Edit tour

Windows Analysis Report
4xKDL5YCfQ.exe

Overview

General Information

Sample name:	4xKDL5YCfQ.exe renamed because original name is a hash value
Original sample name:	0cd936fb66bde4378c21bb48fd093ff8.exe
Analysis ID:	1387981
MD5:	0cd936fb66bde4378c21bb48fd093ff8
SHA1:	b0bed981a0f86cc96c7b639f1c4ba34dadd93750
SHA256:	f35bef5e2663a600079350fe75ea98ce7288989dc8e3bb415a93d4ca85e80989
Tags:	exenjratRAT
Infos:

Detection

Njrat

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Antivirus detection for dropped file

Found malware configuration

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for domain / URL

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Snort IDS alert for network traffic

Yara detected Njrat

.NET source code contains potential unpacker

.NET source code references suspicious native API functions

C2 URLs / IPs found in malware configuration

Contains functionality to log keystrokes (.Net Source)

Machine Learning detection for dropped file

Machine Learning detection for sample

Modifies the windows firewall

Uses netsh to modify the Windows network and firewall settings

Abnormal high CPU Usage

Allocates memory with a write watch (potentially for evading sandboxes)

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Detected TCP or UDP traffic on non-standard ports

Drops PE files

Enables debug privileges

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

May infect USB drives

May sleep (evasive loops) to hinder dynamic analysis

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sample file is different than original file name gathered from version info

Sigma detected: Suspicious Process Patterns NTDS.DIT Exfil

Tries to load missing DLLs

Uses 32bit PE files

Yara signature match

Classification

Process Tree

System is w10x64

4xKDL5YCfQ.exe (PID: 6680 cmdline: C:\Users\user\Desktop\4xKDL5YCfQ.exe MD5: 0CD936FB66BDE4378C21BB48FD093FF8)

AnubisSearchFree.exe (PID: 5804 cmdline: "C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe" MD5: 0CD936FB66BDE4378C21BB48FD093FF8)

netsh.exe (PID: 1228 cmdline: netsh firewall add allowedprogram "C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe" "AnubisSearchFree.exe" ENABLE MD5: 4E89A1A088BE715D6C946E55AB07C7DF)

conhost.exe (PID: 3664 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
NjRAT	RedPacket Security describes NJRat as "a remote access trojan (RAT) has capabilities to log keystrokes, access the victim's camera, steal credentials stored in browsers, open a reverse shell, upload/download files, view the victim's desktop, perform process, file, and registry manipulations, and capabilities to let the attacker update, uninstall, restart, close, disconnect the RAT and rename its campaign ID. Through the Command & Control (CnC) server software, the attacker has capabilities to create and configure the malware to spread through USB drives."It is supposedly popular with actors in the Middle East. Similar to other RATs, many leaked builders may be backdoored.	AQUATIC PANDA Earth Lusca Operation C-Major The Gorgon Group	http://blog.trendmicro.com/trendlabs-security-intelligence/new-rats-emerge-from-leaked-njw0rm-source-code/ http://blogs.360.cn/post/analysis-of-apt-c-37.html http://threatgeek.typepad.com/files/fta-1009---njrat-uncovered-1.pdf https://about.fb.com/news/2021/04/taking-action-against-hackers-in-palestine/ https://asec.ahnlab.com/1369	https://malpedia.caad.fkie.fraunhofer.de/details/win.njrat

Malware Configuration

Threatname: Njrat

{"Host": "2.tcp.eu.ngrok.io", "Port": "10445", "Version": "im523", "Campaign ID": "HacKed", "Install Name": "AnubisSearchFree.exe", "Install Dir": "TEMP"}

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
4xKDL5YCfQ.exe	JoeSecurity_Njrat	Yara detected Njrat	Joe Security
4xKDL5YCfQ.exe	Windows_Trojan_Njrat_30f3c220	unknown	unknown	0x64c1:$a1: get_Registry 0x7f10:$a3: Download ERROR 0x8202:$a5: netsh firewall delete allowedprogram "
4xKDL5YCfQ.exe	njrat1	Identify njRat	Brian Wallace @botnet_hunter	0x80f8:$a1: netsh firewall add allowedprogram 0x82f2:$b1: [TAP] 0x8298:$b2: & exit 0x8264:$c1: md.exe /k ping 0 & del
4xKDL5YCfQ.exe	MALWARE_Win_NjRAT	Detects NjRAT / Bladabindi	ditekSHen	0x8202:$s1: netsh firewall delete allowedprogram 0x80f8:$s2: netsh firewall add allowedprogram 0x8262:$s3: 63 00 6D 00 64 00 2E 00 65 00 78 00 65 00 20 00 2F 00 6B 00 20 00 70 00 69 00 6E 00 67 0x7eec:$s4: Execute ERROR 0x7f4c:$s4: Execute ERROR 0x7f10:$s5: Download ERROR 0x82a8:$s6: [kl]

Dropped Files

Source	Rule	Description	Author	Strings
C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	JoeSecurity_Njrat	Yara detected Njrat	Joe Security
C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Windows_Trojan_Njrat_30f3c220	unknown	unknown	0x64c1:$a1: get_Registry 0x7f10:$a3: Download ERROR 0x8202:$a5: netsh firewall delete allowedprogram "
C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	njrat1	Identify njRat	Brian Wallace @botnet_hunter	0x80f8:$a1: netsh firewall add allowedprogram 0x82f2:$b1: [TAP] 0x8298:$b2: & exit 0x8264:$c1: md.exe /k ping 0 & del
C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	MALWARE_Win_NjRAT	Detects NjRAT / Bladabindi	ditekSHen	0x8202:$s1: netsh firewall delete allowedprogram 0x80f8:$s2: netsh firewall add allowedprogram 0x8262:$s3: 63 00 6D 00 64 00 2E 00 65 00 78 00 65 00 20 00 2F 00 6B 00 20 00 70 00 69 00 6E 00 67 0x7eec:$s4: Execute ERROR 0x7f4c:$s4: Execute ERROR 0x7f10:$s5: Download ERROR 0x82a8:$s6: [kl]

Memory Dumps

Source	Rule	Description	Author	Strings
00000000.00000000.1609993394.0000000000E12000.00000002.00000001.01000000.00000003.sdmp	JoeSecurity_Njrat	Yara detected Njrat	Joe Security
00000000.00000000.1609993394.0000000000E12000.00000002.00000001.01000000.00000003.sdmp	Windows_Trojan_Njrat_30f3c220	unknown	unknown	0x62c1:$a1: get_Registry 0x7d10:$a3: Download ERROR 0x8002:$a5: netsh firewall delete allowedprogram "
00000000.00000000.1609993394.0000000000E12000.00000002.00000001.01000000.00000003.sdmp	njrat1	Identify njRat	Brian Wallace @botnet_hunter	0x7ef8:$a1: netsh firewall add allowedprogram 0x80f2:$b1: [TAP] 0x8098:$b2: & exit 0x8064:$c1: md.exe /k ping 0 & del
Process Memory Space: 4xKDL5YCfQ.exe PID: 6680	JoeSecurity_Njrat	Yara detected Njrat	Joe Security
Process Memory Space: AnubisSearchFree.exe PID: 5804	JoeSecurity_Njrat	Yara detected Njrat	Joe Security

Unpacked PEs

Source	Rule	Description	Author	Strings
0.0.4xKDL5YCfQ.exe.e10000.0.unpack	JoeSecurity_Njrat	Yara detected Njrat	Joe Security
0.0.4xKDL5YCfQ.exe.e10000.0.unpack	Windows_Trojan_Njrat_30f3c220	unknown	unknown	0x64c1:$a1: get_Registry 0x7f10:$a3: Download ERROR 0x8202:$a5: netsh firewall delete allowedprogram "
0.0.4xKDL5YCfQ.exe.e10000.0.unpack	njrat1	Identify njRat	Brian Wallace @botnet_hunter	0x80f8:$a1: netsh firewall add allowedprogram 0x82f2:$b1: [TAP] 0x8298:$b2: & exit 0x8264:$c1: md.exe /k ping 0 & del
0.0.4xKDL5YCfQ.exe.e10000.0.unpack	MALWARE_Win_NjRAT	Detects NjRAT / Bladabindi	ditekSHen	0x8202:$s1: netsh firewall delete allowedprogram 0x80f8:$s2: netsh firewall add allowedprogram 0x8262:$s3: 63 00 6D 00 64 00 2E 00 65 00 78 00 65 00 20 00 2F 00 6B 00 20 00 70 00 69 00 6E 00 67 0x7eec:$s4: Execute ERROR 0x7f4c:$s4: Execute ERROR 0x7f10:$s5: Download ERROR 0x82a8:$s6: [kl]

Sigma Signatures

System Summary

Sigma detected: Suspicious Process Patterns NTDS.DIT Exfil

Source: Process started

Author: Florian Roth (Nextron Systems): Data: Command: "C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe" , CommandLine: "C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe" , CommandLine|base64offset|contains: , Image: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe, NewProcessName: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe, OriginalFileName: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe, ParentCommandLine: C:\Users\user\Desktop\4xKDL5YCfQ.exe, ParentImage: C:\Users\user\Desktop\4xKDL5YCfQ.exe, ParentProcessId: 6680, ParentProcessName: 4xKDL5YCfQ.exe, ProcessCommandLine: "C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe" , ProcessId: 5804, ProcessName: AnubisSearchFree.exe

