837015c0
Instruction Fuzzy Hash: B0715CB1E0051A8BCB19CF9DC8905AEFBF2FF98611F288529D455E7345E770E9428F90

Uniqueness

Uniqueness Score: -1.00%

Description:	Adversaries may interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	Module: Module Load, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify access tokens to operate under a different user or system security context to perform actions and bypass access controls. Windows uses access tokens to determine the ownership of a running process. A user can manipulate access tokens to make a running process appear as though it is the child of a different process or belongs to someone other than the user that started the process. When this occurs, the process also takes on the security context associated with the new token.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Active Directory: Active Directory Object Modification, Command: Command Execution, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, User Account: User Account Metadata
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to hide configuration information within Registry keys, remove information as part of cleaning up, or as part of other techniques to aid in persistence and execution.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use methods of capturing user input to obtain credentials or collect information. During normal system usage, users often provide credentials to various different locations, such as login pages/portals or system dialog boxes. Input capture mechanisms may be transparent to the user (e.g. Credential API Hooking ) or rely on deceiving the user into providing input into what they believe to be a genuine service (e.g. Web Portal Capture ).
Tactics:	Collection, Credential Access
Data Sources:	Driver: Driver Load, File: File Modification, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report xbOnlYALvtUq.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: Njrat

Yara Signatures

Initial Sample

PCAP (Network Traffic)

Memory Dumps

Unpacked PEs

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Networking

Key, Mouse, Clipboard, Microphone and Screen Capturing

E-Banking Fraud

System Summary

Data Obfuscation

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

\Device\ConDrv

Static File Info

General

File Icon

Static PE Info

General

Entrypoint Preview

Data Directories

Sections

Resources

Imports

Network Behavior

Snort IDS Alerts

Network Port Distribution

Windows Analysis Report
xbOnlYALvtUq.exe

Function 011C22D8 Relevance: 3.9, Strings: 2, Instructions: 1370
COMMON

Function 0121063F Relevance: 1.6, APIs: 1, Instructions: 116
COMMON

Function 011C0B68 Relevance: 1.6, APIs: 1, Instructions: 110
COMMON

Function 011C0B58 Relevance: 1.6, APIs: 1, Instructions: 107
COMMON

Function 0108B8CA Relevance: 1.6, APIs: 1, Instructions: 103
fileCOMMON

Function 01212136 Relevance: 1.6, APIs: 1, Instructions: 99
registryCOMMON

Function 0108BE37 Relevance: 1.6, APIs: 1, Instructions: 98
registryCOMMON

Function 0108A7C7 Relevance: 1.6, APIs: 1, Instructions: 95
registryCOMMON

Function 01210D54 Relevance: 1.6, APIs: 1, Instructions: 93
COMMON

Function 01210C4C Relevance: 1.6, APIs: 1, Instructions: 92
timeCOMMON

Function 01210548 Relevance: 1.6, APIs: 1, Instructions: 89
COMMON

Function 0108A612 Relevance: 1.6, APIs: 1, Instructions: 89
synchronizationCOMMON

Function 01212162 Relevance: 1.6, APIs: 1, Instructions: 86
registryCOMMON

Function 0108A8C1 Relevance: 1.6, APIs: 1, Instructions: 86
windowtimeCOMMON

Function 0108A361 Relevance: 1.6, APIs: 1, Instructions: 85
registryCOMMON