Snort Signatures

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549858104452033132 02/07/24-02:49:07.493377
SID:	2033132
Source Port:	49858
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850044104452814856 02/07/24-02:50:33.304514
SID:	2814856
Source Port:	50044
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850045104452814856 02/07/24-02:50:33.726367
SID:	2814856
Source Port:	50045
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549857104452033132 02/07/24-02:49:07.054432
SID:	2033132
Source Port:	49857
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549859104452033132 02/07/24-02:49:07.921730
SID:	2033132
Source Port:	49859
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549856104452033132 02/07/24-02:49:06.633147
SID:	2033132
Source Port:	49856
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549854104452033132 02/07/24-02:49:05.775221
SID:	2033132
Source Port:	49854
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850071104452033132 02/07/24-02:50:46.245759
SID:	2033132
Source Port:	50071
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549830104452814860 02/07/24-02:48:55.636204
SID:	2814860
Source Port:	49830
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850041104452814856 02/07/24-02:50:32.077714
SID:	2814856
Source Port:	50041
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549853104452033132 02/07/24-02:49:05.337629
SID:	2033132
Source Port:	49853
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549855104452033132 02/07/24-02:49:06.196808
SID:	2033132
Source Port:	49855
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850070104452033132 02/07/24-02:50:45.835458
SID:	2033132
Source Port:	50070
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549832104452814860 02/07/24-02:48:56.523482
SID:	2814860
Source Port:	49832
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850042104452814856 02/07/24-02:50:32.488408
SID:	2814856
Source Port:	50042
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850043104452814856 02/07/24-02:50:32.895210
SID:	2814856
Source Port:	50043
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549850104452033132 02/07/24-02:49:04.048316
SID:	2033132
Source Port:	49850
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850075104452033132 02/07/24-02:50:47.904280
SID:	2033132
Source Port:	50075
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949919104452033132 02/07/24-02:49:36.940312
SID:	2033132
Source Port:	49919
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549851104452033132 02/07/24-02:49:04.481049
SID:	2033132
Source Port:	49851
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850074104452033132 02/07/24-02:50:47.499001
SID:	2033132
Source Port:	50074
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850076104452033132 02/07/24-02:50:48.315244
SID:	2033132
Source Port:	50076
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549852104452033132 02/07/24-02:49:04.897739
SID:	2033132
Source Port:	49852
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949917104452033132 02/07/24-02:49:36.079246
SID:	2033132
Source Port:	49917
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949918104452033132 02/07/24-02:49:36.498065
SID:	2033132
Source Port:	49918
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549853104452825564 02/07/24-02:49:05.541661
SID:	2825564
Source Port:	49853
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949915104452033132 02/07/24-02:49:35.259181
SID:	2033132
Source Port:	49915
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949916104452033132 02/07/24-02:49:35.662307
SID:	2033132
Source Port:	49916
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850048104452814856 02/07/24-02:50:36.907518
SID:	2814856
Source Port:	50048
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850072104452033132 02/07/24-02:50:46.662851
SID:	2033132
Source Port:	50072
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850073104452033132 02/07/24-02:50:47.080106
SID:	2033132
Source Port:	50073
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850046104452814856 02/07/24-02:50:34.132806
SID:	2814856
Source Port:	50046
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850047104452814856 02/07/24-02:50:34.541094
SID:	2814856
Source Port:	50047
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949919104452825564 02/07/24-02:49:37.128563
SID:	2825564
Source Port:	49919
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850052104452814860 02/07/24-02:50:38.569225
SID:	2814860
Source Port:	50052
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949923104452825564 02/07/24-02:49:38.762722
SID:	2825564
Source Port:	49923
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850053104452814860 02/07/24-02:50:38.978595
SID:	2814860
Source Port:	50053
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850079104452033132 02/07/24-02:50:49.570617
SID:	2033132
Source Port:	50079
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549838104452814860 02/07/24-02:48:59.136963
SID:	2814860
Source Port:	49838
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549839104452814860 02/07/24-02:48:59.562335
SID:	2814860
Source Port:	49839
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850068104452033132 02/07/24-02:50:45.001620
SID:	2033132
Source Port:	50068
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850078104452033132 02/07/24-02:50:49.155887
SID:	2033132
Source Port:	50078
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850077104452033132 02/07/24-02:50:48.734031
SID:	2033132
Source Port:	50077
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850066104452033132 02/07/24-02:50:44.168203
SID:	2033132
Source Port:	50066
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850067104452033132 02/07/24-02:50:44.579675
SID:	2033132
Source Port:	50067
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850055104452814860 02/07/24-02:50:39.815335
SID:	2814860
Source Port:	50055
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850049104452814860 02/07/24-02:50:37.322861
SID:	2814860
Source Port:	50049
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549834104452814860 02/07/24-02:48:57.407065
SID:	2814860
Source Port:	49834
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549828104452814856 02/07/24-02:48:54.341858
SID:	2814856
Source Port:	49828
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549822104452814860 02/07/24-02:48:51.765248
SID:	2814860
Source Port:	49822
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549826104452814860 02/07/24-02:48:53.475834
SID:	2814860
Source Port:	49826
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549833104452814860 02/07/24-02:48:56.958196
SID:	2814860
Source Port:	49833
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549837104452814860 02/07/24-02:48:58.695069
SID:	2814860
Source Port:	49837
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549823104452814860 02/07/24-02:48:52.198655
SID:	2814860
Source Port:	49823
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549827104452814860 02/07/24-02:48:53.916382
SID:	2814860
Source Port:	49827
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549829104452814856 02/07/24-02:48:54.869320
SID:	2814856
Source Port:	49829
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850069104452033132 02/07/24-02:50:45.424080
SID:	2033132
Source Port:	50069
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549825104452814860 02/07/24-02:48:53.038952
SID:	2814860
Source Port:	49825
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850059104452814860 02/07/24-02:50:41.461267
SID:	2814860
Source Port:	50059
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850034104452814856 02/07/24-02:50:29.191708
SID:	2814856
Source Port:	50034
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850056104452814856 02/07/24-02:50:40.232380
SID:	2814856
Source Port:	50056
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549848104452033132 02/07/24-02:49:03.191902
SID:	2033132
Source Port:	49848
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850033104452814856 02/07/24-02:50:28.786661
SID:	2814856
Source Port:	50033
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850035104452814856 02/07/24-02:50:29.611525
SID:	2814856
Source Port:	50035
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549849104452033132 02/07/24-02:49:03.620754
SID:	2033132
Source Port:	49849
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549840104452814860 02/07/24-02:48:59.980200
SID:	2814860
Source Port:	49840
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949906104452814860 02/07/24-02:49:30.708949
SID:	2814860
Source Port:	49906
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850030104452814856 02/07/24-02:50:27.556231
SID:	2814856
Source Port:	50030
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850038104452814856 02/07/24-02:50:30.843062
SID:	2814856
Source Port:	50038
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549841104452814860 02/07/24-02:49:00.415601
SID:	2814860
Source Port:	49841
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850060104452033132 02/07/24-02:50:41.671989
SID:	2033132
Source Port:	50060
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850031104452814856 02/07/24-02:50:27.964054
SID:	2814856
Source Port:	50031
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850039104452814856 02/07/24-02:50:31.248102
SID:	2814856
Source Port:	50039
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850081104452033132 02/07/24-02:50:50.380648
SID:	2033132
Source Port:	50081
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549843104452814860 02/07/24-02:49:01.259212
SID:	2814860
Source Port:	49843
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949909104452814860 02/07/24-02:49:32.990196
SID:	2814860
Source Port:	49909
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850032104452814856 02/07/24-02:50:28.367882
SID:	2814856
Source Port:	50032
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850080104452033132 02/07/24-02:50:49.972635
SID:	2033132
Source Port:	50080
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850054104452814856 02/07/24-02:50:39.404218
SID:	2814856
Source Port:	50054
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549821104452814860 02/07/24-02:48:51.337887
SID:	2814860
Source Port:	49821
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850064104452033132 02/07/24-02:50:43.331097
SID:	2033132
Source Port:	50064
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850065104452033132 02/07/24-02:50:43.748519
SID:	2033132
Source Port:	50065
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949909104452825564 02/07/24-02:49:32.990196
SID:	2825564
Source Port:	49909
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850085104452033132 02/07/24-02:50:52.023217
SID:	2033132
Source Port:	50085
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850087104452033132 02/07/24-02:50:52.852716
SID:	2033132
Source Port:	50087
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949906104452825564 02/07/24-02:49:30.708949
SID:	2825564
Source Port:	49906
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850082104452033132 02/07/24-02:50:50.801366
SID:	2033132
Source Port:	50082
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850086104452033132 02/07/24-02:50:52.444948
SID:	2033132
Source Port:	50086
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850061104452033132 02/07/24-02:50:42.078365
SID:	2033132
Source Port:	50061
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850037104452814856 02/07/24-02:50:30.431384
SID:	2814856
Source Port:	50037
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850083104452033132 02/07/24-02:50:51.204150
SID:	2033132
Source Port:	50083
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850036104452814856 02/07/24-02:50:30.019713
SID:	2814856
Source Port:	50036
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850057104452814856 02/07/24-02:50:40.638007
SID:	2814856
Source Port:	50057
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850058104452814856 02/07/24-02:50:41.047195
SID:	2814856
Source Port:	50058
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850062104452033132 02/07/24-02:50:42.496262
SID:	2033132
Source Port:	50062
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850063104452033132 02/07/24-02:50:42.919005
SID:	2033132
Source Port:	50063
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850084104452033132 02/07/24-02:50:51.608547
SID:	2033132
Source Port:	50084
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949933104452033132 02/07/24-02:49:44.624408
SID:	2033132
Source Port:	49933
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1849997104452033132 02/07/24-02:50:12.717403
SID:	2033132
Source Port:	49997
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949911104452033132 02/07/24-02:49:33.613084
SID:	2033132
Source Port:	49911
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949912104452033132 02/07/24-02:49:34.027957
SID:	2033132
Source Port:	49912
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549842104452814856 02/07/24-02:49:00.836030
SID:	2814856
Source Port:	49842
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949932104452033132 02/07/24-02:49:44.220259
SID:	2033132
Source Port:	49932
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949934104452033132 02/07/24-02:49:45.038512
SID:	2033132
Source Port:	49934
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549820104452814856 02/07/24-02:48:50.911535
SID:	2814856
Source Port:	49820
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949931104452033132 02/07/24-02:49:43.800457
SID:	2033132
Source Port:	49931
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949935104452033132 02/07/24-02:49:45.458156
SID:	2033132
Source Port:	49935
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850050104452814860 02/07/24-02:50:37.744929
SID:	2814860
Source Port:	50050
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949908104452814856 02/07/24-02:49:32.586958
SID:	2814856
Source Port:	49908
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949910104452033132 02/07/24-02:49:33.208428
SID:	2033132
Source Port:	49910
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949913104452033132 02/07/24-02:49:34.438187
SID:	2033132
Source Port:	49913
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949914104452033132 02/07/24-02:49:34.849764
SID:	2033132
Source Port:	49914
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1849993104452825564 02/07/24-02:50:11.239915
SID:	2825564
Source Port:	49993
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1849994104452033132 02/07/24-02:50:11.460739
SID:	2033132
Source Port:	49994
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1849998104452033132 02/07/24-02:50:13.126889
SID:	2033132
Source Port:	49998
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1849995104452033132 02/07/24-02:50:11.878089
SID:	2033132
Source Port:	49995
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850059104452825564 02/07/24-02:50:41.461267
SID:	2825564
Source Port:	50059
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1849996104452033132 02/07/24-02:50:12.287962
SID:	2033132
Source Port:	49996
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949902104452814856 02/07/24-02:49:28.932787
SID:	2814856
Source Port:	49902
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949903104452814856 02/07/24-02:49:29.338901
SID:	2814856
Source Port:	49903
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949900104452814856 02/07/24-02:49:28.122200
SID:	2814856
Source Port:	49900
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949901104452814856 02/07/24-02:49:28.527146
SID:	2814856
Source Port:	49901
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949904104452814856 02/07/24-02:49:29.760991
SID:	2814856
Source Port:	49904
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949905104452814856 02/07/24-02:49:30.196933
SID:	2814856
Source Port:	49905
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850051104452814856 02/07/24-02:50:38.149842
SID:	2814856
Source Port:	50051
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949930104452033132 02/07/24-02:49:41.442521
SID:	2033132
Source Port:	49930
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1849999104452033132 02/07/24-02:50:13.547538
SID:	2033132
Source Port:	49999
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549835104452033132 02/07/24-02:48:57.643135
SID:	2033132
Source Port:	49835
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549837104452033132 02/07/24-02:48:58.492218
SID:	2033132
Source Port:	49837
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850022104452814856 02/07/24-02:50:24.197473
SID:	2814856
Source Port:	50022
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850090104452033132 02/07/24-02:50:54.090975
SID:	2033132
Source Port:	50090
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949917104452814860 02/07/24-02:49:36.283338
SID:	2814860
Source Port:	49917
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549852104452814860 02/07/24-02:49:05.100332
SID:	2814860
Source Port:	49852
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549831104452033132 02/07/24-02:48:55.885692
SID:	2033132
Source Port:	49831
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549833104452033132 02/07/24-02:48:56.755308
SID:	2033132
Source Port:	49833
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549839104452033132 02/07/24-02:48:59.362937
SID:	2033132
Source Port:	49839
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850020104452814856 02/07/24-02:50:22.497855
SID:	2814856
Source Port:	50020
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850028104452814856 02/07/24-02:50:26.715216
SID:	2814856
Source Port:	50028
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850092104452033132 02/07/24-02:50:55.021503
SID:	2033132
Source Port:	50092
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549854104452814860 02/07/24-02:49:05.977322
SID:	2814860
Source Port:	49854
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850064104452814856 02/07/24-02:50:43.529931
SID:	2814856
Source Port:	50064
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949919104452814860 02/07/24-02:49:37.128563
SID:	2814860
Source Port:	49919
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850054104452033132 02/07/24-02:50:39.207166
SID:	2033132
Source Port:	50054
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850096104452033132 02/07/24-02:50:57.115038
SID:	2033132
Source Port:	50096
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850098104452033132 02/07/24-02:50:57.940816
SID:	2033132
Source Port:	50098
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549830104452825564 02/07/24-02:48:55.636204
SID:	2825564
Source Port:	49830
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549847104452814856 02/07/24-02:49:02.969733
SID:	2814856
Source Port:	49847
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949913104452814860 02/07/24-02:49:34.640725
SID:	2814860
Source Port:	49913
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549832104452825564 02/07/24-02:48:56.523482
SID:	2825564
Source Port:	49832
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1849993104452033132 02/07/24-02:50:11.037080
SID:	2033132
Source Port:	49993
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850050104452033132 02/07/24-02:50:37.547848
SID:	2033132
Source Port:	50050
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949936104452033132 02/07/24-02:49:45.875693
SID:	2033132
Source Port:	49936
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949938104452033132 02/07/24-02:49:46.704674
SID:	2033132
Source Port:	49938
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850026104452814856 02/07/24-02:50:25.878288
SID:	2814856
Source Port:	50026
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850094104452033132 02/07/24-02:50:56.173452
SID:	2033132
Source Port:	50094
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549850104452814860 02/07/24-02:49:04.245932
SID:	2814860
Source Port:	49850
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1849991104452033132 02/07/24-02:50:10.207892
SID:	2033132
Source Port:	49991
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850052104452033132 02/07/24-02:50:38.364830
SID:	2033132
Source Port:	50052
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850055104452825564 02/07/24-02:50:39.815335
SID:	2825564
Source Port:	50055
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850068104452814856 02/07/24-02:50:45.204160
SID:	2814856
Source Port:	50068
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949915104452814860 02/07/24-02:49:35.450919
SID:	2814860
Source Port:	49915
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549762104452825563 02/07/24-02:48:10.287233
SID:	2825563
Source Port:	49762
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549849104452814860 02/07/24-02:49:03.824035
SID:	2814860
Source Port:	49849
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850024104452814860 02/07/24-02:50:25.038368
SID:	2814860
Source Port:	50024
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850076104452814860 02/07/24-02:50:48.521109
SID:	2814860
Source Port:	50076
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850089104452033132 02/07/24-02:50:53.677705
SID:	2033132
Source Port:	50089
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850056104452033132 02/07/24-02:50:40.029934
SID:	2033132
Source Port:	50056
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549805104452814856 02/07/24-02:48:44.115305
SID:	2814856
Source Port:	49805
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549816104452814856 02/07/24-02:48:49.146202
SID:	2814856
Source Port:	49816
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1849999104452825564 02/07/24-02:50:13.745445
SID:	2825564
Source Port:	49999
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549818104452814860 02/07/24-02:48:50.024449
SID:	2814860
Source Port:	49818
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850045104452033132 02/07/24-02:50:33.527392
SID:	2033132
Source Port:	50045
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850066104452814860 02/07/24-02:50:44.374037
SID:	2814860
Source Port:	50066
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549803104452814860 02/07/24-02:48:43.148172
SID:	2814860
Source Port:	49803
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549845104452814860 02/07/24-02:49:02.120134
SID:	2814860
Source Port:	49845
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549856104452814860 02/07/24-02:49:06.839273
SID:	2814860
Source Port:	49856
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949909104452033132 02/07/24-02:49:32.791578
SID:	2033132
Source Port:	49909
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549807104452814856 02/07/24-02:48:45.061200
SID:	2814856
Source Port:	49807
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549801104452814860 02/07/24-02:48:42.169194
SID:	2814860
Source Port:	49801
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850047104452033132 02/07/24-02:50:34.345787
SID:	2033132
Source Port:	50047
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850058104452033132 02/07/24-02:50:40.853884
SID:	2033132
Source Port:	50058
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549858104452814860 02/07/24-02:49:07.695494
SID:	2814860
Source Port:	49858
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850049104452033132 02/07/24-02:50:37.121450
SID:	2033132
Source Port:	50049
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549809104452814856 02/07/24-02:48:46.009426
SID:	2814856
Source Port:	49809
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1849990104452814856 02/07/24-02:50:09.995786
SID:	2814856
Source Port:	49990
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549846104452033132 02/07/24-02:49:02.352934
SID:	2033132
Source Port:	49846
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1849992104452814856 02/07/24-02:50:10.823371
SID:	2814856
Source Port:	49992
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549823104452033132 02/07/24-02:48:52.001573
SID:	2033132
Source Port:	49823
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1849994104452814856 02/07/24-02:50:11.668040
SID:	2814856
Source Port:	49994
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549842104452033132 02/07/24-02:49:00.641371
SID:	2033132
Source Port:	49842
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549844104452033132 02/07/24-02:49:01.486835
SID:	2033132
Source Port:	49844
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549821104452033132 02/07/24-02:48:51.141287
SID:	2033132
Source Port:	49821
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549861104452033132 02/07/24-02:49:08.762836
SID:	2033132
Source Port:	49861
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549840104452033132 02/07/24-02:48:59.783886
SID:	2033132
Source Port:	49840
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949907104452033132 02/07/24-02:49:32.174136
SID:	2033132
Source Port:	49907
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949928104452033132 02/07/24-02:49:40.627740
SID:	2033132
Source Port:	49928
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1849996104452814856 02/07/24-02:50:12.490498
SID:	2814856
Source Port:	49996
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549814104452814856 02/07/24-02:48:48.263023
SID:	2814856
Source Port:	49814
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949905104452033132 02/07/24-02:49:30.000845
SID:	2033132
Source Port:	49905
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949926104452033132 02/07/24-02:49:39.798677
SID:	2033132
Source Port:	49926
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549769104452033132 02/07/24-02:48:18.390783
SID:	2033132
Source Port:	49769
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549835104452814856 02/07/24-02:48:57.840648
SID:	2814856
Source Port:	49835
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949947104452033132 02/07/24-02:49:50.409417
SID:	2033132
Source Port:	49947
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949949104452033132 02/07/24-02:49:51.233092
SID:	2033132
Source Port:	49949
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549767104452033132 02/07/24-02:48:16.272040
SID:	2033132
Source Port:	49767
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549812104452814856 02/07/24-02:48:47.374073
SID:	2814856
Source Port:	49812
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850062104452814860 02/07/24-02:50:42.703326
SID:	2814860
Source Port:	50062
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949901104452033132 02/07/24-02:49:28.330936
SID:	2033132
Source Port:	49901
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549765104452033132 02/07/24-02:48:13.954944
SID:	2033132
Source Port:	49765
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949922104452033132 02/07/24-02:49:38.157634
SID:	2033132
Source Port:	49922
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850083104452814860 02/07/24-02:50:51.401366
SID:	2814860
Source Port:	50083
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549831104452814856 02/07/24-02:48:56.090287
SID:	2814856
Source Port:	49831
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949943104452033132 02/07/24-02:49:48.763561
SID:	2033132
Source Port:	49943
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949945104452033132 02/07/24-02:49:49.578565
SID:	2033132
Source Port:	49945
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949903104452033132 02/07/24-02:49:29.146311
SID:	2033132
Source Port:	49903
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949924104452033132 02/07/24-02:49:38.973947
SID:	2033132
Source Port:	49924
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949920104452033132 02/07/24-02:49:37.342196
SID:	2033132
Source Port:	49920
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549810104452814856 02/07/24-02:48:46.480690
SID:	2814856
Source Port:	49810
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549763104452033132 02/07/24-02:48:11.439131
SID:	2033132
Source Port:	49763
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949911104452814856 02/07/24-02:49:33.811739
SID:	2814856
Source Port:	49911
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949941104452033132 02/07/24-02:49:47.934265
SID:	2033132
Source Port:	49941
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850060104452814856 02/07/24-02:50:41.868827
SID:	2814856
Source Port:	50060
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850087104452814856 02/07/24-02:50:53.056053
SID:	2814856
Source Port:	50087
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549815104452033132 02/07/24-02:48:48.508015
SID:	2033132
Source Port:	49815
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549816104452033132 02/07/24-02:48:48.948310
SID:	2033132
Source Port:	49816
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850084104452814856 02/07/24-02:50:51.807975
SID:	2814856
Source Port:	50084
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549811104452033132 02/07/24-02:48:46.735319
SID:	2033132
Source Port:	49811
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549812104452033132 02/07/24-02:48:47.177959
SID:	2033132
Source Port:	49812
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549819104452033132 02/07/24-02:48:50.273994
SID:	2033132
Source Port:	49819
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949934104452814860 02/07/24-02:49:45.241871
SID:	2814860
Source Port:	49934
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949932104452814856 02/07/24-02:49:44.411663
SID:	2814856
Source Port:	49932
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850000104452814856 02/07/24-02:50:14.164492
SID:	2814856
Source Port:	50000
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949931104452814856 02/07/24-02:49:44.004924
SID:	2814856
Source Port:	49931
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949895104452814856 02/07/24-02:49:26.062778
SID:	2814856
Source Port:	49895
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850033104452033132 02/07/24-02:50:28.582142
SID:	2033132
Source Port:	50033
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949899104452814856 02/07/24-02:49:27.704276
SID:	2814856
Source Port:	49899
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949958104452033132 02/07/24-02:49:54.983046
SID:	2033132
Source Port:	49958
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949898104452814856 02/07/24-02:49:27.284715
SID:	2814856
Source Port:	49898
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549778104452033132 02/07/24-02:48:28.593841
SID:	2033132
Source Port:	49778
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549779104452033132 02/07/24-02:48:29.313533
SID:	2033132
Source Port:	49779
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850004104452814856 02/07/24-02:50:15.834310
SID:	2814856
Source Port:	50004
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949959104452033132 02/07/24-02:49:55.397974
SID:	2033132
Source Port:	49959
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850030104452033132 02/07/24-02:50:27.348658
SID:	2033132
Source Port:	50030
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850003104452814860 02/07/24-02:50:15.422780
SID:	2814860
Source Port:	50003
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850098104452814860 02/07/24-02:50:58.137933
SID:	2814860
Source Port:	50098
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850088104452814860 02/07/24-02:50:53.464249
SID:	2814860
Source Port:	50088
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850024104452033132 02/07/24-02:50:24.839243
SID:	2033132
Source Port:	50024
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850023104452033132 02/07/24-02:50:24.437778
SID:	2033132
Source Port:	50023
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850034104452033132 02/07/24-02:50:29.000898
SID:	2033132
Source Port:	50034
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949894104452814856 02/07/24-02:49:25.656002
SID:	2814856
Source Port:	49894
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850008104452814860 02/07/24-02:50:17.510094
SID:	2814860
Source Port:	50008
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850014104452814860 02/07/24-02:50:20.018716
SID:	2814860
Source Port:	50014
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949891104452814856 02/07/24-02:49:24.413314
SID:	2814856
Source Port:	49891
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949890104452814856 02/07/24-02:49:24.009118
SID:	2814856
Source Port:	49890
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850037104452033132 02/07/24-02:50:30.233046
SID:	2033132
Source Port:	50037
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850028104452033132 02/07/24-02:50:26.511918
SID:	2033132
Source Port:	50028
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549825104452033132 02/07/24-02:48:52.844145
SID:	2033132
Source Port:	49825
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850027104452033132 02/07/24-02:50:26.099883
SID:	2033132
Source Port:	50027
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850038104452033132 02/07/24-02:50:30.642970
SID:	2033132
Source Port:	50038
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549805104452033132 02/07/24-02:48:43.912874
SID:	2033132
Source Port:	49805
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549826104452033132 02/07/24-02:48:53.272042
SID:	2033132
Source Port:	49826
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850078104452814856 02/07/24-02:50:49.356981
SID:	2814856
Source Port:	50078
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850095104452814856 02/07/24-02:50:56.903060
SID:	2814856
Source Port:	50095
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850099104452814856 02/07/24-02:50:58.541482
SID:	2814856
Source Port:	50099
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549862104452814860 02/07/24-02:49:09.393118
SID:	2814860
Source Port:	49862
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850073104452814856 02/07/24-02:50:47.278520
SID:	2814856
Source Port:	50073
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850077104452814856 02/07/24-02:50:48.940188
SID:	2814856
Source Port:	50077
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549809104452033132 02/07/24-02:48:45.806302
SID:	2033132
Source Port:	49809
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949941104452814856 02/07/24-02:49:48.138377
SID:	2814856
Source Port:	49941
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949738104452033132 02/07/24-02:47:17.315680
SID:	2033132
Source Port:	49738
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549762104452814856 02/07/24-02:48:10.287233
SID:	2814856
Source Port:	49762
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850074104452814856 02/07/24-02:50:47.695749
SID:	2814856
Source Port:	50074
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850019104452814856 02/07/24-02:50:22.096086
SID:	2814856
Source Port:	50019
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549808104452033132 02/07/24-02:48:45.337106
SID:	2033132
Source Port:	49808
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549829104452033132 02/07/24-02:48:54.672349
SID:	2033132
Source Port:	49829
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949942104452814856 02/07/24-02:49:48.554918
SID:	2814856
Source Port:	49942
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850010104452814856 02/07/24-02:50:18.339175
SID:	2814856
Source Port:	50010
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850018104452814856 02/07/24-02:50:21.677947
SID:	2814856
Source Port:	50018
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850044104452033132 02/07/24-02:50:33.110701
SID:	2033132
Source Port:	50044
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949737104452033132 02/07/24-02:47:14.891580
SID:	2033132
Source Port:	49737
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949738104452825563 02/07/24-02:47:17.514360
SID:	2825563
Source Port:	49738
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949924104452814860 02/07/24-02:49:39.171160
SID:	2814860
Source Port:	49924
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949925104452814860 02/07/24-02:49:39.588379
SID:	2814860
Source Port:	49925
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549766104452814860 02/07/24-02:48:15.337524
SID:	2814860
Source Port:	49766
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549861104452814860 02/07/24-02:49:08.969367
SID:	2814860
Source Port:	49861
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949887104452814856 02/07/24-02:49:22.776608
SID:	2814856
Source Port:	49887
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850040104452033132 02/07/24-02:50:31.467260
SID:	2033132
Source Port:	50040
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850015104452814856 02/07/24-02:50:20.431093
SID:	2814856
Source Port:	50015
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850020104452033132 02/07/24-02:50:22.301434
SID:	2033132
Source Port:	50020
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949739104452825563 02/07/24-02:47:19.934903
SID:	2825563
Source Port:	49739
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949888104452814856 02/07/24-02:49:23.196183
SID:	2814856
Source Port:	49888
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850041104452033132 02/07/24-02:50:31.884802
SID:	2033132
Source Port:	50041
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949954104452033132 02/07/24-02:49:53.341391
SID:	2033132
Source Port:	49954
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949975104452033132 02/07/24-02:50:02.032786
SID:	2033132
Source Port:	49975
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549799104452033132 02/07/24-02:48:40.981466
SID:	2033132
Source Port:	49799
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949949104452814856 02/07/24-02:49:51.435395
SID:	2814856
Source Port:	49949
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549795104452033132 02/07/24-02:48:38.918548
SID:	2033132
Source Port:	49795
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949929104452814856 02/07/24-02:49:41.234966
SID:	2814856
Source Port:	49929
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549769104452814856 02/07/24-02:48:18.586886
SID:	2814856
Source Port:	49769
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549774104452033132 02/07/24-02:48:25.410920
SID:	2033132
Source Port:	49774
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549775104452033132 02/07/24-02:48:26.236444
SID:	2033132
Source Port:	49775
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949955104452033132 02/07/24-02:49:53.750046
SID:	2033132
Source Port:	49955
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949976104452033132 02/07/24-02:50:02.454546
SID:	2033132
Source Port:	49976
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549796104452033132 02/07/24-02:48:39.452383
SID:	2033132
Source Port:	49796
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949928104452814856 02/07/24-02:49:40.825295
SID:	2814856
Source Port:	49928
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949920104452814860 02/07/24-02:49:37.543155
SID:	2814860
Source Port:	49920
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949945104452814856 02/07/24-02:49:49.776837
SID:	2814856
Source Port:	49945
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850090104452814856 02/07/24-02:50:54.296840
SID:	2814856
Source Port:	50090
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949921104452814860 02/07/24-02:49:37.950296
SID:	2814860
Source Port:	49921
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549791104452033132 02/07/24-02:48:36.789944
SID:	2033132
Source Port:	49791
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850070104452814856 02/07/24-02:50:46.034115
SID:	2814856
Source Port:	50070
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850091104452814856 02/07/24-02:50:54.714948
SID:	2814856
Source Port:	50091
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949950104452033132 02/07/24-02:49:51.658766
SID:	2033132
Source Port:	49950
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949971104452033132 02/07/24-02:50:00.380644
SID:	2033132
Source Port:	49971
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949972104452033132 02/07/24-02:50:00.804490
SID:	2033132
Source Port:	49972
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850094104452814856 02/07/24-02:50:56.345419
SID:	2814856
Source Port:	50094
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549765104452814856 02/07/24-02:48:14.150528
SID:	2814856
Source Port:	49765
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549770104452033132 02/07/24-02:48:19.380286
SID:	2033132
Source Port:	49770
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549771104452033132 02/07/24-02:48:20.330217
SID:	2033132
Source Port:	49771
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949731104452825563 02/07/24-02:47:12.679245
SID:	2825563
Source Port:	49731
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949946104452814856 02/07/24-02:49:50.193399
SID:	2814856
Source Port:	49946
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949951104452033132 02/07/24-02:49:52.086572
SID:	2033132
Source Port:	49951
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549792104452033132 02/07/24-02:48:37.344581
SID:	2033132
Source Port:	49792
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949918104452814860 02/07/24-02:49:36.701174
SID:	2814860
Source Port:	49918
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850100104452814860 02/07/24-02:50:58.949402
SID:	2814860
Source Port:	50100
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949952104452814856 02/07/24-02:49:52.702104
SID:	2814856
Source Port:	49952
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549772104452814856 02/07/24-02:48:21.464052
SID:	2814856
Source Port:	49772
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949865104452033132 02/07/24-02:49:10.591791
SID:	2033132
Source Port:	49865
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549832104452033132 02/07/24-02:48:56.319266
SID:	2033132
Source Port:	49832
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850029104452814856 02/07/24-02:50:27.123884
SID:	2814856
Source Port:	50029
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549848104452814856 02/07/24-02:49:03.386765
SID:	2814856
Source Port:	49848
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850052104452825564 02/07/24-02:50:38.569225
SID:	2825564
Source Port:	50052
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850055104452033132 02/07/24-02:50:39.616344
SID:	2033132
Source Port:	50055
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949744104452033132 02/07/24-02:47:31.938589
SID:	2033132
Source Port:	49744
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949748104452033132 02/07/24-02:47:41.601406
SID:	2033132
Source Port:	49748
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549776104452814860 02/07/24-02:48:27.242680
SID:	2814860
Source Port:	49776
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850014104452825564 02/07/24-02:50:20.018716
SID:	2825564
Source Port:	50014
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850093104452033132 02/07/24-02:50:55.355132
SID:	2033132
Source Port:	50093
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850097104452033132 02/07/24-02:50:57.536415
SID:	2033132
Source Port:	50097
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949937104452033132 02/07/24-02:49:46.292744
SID:	2033132
Source Port:	49937
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949979104452033132 02/07/24-02:50:03.692655
SID:	2033132
Source Port:	49979
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549802104452814856 02/07/24-02:48:42.654819
SID:	2814856
Source Port:	49802
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850051104452033132 02/07/24-02:50:37.952234
SID:	2033132
Source Port:	50051
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949749104452825563 02/07/24-02:47:44.229360
SID:	2825563
Source Port:	49749
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949914104452814860 02/07/24-02:49:35.048332
SID:	2814860
Source Port:	49914
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949877104452814856 02/07/24-02:49:18.641899
SID:	2814856
Source Port:	49877
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1849992104452033132 02/07/24-02:50:10.626083
SID:	2033132
Source Port:	49992
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949740104452033132 02/07/24-02:47:22.168661
SID:	2033132
Source Port:	49740
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949756104452814856 02/07/24-02:47:59.429964
SID:	2814856
Source Port:	49756
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949934104452825564 02/07/24-02:49:45.241871
SID:	2825564
Source Port:	49934
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850021104452814860 02/07/24-02:50:23.791607
SID:	2814860
Source Port:	50021
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949751104452033132 02/07/24-02:47:49.012642
SID:	2033132
Source Port:	49751
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850013104452033132 02/07/24-02:50:19.402728
SID:	2033132
Source Port:	50013
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850002104452033132 02/07/24-02:50:14.804689
SID:	2033132
Source Port:	50002
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549817104452814856 02/07/24-02:48:49.588402
SID:	2814856
Source Port:	49817
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549806104452814856 02/07/24-02:48:44.578733
SID:	2814856
Source Port:	49806
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850094104452825563 02/07/24-02:50:56.345419
SID:	2825563
Source Port:	50094
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549844104452814860 02/07/24-02:49:01.686398
SID:	2814860
Source Port:	49844
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549855104452814860 02/07/24-02:49:06.402515
SID:	2814860
Source Port:	49855
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549859104452814860 02/07/24-02:49:08.118334
SID:	2814860
Source Port:	49859
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850025104452814860 02/07/24-02:50:25.459719
SID:	2814860
Source Port:	50025
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850048104452033132 02/07/24-02:50:36.707188
SID:	2033132
Source Port:	50048
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850059104452033132 02/07/24-02:50:41.259677
SID:	2033132
Source Port:	50059
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850017104452033132 02/07/24-02:50:21.066308
SID:	2033132
Source Port:	50017
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850006104452033132 02/07/24-02:50:16.461672
SID:	2033132
Source Port:	50006
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549836104452033132 02/07/24-02:48:58.063031
SID:	2033132
Source Port:	49836
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549847104452033132 02/07/24-02:49:02.772449
SID:	2033132
Source Port:	49847
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949880104452814856 02/07/24-02:49:19.877826
SID:	2814856
Source Port:	49880
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549801104452033132 02/07/24-02:48:41.973511
SID:	2033132
Source Port:	49801
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549822104452033132 02/07/24-02:48:51.568466
SID:	2033132
Source Port:	49822
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549843104452033132 02/07/24-02:49:01.054554
SID:	2033132
Source Port:	49843
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850062104452825564 02/07/24-02:50:42.703326
SID:	2825564
Source Port:	50062
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549860104452033132 02/07/24-02:49:08.329523
SID:	2033132
Source Port:	49860
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1849993104452814860 02/07/24-02:50:11.239915
SID:	2814860
Source Port:	49993
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949873104452814860 02/07/24-02:49:15.017085
SID:	2814860
Source Port:	49873
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549813104452814856 02/07/24-02:48:47.824941
SID:	2814856
Source Port:	49813
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949969104452033132 02/07/24-02:49:59.551379
SID:	2033132
Source Port:	49969
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949906104452033132 02/07/24-02:49:30.504835
SID:	2033132
Source Port:	49906
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949927104452033132 02/07/24-02:49:40.216309
SID:	2033132
Source Port:	49927
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549789104452033132 02/07/24-02:48:35.672277
SID:	2033132
Source Port:	49789
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549768104452033132 02/07/24-02:48:17.356092
SID:	2033132
Source Port:	49768
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949948104452033132 02/07/24-02:49:50.824166
SID:	2033132
Source Port:	49948
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949986104452033132 02/07/24-02:50:08.042120
SID:	2033132
Source Port:	49986
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549851104452814856 02/07/24-02:49:04.669673
SID:	2814856
Source Port:	49851
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949965104452033132 02/07/24-02:49:57.900278
SID:	2033132
Source Port:	49965
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949902104452033132 02/07/24-02:49:28.735937
SID:	2033132
Source Port:	49902
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949923104452033132 02/07/24-02:49:38.570627
SID:	2033132
Source Port:	49923
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549785104452033132 02/07/24-02:48:33.297780
SID:	2033132
Source Port:	49785
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549764104452033132 02/07/24-02:48:12.721710
SID:	2033132
Source Port:	49764
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949939104452814856 02/07/24-02:49:47.310646
SID:	2814856
Source Port:	49939
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949944104452033132 02/07/24-02:49:49.168919
SID:	2033132
Source Port:	49944
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949956104452814856 02/07/24-02:49:54.359482
SID:	2814856
Source Port:	49956
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949745104452825563 02/07/24-02:47:34.558952
SID:	2825563
Source Port:	49745
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949910104452814860 02/07/24-02:49:33.407152
SID:	2814860
Source Port:	49910
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549793104452814860 02/07/24-02:48:38.073697
SID:	2814860
Source Port:	49793
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850080104452814856 02/07/24-02:50:50.172082
SID:	2814856
Source Port:	50080
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949982104452033132 02/07/24-02:50:06.380568
SID:	2033132
Source Port:	49982
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949961104452033132 02/07/24-02:49:56.223686
SID:	2033132
Source Port:	49961
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949741104452825563 02/07/24-02:47:24.783457
SID:	2825563
Source Port:	49741
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549781104452033132 02/07/24-02:48:30.711954
SID:	2033132
Source Port:	49781
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949869104452033132 02/07/24-02:49:13.361467
SID:	2033132
Source Port:	49869
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949935104452814856 02/07/24-02:49:45.662519
SID:	2814856
Source Port:	49935
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949940104452033132 02/07/24-02:49:47.521400
SID:	2033132
Source Port:	49940
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949883104452033132 02/07/24-02:49:20.913262
SID:	2033132
Source Port:	49883
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949881104452033132 02/07/24-02:49:20.088614
SID:	2033132
Source Port:	49881
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949885104452033132 02/07/24-02:49:21.760296
SID:	2033132
Source Port:	49885
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949880104452033132 02/07/24-02:49:19.682198
SID:	2033132
Source Port:	49880
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949884104452033132 02/07/24-02:49:21.321723
SID:	2033132
Source Port:	49884
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949887104452033132 02/07/24-02:49:22.580691
SID:	2033132
Source Port:	49887
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949977104452814860 02/07/24-02:50:03.059676
SID:	2814860
Source Port:	49977
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949973104452814856 02/07/24-02:50:01.417689
SID:	2814856
Source Port:	49973
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549794104452814856 02/07/24-02:48:38.592233
SID:	2814856
Source Port:	49794
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949886104452033132 02/07/24-02:49:22.172257
SID:	2033132
Source Port:	49886
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949976104452814860 02/07/24-02:50:02.658858
SID:	2814860
Source Port:	49976
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949974104452814856 02/07/24-02:50:01.823408
SID:	2814856
Source Port:	49974
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549796104452814860 02/07/24-02:48:39.656705
SID:	2814860
Source Port:	49796
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549797104452814860 02/07/24-02:48:40.170687
SID:	2814860
Source Port:	49797
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949882104452033132 02/07/24-02:49:20.508010
SID:	2033132
Source Port:	49882
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949970104452814856 02/07/24-02:50:00.167902
SID:	2814856
Source Port:	49970
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949738104452814856 02/07/24-02:47:17.514360
SID:	2814856
Source Port:	49738
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949747104452814856 02/07/24-02:47:39.380792
SID:	2814856
Source Port:	49747
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949749104452814856 02/07/24-02:47:44.229360
SID:	2814856
Source Port:	49749
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949761104452033132 02/07/24-02:48:08.537272
SID:	2033132
Source Port:	49761
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949739104452814856 02/07/24-02:47:19.934903
SID:	2814856
Source Port:	49739
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949746104452814856 02/07/24-02:47:36.963797
SID:	2814856
Source Port:	49746
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949748104452814856 02/07/24-02:47:41.805249
SID:	2814856
Source Port:	49748
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949737104452814856 02/07/24-02:47:15.087132
SID:	2814856
Source Port:	49737
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949740104452814856 02/07/24-02:47:22.357026
SID:	2814856
Source Port:	49740
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949741104452814856 02/07/24-02:47:24.783457
SID:	2814856
Source Port:	49741
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850101104452033132 02/07/24-02:50:59.432102
SID:	2033132
Source Port:	50101
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949731104452814856 02/07/24-02:47:12.679245
SID:	2814856
Source Port:	49731
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949742104452814856 02/07/24-02:47:27.212594
SID:	2814856
Source Port:	49742
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850100104452033132 02/07/24-02:50:58.749697
SID:	2033132
Source Port:	50100
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949743104452814856 02/07/24-02:47:29.725643
SID:	2814856
Source Port:	49743
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949745104452814856 02/07/24-02:47:34.558952
SID:	2814856
Source Port:	49745
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949760104452033132 02/07/24-02:48:07.036987
SID:	2033132
Source Port:	49760
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949744104452814856 02/07/24-02:47:32.136203
SID:	2814856
Source Port:	49744
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949872104452033132 02/07/24-02:49:14.406708
SID:	2033132
Source Port:	49872
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949873104452033132 02/07/24-02:49:14.818020
SID:	2033132
Source Port:	49873
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949892104452033132 02/07/24-02:49:24.631643
SID:	2033132
Source Port:	49892
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949894104452033132 02/07/24-02:49:25.457184
SID:	2033132
Source Port:	49894
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949980104452814856 02/07/24-02:50:04.405395
SID:	2814856
Source Port:	49980
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949870104452033132 02/07/24-02:49:13.582323
SID:	2033132
Source Port:	49870
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949874104452033132 02/07/24-02:49:15.230640
SID:	2033132
Source Port:	49874
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949868104452814856 02/07/24-02:49:12.055241
SID:	2814856
Source Port:	49868
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949961104452814856 02/07/24-02:49:56.426618
SID:	2814856
Source Port:	49961
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949891104452033132 02/07/24-02:49:24.220282
SID:	2033132
Source Port:	49891
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949895104452033132 02/07/24-02:49:25.870836
SID:	2033132
Source Port:	49895
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949962104452814856 02/07/24-02:49:56.845293
SID:	2814856
Source Port:	49962
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949876104452033132 02/07/24-02:49:18.038971
SID:	2033132
Source Port:	49876
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949877104452033132 02/07/24-02:49:18.444570
SID:	2033132
Source Port:	49877
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949890104452033132 02/07/24-02:49:23.814178
SID:	2033132
Source Port:	49890
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949896104452033132 02/07/24-02:49:26.272507
SID:	2033132
Source Port:	49896
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949898104452033132 02/07/24-02:49:27.091087
SID:	2033132
Source Port:	49898
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949984104452814856 02/07/24-02:50:07.403540
SID:	2814856
Source Port:	49984
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949757104452825563 02/07/24-02:48:01.257300
SID:	2825563
Source Port:	49757
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949964104452814856 02/07/24-02:49:57.677841
SID:	2814856
Source Port:	49964
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949875104452033132 02/07/24-02:49:17.632713
SID:	2033132
Source Port:	49875
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949963104452814856 02/07/24-02:49:57.251505
SID:	2814856
Source Port:	49963
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949897104452033132 02/07/24-02:49:26.687743
SID:	2033132
Source Port:	49897
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949985104452814856 02/07/24-02:50:07.827188
SID:	2814856
Source Port:	49985
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949750104452814856 02/07/24-02:47:46.785533
SID:	2814856
Source Port:	49750
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549785104452814860 02/07/24-02:48:33.496192
SID:	2814860
Source Port:	49785
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850001104452033132 02/07/24-02:50:14.380901
SID:	2033132
Source Port:	50001
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549786104452814860 02/07/24-02:48:34.117161
SID:	2814860
Source Port:	49786
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949756104452033132 02/07/24-02:47:59.226050
SID:	2033132
Source Port:	49756
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949758104452033132 02/07/24-02:48:02.805029
SID:	2033132
Source Port:	49758
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949878104452825564 02/07/24-02:49:19.049621
SID:	2825564
Source Port:	49878
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549787104452814860 02/07/24-02:48:34.715125
SID:	2814860
Source Port:	49787
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850000104452033132 02/07/24-02:50:13.960514
SID:	2033132
Source Port:	50000
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949755104452033132 02/07/24-02:47:55.484029
SID:	2033132
Source Port:	49755
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949759104452033132 02/07/24-02:48:05.468879
SID:	2033132
Source Port:	49759
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949759104452825563 02/07/24-02:48:05.671637
SID:	2825563
Source Port:	49759
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549789104452814860 02/07/24-02:48:35.870131
SID:	2814860
Source Port:	49789
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949867104452814856 02/07/24-02:49:11.625278
SID:	2814856
Source Port:	49867
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549788104452814860 02/07/24-02:48:35.305226
SID:	2814860
Source Port:	49788
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949968104452814860 02/07/24-02:49:59.330157
SID:	2814860
Source Port:	49968
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949960104452814856 02/07/24-02:49:56.004288
SID:	2814856
Source Port:	49960
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949866104452814856 02/07/24-02:49:11.197780
SID:	2814856
Source Port:	49866
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949871104452033132 02/07/24-02:49:13.994936
SID:	2033132
Source Port:	49871
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949757104452033132 02/07/24-02:48:01.061106
SID:	2033132
Source Port:	49757
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949893104452033132 02/07/24-02:49:25.043991
SID:	2033132
Source Port:	49893
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949981104452814856 02/07/24-02:50:06.168680
SID:	2814856
Source Port:	49981
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949864104452814860 02/07/24-02:49:10.359479
SID:	2814860
Source Port:	49864
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949750104452825563 02/07/24-02:47:46.785533
SID:	2825563
Source Port:	49750
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949863104452814860 02/07/24-02:49:09.942201
SID:	2814860
Source Port:	49863
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949865104452814860 02/07/24-02:49:10.788844
SID:	2814860
Source Port:	49865
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949755104452825563 02/07/24-02:47:55.681899
SID:	2825563
Source Port:	49755
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949966104452814856 02/07/24-02:49:58.514284
SID:	2814856
Source Port:	49966
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949754104452825563 02/07/24-02:47:53.647589
SID:	2825563
Source Port:	49754
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949756104452825563 02/07/24-02:47:59.429964
SID:	2825563
Source Port:	49756
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549784104452814860 02/07/24-02:48:32.874244
SID:	2814860
Source Port:	49784
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949988104452814856 02/07/24-02:50:09.060841
SID:	2814856
Source Port:	49988
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949986104452814856 02/07/24-02:50:08.243811
SID:	2814856
Source Port:	49986
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549783104452814860 02/07/24-02:48:32.232557
SID:	2814860
Source Port:	49783
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949878104452033132 02/07/24-02:49:18.850796
SID:	2033132
Source Port:	49878
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949965104452814856 02/07/24-02:49:58.090233
SID:	2814856
Source Port:	49965
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949969104452814856 02/07/24-02:49:59.752315
SID:	2814856
Source Port:	49969
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949899104452033132 02/07/24-02:49:27.503882
SID:	2033132
Source Port:	49899
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949987104452814856 02/07/24-02:50:08.647415
SID:	2814856
Source Port:	49987
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949751104452825563 02/07/24-02:47:49.208042
SID:	2825563
Source Port:	49751
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549781104452814860 02/07/24-02:48:30.904740
SID:	2814860
Source Port:	49781
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549780104452814860 02/07/24-02:48:30.221425
SID:	2814860
Source Port:	49780
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549782104452814860 02/07/24-02:48:31.573817
SID:	2814860
Source Port:	49782
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949753104452825563 02/07/24-02:47:51.487645
SID:	2825563
Source Port:	49753
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949982104452814860 02/07/24-02:50:06.581470
SID:	2814860
Source Port:	49982
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949989104452814856 02/07/24-02:50:09.467980
SID:	2814856
Source Port:	49989
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949879104452033132 02/07/24-02:49:19.261199
SID:	2033132
Source Port:	49879
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949967104452814856 02/07/24-02:49:58.922328
SID:	2814856
Source Port:	49967
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949983104452814860 02/07/24-02:50:06.995769
SID:	2814860
Source Port:	49983
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949866104452033132 02/07/24-02:49:11.002238
SID:	2033132
Source Port:	49866
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949951104452814856 02/07/24-02:49:52.288155
SID:	2814856
Source Port:	49951
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949749104452033132 02/07/24-02:47:44.052642
SID:	2033132
Source Port:	49749
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549773104452814856 02/07/24-02:48:22.390390
SID:	2814856
Source Port:	49773
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949864104452033132 02/07/24-02:49:10.162340
SID:	2033132
Source Port:	49864
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949953104452814856 02/07/24-02:49:53.114990
SID:	2814856
Source Port:	49953
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949746104452825563 02/07/24-02:47:36.963797
SID:	2825563
Source Port:	49746
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949760104452814856 02/07/24-02:48:07.239362
SID:	2814856
Source Port:	49760
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850012104452033132 02/07/24-02:50:18.986147
SID:	2033132
Source Port:	50012
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949745104452033132 02/07/24-02:47:34.357791
SID:	2033132
Source Port:	49745
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949747104452033132 02/07/24-02:47:39.189550
SID:	2033132
Source Port:	49747
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549775104452814860 02/07/24-02:48:26.434413
SID:	2814860
Source Port:	49775
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949876104452814856 02/07/24-02:49:18.235998
SID:	2814856
Source Port:	49876
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850010104452033132 02/07/24-02:50:18.140200
SID:	2033132
Source Port:	50010
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949748104452825563 02/07/24-02:47:41.805249
SID:	2825563
Source Port:	49748
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549777104452814860 02/07/24-02:48:28.024736
SID:	2814860
Source Port:	49777
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549779104452814860 02/07/24-02:48:29.509018
SID:	2814860
Source Port:	49779
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850009104452033132 02/07/24-02:50:17.727245
SID:	2033132
Source Port:	50009
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549797104452825564 02/07/24-02:48:40.170687
SID:	2825564
Source Port:	49797
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949750104452033132 02/07/24-02:47:46.583296
SID:	2033132
Source Port:	49750
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850007104452033132 02/07/24-02:50:16.879987
SID:	2033132
Source Port:	50007
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850018104452033132 02/07/24-02:50:21.478865
SID:	2033132
Source Port:	50018
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949757104452814856 02/07/24-02:48:01.257300
SID:	2814856
Source Port:	49757
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949741104452033132 02/07/24-02:47:24.583156
SID:	2033132
Source Port:	49741
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949743104452033132 02/07/24-02:47:29.526709
SID:	2033132
Source Port:	49743
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949754104452033132 02/07/24-02:47:53.444454
SID:	2033132
Source Port:	49754
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949971104452825564 02/07/24-02:50:00.585857
SID:	2825564
Source Port:	49971
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949751104452814856 02/07/24-02:47:49.208042
SID:	2814856
Source Port:	49751
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949759104452814856 02/07/24-02:48:05.671637
SID:	2814856
Source Port:	49759
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850003104452033132 02/07/24-02:50:15.218975
SID:	2033132
Source Port:	50003
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850014104452033132 02/07/24-02:50:19.814816
SID:	2033132
Source Port:	50014
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949753104452814856 02/07/24-02:47:51.487645
SID:	2814856
Source Port:	49753
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850005104452033132 02/07/24-02:50:16.052276
SID:	2033132
Source Port:	50005
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850016104452033132 02/07/24-02:50:20.646603
SID:	2033132
Source Port:	50016
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949881104452814856 02/07/24-02:49:20.291293
SID:	2814856
Source Port:	49881
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949977104452825564 02/07/24-02:50:03.059676
SID:	2825564
Source Port:	49977
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549795104452825564 02/07/24-02:48:39.124629
SID:	2825564
Source Port:	49795
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949755104452814856 02/07/24-02:47:55.681899
SID:	2814856
Source Port:	49755
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549804104452033132 02/07/24-02:48:43.434771
SID:	2033132
Source Port:	49804
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549802104452033132 02/07/24-02:48:42.457528
SID:	2033132
Source Port:	49802
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549800104452033132 02/07/24-02:48:41.483508
SID:	2033132
Source Port:	49800
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949872104452814860 02/07/24-02:49:14.609438
SID:	2814860
Source Port:	49872
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949968104452033132 02/07/24-02:49:59.131617
SID:	2033132
Source Port:	49968
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949964104452033132 02/07/24-02:49:57.472233
SID:	2033132
Source Port:	49964
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549786104452033132 02/07/24-02:48:33.920838
SID:	2033132
Source Port:	49786
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549788104452033132 02/07/24-02:48:35.101047
SID:	2033132
Source Port:	49788
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949878104452814860 02/07/24-02:49:19.049621
SID:	2814860
Source Port:	49878
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549790104452814860 02/07/24-02:48:36.429765
SID:	2814860
Source Port:	49790
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949985104452033132 02/07/24-02:50:07.624958
SID:	2033132
Source Port:	49985
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949989104452033132 02/07/24-02:50:09.269993
SID:	2033132
Source Port:	49989
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949740104452825563 02/07/24-02:47:22.357026
SID:	2825563
Source Port:	49740
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949938104452814856 02/07/24-02:49:46.902623
SID:	2814856
Source Port:	49938
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850025104452825564 02/07/24-02:50:25.459719
SID:	2825564
Source Port:	50025
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949959104452814856 02/07/24-02:49:55.597570
SID:	2814856
Source Port:	49959
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949761104452825563 02/07/24-02:48:08.732787
SID:	2825563
Source Port:	49761
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549784104452033132 02/07/24-02:48:32.675837
SID:	2033132
Source Port:	49784
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949874104452814860 02/07/24-02:49:15.434838
SID:	2814860
Source Port:	49874
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949966104452033132 02/07/24-02:49:58.314437
SID:	2033132
Source Port:	49966
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949987104452033132 02/07/24-02:50:08.451201
SID:	2033132
Source Port:	49987
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949955104452814856 02/07/24-02:49:53.953749
SID:	2814856
Source Port:	49955
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549780104452033132 02/07/24-02:48:30.030040
SID:	2033132
Source Port:	49780
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949889104452033132 02/07/24-02:49:23.409631
SID:	2033132
Source Port:	49889
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949936104452814856 02/07/24-02:49:46.074205
SID:	2814856
Source Port:	49936
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949981104452033132 02/07/24-02:50:06.110299
SID:	2033132
Source Port:	49981
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949744104452825563 02/07/24-02:47:32.136203
SID:	2825563
Source Port:	49744
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549792104452814860 02/07/24-02:48:37.543105
SID:	2814860
Source Port:	49792
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949960104452033132 02/07/24-02:49:55.806583
SID:	2033132
Source Port:	49960
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549782104452033132 02/07/24-02:48:31.376407
SID:	2033132
Source Port:	49782
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549771104452814860 02/07/24-02:48:20.527524
SID:	2814860
Source Port:	49771
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949868104452033132 02/07/24-02:49:11.886306
SID:	2033132
Source Port:	49868
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949957104452814856 02/07/24-02:49:54.760674
SID:	2814856
Source Port:	49957
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949962104452033132 02/07/24-02:49:56.641536
SID:	2033132
Source Port:	49962
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549798104452814856 02/07/24-02:48:40.684032
SID:	2814856
Source Port:	49798
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949983104452033132 02/07/24-02:50:06.792688
SID:	2033132
Source Port:	49983
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949742104452825563 02/07/24-02:47:27.212594
SID:	2825563
Source Port:	49742
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949978104452814856 02/07/24-02:50:03.477025
SID:	2814856
Source Port:	49978
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850002104452814856 02/07/24-02:50:15.002160
SID:	2814856
Source Port:	50002
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549813104452033132 02/07/24-02:48:47.626576
SID:	2033132
Source Port:	49813
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549817104452033132 02/07/24-02:48:49.393431
SID:	2033132
Source Port:	49817
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850001104452814856 02/07/24-02:50:14.587868
SID:	2814856
Source Port:	50001
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850005104452814856 02/07/24-02:50:16.240385
SID:	2814856
Source Port:	50005
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949729104452033132 02/07/24-02:47:10.247288
SID:	2033132
Source Port:	49729
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850085104452814856 02/07/24-02:50:52.228200
SID:	2814856
Source Port:	50085
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549810104452033132 02/07/24-02:48:46.285074
SID:	2033132
Source Port:	49810
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549818104452033132 02/07/24-02:48:49.829263
SID:	2033132
Source Port:	49818
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850086104452814856 02/07/24-02:50:52.634731
SID:	2814856
Source Port:	50086
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949896104452814856 02/07/24-02:49:26.467110
SID:	2814856
Source Port:	49896
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850031104452033132 02/07/24-02:50:27.765948
SID:	2033132
Source Port:	50031
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949897104452814856 02/07/24-02:49:26.877802
SID:	2814856
Source Port:	49897
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850032104452033132 02/07/24-02:50:28.172260
SID:	2033132
Source Port:	50032
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850039104452033132 02/07/24-02:50:31.050481
SID:	2033132
Source Port:	50039
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850029104452033132 02/07/24-02:50:26.924256
SID:	2033132
Source Port:	50029
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949968104452825564 02/07/24-02:49:59.330157
SID:	2825564
Source Port:	49968
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949731104452033132 02/07/24-02:47:12.477428
SID:	2033132
Source Port:	49731
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850097104452814860 02/07/24-02:50:57.735671
SID:	2814860
Source Port:	50097
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850035104452033132 02/07/24-02:50:29.412745
SID:	2033132
Source Port:	50035
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850006104452814860 02/07/24-02:50:16.665365
SID:	2814860
Source Port:	50006
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949893104452814856 02/07/24-02:49:25.238285
SID:	2814856
Source Port:	49893
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850089104452814860 02/07/24-02:50:53.878676
SID:	2814860
Source Port:	50089
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850025104452033132 02/07/24-02:50:25.252716
SID:	2033132
Source Port:	50025
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850036104452033132 02/07/24-02:50:29.823659
SID:	2033132
Source Port:	50036
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850026104452033132 02/07/24-02:50:25.671913
SID:	2033132
Source Port:	50026
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949892104452814856 02/07/24-02:49:24.832495
SID:	2814856
Source Port:	49892
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549814104452033132 02/07/24-02:48:48.066579
SID:	2033132
Source Port:	49814
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549828104452033132 02/07/24-02:48:54.143580
SID:	2033132
Source Port:	49828
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549806104452033132 02/07/24-02:48:44.379972
SID:	2033132
Source Port:	49806
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549827104452033132 02/07/24-02:48:53.711772
SID:	2033132
Source Port:	49827
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949940104452814856 02/07/24-02:49:47.720350
SID:	2814856
Source Port:	49940
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850012104452814856 02/07/24-02:50:19.187892
SID:	2814856
Source Port:	50012
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850016104452814856 02/07/24-02:50:20.851620
SID:	2814856
Source Port:	50016
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949739104452033132 02/07/24-02:47:19.737669
SID:	2033132
Source Port:	49739
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549763104452814856 02/07/24-02:48:11.638589
SID:	2814856
Source Port:	49763
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850017104452814856 02/07/24-02:50:21.271681
SID:	2814856
Source Port:	50017
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549800104452814860 02/07/24-02:48:41.678979
SID:	2814860
Source Port:	49800
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949923104452814860 02/07/24-02:49:38.762722
SID:	2814860
Source Port:	49923
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549807104452033132 02/07/24-02:48:44.857930
SID:	2033132
Source Port:	49807
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949922104452814860 02/07/24-02:49:38.357545
SID:	2814860
Source Port:	49922
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549803104452825564 02/07/24-02:48:43.148172
SID:	2825564
Source Port:	49803
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850075104452814856 02/07/24-02:50:48.101982
SID:	2814856
Source Port:	50075
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850022104452033132 02/07/24-02:50:24.005922
SID:	2033132
Source Port:	50022
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949885104452814856 02/07/24-02:49:21.951448
SID:	2814856
Source Port:	49885
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850042104452033132 02/07/24-02:50:32.290031
SID:	2033132
Source Port:	50042
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949737104452825563 02/07/24-02:47:15.087132
SID:	2825563
Source Port:	49737
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850021104452033132 02/07/24-02:50:23.584787
SID:	2033132
Source Port:	50021
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949886104452814856 02/07/24-02:49:22.365950
SID:	2814856
Source Port:	49886
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850043104452033132 02/07/24-02:50:32.700485
SID:	2033132
Source Port:	50043
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549768104452814860 02/07/24-02:48:17.558801
SID:	2814860
Source Port:	49768
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949889104452814856 02/07/24-02:49:23.603323
SID:	2814856
Source Port:	49889
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949926104452814860 02/07/24-02:49:39.997482
SID:	2814860
Source Port:	49926
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549821104452825564 02/07/24-02:48:51.337887
SID:	2825564
Source Port:	49821
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850079104452814856 02/07/24-02:50:49.764600
SID:	2814856
Source Port:	50079
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549776104452033132 02/07/24-02:48:27.039195
SID:	2033132
Source Port:	49776
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549777104452033132 02/07/24-02:48:27.822765
SID:	2033132
Source Port:	49777
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549797104452033132 02/07/24-02:48:39.975211
SID:	2033132
Source Port:	49797
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949952104452033132 02/07/24-02:49:52.503320
SID:	2033132
Source Port:	49952
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949956104452033132 02/07/24-02:49:54.166672
SID:	2033132
Source Port:	49956
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949974104452033132 02/07/24-02:50:01.625363
SID:	2033132
Source Port:	49974
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949953104452033132 02/07/24-02:49:52.923003
SID:	2033132
Source Port:	49953
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949957104452033132 02/07/24-02:49:54.568314
SID:	2033132
Source Port:	49957
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949978104452033132 02/07/24-02:50:03.277142
SID:	2033132
Source Port:	49978
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549794104452033132 02/07/24-02:48:38.395149
SID:	2033132
Source Port:	49794
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549798104452033132 02/07/24-02:48:40.480437
SID:	2033132
Source Port:	49798
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549773104452033132 02/07/24-02:48:22.190279
SID:	2033132
Source Port:	49773
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949927104452814856 02/07/24-02:49:40.419475
SID:	2814856
Source Port:	49927
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949977104452033132 02/07/24-02:50:02.865115
SID:	2033132
Source Port:	49977
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949943104452814856 02/07/24-02:49:48.959447
SID:	2814856
Source Port:	49943
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949947104452814856 02/07/24-02:49:50.612196
SID:	2814856
Source Port:	49947
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949970104452033132 02/07/24-02:49:59.970662
SID:	2033132
Source Port:	49970
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949944104452814856 02/07/24-02:49:49.367370
SID:	2814856
Source Port:	49944
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949948104452814856 02/07/24-02:49:51.020429
SID:	2814856
Source Port:	49948
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549790104452033132 02/07/24-02:48:36.241569
SID:	2033132
Source Port:	49790
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549808104452825564 02/07/24-02:48:45.541619
SID:	2825564
Source Port:	49808
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549772104452033132 02/07/24-02:48:21.259676
SID:	2033132
Source Port:	49772
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549764104452814856 02/07/24-02:48:12.921552
SID:	2814856
Source Port:	49764
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549793104452033132 02/07/24-02:48:37.875285
SID:	2033132
Source Port:	49793
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850072104452814856 02/07/24-02:50:46.865190
SID:	2814856
Source Port:	50072
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850092104452814856 02/07/24-02:50:55.128829
SID:	2814856
Source Port:	50092
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949973104452033132 02/07/24-02:50:01.221147
SID:	2033132
Source Port:	49973
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850093104452814856 02/07/24-02:50:55.553355
SID:	2814856
Source Port:	50093
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850071104452814856 02/07/24-02:50:46.448525
SID:	2814856
Source Port:	50071
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850065104452814856 02/07/24-02:50:43.951151
SID:	2814856
Source Port:	50065
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949916104452814860 02/07/24-02:49:35.866844
SID:	2814860
Source Port:	49916
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949950104452814856 02/07/24-02:49:51.858194
SID:	2814856
Source Port:	49950
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949863104452033132 02/07/24-02:49:09.737776
SID:	2033132
Source Port:	49863
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949879104452814856 02/07/24-02:49:19.458792
SID:	2814856
Source Port:	49879
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549834104452033132 02/07/24-02:48:57.211046
SID:	2033132
Source Port:	49834
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549838104452033132 02/07/24-02:48:58.934688
SID:	2033132
Source Port:	49838
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850050104452825564 02/07/24-02:50:37.744929
SID:	2825564
Source Port:	50050
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949747104452825563 02/07/24-02:47:39.380792
SID:	2825563
Source Port:	49747
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949912104452814860 02/07/24-02:49:34.228225
SID:	2814860
Source Port:	49912
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549853104452814860 02/07/24-02:49:05.541661
SID:	2814860
Source Port:	49853
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850091104452033132 02/07/24-02:50:54.510064
SID:	2033132
Source Port:	50091
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949746104452033132 02/07/24-02:47:36.766839
SID:	2033132
Source Port:	49746
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949761104452814856 02/07/24-02:48:08.732787
SID:	2814856
Source Port:	49761
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850011104452033132 02/07/24-02:50:18.563553
SID:	2033132
Source Port:	50011
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850053104452033132 02/07/24-02:50:38.777654
SID:	2033132
Source Port:	50053
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949939104452033132 02/07/24-02:49:47.113151
SID:	2033132
Source Port:	49939
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1849990104452033132 02/07/24-02:50:09.800433
SID:	2033132
Source Port:	49990
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549830104452033132 02/07/24-02:48:55.439300
SID:	2033132
Source Port:	49830
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549778104452814860 02/07/24-02:48:28.794114
SID:	2814860
Source Port:	49778
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850095104452033132 02/07/24-02:50:56.698733
SID:	2033132
Source Port:	50095
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949758104452814856 02/07/24-02:48:03.009138
SID:	2814856
Source Port:	49758
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850019104452033132 02/07/24-02:50:22.033417
SID:	2033132
Source Port:	50019
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850008104452033132 02/07/24-02:50:17.304139
SID:	2033132
Source Port:	50008
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949742104452033132 02/07/24-02:47:27.011333
SID:	2033132
Source Port:	49742
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850057104452033132 02/07/24-02:50:40.443160
SID:	2033132
Source Port:	50057
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549808104452814860 02/07/24-02:48:45.541619
SID:	2814860
Source Port:	49808
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850046104452033132 02/07/24-02:50:33.935466
SID:	2033132
Source Port:	50046
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850023104452814860 02/07/24-02:50:24.632903
SID:	2814860
Source Port:	50023
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850099104452033132 02/07/24-02:50:58.343535
SID:	2033132
Source Port:	50099
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949753104452033132 02/07/24-02:47:51.285372
SID:	2033132
Source Port:	49753
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850088104452033132 02/07/24-02:50:53.270007
SID:	2033132
Source Port:	50088
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549804104452814860 02/07/24-02:48:43.637026
SID:	2814860
Source Port:	49804
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549815104452814860 02/07/24-02:48:48.703271
SID:	2814860
Source Port:	49815
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850069104452814860 02/07/24-02:50:45.630617
SID:	2814860
Source Port:	50069
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850004104452033132 02/07/24-02:50:15.636034
SID:	2033132
Source Port:	50004
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949882104452814856 02/07/24-02:49:20.704524
SID:	2814856
Source Port:	49882
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949754104452814856 02/07/24-02:47:53.647589
SID:	2814856
Source Port:	49754
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850015104452033132 02/07/24-02:50:20.229786
SID:	2033132
Source Port:	50015
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549803104452033132 02/07/24-02:48:42.948992
SID:	2033132
Source Port:	49803
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549846104452814860 02/07/24-02:49:02.553490
SID:	2814860
Source Port:	49846
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549857104452814860 02/07/24-02:49:07.258929
SID:	2814860
Source Port:	49857
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1849991104452814856 02/07/24-02:50:10.410386
SID:	2814856
Source Port:	49991
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549824104452033132 02/07/24-02:48:52.422911
SID:	2033132
Source Port:	49824
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549845104452033132 02/07/24-02:49:01.914914
SID:	2033132
Source Port:	49845
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1849995104452814856 02/07/24-02:50:12.075656
SID:	2814856
Source Port:	49995
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949908104452033132 02/07/24-02:49:32.414223
SID:	2033132
Source Port:	49908
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949929104452033132 02/07/24-02:49:41.036565
SID:	2033132
Source Port:	49929
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549820104452033132 02/07/24-02:48:50.712281
SID:	2033132
Source Port:	49820
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549836104452814856 02/07/24-02:48:58.259047
SID:	2814856
Source Port:	49836
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549862104452033132 02/07/24-02:49:09.194964
SID:	2033132
Source Port:	49862
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549841104452033132 02/07/24-02:49:00.211150
SID:	2033132
Source Port:	49841
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949904104452033132 02/07/24-02:49:29.580970
SID:	2033132
Source Port:	49904
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949925104452033132 02/07/24-02:49:39.382771
SID:	2033132
Source Port:	49925
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549787104452033132 02/07/24-02:48:34.517576
SID:	2033132
Source Port:	49787
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549766104452033132 02/07/24-02:48:15.133641
SID:	2033132
Source Port:	49766
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949900104452033132 02/07/24-02:49:27.924064
SID:	2033132
Source Port:	49900
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549811104452814856 02/07/24-02:48:46.931544
SID:	2814856
Source Port:	49811
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949921104452033132 02/07/24-02:49:37.752529
SID:	2033132
Source Port:	49921
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949963104452033132 02/07/24-02:49:57.054922
SID:	2033132
Source Port:	49963
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949967104452033132 02/07/24-02:49:58.724370
SID:	2033132
Source Port:	49967
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949942104452033132 02/07/24-02:49:48.354337
SID:	2033132
Source Port:	49942
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949946104452033132 02/07/24-02:49:49.992099
SID:	2033132
Source Port:	49946
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549762104452033132 02/07/24-02:48:10.081277
SID:	2033132
Source Port:	49762
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949760104452825563 02/07/24-02:48:07.239362
SID:	2825563
Source Port:	49760
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949980104452033132 02/07/24-02:50:04.200622
SID:	2033132
Source Port:	49980
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949988104452033132 02/07/24-02:50:08.861869
SID:	2033132
Source Port:	49988
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549774104452814860 02/07/24-02:48:25.614681
SID:	2814860
Source Port:	49774
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949875104452814860 02/07/24-02:49:17.832067
SID:	2814860
Source Port:	49875
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549799104452814856 02/07/24-02:48:41.183656
SID:	2814856
Source Port:	49799
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549795104452814860 02/07/24-02:48:39.124629
SID:	2814860
Source Port:	49795
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949743104452825563 02/07/24-02:47:29.725643
SID:	2825563
Source Port:	49743
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949975104452814856 02/07/24-02:50:02.231437
SID:	2814856
Source Port:	49975
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949954104452814856 02/07/24-02:49:53.533781
SID:	2814856
Source Port:	49954
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949958104452814856 02/07/24-02:49:55.187149
SID:	2814856
Source Port:	49958
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949867104452033132 02/07/24-02:49:11.432247
SID:	2033132
Source Port:	49867
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949888104452033132 02/07/24-02:49:22.993647
SID:	2033132
Source Port:	49888
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949937104452814856 02/07/24-02:49:46.496770
SID:	2814856
Source Port:	49937
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949933104452814856 02/07/24-02:49:44.826951
SID:	2814856
Source Port:	49933
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549783104452033132 02/07/24-02:48:32.035161
SID:	2033132
Source Port:	49783
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1849999104452814860 02/07/24-02:50:13.745445
SID:	2814860
Source Port:	49999
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549791104452814860 02/07/24-02:48:36.995835
SID:	2814860
Source Port:	49791
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850040104452814856 02/07/24-02:50:31.666762
SID:	2814856
Source Port:	50040
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850061104452814856 02/07/24-02:50:42.282620
SID:	2814856
Source Port:	50061
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949979104452814856 02/07/24-02:50:03.895890
SID:	2814856
Source Port:	49979
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949971104452814860 02/07/24-02:50:00.585857
SID:	2814860
Source Port:	49971
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.156.13.209

Timestamp:	192.168.2.418.156.13.20949984104452033132 02/07/24-02:50:07.207576
SID:	2033132
Source Port:	49984
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 3.126.37.18

Timestamp:	192.168.2.43.126.37.1850082104452814856 02/07/24-02:50:50.997506
SID:	2814856
Source Port:	50082
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549770104452814860 02/07/24-02:48:19.582955
SID:	2814860
Source Port:	49770
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act) - Source IP: 192.168.2.4 - Destination IP: 18.197.239.5

Timestamp:	192.168.2.418.197.239.549818104452825564 02/07/24-02:48:50.024449
SID:	2825564
Source Port:	49818
Destination Port:	10445
Protocol:	TCP
Classtype:	A Network Trojan was detected

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: 4xKDL5YCfQ.exe

Avira: detected

Antivirus detection for URL or domain

Source: 2.tcp.eu.ngrok.io

Avira URL Cloud: Label: malware

Antivirus detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe

Avira: detection malicious, Label: TR/ATRAPS.Gen

Found malware configuration

Source: 00000000.00000000.1609993394.0000000000E12000.00000002.00000001.01000000.00000003.sdmp

Malware Configuration Extractor: Njrat {"Host": "2.tcp.eu.ngrok.io", "Port": "10445", "Version": "im523", "Campaign ID": "HacKed", "Install Name": "AnubisSearchFree.exe", "Install Dir": "TEMP"}

Multi AV Scanner detection for domain / URL

Source: 2.tcp.eu.ngrok.io	Virustotal: Detection: 10%			Perma Link
Source: 2.tcp.eu.ngrok.io	Virustotal: Detection: 10%			Perma Link

Multi AV Scanner detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	ReversingLabs: Detection: 94%
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Virustotal: Detection: 85%			Perma Link

Multi AV Scanner detection for submitted file

Source: 4xKDL5YCfQ.exe	ReversingLabs: Detection: 94%
Source: 4xKDL5YCfQ.exe	Virustotal: Detection: 85%			Perma Link

Yara detected Njrat

Source: Yara match	File source: 4xKDL5YCfQ.exe, type: SAMPLE
Source: Yara match	File source: 0.0.4xKDL5YCfQ.exe.e10000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000000.1609993394.0000000000E12000.00000002.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 4xKDL5YCfQ.exe PID: 6680, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: AnubisSearchFree.exe PID: 5804, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe, type: DROPPED

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe

Joe Sandbox ML: detected

Machine Learning detection for sample

Source: 4xKDL5YCfQ.exe

Joe Sandbox ML: detected

Source: 4xKDL5YCfQ.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: C:\Users\user\Desktop\4xKDL5YCfQ.exe

File opened: C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.9672_none_d08f9da24428a513\MSVCR80.dll

Jump to behavior

Source: 4xKDL5YCfQ.exe

Static PE information: DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE

Source: 4xKDL5YCfQ.exe, 00000000.00000000.1609993394.0000000000E12000.00000002.00000001.01000000.00000003.sdmp	Binary or memory string: autorun.inf
Source: 4xKDL5YCfQ.exe, 00000000.00000000.1609993394.0000000000E12000.00000002.00000001.01000000.00000003.sdmp	Binary or memory string: [autorun]
Source: 4xKDL5YCfQ.exe, 00000000.00000002.1678511288.00000000035A1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: autorun.inf
Source: 4xKDL5YCfQ.exe, 00000000.00000002.1678511288.00000000035A1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: [autorun]
Source: AnubisSearchFree.exe, 00000001.00000002.4071656981.00000000036A1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: autorun.inf
Source: AnubisSearchFree.exe, 00000001.00000002.4071656981.00000000036A1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: [autorun]
Source: 4xKDL5YCfQ.exe	Binary or memory string: autorun.inf
Source: 4xKDL5YCfQ.exe	Binary or memory string: [autorun]
Source: AnubisSearchFree.exe.0.dr	Binary or memory string: autorun.inf
Source: AnubisSearchFree.exe.0.dr	Binary or memory string: [autorun]

Networking

Snort IDS alert for network traffic

Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49729 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49731 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49731 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2825563 ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) 192.168.2.4:49731 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49737 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49737 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2825563 ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) 192.168.2.4:49737 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49738 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49738 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2825563 ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) 192.168.2.4:49738 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49739 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49739 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2825563 ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) 192.168.2.4:49739 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49740 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49740 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2825563 ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) 192.168.2.4:49740 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49741 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49741 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2825563 ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) 192.168.2.4:49741 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49742 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49742 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2825563 ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) 192.168.2.4:49742 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49743 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49743 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2825563 ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) 192.168.2.4:49743 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49744 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49744 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2825563 ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) 192.168.2.4:49744 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49745 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49745 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2825563 ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) 192.168.2.4:49745 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49746 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49746 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2825563 ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) 192.168.2.4:49746 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49747 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49747 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2825563 ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) 192.168.2.4:49747 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49748 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49748 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2825563 ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) 192.168.2.4:49748 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49749 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49749 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2825563 ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) 192.168.2.4:49749 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49750 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49750 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2825563 ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) 192.168.2.4:49750 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49751 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49751 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2825563 ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) 192.168.2.4:49751 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49753 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49753 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2825563 ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) 192.168.2.4:49753 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49754 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49754 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2825563 ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) 192.168.2.4:49754 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49755 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49755 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2825563 ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) 192.168.2.4:49755 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49756 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49756 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2825563 ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) 192.168.2.4:49756 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49757 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49757 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2825563 ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) 192.168.2.4:49757 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49758 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49758 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49759 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49759 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2825563 ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) 192.168.2.4:49759 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49760 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49760 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2825563 ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) 192.168.2.4:49760 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49761 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49761 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2825563 ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) 192.168.2.4:49761 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49762 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49762 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2825563 ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) 192.168.2.4:49762 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49763 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49763 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49764 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49764 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49765 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49765 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49766 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.4:49766 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49767 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49768 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.4:49768 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49769 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49769 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49770 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.4:49770 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49771 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.4:49771 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49772 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49772 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49773 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49773 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49774 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.4:49774 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49775 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.4:49775 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49776 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.4:49776 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49777 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.4:49777 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49778 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.4:49778 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49779 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.4:49779 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49780 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.4:49780 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49781 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.4:49781 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49782 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.4:49782 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49783 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.4:49783 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49784 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.4:49784 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49785 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.4:49785 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49786 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.4:49786 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49787 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.4:49787 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49788 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.4:49788 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49789 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.4:49789 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49790 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.4:49790 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49791 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.4:49791 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49792 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.4:49792 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49793 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.4:49793 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49794 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49794 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49795 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.4:49795 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2825564 ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act) 192.168.2.4:49795 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49796 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.4:49796 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49797 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.4:49797 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2825564 ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act) 192.168.2.4:49797 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49798 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49798 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49799 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49799 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49800 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.4:49800 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49801 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.4:49801 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49802 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49802 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49803 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.4:49803 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2825564 ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act) 192.168.2.4:49803 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49804 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.4:49804 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49805 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49805 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49806 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49806 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49807 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49807 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49808 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.4:49808 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2825564 ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act) 192.168.2.4:49808 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49809 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49809 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49810 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49810 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49811 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49811 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49812 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49812 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49813 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49813 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49814 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49814 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49815 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.4:49815 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49816 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49816 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49817 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49817 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49818 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.4:49818 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2825564 ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act) 192.168.2.4:49818 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49819 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49820 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49820 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49821 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.4:49821 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2825564 ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act) 192.168.2.4:49821 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49822 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.4:49822 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49823 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.4:49823 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49824 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49825 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.4:49825 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49826 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.4:49826 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49827 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.4:49827 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49828 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49828 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49829 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49829 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49830 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.4:49830 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2825564 ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act) 192.168.2.4:49830 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49831 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49831 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49832 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.4:49832 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2825564 ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act) 192.168.2.4:49832 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49833 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.4:49833 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49834 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.4:49834 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49835 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49835 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49836 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49836 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49837 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.4:49837 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49838 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.4:49838 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49839 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.4:49839 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49840 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.4:49840 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49841 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.4:49841 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49842 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49842 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49843 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.4:49843 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49844 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.4:49844 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49845 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.4:49845 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49846 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.4:49846 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49847 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49847 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49848 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49848 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49849 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.4:49849 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49850 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.4:49850 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49851 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49851 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49852 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.4:49852 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49853 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.4:49853 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2825564 ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act) 192.168.2.4:49853 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49854 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.4:49854 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49855 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.4:49855 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49856 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.4:49856 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49857 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.4:49857 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49858 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.4:49858 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49859 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.4:49859 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49860 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49861 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.4:49861 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49862 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.4:49862 -> 18.197.239.5:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49863 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.4:49863 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49864 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.4:49864 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49865 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.4:49865 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49866 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49866 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49867 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49867 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49868 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49868 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49869 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49870 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49871 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49872 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.4:49872 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49873 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.4:49873 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49874 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.4:49874 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49875 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.4:49875 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49876 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49876 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49877 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49877 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49878 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.4:49878 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2825564 ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act) 192.168.2.4:49878 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49879 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49879 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49880 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49880 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49881 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49881 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49882 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49882 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49883 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49884 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49885 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49885 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49886 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49886 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49887 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49887 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49888 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49888 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49889 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49889 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49890 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49890 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49891 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49891 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49892 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49892 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49893 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49893 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49894 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49894 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49895 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49895 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49896 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49896 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49897 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49897 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49898 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49898 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49899 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49899 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49900 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49900 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49901 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49901 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49902 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49902 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49903 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49903 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49904 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49904 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49905 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49905 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49906 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.4:49906 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2825564 ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act) 192.168.2.4:49906 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49907 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49908 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49908 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49909 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.4:49909 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2825564 ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act) 192.168.2.4:49909 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49910 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.4:49910 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49911 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49911 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49912 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.4:49912 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49913 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.4:49913 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49914 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.4:49914 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49915 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.4:49915 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49916 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.4:49916 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49917 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.4:49917 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49918 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.4:49918 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49919 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.4:49919 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2825564 ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act) 192.168.2.4:49919 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49920 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.4:49920 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49921 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.4:49921 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49922 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.4:49922 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49923 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.4:49923 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2825564 ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act) 192.168.2.4:49923 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49924 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.4:49924 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49925 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.4:49925 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49926 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.4:49926 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49927 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49927 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49928 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49928 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49929 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49929 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49930 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49931 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49931 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49932 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49932 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49933 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49933 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49934 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.4:49934 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2825564 ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act) 192.168.2.4:49934 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49935 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49935 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49936 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49936 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49937 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49937 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49938 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49938 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49939 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49939 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49940 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49940 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49941 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49941 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49942 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49942 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49943 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49943 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49944 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49944 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49945 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49945 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49946 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49946 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49947 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49947 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49948 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49948 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49949 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49949 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49950 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49950 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49951 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49951 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49952 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49952 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49953 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49953 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49954 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49954 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49955 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49955 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49956 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49956 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49957 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49957 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49958 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49958 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49959 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49959 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49960 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49960 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49961 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49961 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49962 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49962 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49963 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49963 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49964 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49964 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49965 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49965 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49966 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49966 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49967 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49967 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49968 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.4:49968 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2825564 ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act) 192.168.2.4:49968 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49969 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49969 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49970 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49970 -> 18.156.13.209:10445
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49971 -> 18.156.13.209:10445

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor

URLs: 2.tcp.eu.ngrok.io

Source: global traffic	TCP traffic: 192.168.2.4:49729 -> 18.156.13.209:10445
Source: global traffic	TCP traffic: 192.168.2.4:49762 -> 18.197.239.5:10445
Source: global traffic	TCP traffic: 192.168.2.4:49990 -> 3.126.37.18:10445

Source: Joe Sandbox View	IP Address: 18.156.13.209 18.156.13.209
Source: Joe Sandbox View	IP Address: 3.126.37.18 3.126.37.18
Source: Joe Sandbox View	IP Address: 18.197.239.5 18.197.239.5

Source: Joe Sandbox View	ASN Name: AMAZON-02US AMAZON-02US
Source: Joe Sandbox View	ASN Name: AMAZON-02US AMAZON-02US

Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe

Code function: 1_2_0175A09A recv,

1_2_0175A09A

Source: unknown

DNS traffic detected: queries for: 2.tcp.eu.ngrok.io

Source: 4xKDL5YCfQ.exe, 00000000.00000002.1678024784.000000000140E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://go.micros
Source: 4xKDL5YCfQ.exe, AnubisSearchFree.exe.0.dr	String found in binary or memory: https://dl.dropbox.com/s/p84aaz28t0hepul/Pass.exe?dl=0

Key, Mouse, Clipboard, Microphone and Screen Capturing

Contains functionality to log keystrokes (.Net Source)

Source: 4xKDL5YCfQ.exe, kl.cs	.Net Code: VKCodeToUnicode
Source: AnubisSearchFree.exe.0.dr, kl.cs	.Net Code: VKCodeToUnicode

E-Banking Fraud

Yara detected Njrat

Source: Yara match	File source: 4xKDL5YCfQ.exe, type: SAMPLE
Source: Yara match	File source: 0.0.4xKDL5YCfQ.exe.e10000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000000.1609993394.0000000000E12000.00000002.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 4xKDL5YCfQ.exe PID: 6680, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: AnubisSearchFree.exe PID: 5804, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe, type: DROPPED

System Summary

Malicious sample detected (through community Yara rule)

Source: 4xKDL5YCfQ.exe, type: SAMPLE	Matched rule: Windows_Trojan_Njrat_30f3c220 Author: unknown
Source: 4xKDL5YCfQ.exe, type: SAMPLE	Matched rule: Identify njRat Author: Brian Wallace @botnet_hunter
Source: 4xKDL5YCfQ.exe, type: SAMPLE	Matched rule: Detects NjRAT / Bladabindi Author: ditekSHen
Source: 0.0.4xKDL5YCfQ.exe.e10000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Njrat_30f3c220 Author: unknown
Source: 0.0.4xKDL5YCfQ.exe.e10000.0.unpack, type: UNPACKEDPE	Matched rule: Identify njRat Author: Brian Wallace @botnet_hunter
Source: 0.0.4xKDL5YCfQ.exe.e10000.0.unpack, type: UNPACKEDPE	Matched rule: Detects NjRAT / Bladabindi Author: ditekSHen
Source: 00000000.00000000.1609993394.0000000000E12000.00000002.00000001.01000000.00000003.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Njrat_30f3c220 Author: unknown
Source: 00000000.00000000.1609993394.0000000000E12000.00000002.00000001.01000000.00000003.sdmp, type: MEMORY	Matched rule: Identify njRat Author: Brian Wallace @botnet_hunter
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe, type: DROPPED	Matched rule: Windows_Trojan_Njrat_30f3c220 Author: unknown
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe, type: DROPPED	Matched rule: Identify njRat Author: Brian Wallace @botnet_hunter
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe, type: DROPPED	Matched rule: Detects NjRAT / Bladabindi Author: ditekSHen

Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe

Process Stats: CPU usage > 49%

Source: 4xKDL5YCfQ.exe, 00000000.00000002.1678024784.000000000140E000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: OriginalFilenamemscorwks.dllT vs 4xKDL5YCfQ.exe

Source: C:\Users\user\Desktop\4xKDL5YCfQ.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\Desktop\4xKDL5YCfQ.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\4xKDL5YCfQ.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\4xKDL5YCfQ.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\4xKDL5YCfQ.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\4xKDL5YCfQ.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\4xKDL5YCfQ.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\4xKDL5YCfQ.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\4xKDL5YCfQ.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\4xKDL5YCfQ.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\4xKDL5YCfQ.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\4xKDL5YCfQ.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\4xKDL5YCfQ.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\4xKDL5YCfQ.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\4xKDL5YCfQ.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\4xKDL5YCfQ.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\4xKDL5YCfQ.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\4xKDL5YCfQ.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\4xKDL5YCfQ.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\Desktop\4xKDL5YCfQ.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\Desktop\4xKDL5YCfQ.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\Desktop\4xKDL5YCfQ.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\4xKDL5YCfQ.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\Desktop\4xKDL5YCfQ.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\4xKDL5YCfQ.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Section loaded: shfolder.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Section loaded: avicap32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Section loaded: msvfw32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: ifmon.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: mprapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: rasmontr.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: rasapi32.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: rasman.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: rasman.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: mfc42u.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: authfwcfg.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: fwpolicyiomgr.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: firewallapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: fwbase.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: dhcpcmonitor.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: dot3cfg.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: dot3api.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: onex.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: eappcfg.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: eappprxy.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: fwcfg.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: hnetmon.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: netshell.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: nlaapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: netsetupapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: netiohlp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: nshhttp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: httpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: nshipsec.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: activeds.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: polstore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: winipsec.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: adsldpc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: adsldpc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: nshwfp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: cabinet.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: p2pnetsh.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: p2p.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: rpcnsh.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: whhelper.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: wlancfg.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: wlanapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: wshelper.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: wevtapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: peerdistsh.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: wcmapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: rmclient.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: mobilenetworking.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: ktmw32.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: mprmsg.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: msasn1.dll	Jump to behavior

Source: 4xKDL5YCfQ.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: 4xKDL5YCfQ.exe, type: SAMPLE	Matched rule: Windows_Trojan_Njrat_30f3c220 reference_sample = 741a0f3954499c11f9eddc8df7c31e7c59ca41f1a7005646735b8b1d53438c1b, os = windows, severity = x86, creation_date = 2021-06-13, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Njrat, fingerprint = d15e131bca6beddcaecb20fffaff1784ad8a33a25e7ce90f7450d1a362908cc4, id = 30f3c220-b8dc-45a1-bcf0-027c2f76fa63, last_modified = 2021-10-04
Source: 4xKDL5YCfQ.exe, type: SAMPLE	Matched rule: njrat1 date = 2015-05-27, author = Brian Wallace @botnet_hunter, description = Identify njRat, author_email = bwall@ballastsecurity.net
Source: 4xKDL5YCfQ.exe, type: SAMPLE	Matched rule: MALWARE_Win_NjRAT author = ditekSHen, description = Detects NjRAT / Bladabindi
Source: 0.0.4xKDL5YCfQ.exe.e10000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Njrat_30f3c220 reference_sample = 741a0f3954499c11f9eddc8df7c31e7c59ca41f1a7005646735b8b1d53438c1b, os = windows, severity = x86, creation_date = 2021-06-13, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Njrat, fingerprint = d15e131bca6beddcaecb20fffaff1784ad8a33a25e7ce90f7450d1a362908cc4, id = 30f3c220-b8dc-45a1-bcf0-027c2f76fa63, last_modified = 2021-10-04
Source: 0.0.4xKDL5YCfQ.exe.e10000.0.unpack, type: UNPACKEDPE	Matched rule: njrat1 date = 2015-05-27, author = Brian Wallace @botnet_hunter, description = Identify njRat, author_email = bwall@ballastsecurity.net
Source: 0.0.4xKDL5YCfQ.exe.e10000.0.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_NjRAT author = ditekSHen, description = Detects NjRAT / Bladabindi
Source: 00000000.00000000.1609993394.0000000000E12000.00000002.00000001.01000000.00000003.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Njrat_30f3c220 reference_sample = 741a0f3954499c11f9eddc8df7c31e7c59ca41f1a7005646735b8b1d53438c1b, os = windows, severity = x86, creation_date = 2021-06-13, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Njrat, fingerprint = d15e131bca6beddcaecb20fffaff1784ad8a33a25e7ce90f7450d1a362908cc4, id = 30f3c220-b8dc-45a1-bcf0-027c2f76fa63, last_modified = 2021-10-04
Source: 00000000.00000000.1609993394.0000000000E12000.00000002.00000001.01000000.00000003.sdmp, type: MEMORY	Matched rule: njrat1 date = 2015-05-27, author = Brian Wallace @botnet_hunter, description = Identify njRat, author_email = bwall@ballastsecurity.net
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe, type: DROPPED	Matched rule: Windows_Trojan_Njrat_30f3c220 reference_sample = 741a0f3954499c11f9eddc8df7c31e7c59ca41f1a7005646735b8b1d53438c1b, os = windows, severity = x86, creation_date = 2021-06-13, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Njrat, fingerprint = d15e131bca6beddcaecb20fffaff1784ad8a33a25e7ce90f7450d1a362908cc4, id = 30f3c220-b8dc-45a1-bcf0-027c2f76fa63, last_modified = 2021-10-04
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe, type: DROPPED	Matched rule: njrat1 date = 2015-05-27, author = Brian Wallace @botnet_hunter, description = Identify njRat, author_email = bwall@ballastsecurity.net
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe, type: DROPPED	Matched rule: MALWARE_Win_NjRAT author = ditekSHen, description = Detects NjRAT / Bladabindi

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@6/4@4/3

Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Code function: 1_2_058B27FE AdjustTokenPrivileges,		1_2_058B27FE
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Code function: 1_2_058B27C7 AdjustTokenPrivileges,		1_2_058B27C7

Source: C:\Users\user\Desktop\4xKDL5YCfQ.exe

File created: C:\Users\user\AppData\Local\Microsoft\CLR_v2.0_32\UsageLogs\4xKDL5YCfQ.exe.log

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Mutant created: NULL
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:3664:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Mutant created: \Sessions\1\BaseNamedObjects\b837dc805eda1607ebefb3176c711164
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Mutant created: \Sessions\1\BaseNamedObjects\Global\.net clr networking

Source: C:\Users\user\Desktop\4xKDL5YCfQ.exe

File created: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe

Jump to behavior

Source: 4xKDL5YCfQ.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: 4xKDL5YCfQ.exe

Static file information: TRID: Win32 Executable (generic) Net Framework (10011505/4) 49.80%

Source: C:\Users\user\Desktop\4xKDL5YCfQ.exe

File read: C:\Users\user\Desktop\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\4xKDL5YCfQ.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: 4xKDL5YCfQ.exe	ReversingLabs: Detection: 94%
Source: 4xKDL5YCfQ.exe	Virustotal: Detection: 85%

Source: C:\Users\user\Desktop\4xKDL5YCfQ.exe

File read: C:\Users\user\Desktop\4xKDL5YCfQ.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\4xKDL5YCfQ.exe C:\Users\user\Desktop\4xKDL5YCfQ.exe
Source: C:\Users\user\Desktop\4xKDL5YCfQ.exe	Process created: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe "C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe"
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Process created: C:\Windows\SysWOW64\netsh.exe netsh firewall add allowedprogram "C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe" "AnubisSearchFree.exe" ENABLE
Source: C:\Windows\SysWOW64\netsh.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\4xKDL5YCfQ.exe	Process created: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe "C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Process created: C:\Windows\SysWOW64\netsh.exe netsh firewall add allowedprogram "C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe" "AnubisSearchFree.exe" ENABLE	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{CF4CC405-E2C5-4DDD-B3CE-5E7582D8C9FA}\InprocServer32

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe

File opened: C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorrc.dll

Jump to behavior

Source: 4xKDL5YCfQ.exe

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR

Source: C:\Users\user\Desktop\4xKDL5YCfQ.exe

File opened: C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.9672_none_d08f9da24428a513\MSVCR80.dll

Jump to behavior

Source: 4xKDL5YCfQ.exe

Static PE information: DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE

Data Obfuscation

.NET source code contains potential unpacker

Source: 4xKDL5YCfQ.exe, OK.cs	.Net Code: Plugin System.Reflection.Assembly.Load(byte[])
Source: AnubisSearchFree.exe.0.dr, OK.cs	.Net Code: Plugin System.Reflection.Assembly.Load(byte[])

Source: C:\Users\user\Desktop\4xKDL5YCfQ.exe

File created: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe

Jump to dropped file

Source: C:\Users\user\Desktop\4xKDL5YCfQ.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\4xKDL5YCfQ.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\4xKDL5YCfQ.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\4xKDL5YCfQ.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\4xKDL5YCfQ.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\4xKDL5YCfQ.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\4xKDL5YCfQ.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\4xKDL5YCfQ.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\4xKDL5YCfQ.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\4xKDL5YCfQ.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\4xKDL5YCfQ.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\4xKDL5YCfQ.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\4xKDL5YCfQ.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\4xKDL5YCfQ.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\4xKDL5YCfQ.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\4xKDL5YCfQ.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\4xKDL5YCfQ.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\4xKDL5YCfQ.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\4xKDL5YCfQ.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\4xKDL5YCfQ.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\4xKDL5YCfQ.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Source: C:\Users\user\Desktop\4xKDL5YCfQ.exe	Memory allocated: 1810000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Desktop\4xKDL5YCfQ.exe	Memory allocated: 35A0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Desktop\4xKDL5YCfQ.exe	Memory allocated: 1810000 memory commit \| memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Memory allocated: 1900000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Memory allocated: 36A0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Memory allocated: 1970000 memory commit \| memory reserve \| memory write watch	Jump to behavior

Source: C:\Users\user\Desktop\4xKDL5YCfQ.exe

Thread delayed: delay time: 922337203685477

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Window / User API: threadDelayed 770	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Window / User API: threadDelayed 3555	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Window / User API: threadDelayed 5042	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Window / User API: foregroundWindowGot 1736	Jump to behavior

Source: C:\Users\user\Desktop\4xKDL5YCfQ.exe TID: 2496	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe TID: 4924	Thread sleep count: 770 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe TID: 4924	Thread sleep time: -770000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe TID: 5216	Thread sleep count: 3555 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe TID: 4924	Thread sleep count: 5042 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe TID: 4924	Thread sleep time: -5042000s >= -30000s	Jump to behavior

Source: C:\Windows\System32\conhost.exe

Last function: Thread delayed

Source: C:\Users\user\Desktop\4xKDL5YCfQ.exe

Thread delayed: delay time: 922337203685477

Jump to behavior

Source: AnubisSearchFree.exe, 00000001.00000002.4070684063.000000000149F000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWlture=neutral,
Source: AnubisSearchFree.exe, 00000001.00000002.4070684063.000000000149F000.00000004.00000020.00020000.00000000.sdmp, netsh.exe, 00000003.00000002.1744063044.0000000000FC4000.00000004.00000020.00020000.00000000.sdmp, netsh.exe, 00000003.00000003.1743617935.0000000000FC1000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll

Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe

Process token adjusted: Debug

Jump to behavior

Source: C:\Users\user\Desktop\4xKDL5YCfQ.exe

Memory allocated: page read and write | page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

.NET source code references suspicious native API functions

Source: 4xKDL5YCfQ.exe, kl.cs	Reference to suspicious API methods: MapVirtualKey(a, 0u)
Source: 4xKDL5YCfQ.exe, kl.cs	Reference to suspicious API methods: GetAsyncKeyState(num2)
Source: 4xKDL5YCfQ.exe, OK.cs	Reference to suspicious API methods: capGetDriverDescriptionA(wDriver, ref lpszName, 100, ref lpszVer, 100)

Source: C:\Users\user\Desktop\4xKDL5YCfQ.exe

Process created: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe "C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe"

Jump to behavior

Source: AnubisSearchFree.exe, 00000001.00000002.4071656981.000000000371C000.00000004.00000800.00020000.00000000.sdmp, AnubisSearchFree.exe, 00000001.00000002.4071656981.0000000003C35000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Program Manager
Source: AnubisSearchFree.exe, 00000001.00000002.4071656981.000000000371C000.00000004.00000800.00020000.00000000.sdmp, AnubisSearchFree.exe, 00000001.00000002.4071656981.0000000003C35000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Program Manager@9l

Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Lowering of HIPS / PFW / Operating System Security Settings

Modifies the windows firewall

Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe

Process created: C:\Windows\SysWOW64\netsh.exe netsh firewall add allowedprogram "C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe" "AnubisSearchFree.exe" ENABLE

Uses netsh to modify the Windows network and firewall settings

Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe

Process created: C:\Windows\SysWOW64\netsh.exe netsh firewall add allowedprogram "C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe" "AnubisSearchFree.exe" ENABLE

Stealing of Sensitive Information

Yara detected Njrat

Source: Yara match	File source: 4xKDL5YCfQ.exe, type: SAMPLE
Source: Yara match	File source: 0.0.4xKDL5YCfQ.exe.e10000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000000.1609993394.0000000000E12000.00000002.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 4xKDL5YCfQ.exe PID: 6680, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: AnubisSearchFree.exe PID: 5804, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe, type: DROPPED

Remote Access Functionality

Yara detected Njrat

Source: Yara match	File source: 4xKDL5YCfQ.exe, type: SAMPLE
Source: Yara match	File source: 0.0.4xKDL5YCfQ.exe.e10000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000000.1609993394.0000000000E12000.00000002.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 4xKDL5YCfQ.exe PID: 6680, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: AnubisSearchFree.exe PID: 5804, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe, type: DROPPED

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Replication Through Removable Media	1 Native API	1 DLL Side-Loading	1 Access Token Manipulation	1 Masquerading	1 Input Capture	11 Security Software Discovery	Remote Services	1 Input Capture	1 Non-Standard Port	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	12 Process Injection	21 Disable or Modify Tools	LSASS Memory	1 Process Discovery	Remote Desktop Protocol	Data from Removable Media	1 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	1 DLL Side-Loading	31 Virtualization/Sandbox Evasion	Security Account Manager	31 Virtualization/Sandbox Evasion	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 Access Token Manipulation	NTDS	1 Application Window Discovery	Distributed Component Object Model	Input Capture	11 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	12 Process Injection	LSA Secrets	1 Peripheral Device Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 Software Packing	Cached Domain Credentials	1 File and Directory Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	1 DLL Side-Loading	DCSync	12 System Information Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
4xKDL5YCfQ.exe	95%	ReversingLabs	ByteCode-MSIL.Backdoor.Ratenjay
4xKDL5YCfQ.exe	85%	Virustotal		Browse
4xKDL5YCfQ.exe	100%	Avira	TR/ATRAPS.Gen
4xKDL5YCfQ.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label	Link
C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	100%	Avira	TR/ATRAPS.Gen
C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	95%	ReversingLabs	ByteCode-MSIL.Backdoor.Ratenjay
C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe	85%	Virustotal		Browse

Unpacked PE Files

⊘No Antivirus matches

Domains

Source	Detection	Scanner	Label	Link
2.tcp.eu.ngrok.io	11%	Virustotal		Browse

URLs

Source	Detection	Scanner	Label	Link
http://go.micros	0%	URL Reputation	safe
2.tcp.eu.ngrok.io	100%	Avira URL Cloud	malware
2.tcp.eu.ngrok.io	11%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
2.tcp.eu.ngrok.io	18.156.13.209	true	true	11%, Virustotal, Browse	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
2.tcp.eu.ngrok.io	true	11%, Virustotal, Browse Avira URL Cloud: malware	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://dl.dropbox.com/s/p84aaz28t0hepul/Pass.exe?dl=0	4xKDL5YCfQ.exe, AnubisSearchFree.exe.0.dr	false		high
http://go.micros	4xKDL5YCfQ.exe, 00000000.00000002.1678024784.000000000140E000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
18.156.13.209	2.tcp.eu.ngrok.io	United States	16509	AMAZON-02US	true
3.126.37.18	unknown	United States	16509	AMAZON-02US	false
18.197.239.5	unknown	United States	16509	AMAZON-02US	true

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1387981
Start date and time:	2024-02-07 02:46:07 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 7m 3s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	9
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	4xKDL5YCfQ.exe renamed because original name is a hash value
Original Sample Name:	0cd936fb66bde4378c21bb48fd093ff8.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@6/4@4/3
EGA Information:	Successful, ratio: 100%
HCA Information:	Successful, ratio: 100% Number of executed functions: 105 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .exe Override analysis time to 240000 for current running targets taking high CPU consumption

Warnings

Behavior information exceeds normal sizes, reducing to normal. Report will have missing behavior information.
Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, WMIADAP.exe, SIHClient.exe, conhost.exe
Excluded domains from analysis (whitelisted): ocsp.digicert.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing behavior information.
Report size getting too big, too many NtDeviceIoControlFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtQueryValueKey calls found.

Simulations

Behavior and APIs

Time	Type	Description
02:47:38	API Interceptor	1152290x Sleep call for process: AnubisSearchFree.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
18.156.13.209	http://www.sdrclm.cn/vendor/phpdocumentor/P800/P90GT_Invoice_Related_Property_Tax_P800.exe	Get hash	malicious	RedLine	Browse	2.tcp.eu.ngrok.io:17685/
3.126.37.18	b8UsrDOVGV.exe	Get hash	malicious	Njrat	Browse
	tiodtk2cfy.exe	Get hash	malicious	Njrat	Browse
	pQBmVoyRnw.exe	Get hash	malicious	Njrat	Browse
	NezbdhNgwG.exe	Get hash	malicious	Njrat	Browse
	xdPdkPMD8u.exe	Get hash	malicious	Njrat	Browse
	VBUXm77rfL.exe	Get hash	malicious	Njrat	Browse
	gEuhLHV0.posh.ps1	Get hash	malicious	Metasploit	Browse
	MibKbjH4.posh.ps1	Get hash	malicious	Unknown	Browse
	kXghM8bJcm.exe	Get hash	malicious	Njrat	Browse
	OUXkIxeP6k.exe	Get hash	malicious	Njrat	Browse
18.197.239.5	P90GT_Invoice_Related_Property_Tax_P800.exe	Get hash	malicious	RedLine	Browse	2.tcp.eu.ngrok.io:17685/

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
2.tcp.eu.ngrok.io	R3ov8eFFFP.exe	Get hash	malicious	Njrat	Browse	3.127.138.57
	Ve0c8i5So2.exe	Get hash	malicious	Njrat	Browse	18.157.68.73
	LMQV4V1d3E.exe	Get hash	malicious	Njrat	Browse	18.192.93.86
	b8UsrDOVGV.exe	Get hash	malicious	Njrat	Browse	3.127.138.57
	2G8CgDVl3K.exe	Get hash	malicious	Njrat	Browse	18.197.239.5
	BHp5Is5Xe7.exe	Get hash	malicious	Njrat	Browse	18.192.93.86
	tiodtk2cfy.exe	Get hash	malicious	Njrat	Browse	3.127.138.57
	QUuUm3J8x3.exe	Get hash	malicious	Njrat	Browse	3.127.138.57
	81Rz15POL6.exe	Get hash	malicious	Njrat	Browse	18.157.68.73
	649DB66A36E095B16832637A31D3CCC75040C5A6C23F6.exe	Get hash	malicious	Njrat	Browse	18.156.13.209

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
AMAZON-02US	HFOFKjtjDT.exe	Get hash	malicious	Amadey, RisePro Stealer	Browse	99.86.229.93
	file.exe	Get hash	malicious	Amadey, RisePro Stealer	Browse	13.226.34.75
	https://www.verificaweb.it/	Get hash	malicious	Unknown	Browse	52.18.59.124
	https://docsend.com/view/9i4fkz7idqy3vyqn	Get hash	malicious	HtmlDropper, HTMLPhisher	Browse	99.86.229.104
	https://t.em.home.dell.com/r/?id=tfa77116e,aedd00e8,7da9a494&ven3=7da9a494&lid=7da9a494&p1=//global.effexhost.com/jamiejeee/eyfehgjhejhgyebee/amh5YmxAdmVjdHJhLmFp	Get hash	malicious	HTMLPhisher	Browse	50.112.240.56
	https://workflowy.com/s/secure-business-docu/54LPixfYyJebxHuB	Get hash	malicious	HTMLPhisher	Browse	44.241.177.79
	http://docsend.com/view/2ea5cvcrx943asvy	Get hash	malicious	HtmlDropper, HTMLPhisher	Browse	99.86.229.55
	https://guidingmenbyab.com/s/_.php?uni=kenley.scarlett@hilcorp.com&aidna=Ki5ndWlkaW5nbWVuYnlhYi5jb20=&u=aGlyZW9mZnNob3JlLmNvL3MveXl5eXl5eXl5eXl5eXl5eXQva2VubGV5LnNjYXJsZXR0QGhpbGNvcnAuY29t	Get hash	malicious	Unknown	Browse	52.85.151.18
	https://acrobat.adobe.com/id/urn:aaid:sc:VA6C2:8f1cda96-cfaa-4211-8c98-be0c7f8ebaaf	Get hash	malicious	Unknown	Browse	54.192.39.53
	emmanuelm 194334_Tue Feb,2024.html	Get hash	malicious	HTMLPhisher	Browse	52.27.205.114
AMAZON-02US	HFOFKjtjDT.exe	Get hash	malicious	Amadey, RisePro Stealer	Browse	99.86.229.93
	file.exe	Get hash	malicious	Amadey, RisePro Stealer	Browse	13.226.34.75
	https://www.verificaweb.it/	Get hash	malicious	Unknown	Browse	52.18.59.124
	https://docsend.com/view/9i4fkz7idqy3vyqn	Get hash	malicious	HtmlDropper, HTMLPhisher	Browse	99.86.229.104
	https://t.em.home.dell.com/r/?id=tfa77116e,aedd00e8,7da9a494&ven3=7da9a494&lid=7da9a494&p1=//global.effexhost.com/jamiejeee/eyfehgjhejhgyebee/amh5YmxAdmVjdHJhLmFp	Get hash	malicious	HTMLPhisher	Browse	50.112.240.56
	https://workflowy.com/s/secure-business-docu/54LPixfYyJebxHuB	Get hash	malicious	HTMLPhisher	Browse	44.241.177.79
	http://docsend.com/view/2ea5cvcrx943asvy	Get hash	malicious	HtmlDropper, HTMLPhisher	Browse	99.86.229.55
	https://guidingmenbyab.com/s/_.php?uni=kenley.scarlett@hilcorp.com&aidna=Ki5ndWlkaW5nbWVuYnlhYi5jb20=&u=aGlyZW9mZnNob3JlLmNvL3MveXl5eXl5eXl5eXl5eXl5eXQva2VubGV5LnNjYXJsZXR0QGhpbGNvcnAuY29t	Get hash	malicious	Unknown	Browse	52.85.151.18
	https://acrobat.adobe.com/id/urn:aaid:sc:VA6C2:8f1cda96-cfaa-4211-8c98-be0c7f8ebaaf	Get hash	malicious	Unknown	Browse	54.192.39.53
	emmanuelm 194334_Tue Feb,2024.html	Get hash	malicious	HTMLPhisher	Browse	52.27.205.114
AMAZON-02US	HFOFKjtjDT.exe	Get hash	malicious	Amadey, RisePro Stealer	Browse	99.86.229.93
	file.exe	Get hash	malicious	Amadey, RisePro Stealer	Browse	13.226.34.75
	https://www.verificaweb.it/	Get hash	malicious	Unknown	Browse	52.18.59.124
	https://docsend.com/view/9i4fkz7idqy3vyqn	Get hash	malicious	HtmlDropper, HTMLPhisher	Browse	99.86.229.104
	https://t.em.home.dell.com/r/?id=tfa77116e,aedd00e8,7da9a494&ven3=7da9a494&lid=7da9a494&p1=//global.effexhost.com/jamiejeee/eyfehgjhejhgyebee/amh5YmxAdmVjdHJhLmFp	Get hash	malicious	HTMLPhisher	Browse	50.112.240.56
	https://workflowy.com/s/secure-business-docu/54LPixfYyJebxHuB	Get hash	malicious	HTMLPhisher	Browse	44.241.177.79
	http://docsend.com/view/2ea5cvcrx943asvy	Get hash	malicious	HtmlDropper, HTMLPhisher	Browse	99.86.229.55
	https://guidingmenbyab.com/s/_.php?uni=kenley.scarlett@hilcorp.com&aidna=Ki5ndWlkaW5nbWVuYnlhYi5jb20=&u=aGlyZW9mZnNob3JlLmNvL3MveXl5eXl5eXl5eXl5eXl5eXQva2VubGV5LnNjYXJsZXR0QGhpbGNvcnAuY29t	Get hash	malicious	Unknown	Browse	52.85.151.18
	https://acrobat.adobe.com/id/urn:aaid:sc:VA6C2:8f1cda96-cfaa-4211-8c98-be0c7f8ebaaf	Get hash	malicious	Unknown	Browse	54.192.39.53
	emmanuelm 194334_Tue Feb,2024.html	Get hash	malicious	HTMLPhisher	Browse	52.27.205.114

Process:	C:\Users\user\Desktop\4xKDL5YCfQ.exe
File Type:	ASCII text, with CRLF line terminators
Category:	modified
Size (bytes):	525
Entropy (8bit):	5.259753436570609
Encrypted:	false
SSDEEP:	12:Q3LaJU2C9XAn10Ug+9pfu9t0U29xtUz1B0U2uk71K6xhk7v:MLF2CpI3zffup29Iz52Ve
MD5:	260E01CC001F9C4643CA7A62F395D747
SHA1:	492AD0ACE3A9C8736909866EEA168962D418BE5A
SHA-256:	4BC52CCF866F489772A6919A0CC2C55B1432729D6BDF29E17E5853ABDFAB6030
SHA-512:	01AF7D75257E3DBD460E328F5C057D0367B83D3D9397E89CA3AE54AB9B2842D62352D8CCB4BE98ACE0C5667846759D32C199DE39ECCD0CF9CD6A83267D27E7C4
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	1,"fusion","GAC",0..3,"C:\Windows\assembly\NativeImages_v2.0.50727_32\System\bec14584c93014efbc76285c35d1e891\System.ni.dll",0..3,"C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\7d443c6c007fe8696f9aa6ff1da53ef7\Microsoft.VisualBasic.ni.dll",0..3,"C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\2cdaeaf53e3d49038cf7cb0ce9d805d3\System.Drawing.ni.dll",0..3,"C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\d0e5535854cce87ea7f2d69d0594b7a8\System.Windows.Forms.ni.dll",0..

C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe

Download File

Process:	C:\Users\user\Desktop\4xKDL5YCfQ.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	37888
Entropy (8bit):	5.5747945876385785
Encrypted:	false
SSDEEP:	768:4rrvsKADtOHiR4akroQY9dQ3rM+rMRa8NuqJt:4rrGtVS0QY9Go+gRJNd
MD5:	0CD936FB66BDE4378C21BB48FD093FF8
SHA1:	B0BED981A0F86CC96C7B639F1C4BA34DADD93750
SHA-256:	F35BEF5E2663A600079350FE75EA98CE7288989DC8E3BB415A93D4CA85E80989
SHA-512:	21364C42D4DE8B371CA2FBB62A3008235F7A6F595F85C3ECF14F0B37FCB373C629C80D192260E429738C1E32E18BECCF2EC6DC3C4074F7DE1AB6D9C88903F954
Malicious:	true
Yara Hits:	Rule: JoeSecurity_Njrat, Description: Yara detected Njrat, Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe, Author: Joe Security Rule: Windows_Trojan_Njrat_30f3c220, Description: unknown, Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe, Author: unknown Rule: njrat1, Description: Identify njRat, Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe, Author: Brian Wallace @botnet_hunter Rule: MALWARE_Win_NjRAT, Description: Detects NjRAT / Bladabindi, Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe, Author: ditekSHen
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 95% Antivirus: Virustotal, Detection: 85%, Browse
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....!.e................................ ........@.. ....................................@.....................................S.......@............................................................................ ............... ..H............text....... ...................... ..`.rsrc...@...........................@..@.reloc..............................@..B........................H........e...E..........................................................&.(......*..(.......s.........s.........s.........s...........0...........~....o.....+...0...........~....o.....+...0...........~....o.....+...0...........~....o.....+...0.............(....(.....+.....0............(.....+...0................(.....+...0............(.....+...0.. ...................,.(...+.+.+....+....0...........................*..(..........0..&........~..............,.(...+.

C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe:Zone.Identifier

Download File

Process:	C:\Users\user\Desktop\4xKDL5YCfQ.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Reputation:	high, very likely benign file
Preview:	[ZoneTransfer]....ZoneId=0

\Device\ConDrv

Download File

Process:	C:\Windows\SysWOW64\netsh.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	313
Entropy (8bit):	4.971939296804078
Encrypted:	false
SSDEEP:	6:/ojfKsUTGN8Ypox42k9L+DbGMKeQE+vigqAZs2E+AYeDPO+Yswyha:wjPIGNrkHk9iaeIM6ADDPOHyha
MD5:	689E2126A85BF55121488295EE068FA1
SHA1:	09BAAA253A49D80C18326DFBCA106551EBF22DD6
SHA-256:	D968A966EF474068E41256321F77807A042F1965744633D37A203A705662EC25
SHA-512:	C3736A8FC7E6573FA1B26FE6A901C05EE85C55A4A276F8F569D9EADC9A58BEC507D1BB90DBF9EA62AE79A6783178C69304187D6B90441D82E46F5F56172B5C5C
Malicious:	false
Reputation:	high, very likely benign file
Preview:	..IMPORTANT: Command executed successfully...However, "netsh firewall" is deprecated;..use "netsh advfirewall firewall" instead...For more information on using "netsh advfirewall firewall" commands..instead of "netsh firewall", see KB article 947709..at https://go.microsoft.com/fwlink/?linkid=121488 .....Ok.....

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy (8bit):	5.5747945876385785
TrID:	Win32 Executable (generic) Net Framework (10011505/4) 49.80% Win32 Executable (generic) a (10002005/4) 49.75% Generic CIL Executable (.NET, Mono, etc.) (73296/58) 0.36% Windows Screen Saver (13104/52) 0.07% Generic Win/DOS Executable (2004/3) 0.01%
File name:	4xKDL5YCfQ.exe
File size:	37'888 bytes
MD5:	0cd936fb66bde4378c21bb48fd093ff8
SHA1:	b0bed981a0f86cc96c7b639f1c4ba34dadd93750
SHA256:	f35bef5e2663a600079350fe75ea98ce7288989dc8e3bb415a93d4ca85e80989
SHA512:	21364c42d4de8b371ca2fbb62a3008235f7a6f595f85c3ecf14f0b37fcb373c629c80d192260e429738c1e32e18beccf2ec6dc3c4074f7de1ab6d9c88903f954
SSDEEP:	768:4rrvsKADtOHiR4akroQY9dQ3rM+rMRa8NuqJt:4rrGtVS0QY9Go+gRJNd
TLSH:	7A032A4D7FE18568C5FD097B06B2D412077BE04B6923D90E8EE664EA37636C18F50AF2
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....!.e................................. ........@.. ....................................@................................

File Icon


Icon Hash:	90cececece8e8eb0

Static PE Info

General

Entrypoint:	0x40abde
Entrypoint Section:	.text
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE
Time Stamp:	0x65BF218D [Sun Feb 4 05:33:01 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	4
OS Version Minor:	0
File Version Major:	4
File Version Minor:	0
Subsystem Version Major:	4
Subsystem Version Minor:	0
Import Hash:	f34d5f2d4577ed6d9ceec516c1f5a744

Entrypoint Preview

Instruction
jmp dword ptr [00402000h]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0xab88	0x53	.text
IMAGE_DIRECTORY_ENTRY_RESOURCE	0xc000	0x240	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0xe000	0xc	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x2000	0x8	.text
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x2008	0x48	.text
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x2000	0x8be4	0x8c00	aada2e8432db3544e7333aba3476a273	False	0.4644810267857143	data	5.606389585117211	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.rsrc	0xc000	0x240	0x400	f7ce2f7b506ce16c06c85a549ef2cd98	False	0.3134765625	data	4.968771659524424	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.reloc	0xe000	0xc	0x200	5e643593c1977dc03546e12ddc8dbcd9	False	0.044921875	data	0.08153941234324169	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0xc058	0x1e7	XML 1.0 document, ASCII text, with CRLF line terminators			0.5338809034907598

Imports

DLL	Import
mscoree.dll	_CorExeMain

Network Behavior

Snort IDS Alerts

Timestamp	Protocol	SID	Message	Source Port	Dest Port	Source IP	Dest IP
192.168.2.418.197.239.549858104452033132 02/07/24-02:49:07.493377	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49858	10445	192.168.2.4	18.197.239.5
192.168.2.43.126.37.1850044104452814856 02/07/24-02:50:33.304514	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50044	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850045104452814856 02/07/24-02:50:33.726367	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50045	10445	192.168.2.4	3.126.37.18
192.168.2.418.197.239.549857104452033132 02/07/24-02:49:07.054432	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49857	10445	192.168.2.4	18.197.239.5
192.168.2.418.197.239.549859104452033132 02/07/24-02:49:07.921730	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49859	10445	192.168.2.4	18.197.239.5
192.168.2.418.197.239.549856104452033132 02/07/24-02:49:06.633147	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49856	10445	192.168.2.4	18.197.239.5
192.168.2.418.197.239.549854104452033132 02/07/24-02:49:05.775221	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49854	10445	192.168.2.4	18.197.239.5
192.168.2.43.126.37.1850071104452033132 02/07/24-02:50:46.245759	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50071	10445	192.168.2.4	3.126.37.18
192.168.2.418.197.239.549830104452814860 02/07/24-02:48:55.636204	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49830	10445	192.168.2.4	18.197.239.5
192.168.2.43.126.37.1850041104452814856 02/07/24-02:50:32.077714	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50041	10445	192.168.2.4	3.126.37.18
192.168.2.418.197.239.549853104452033132 02/07/24-02:49:05.337629	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49853	10445	192.168.2.4	18.197.239.5
192.168.2.418.197.239.549855104452033132 02/07/24-02:49:06.196808	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49855	10445	192.168.2.4	18.197.239.5
192.168.2.43.126.37.1850070104452033132 02/07/24-02:50:45.835458	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50070	10445	192.168.2.4	3.126.37.18
192.168.2.418.197.239.549832104452814860 02/07/24-02:48:56.523482	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49832	10445	192.168.2.4	18.197.239.5
192.168.2.43.126.37.1850042104452814856 02/07/24-02:50:32.488408	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50042	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850043104452814856 02/07/24-02:50:32.895210	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50043	10445	192.168.2.4	3.126.37.18
192.168.2.418.197.239.549850104452033132 02/07/24-02:49:04.048316	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49850	10445	192.168.2.4	18.197.239.5
192.168.2.43.126.37.1850075104452033132 02/07/24-02:50:47.904280	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50075	10445	192.168.2.4	3.126.37.18
192.168.2.418.156.13.20949919104452033132 02/07/24-02:49:36.940312	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49919	10445	192.168.2.4	18.156.13.209
192.168.2.418.197.239.549851104452033132 02/07/24-02:49:04.481049	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49851	10445	192.168.2.4	18.197.239.5
192.168.2.43.126.37.1850074104452033132 02/07/24-02:50:47.499001	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50074	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850076104452033132 02/07/24-02:50:48.315244	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50076	10445	192.168.2.4	3.126.37.18
192.168.2.418.197.239.549852104452033132 02/07/24-02:49:04.897739	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49852	10445	192.168.2.4	18.197.239.5
192.168.2.418.156.13.20949917104452033132 02/07/24-02:49:36.079246	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49917	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949918104452033132 02/07/24-02:49:36.498065	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49918	10445	192.168.2.4	18.156.13.209
192.168.2.418.197.239.549853104452825564 02/07/24-02:49:05.541661	TCP	2825564	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act)	49853	10445	192.168.2.4	18.197.239.5
192.168.2.418.156.13.20949915104452033132 02/07/24-02:49:35.259181	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49915	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949916104452033132 02/07/24-02:49:35.662307	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49916	10445	192.168.2.4	18.156.13.209
192.168.2.43.126.37.1850048104452814856 02/07/24-02:50:36.907518	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50048	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850072104452033132 02/07/24-02:50:46.662851	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50072	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850073104452033132 02/07/24-02:50:47.080106	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50073	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850046104452814856 02/07/24-02:50:34.132806	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50046	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850047104452814856 02/07/24-02:50:34.541094	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50047	10445	192.168.2.4	3.126.37.18
192.168.2.418.156.13.20949919104452825564 02/07/24-02:49:37.128563	TCP	2825564	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act)	49919	10445	192.168.2.4	18.156.13.209
192.168.2.43.126.37.1850052104452814860 02/07/24-02:50:38.569225	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	50052	10445	192.168.2.4	3.126.37.18
192.168.2.418.156.13.20949923104452825564 02/07/24-02:49:38.762722	TCP	2825564	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act)	49923	10445	192.168.2.4	18.156.13.209
192.168.2.43.126.37.1850053104452814860 02/07/24-02:50:38.978595	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	50053	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850079104452033132 02/07/24-02:50:49.570617	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50079	10445	192.168.2.4	3.126.37.18
192.168.2.418.197.239.549838104452814860 02/07/24-02:48:59.136963	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49838	10445	192.168.2.4	18.197.239.5
192.168.2.418.197.239.549839104452814860 02/07/24-02:48:59.562335	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49839	10445	192.168.2.4	18.197.239.5
192.168.2.43.126.37.1850068104452033132 02/07/24-02:50:45.001620	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50068	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850078104452033132 02/07/24-02:50:49.155887	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50078	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850077104452033132 02/07/24-02:50:48.734031	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50077	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850066104452033132 02/07/24-02:50:44.168203	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50066	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850067104452033132 02/07/24-02:50:44.579675	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50067	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850055104452814860 02/07/24-02:50:39.815335	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	50055	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850049104452814860 02/07/24-02:50:37.322861	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	50049	10445	192.168.2.4	3.126.37.18
192.168.2.418.197.239.549834104452814860 02/07/24-02:48:57.407065	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49834	10445	192.168.2.4	18.197.239.5
192.168.2.418.197.239.549828104452814856 02/07/24-02:48:54.341858	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49828	10445	192.168.2.4	18.197.239.5
192.168.2.418.197.239.549822104452814860 02/07/24-02:48:51.765248	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49822	10445	192.168.2.4	18.197.239.5
192.168.2.418.197.239.549826104452814860 02/07/24-02:48:53.475834	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49826	10445	192.168.2.4	18.197.239.5
192.168.2.418.197.239.549833104452814860 02/07/24-02:48:56.958196	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49833	10445	192.168.2.4	18.197.239.5
192.168.2.418.197.239.549837104452814860 02/07/24-02:48:58.695069	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49837	10445	192.168.2.4	18.197.239.5
192.168.2.418.197.239.549823104452814860 02/07/24-02:48:52.198655	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49823	10445	192.168.2.4	18.197.239.5
192.168.2.418.197.239.549827104452814860 02/07/24-02:48:53.916382	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49827	10445	192.168.2.4	18.197.239.5
192.168.2.418.197.239.549829104452814856 02/07/24-02:48:54.869320	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49829	10445	192.168.2.4	18.197.239.5
192.168.2.43.126.37.1850069104452033132 02/07/24-02:50:45.424080	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50069	10445	192.168.2.4	3.126.37.18
192.168.2.418.197.239.549825104452814860 02/07/24-02:48:53.038952	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49825	10445	192.168.2.4	18.197.239.5
192.168.2.43.126.37.1850059104452814860 02/07/24-02:50:41.461267	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	50059	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850034104452814856 02/07/24-02:50:29.191708	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50034	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850056104452814856 02/07/24-02:50:40.232380	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50056	10445	192.168.2.4	3.126.37.18
192.168.2.418.197.239.549848104452033132 02/07/24-02:49:03.191902	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49848	10445	192.168.2.4	18.197.239.5
192.168.2.43.126.37.1850033104452814856 02/07/24-02:50:28.786661	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50033	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850035104452814856 02/07/24-02:50:29.611525	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50035	10445	192.168.2.4	3.126.37.18
192.168.2.418.197.239.549849104452033132 02/07/24-02:49:03.620754	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49849	10445	192.168.2.4	18.197.239.5
192.168.2.418.197.239.549840104452814860 02/07/24-02:48:59.980200	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49840	10445	192.168.2.4	18.197.239.5
192.168.2.418.156.13.20949906104452814860 02/07/24-02:49:30.708949	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49906	10445	192.168.2.4	18.156.13.209
192.168.2.43.126.37.1850030104452814856 02/07/24-02:50:27.556231	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50030	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850038104452814856 02/07/24-02:50:30.843062	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50038	10445	192.168.2.4	3.126.37.18
192.168.2.418.197.239.549841104452814860 02/07/24-02:49:00.415601	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49841	10445	192.168.2.4	18.197.239.5
192.168.2.43.126.37.1850060104452033132 02/07/24-02:50:41.671989	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50060	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850031104452814856 02/07/24-02:50:27.964054	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50031	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850039104452814856 02/07/24-02:50:31.248102	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50039	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850081104452033132 02/07/24-02:50:50.380648	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50081	10445	192.168.2.4	3.126.37.18
192.168.2.418.197.239.549843104452814860 02/07/24-02:49:01.259212	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49843	10445	192.168.2.4	18.197.239.5
192.168.2.418.156.13.20949909104452814860 02/07/24-02:49:32.990196	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49909	10445	192.168.2.4	18.156.13.209
192.168.2.43.126.37.1850032104452814856 02/07/24-02:50:28.367882	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50032	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850080104452033132 02/07/24-02:50:49.972635	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50080	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850054104452814856 02/07/24-02:50:39.404218	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50054	10445	192.168.2.4	3.126.37.18
192.168.2.418.197.239.549821104452814860 02/07/24-02:48:51.337887	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49821	10445	192.168.2.4	18.197.239.5
192.168.2.43.126.37.1850064104452033132 02/07/24-02:50:43.331097	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50064	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850065104452033132 02/07/24-02:50:43.748519	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50065	10445	192.168.2.4	3.126.37.18
192.168.2.418.156.13.20949909104452825564 02/07/24-02:49:32.990196	TCP	2825564	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act)	49909	10445	192.168.2.4	18.156.13.209
192.168.2.43.126.37.1850085104452033132 02/07/24-02:50:52.023217	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50085	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850087104452033132 02/07/24-02:50:52.852716	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50087	10445	192.168.2.4	3.126.37.18
192.168.2.418.156.13.20949906104452825564 02/07/24-02:49:30.708949	TCP	2825564	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act)	49906	10445	192.168.2.4	18.156.13.209
192.168.2.43.126.37.1850082104452033132 02/07/24-02:50:50.801366	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50082	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850086104452033132 02/07/24-02:50:52.444948	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50086	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850061104452033132 02/07/24-02:50:42.078365	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50061	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850037104452814856 02/07/24-02:50:30.431384	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50037	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850083104452033132 02/07/24-02:50:51.204150	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50083	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850036104452814856 02/07/24-02:50:30.019713	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50036	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850057104452814856 02/07/24-02:50:40.638007	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50057	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850058104452814856 02/07/24-02:50:41.047195	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50058	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850062104452033132 02/07/24-02:50:42.496262	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50062	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850063104452033132 02/07/24-02:50:42.919005	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50063	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850084104452033132 02/07/24-02:50:51.608547	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50084	10445	192.168.2.4	3.126.37.18
192.168.2.418.156.13.20949933104452033132 02/07/24-02:49:44.624408	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49933	10445	192.168.2.4	18.156.13.209
192.168.2.43.126.37.1849997104452033132 02/07/24-02:50:12.717403	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49997	10445	192.168.2.4	3.126.37.18
192.168.2.418.156.13.20949911104452033132 02/07/24-02:49:33.613084	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49911	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949912104452033132 02/07/24-02:49:34.027957	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49912	10445	192.168.2.4	18.156.13.209
192.168.2.418.197.239.549842104452814856 02/07/24-02:49:00.836030	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49842	10445	192.168.2.4	18.197.239.5
192.168.2.418.156.13.20949932104452033132 02/07/24-02:49:44.220259	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49932	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949934104452033132 02/07/24-02:49:45.038512	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49934	10445	192.168.2.4	18.156.13.209
192.168.2.418.197.239.549820104452814856 02/07/24-02:48:50.911535	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49820	10445	192.168.2.4	18.197.239.5
192.168.2.418.156.13.20949931104452033132 02/07/24-02:49:43.800457	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49931	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949935104452033132 02/07/24-02:49:45.458156	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49935	10445	192.168.2.4	18.156.13.209
192.168.2.43.126.37.1850050104452814860 02/07/24-02:50:37.744929	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	50050	10445	192.168.2.4	3.126.37.18
192.168.2.418.156.13.20949908104452814856 02/07/24-02:49:32.586958	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49908	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949910104452033132 02/07/24-02:49:33.208428	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49910	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949913104452033132 02/07/24-02:49:34.438187	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49913	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949914104452033132 02/07/24-02:49:34.849764	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49914	10445	192.168.2.4	18.156.13.209
192.168.2.43.126.37.1849993104452825564 02/07/24-02:50:11.239915	TCP	2825564	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act)	49993	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1849994104452033132 02/07/24-02:50:11.460739	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49994	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1849998104452033132 02/07/24-02:50:13.126889	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49998	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1849995104452033132 02/07/24-02:50:11.878089	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49995	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850059104452825564 02/07/24-02:50:41.461267	TCP	2825564	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act)	50059	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1849996104452033132 02/07/24-02:50:12.287962	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49996	10445	192.168.2.4	3.126.37.18
192.168.2.418.156.13.20949902104452814856 02/07/24-02:49:28.932787	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49902	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949903104452814856 02/07/24-02:49:29.338901	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49903	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949900104452814856 02/07/24-02:49:28.122200	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49900	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949901104452814856 02/07/24-02:49:28.527146	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49901	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949904104452814856 02/07/24-02:49:29.760991	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49904	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949905104452814856 02/07/24-02:49:30.196933	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49905	10445	192.168.2.4	18.156.13.209
192.168.2.43.126.37.1850051104452814856 02/07/24-02:50:38.149842	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50051	10445	192.168.2.4	3.126.37.18
192.168.2.418.156.13.20949930104452033132 02/07/24-02:49:41.442521	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49930	10445	192.168.2.4	18.156.13.209
192.168.2.43.126.37.1849999104452033132 02/07/24-02:50:13.547538	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49999	10445	192.168.2.4	3.126.37.18
192.168.2.418.197.239.549835104452033132 02/07/24-02:48:57.643135	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49835	10445	192.168.2.4	18.197.239.5
192.168.2.418.197.239.549837104452033132 02/07/24-02:48:58.492218	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49837	10445	192.168.2.4	18.197.239.5
192.168.2.43.126.37.1850022104452814856 02/07/24-02:50:24.197473	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50022	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850090104452033132 02/07/24-02:50:54.090975	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50090	10445	192.168.2.4	3.126.37.18
192.168.2.418.156.13.20949917104452814860 02/07/24-02:49:36.283338	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49917	10445	192.168.2.4	18.156.13.209
192.168.2.418.197.239.549852104452814860 02/07/24-02:49:05.100332	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49852	10445	192.168.2.4	18.197.239.5
192.168.2.418.197.239.549831104452033132 02/07/24-02:48:55.885692	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49831	10445	192.168.2.4	18.197.239.5
192.168.2.418.197.239.549833104452033132 02/07/24-02:48:56.755308	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49833	10445	192.168.2.4	18.197.239.5
192.168.2.418.197.239.549839104452033132 02/07/24-02:48:59.362937	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49839	10445	192.168.2.4	18.197.239.5
192.168.2.43.126.37.1850020104452814856 02/07/24-02:50:22.497855	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50020	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850028104452814856 02/07/24-02:50:26.715216	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50028	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850092104452033132 02/07/24-02:50:55.021503	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50092	10445	192.168.2.4	3.126.37.18
192.168.2.418.197.239.549854104452814860 02/07/24-02:49:05.977322	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49854	10445	192.168.2.4	18.197.239.5
192.168.2.43.126.37.1850064104452814856 02/07/24-02:50:43.529931	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50064	10445	192.168.2.4	3.126.37.18
192.168.2.418.156.13.20949919104452814860 02/07/24-02:49:37.128563	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49919	10445	192.168.2.4	18.156.13.209
192.168.2.43.126.37.1850054104452033132 02/07/24-02:50:39.207166	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50054	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850096104452033132 02/07/24-02:50:57.115038	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50096	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850098104452033132 02/07/24-02:50:57.940816	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50098	10445	192.168.2.4	3.126.37.18
192.168.2.418.197.239.549830104452825564 02/07/24-02:48:55.636204	TCP	2825564	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act)	49830	10445	192.168.2.4	18.197.239.5
192.168.2.418.197.239.549847104452814856 02/07/24-02:49:02.969733	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49847	10445	192.168.2.4	18.197.239.5
192.168.2.418.156.13.20949913104452814860 02/07/24-02:49:34.640725	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49913	10445	192.168.2.4	18.156.13.209
192.168.2.418.197.239.549832104452825564 02/07/24-02:48:56.523482	TCP	2825564	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act)	49832	10445	192.168.2.4	18.197.239.5
192.168.2.43.126.37.1849993104452033132 02/07/24-02:50:11.037080	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49993	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850050104452033132 02/07/24-02:50:37.547848	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50050	10445	192.168.2.4	3.126.37.18
192.168.2.418.156.13.20949936104452033132 02/07/24-02:49:45.875693	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49936	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949938104452033132 02/07/24-02:49:46.704674	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49938	10445	192.168.2.4	18.156.13.209
192.168.2.43.126.37.1850026104452814856 02/07/24-02:50:25.878288	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50026	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850094104452033132 02/07/24-02:50:56.173452	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50094	10445	192.168.2.4	3.126.37.18
192.168.2.418.197.239.549850104452814860 02/07/24-02:49:04.245932	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49850	10445	192.168.2.4	18.197.239.5
192.168.2.43.126.37.1849991104452033132 02/07/24-02:50:10.207892	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49991	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850052104452033132 02/07/24-02:50:38.364830	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50052	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850055104452825564 02/07/24-02:50:39.815335	TCP	2825564	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act)	50055	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850068104452814856 02/07/24-02:50:45.204160	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50068	10445	192.168.2.4	3.126.37.18
192.168.2.418.156.13.20949915104452814860 02/07/24-02:49:35.450919	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49915	10445	192.168.2.4	18.156.13.209
192.168.2.418.197.239.549762104452825563 02/07/24-02:48:10.287233	TCP	2825563	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf)	49762	10445	192.168.2.4	18.197.239.5
192.168.2.418.197.239.549849104452814860 02/07/24-02:49:03.824035	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49849	10445	192.168.2.4	18.197.239.5
192.168.2.43.126.37.1850024104452814860 02/07/24-02:50:25.038368	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	50024	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850076104452814860 02/07/24-02:50:48.521109	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	50076	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850089104452033132 02/07/24-02:50:53.677705	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50089	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850056104452033132 02/07/24-02:50:40.029934	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50056	10445	192.168.2.4	3.126.37.18
192.168.2.418.197.239.549805104452814856 02/07/24-02:48:44.115305	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49805	10445	192.168.2.4	18.197.239.5
192.168.2.418.197.239.549816104452814856 02/07/24-02:48:49.146202	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49816	10445	192.168.2.4	18.197.239.5
192.168.2.43.126.37.1849999104452825564 02/07/24-02:50:13.745445	TCP	2825564	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act)	49999	10445	192.168.2.4	3.126.37.18
192.168.2.418.197.239.549818104452814860 02/07/24-02:48:50.024449	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49818	10445	192.168.2.4	18.197.239.5
192.168.2.43.126.37.1850045104452033132 02/07/24-02:50:33.527392	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50045	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850066104452814860 02/07/24-02:50:44.374037	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	50066	10445	192.168.2.4	3.126.37.18
192.168.2.418.197.239.549803104452814860 02/07/24-02:48:43.148172	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49803	10445	192.168.2.4	18.197.239.5
192.168.2.418.197.239.549845104452814860 02/07/24-02:49:02.120134	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49845	10445	192.168.2.4	18.197.239.5
192.168.2.418.197.239.549856104452814860 02/07/24-02:49:06.839273	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49856	10445	192.168.2.4	18.197.239.5
192.168.2.418.156.13.20949909104452033132 02/07/24-02:49:32.791578	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49909	10445	192.168.2.4	18.156.13.209
192.168.2.418.197.239.549807104452814856 02/07/24-02:48:45.061200	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49807	10445	192.168.2.4	18.197.239.5
192.168.2.418.197.239.549801104452814860 02/07/24-02:48:42.169194	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49801	10445	192.168.2.4	18.197.239.5
192.168.2.43.126.37.1850047104452033132 02/07/24-02:50:34.345787	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50047	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850058104452033132 02/07/24-02:50:40.853884	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50058	10445	192.168.2.4	3.126.37.18
192.168.2.418.197.239.549858104452814860 02/07/24-02:49:07.695494	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49858	10445	192.168.2.4	18.197.239.5
192.168.2.43.126.37.1850049104452033132 02/07/24-02:50:37.121450	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50049	10445	192.168.2.4	3.126.37.18
192.168.2.418.197.239.549809104452814856 02/07/24-02:48:46.009426	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49809	10445	192.168.2.4	18.197.239.5
192.168.2.43.126.37.1849990104452814856 02/07/24-02:50:09.995786	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49990	10445	192.168.2.4	3.126.37.18
192.168.2.418.197.239.549846104452033132 02/07/24-02:49:02.352934	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49846	10445	192.168.2.4	18.197.239.5
192.168.2.43.126.37.1849992104452814856 02/07/24-02:50:10.823371	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49992	10445	192.168.2.4	3.126.37.18
192.168.2.418.197.239.549823104452033132 02/07/24-02:48:52.001573	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49823	10445	192.168.2.4	18.197.239.5
192.168.2.43.126.37.1849994104452814856 02/07/24-02:50:11.668040	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49994	10445	192.168.2.4	3.126.37.18
192.168.2.418.197.239.549842104452033132 02/07/24-02:49:00.641371	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49842	10445	192.168.2.4	18.197.239.5
192.168.2.418.197.239.549844104452033132 02/07/24-02:49:01.486835	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49844	10445	192.168.2.4	18.197.239.5
192.168.2.418.197.239.549821104452033132 02/07/24-02:48:51.141287	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49821	10445	192.168.2.4	18.197.239.5
192.168.2.418.197.239.549861104452033132 02/07/24-02:49:08.762836	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49861	10445	192.168.2.4	18.197.239.5
192.168.2.418.197.239.549840104452033132 02/07/24-02:48:59.783886	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49840	10445	192.168.2.4	18.197.239.5
192.168.2.418.156.13.20949907104452033132 02/07/24-02:49:32.174136	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49907	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949928104452033132 02/07/24-02:49:40.627740	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49928	10445	192.168.2.4	18.156.13.209
192.168.2.43.126.37.1849996104452814856 02/07/24-02:50:12.490498	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49996	10445	192.168.2.4	3.126.37.18
192.168.2.418.197.239.549814104452814856 02/07/24-02:48:48.263023	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49814	10445	192.168.2.4	18.197.239.5
192.168.2.418.156.13.20949905104452033132 02/07/24-02:49:30.000845	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49905	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949926104452033132 02/07/24-02:49:39.798677	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49926	10445	192.168.2.4	18.156.13.209
192.168.2.418.197.239.549769104452033132 02/07/24-02:48:18.390783	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49769	10445	192.168.2.4	18.197.239.5
192.168.2.418.197.239.549835104452814856 02/07/24-02:48:57.840648	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49835	10445	192.168.2.4	18.197.239.5
192.168.2.418.156.13.20949947104452033132 02/07/24-02:49:50.409417	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49947	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949949104452033132 02/07/24-02:49:51.233092	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49949	10445	192.168.2.4	18.156.13.209
192.168.2.418.197.239.549767104452033132 02/07/24-02:48:16.272040	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49767	10445	192.168.2.4	18.197.239.5
192.168.2.418.197.239.549812104452814856 02/07/24-02:48:47.374073	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49812	10445	192.168.2.4	18.197.239.5
192.168.2.43.126.37.1850062104452814860 02/07/24-02:50:42.703326	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	50062	10445	192.168.2.4	3.126.37.18
192.168.2.418.156.13.20949901104452033132 02/07/24-02:49:28.330936	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49901	10445	192.168.2.4	18.156.13.209
192.168.2.418.197.239.549765104452033132 02/07/24-02:48:13.954944	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49765	10445	192.168.2.4	18.197.239.5
192.168.2.418.156.13.20949922104452033132 02/07/24-02:49:38.157634	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49922	10445	192.168.2.4	18.156.13.209
192.168.2.43.126.37.1850083104452814860 02/07/24-02:50:51.401366	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	50083	10445	192.168.2.4	3.126.37.18
192.168.2.418.197.239.549831104452814856 02/07/24-02:48:56.090287	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49831	10445	192.168.2.4	18.197.239.5
192.168.2.418.156.13.20949943104452033132 02/07/24-02:49:48.763561	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49943	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949945104452033132 02/07/24-02:49:49.578565	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49945	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949903104452033132 02/07/24-02:49:29.146311	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49903	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949924104452033132 02/07/24-02:49:38.973947	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49924	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949920104452033132 02/07/24-02:49:37.342196	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49920	10445	192.168.2.4	18.156.13.209
192.168.2.418.197.239.549810104452814856 02/07/24-02:48:46.480690	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49810	10445	192.168.2.4	18.197.239.5
192.168.2.418.197.239.549763104452033132 02/07/24-02:48:11.439131	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49763	10445	192.168.2.4	18.197.239.5
192.168.2.418.156.13.20949911104452814856 02/07/24-02:49:33.811739	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49911	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949941104452033132 02/07/24-02:49:47.934265	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49941	10445	192.168.2.4	18.156.13.209
192.168.2.43.126.37.1850060104452814856 02/07/24-02:50:41.868827	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50060	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850087104452814856 02/07/24-02:50:53.056053	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50087	10445	192.168.2.4	3.126.37.18
192.168.2.418.197.239.549815104452033132 02/07/24-02:48:48.508015	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49815	10445	192.168.2.4	18.197.239.5
192.168.2.418.197.239.549816104452033132 02/07/24-02:48:48.948310	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49816	10445	192.168.2.4	18.197.239.5
192.168.2.43.126.37.1850084104452814856 02/07/24-02:50:51.807975	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50084	10445	192.168.2.4	3.126.37.18
192.168.2.418.197.239.549811104452033132 02/07/24-02:48:46.735319	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49811	10445	192.168.2.4	18.197.239.5
192.168.2.418.197.239.549812104452033132 02/07/24-02:48:47.177959	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49812	10445	192.168.2.4	18.197.239.5
192.168.2.418.197.239.549819104452033132 02/07/24-02:48:50.273994	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49819	10445	192.168.2.4	18.197.239.5
192.168.2.418.156.13.20949934104452814860 02/07/24-02:49:45.241871	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49934	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949932104452814856 02/07/24-02:49:44.411663	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49932	10445	192.168.2.4	18.156.13.209
192.168.2.43.126.37.1850000104452814856 02/07/24-02:50:14.164492	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50000	10445	192.168.2.4	3.126.37.18
192.168.2.418.156.13.20949931104452814856 02/07/24-02:49:44.004924	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49931	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949895104452814856 02/07/24-02:49:26.062778	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49895	10445	192.168.2.4	18.156.13.209
192.168.2.43.126.37.1850033104452033132 02/07/24-02:50:28.582142	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50033	10445	192.168.2.4	3.126.37.18
192.168.2.418.156.13.20949899104452814856 02/07/24-02:49:27.704276	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49899	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949958104452033132 02/07/24-02:49:54.983046	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49958	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949898104452814856 02/07/24-02:49:27.284715	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49898	10445	192.168.2.4	18.156.13.209
192.168.2.418.197.239.549778104452033132 02/07/24-02:48:28.593841	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49778	10445	192.168.2.4	18.197.239.5
192.168.2.418.197.239.549779104452033132 02/07/24-02:48:29.313533	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49779	10445	192.168.2.4	18.197.239.5
192.168.2.43.126.37.1850004104452814856 02/07/24-02:50:15.834310	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50004	10445	192.168.2.4	3.126.37.18
192.168.2.418.156.13.20949959104452033132 02/07/24-02:49:55.397974	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49959	10445	192.168.2.4	18.156.13.209
192.168.2.43.126.37.1850030104452033132 02/07/24-02:50:27.348658	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50030	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850003104452814860 02/07/24-02:50:15.422780	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	50003	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850098104452814860 02/07/24-02:50:58.137933	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	50098	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850088104452814860 02/07/24-02:50:53.464249	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	50088	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850024104452033132 02/07/24-02:50:24.839243	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50024	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850023104452033132 02/07/24-02:50:24.437778	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50023	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850034104452033132 02/07/24-02:50:29.000898	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50034	10445	192.168.2.4	3.126.37.18
192.168.2.418.156.13.20949894104452814856 02/07/24-02:49:25.656002	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49894	10445	192.168.2.4	18.156.13.209
192.168.2.43.126.37.1850008104452814860 02/07/24-02:50:17.510094	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	50008	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850014104452814860 02/07/24-02:50:20.018716	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	50014	10445	192.168.2.4	3.126.37.18
192.168.2.418.156.13.20949891104452814856 02/07/24-02:49:24.413314	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49891	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949890104452814856 02/07/24-02:49:24.009118	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49890	10445	192.168.2.4	18.156.13.209
192.168.2.43.126.37.1850037104452033132 02/07/24-02:50:30.233046	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50037	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850028104452033132 02/07/24-02:50:26.511918	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50028	10445	192.168.2.4	3.126.37.18
192.168.2.418.197.239.549825104452033132 02/07/24-02:48:52.844145	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49825	10445	192.168.2.4	18.197.239.5
192.168.2.43.126.37.1850027104452033132 02/07/24-02:50:26.099883	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50027	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850038104452033132 02/07/24-02:50:30.642970	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50038	10445	192.168.2.4	3.126.37.18
192.168.2.418.197.239.549805104452033132 02/07/24-02:48:43.912874	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49805	10445	192.168.2.4	18.197.239.5
192.168.2.418.197.239.549826104452033132 02/07/24-02:48:53.272042	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49826	10445	192.168.2.4	18.197.239.5
192.168.2.43.126.37.1850078104452814856 02/07/24-02:50:49.356981	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50078	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850095104452814856 02/07/24-02:50:56.903060	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50095	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850099104452814856 02/07/24-02:50:58.541482	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50099	10445	192.168.2.4	3.126.37.18
192.168.2.418.197.239.549862104452814860 02/07/24-02:49:09.393118	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49862	10445	192.168.2.4	18.197.239.5
192.168.2.43.126.37.1850073104452814856 02/07/24-02:50:47.278520	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50073	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850077104452814856 02/07/24-02:50:48.940188	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50077	10445	192.168.2.4	3.126.37.18
192.168.2.418.197.239.549809104452033132 02/07/24-02:48:45.806302	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49809	10445	192.168.2.4	18.197.239.5
192.168.2.418.156.13.20949941104452814856 02/07/24-02:49:48.138377	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49941	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949738104452033132 02/07/24-02:47:17.315680	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49738	10445	192.168.2.4	18.156.13.209
192.168.2.418.197.239.549762104452814856 02/07/24-02:48:10.287233	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49762	10445	192.168.2.4	18.197.239.5
192.168.2.43.126.37.1850074104452814856 02/07/24-02:50:47.695749	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50074	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850019104452814856 02/07/24-02:50:22.096086	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50019	10445	192.168.2.4	3.126.37.18
192.168.2.418.197.239.549808104452033132 02/07/24-02:48:45.337106	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49808	10445	192.168.2.4	18.197.239.5
192.168.2.418.197.239.549829104452033132 02/07/24-02:48:54.672349	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49829	10445	192.168.2.4	18.197.239.5
192.168.2.418.156.13.20949942104452814856 02/07/24-02:49:48.554918	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49942	10445	192.168.2.4	18.156.13.209
192.168.2.43.126.37.1850010104452814856 02/07/24-02:50:18.339175	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50010	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850018104452814856 02/07/24-02:50:21.677947	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50018	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850044104452033132 02/07/24-02:50:33.110701	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50044	10445	192.168.2.4	3.126.37.18
192.168.2.418.156.13.20949737104452033132 02/07/24-02:47:14.891580	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49737	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949738104452825563 02/07/24-02:47:17.514360	TCP	2825563	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf)	49738	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949924104452814860 02/07/24-02:49:39.171160	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49924	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949925104452814860 02/07/24-02:49:39.588379	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49925	10445	192.168.2.4	18.156.13.209
192.168.2.418.197.239.549766104452814860 02/07/24-02:48:15.337524	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49766	10445	192.168.2.4	18.197.239.5
192.168.2.418.197.239.549861104452814860 02/07/24-02:49:08.969367	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49861	10445	192.168.2.4	18.197.239.5
192.168.2.418.156.13.20949887104452814856 02/07/24-02:49:22.776608	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49887	10445	192.168.2.4	18.156.13.209
192.168.2.43.126.37.1850040104452033132 02/07/24-02:50:31.467260	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50040	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850015104452814856 02/07/24-02:50:20.431093	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50015	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850020104452033132 02/07/24-02:50:22.301434	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50020	10445	192.168.2.4	3.126.37.18
192.168.2.418.156.13.20949739104452825563 02/07/24-02:47:19.934903	TCP	2825563	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf)	49739	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949888104452814856 02/07/24-02:49:23.196183	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49888	10445	192.168.2.4	18.156.13.209
192.168.2.43.126.37.1850041104452033132 02/07/24-02:50:31.884802	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50041	10445	192.168.2.4	3.126.37.18
192.168.2.418.156.13.20949954104452033132 02/07/24-02:49:53.341391	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49954	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949975104452033132 02/07/24-02:50:02.032786	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49975	10445	192.168.2.4	18.156.13.209
192.168.2.418.197.239.549799104452033132 02/07/24-02:48:40.981466	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49799	10445	192.168.2.4	18.197.239.5
192.168.2.418.156.13.20949949104452814856 02/07/24-02:49:51.435395	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49949	10445	192.168.2.4	18.156.13.209
192.168.2.418.197.239.549795104452033132 02/07/24-02:48:38.918548	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49795	10445	192.168.2.4	18.197.239.5
192.168.2.418.156.13.20949929104452814856 02/07/24-02:49:41.234966	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49929	10445	192.168.2.4	18.156.13.209
192.168.2.418.197.239.549769104452814856 02/07/24-02:48:18.586886	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49769	10445	192.168.2.4	18.197.239.5
192.168.2.418.197.239.549774104452033132 02/07/24-02:48:25.410920	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49774	10445	192.168.2.4	18.197.239.5
192.168.2.418.197.239.549775104452033132 02/07/24-02:48:26.236444	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49775	10445	192.168.2.4	18.197.239.5
192.168.2.418.156.13.20949955104452033132 02/07/24-02:49:53.750046	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49955	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949976104452033132 02/07/24-02:50:02.454546	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49976	10445	192.168.2.4	18.156.13.209
192.168.2.418.197.239.549796104452033132 02/07/24-02:48:39.452383	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49796	10445	192.168.2.4	18.197.239.5
192.168.2.418.156.13.20949928104452814856 02/07/24-02:49:40.825295	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49928	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949920104452814860 02/07/24-02:49:37.543155	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49920	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949945104452814856 02/07/24-02:49:49.776837	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49945	10445	192.168.2.4	18.156.13.209
192.168.2.43.126.37.1850090104452814856 02/07/24-02:50:54.296840	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50090	10445	192.168.2.4	3.126.37.18
192.168.2.418.156.13.20949921104452814860 02/07/24-02:49:37.950296	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49921	10445	192.168.2.4	18.156.13.209
192.168.2.418.197.239.549791104452033132 02/07/24-02:48:36.789944	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49791	10445	192.168.2.4	18.197.239.5
192.168.2.43.126.37.1850070104452814856 02/07/24-02:50:46.034115	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50070	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850091104452814856 02/07/24-02:50:54.714948	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50091	10445	192.168.2.4	3.126.37.18
192.168.2.418.156.13.20949950104452033132 02/07/24-02:49:51.658766	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49950	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949971104452033132 02/07/24-02:50:00.380644	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49971	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949972104452033132 02/07/24-02:50:00.804490	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49972	10445	192.168.2.4	18.156.13.209
192.168.2.43.126.37.1850094104452814856 02/07/24-02:50:56.345419	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50094	10445	192.168.2.4	3.126.37.18
192.168.2.418.197.239.549765104452814856 02/07/24-02:48:14.150528	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49765	10445	192.168.2.4	18.197.239.5
192.168.2.418.197.239.549770104452033132 02/07/24-02:48:19.380286	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49770	10445	192.168.2.4	18.197.239.5
192.168.2.418.197.239.549771104452033132 02/07/24-02:48:20.330217	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49771	10445	192.168.2.4	18.197.239.5
192.168.2.418.156.13.20949731104452825563 02/07/24-02:47:12.679245	TCP	2825563	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf)	49731	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949946104452814856 02/07/24-02:49:50.193399	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49946	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949951104452033132 02/07/24-02:49:52.086572	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49951	10445	192.168.2.4	18.156.13.209
192.168.2.418.197.239.549792104452033132 02/07/24-02:48:37.344581	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49792	10445	192.168.2.4	18.197.239.5
192.168.2.418.156.13.20949918104452814860 02/07/24-02:49:36.701174	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49918	10445	192.168.2.4	18.156.13.209
192.168.2.43.126.37.1850100104452814860 02/07/24-02:50:58.949402	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	50100	10445	192.168.2.4	3.126.37.18
192.168.2.418.156.13.20949952104452814856 02/07/24-02:49:52.702104	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49952	10445	192.168.2.4	18.156.13.209
192.168.2.418.197.239.549772104452814856 02/07/24-02:48:21.464052	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49772	10445	192.168.2.4	18.197.239.5
192.168.2.418.156.13.20949865104452033132 02/07/24-02:49:10.591791	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49865	10445	192.168.2.4	18.156.13.209
192.168.2.418.197.239.549832104452033132 02/07/24-02:48:56.319266	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49832	10445	192.168.2.4	18.197.239.5
192.168.2.43.126.37.1850029104452814856 02/07/24-02:50:27.123884	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50029	10445	192.168.2.4	3.126.37.18
192.168.2.418.197.239.549848104452814856 02/07/24-02:49:03.386765	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49848	10445	192.168.2.4	18.197.239.5
192.168.2.43.126.37.1850052104452825564 02/07/24-02:50:38.569225	TCP	2825564	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act)	50052	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850055104452033132 02/07/24-02:50:39.616344	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50055	10445	192.168.2.4	3.126.37.18
192.168.2.418.156.13.20949744104452033132 02/07/24-02:47:31.938589	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49744	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949748104452033132 02/07/24-02:47:41.601406	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49748	10445	192.168.2.4	18.156.13.209
192.168.2.418.197.239.549776104452814860 02/07/24-02:48:27.242680	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49776	10445	192.168.2.4	18.197.239.5
192.168.2.43.126.37.1850014104452825564 02/07/24-02:50:20.018716	TCP	2825564	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act)	50014	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850093104452033132 02/07/24-02:50:55.355132	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50093	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850097104452033132 02/07/24-02:50:57.536415	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50097	10445	192.168.2.4	3.126.37.18
192.168.2.418.156.13.20949937104452033132 02/07/24-02:49:46.292744	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49937	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949979104452033132 02/07/24-02:50:03.692655	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49979	10445	192.168.2.4	18.156.13.209
192.168.2.418.197.239.549802104452814856 02/07/24-02:48:42.654819	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49802	10445	192.168.2.4	18.197.239.5
192.168.2.43.126.37.1850051104452033132 02/07/24-02:50:37.952234	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50051	10445	192.168.2.4	3.126.37.18
192.168.2.418.156.13.20949749104452825563 02/07/24-02:47:44.229360	TCP	2825563	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf)	49749	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949914104452814860 02/07/24-02:49:35.048332	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49914	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949877104452814856 02/07/24-02:49:18.641899	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49877	10445	192.168.2.4	18.156.13.209
192.168.2.43.126.37.1849992104452033132 02/07/24-02:50:10.626083	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49992	10445	192.168.2.4	3.126.37.18
192.168.2.418.156.13.20949740104452033132 02/07/24-02:47:22.168661	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49740	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949756104452814856 02/07/24-02:47:59.429964	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49756	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949934104452825564 02/07/24-02:49:45.241871	TCP	2825564	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act)	49934	10445	192.168.2.4	18.156.13.209
192.168.2.43.126.37.1850021104452814860 02/07/24-02:50:23.791607	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	50021	10445	192.168.2.4	3.126.37.18
192.168.2.418.156.13.20949751104452033132 02/07/24-02:47:49.012642	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49751	10445	192.168.2.4	18.156.13.209
192.168.2.43.126.37.1850013104452033132 02/07/24-02:50:19.402728	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50013	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850002104452033132 02/07/24-02:50:14.804689	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50002	10445	192.168.2.4	3.126.37.18
192.168.2.418.197.239.549817104452814856 02/07/24-02:48:49.588402	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49817	10445	192.168.2.4	18.197.239.5
192.168.2.418.197.239.549806104452814856 02/07/24-02:48:44.578733	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49806	10445	192.168.2.4	18.197.239.5
192.168.2.43.126.37.1850094104452825563 02/07/24-02:50:56.345419	TCP	2825563	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf)	50094	10445	192.168.2.4	3.126.37.18
192.168.2.418.197.239.549844104452814860 02/07/24-02:49:01.686398	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49844	10445	192.168.2.4	18.197.239.5
192.168.2.418.197.239.549855104452814860 02/07/24-02:49:06.402515	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49855	10445	192.168.2.4	18.197.239.5
192.168.2.418.197.239.549859104452814860 02/07/24-02:49:08.118334	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49859	10445	192.168.2.4	18.197.239.5
192.168.2.43.126.37.1850025104452814860 02/07/24-02:50:25.459719	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	50025	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850048104452033132 02/07/24-02:50:36.707188	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50048	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850059104452033132 02/07/24-02:50:41.259677	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50059	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850017104452033132 02/07/24-02:50:21.066308	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50017	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850006104452033132 02/07/24-02:50:16.461672	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50006	10445	192.168.2.4	3.126.37.18
192.168.2.418.197.239.549836104452033132 02/07/24-02:48:58.063031	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49836	10445	192.168.2.4	18.197.239.5
192.168.2.418.197.239.549847104452033132 02/07/24-02:49:02.772449	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49847	10445	192.168.2.4	18.197.239.5
192.168.2.418.156.13.20949880104452814856 02/07/24-02:49:19.877826	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49880	10445	192.168.2.4	18.156.13.209
192.168.2.418.197.239.549801104452033132 02/07/24-02:48:41.973511	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49801	10445	192.168.2.4	18.197.239.5
192.168.2.418.197.239.549822104452033132 02/07/24-02:48:51.568466	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49822	10445	192.168.2.4	18.197.239.5
192.168.2.418.197.239.549843104452033132 02/07/24-02:49:01.054554	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49843	10445	192.168.2.4	18.197.239.5
192.168.2.43.126.37.1850062104452825564 02/07/24-02:50:42.703326	TCP	2825564	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act)	50062	10445	192.168.2.4	3.126.37.18
192.168.2.418.197.239.549860104452033132 02/07/24-02:49:08.329523	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49860	10445	192.168.2.4	18.197.239.5
192.168.2.43.126.37.1849993104452814860 02/07/24-02:50:11.239915	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49993	10445	192.168.2.4	3.126.37.18
192.168.2.418.156.13.20949873104452814860 02/07/24-02:49:15.017085	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49873	10445	192.168.2.4	18.156.13.209
192.168.2.418.197.239.549813104452814856 02/07/24-02:48:47.824941	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49813	10445	192.168.2.4	18.197.239.5
192.168.2.418.156.13.20949969104452033132 02/07/24-02:49:59.551379	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49969	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949906104452033132 02/07/24-02:49:30.504835	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49906	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949927104452033132 02/07/24-02:49:40.216309	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49927	10445	192.168.2.4	18.156.13.209
192.168.2.418.197.239.549789104452033132 02/07/24-02:48:35.672277	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49789	10445	192.168.2.4	18.197.239.5
192.168.2.418.197.239.549768104452033132 02/07/24-02:48:17.356092	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49768	10445	192.168.2.4	18.197.239.5
192.168.2.418.156.13.20949948104452033132 02/07/24-02:49:50.824166	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49948	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949986104452033132 02/07/24-02:50:08.042120	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49986	10445	192.168.2.4	18.156.13.209
192.168.2.418.197.239.549851104452814856 02/07/24-02:49:04.669673	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49851	10445	192.168.2.4	18.197.239.5
192.168.2.418.156.13.20949965104452033132 02/07/24-02:49:57.900278	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49965	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949902104452033132 02/07/24-02:49:28.735937	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49902	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949923104452033132 02/07/24-02:49:38.570627	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49923	10445	192.168.2.4	18.156.13.209
192.168.2.418.197.239.549785104452033132 02/07/24-02:48:33.297780	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49785	10445	192.168.2.4	18.197.239.5
192.168.2.418.197.239.549764104452033132 02/07/24-02:48:12.721710	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49764	10445	192.168.2.4	18.197.239.5
192.168.2.418.156.13.20949939104452814856 02/07/24-02:49:47.310646	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49939	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949944104452033132 02/07/24-02:49:49.168919	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49944	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949956104452814856 02/07/24-02:49:54.359482	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49956	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949745104452825563 02/07/24-02:47:34.558952	TCP	2825563	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf)	49745	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949910104452814860 02/07/24-02:49:33.407152	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49910	10445	192.168.2.4	18.156.13.209
192.168.2.418.197.239.549793104452814860 02/07/24-02:48:38.073697	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49793	10445	192.168.2.4	18.197.239.5
192.168.2.43.126.37.1850080104452814856 02/07/24-02:50:50.172082	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50080	10445	192.168.2.4	3.126.37.18
192.168.2.418.156.13.20949982104452033132 02/07/24-02:50:06.380568	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49982	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949961104452033132 02/07/24-02:49:56.223686	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49961	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949741104452825563 02/07/24-02:47:24.783457	TCP	2825563	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf)	49741	10445	192.168.2.4	18.156.13.209
192.168.2.418.197.239.549781104452033132 02/07/24-02:48:30.711954	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49781	10445	192.168.2.4	18.197.239.5
192.168.2.418.156.13.20949869104452033132 02/07/24-02:49:13.361467	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49869	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949935104452814856 02/07/24-02:49:45.662519	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49935	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949940104452033132 02/07/24-02:49:47.521400	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49940	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949883104452033132 02/07/24-02:49:20.913262	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49883	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949881104452033132 02/07/24-02:49:20.088614	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49881	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949885104452033132 02/07/24-02:49:21.760296	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49885	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949880104452033132 02/07/24-02:49:19.682198	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49880	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949884104452033132 02/07/24-02:49:21.321723	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49884	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949887104452033132 02/07/24-02:49:22.580691	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49887	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949977104452814860 02/07/24-02:50:03.059676	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49977	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949973104452814856 02/07/24-02:50:01.417689	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49973	10445	192.168.2.4	18.156.13.209
192.168.2.418.197.239.549794104452814856 02/07/24-02:48:38.592233	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49794	10445	192.168.2.4	18.197.239.5
192.168.2.418.156.13.20949886104452033132 02/07/24-02:49:22.172257	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49886	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949976104452814860 02/07/24-02:50:02.658858	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49976	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949974104452814856 02/07/24-02:50:01.823408	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49974	10445	192.168.2.4	18.156.13.209
192.168.2.418.197.239.549796104452814860 02/07/24-02:48:39.656705	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49796	10445	192.168.2.4	18.197.239.5
192.168.2.418.197.239.549797104452814860 02/07/24-02:48:40.170687	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49797	10445	192.168.2.4	18.197.239.5
192.168.2.418.156.13.20949882104452033132 02/07/24-02:49:20.508010	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49882	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949970104452814856 02/07/24-02:50:00.167902	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49970	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949738104452814856 02/07/24-02:47:17.514360	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49738	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949747104452814856 02/07/24-02:47:39.380792	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49747	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949749104452814856 02/07/24-02:47:44.229360	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49749	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949761104452033132 02/07/24-02:48:08.537272	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49761	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949739104452814856 02/07/24-02:47:19.934903	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49739	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949746104452814856 02/07/24-02:47:36.963797	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49746	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949748104452814856 02/07/24-02:47:41.805249	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49748	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949737104452814856 02/07/24-02:47:15.087132	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49737	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949740104452814856 02/07/24-02:47:22.357026	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49740	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949741104452814856 02/07/24-02:47:24.783457	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49741	10445	192.168.2.4	18.156.13.209
192.168.2.43.126.37.1850101104452033132 02/07/24-02:50:59.432102	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50101	10445	192.168.2.4	3.126.37.18
192.168.2.418.156.13.20949731104452814856 02/07/24-02:47:12.679245	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49731	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949742104452814856 02/07/24-02:47:27.212594	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49742	10445	192.168.2.4	18.156.13.209
192.168.2.43.126.37.1850100104452033132 02/07/24-02:50:58.749697	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50100	10445	192.168.2.4	3.126.37.18
192.168.2.418.156.13.20949743104452814856 02/07/24-02:47:29.725643	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49743	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949745104452814856 02/07/24-02:47:34.558952	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49745	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949760104452033132 02/07/24-02:48:07.036987	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49760	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949744104452814856 02/07/24-02:47:32.136203	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49744	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949872104452033132 02/07/24-02:49:14.406708	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49872	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949873104452033132 02/07/24-02:49:14.818020	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49873	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949892104452033132 02/07/24-02:49:24.631643	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49892	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949894104452033132 02/07/24-02:49:25.457184	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49894	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949980104452814856 02/07/24-02:50:04.405395	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49980	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949870104452033132 02/07/24-02:49:13.582323	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49870	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949874104452033132 02/07/24-02:49:15.230640	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49874	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949868104452814856 02/07/24-02:49:12.055241	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49868	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949961104452814856 02/07/24-02:49:56.426618	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49961	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949891104452033132 02/07/24-02:49:24.220282	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49891	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949895104452033132 02/07/24-02:49:25.870836	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49895	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949962104452814856 02/07/24-02:49:56.845293	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49962	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949876104452033132 02/07/24-02:49:18.038971	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49876	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949877104452033132 02/07/24-02:49:18.444570	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49877	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949890104452033132 02/07/24-02:49:23.814178	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49890	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949896104452033132 02/07/24-02:49:26.272507	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49896	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949898104452033132 02/07/24-02:49:27.091087	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49898	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949984104452814856 02/07/24-02:50:07.403540	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49984	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949757104452825563 02/07/24-02:48:01.257300	TCP	2825563	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf)	49757	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949964104452814856 02/07/24-02:49:57.677841	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49964	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949875104452033132 02/07/24-02:49:17.632713	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49875	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949963104452814856 02/07/24-02:49:57.251505	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49963	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949897104452033132 02/07/24-02:49:26.687743	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49897	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949985104452814856 02/07/24-02:50:07.827188	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49985	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949750104452814856 02/07/24-02:47:46.785533	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49750	10445	192.168.2.4	18.156.13.209
192.168.2.418.197.239.549785104452814860 02/07/24-02:48:33.496192	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49785	10445	192.168.2.4	18.197.239.5
192.168.2.43.126.37.1850001104452033132 02/07/24-02:50:14.380901	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50001	10445	192.168.2.4	3.126.37.18
192.168.2.418.197.239.549786104452814860 02/07/24-02:48:34.117161	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49786	10445	192.168.2.4	18.197.239.5
192.168.2.418.156.13.20949756104452033132 02/07/24-02:47:59.226050	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49756	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949758104452033132 02/07/24-02:48:02.805029	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49758	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949878104452825564 02/07/24-02:49:19.049621	TCP	2825564	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act)	49878	10445	192.168.2.4	18.156.13.209
192.168.2.418.197.239.549787104452814860 02/07/24-02:48:34.715125	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49787	10445	192.168.2.4	18.197.239.5
192.168.2.43.126.37.1850000104452033132 02/07/24-02:50:13.960514	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50000	10445	192.168.2.4	3.126.37.18
192.168.2.418.156.13.20949755104452033132 02/07/24-02:47:55.484029	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49755	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949759104452033132 02/07/24-02:48:05.468879	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49759	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949759104452825563 02/07/24-02:48:05.671637	TCP	2825563	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf)	49759	10445	192.168.2.4	18.156.13.209
192.168.2.418.197.239.549789104452814860 02/07/24-02:48:35.870131	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49789	10445	192.168.2.4	18.197.239.5
192.168.2.418.156.13.20949867104452814856 02/07/24-02:49:11.625278	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49867	10445	192.168.2.4	18.156.13.209
192.168.2.418.197.239.549788104452814860 02/07/24-02:48:35.305226	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49788	10445	192.168.2.4	18.197.239.5
192.168.2.418.156.13.20949968104452814860 02/07/24-02:49:59.330157	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49968	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949960104452814856 02/07/24-02:49:56.004288	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49960	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949866104452814856 02/07/24-02:49:11.197780	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49866	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949871104452033132 02/07/24-02:49:13.994936	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49871	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949757104452033132 02/07/24-02:48:01.061106	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49757	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949893104452033132 02/07/24-02:49:25.043991	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49893	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949981104452814856 02/07/24-02:50:06.168680	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49981	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949864104452814860 02/07/24-02:49:10.359479	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49864	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949750104452825563 02/07/24-02:47:46.785533	TCP	2825563	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf)	49750	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949863104452814860 02/07/24-02:49:09.942201	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49863	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949865104452814860 02/07/24-02:49:10.788844	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49865	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949755104452825563 02/07/24-02:47:55.681899	TCP	2825563	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf)	49755	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949966104452814856 02/07/24-02:49:58.514284	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49966	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949754104452825563 02/07/24-02:47:53.647589	TCP	2825563	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf)	49754	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949756104452825563 02/07/24-02:47:59.429964	TCP	2825563	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf)	49756	10445	192.168.2.4	18.156.13.209
192.168.2.418.197.239.549784104452814860 02/07/24-02:48:32.874244	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49784	10445	192.168.2.4	18.197.239.5
192.168.2.418.156.13.20949988104452814856 02/07/24-02:50:09.060841	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49988	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949986104452814856 02/07/24-02:50:08.243811	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49986	10445	192.168.2.4	18.156.13.209
192.168.2.418.197.239.549783104452814860 02/07/24-02:48:32.232557	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49783	10445	192.168.2.4	18.197.239.5
192.168.2.418.156.13.20949878104452033132 02/07/24-02:49:18.850796	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49878	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949965104452814856 02/07/24-02:49:58.090233	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49965	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949969104452814856 02/07/24-02:49:59.752315	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49969	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949899104452033132 02/07/24-02:49:27.503882	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49899	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949987104452814856 02/07/24-02:50:08.647415	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49987	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949751104452825563 02/07/24-02:47:49.208042	TCP	2825563	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf)	49751	10445	192.168.2.4	18.156.13.209
192.168.2.418.197.239.549781104452814860 02/07/24-02:48:30.904740	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49781	10445	192.168.2.4	18.197.239.5
192.168.2.418.197.239.549780104452814860 02/07/24-02:48:30.221425	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49780	10445	192.168.2.4	18.197.239.5
192.168.2.418.197.239.549782104452814860 02/07/24-02:48:31.573817	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49782	10445	192.168.2.4	18.197.239.5
192.168.2.418.156.13.20949753104452825563 02/07/24-02:47:51.487645	TCP	2825563	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf)	49753	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949982104452814860 02/07/24-02:50:06.581470	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49982	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949989104452814856 02/07/24-02:50:09.467980	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49989	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949879104452033132 02/07/24-02:49:19.261199	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49879	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949967104452814856 02/07/24-02:49:58.922328	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49967	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949983104452814860 02/07/24-02:50:06.995769	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49983	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949866104452033132 02/07/24-02:49:11.002238	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49866	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949951104452814856 02/07/24-02:49:52.288155	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49951	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949749104452033132 02/07/24-02:47:44.052642	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49749	10445	192.168.2.4	18.156.13.209
192.168.2.418.197.239.549773104452814856 02/07/24-02:48:22.390390	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49773	10445	192.168.2.4	18.197.239.5
192.168.2.418.156.13.20949864104452033132 02/07/24-02:49:10.162340	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49864	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949953104452814856 02/07/24-02:49:53.114990	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49953	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949746104452825563 02/07/24-02:47:36.963797	TCP	2825563	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf)	49746	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949760104452814856 02/07/24-02:48:07.239362	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49760	10445	192.168.2.4	18.156.13.209
192.168.2.43.126.37.1850012104452033132 02/07/24-02:50:18.986147	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50012	10445	192.168.2.4	3.126.37.18
192.168.2.418.156.13.20949745104452033132 02/07/24-02:47:34.357791	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49745	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949747104452033132 02/07/24-02:47:39.189550	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49747	10445	192.168.2.4	18.156.13.209
192.168.2.418.197.239.549775104452814860 02/07/24-02:48:26.434413	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49775	10445	192.168.2.4	18.197.239.5
192.168.2.418.156.13.20949876104452814856 02/07/24-02:49:18.235998	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49876	10445	192.168.2.4	18.156.13.209
192.168.2.43.126.37.1850010104452033132 02/07/24-02:50:18.140200	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50010	10445	192.168.2.4	3.126.37.18
192.168.2.418.156.13.20949748104452825563 02/07/24-02:47:41.805249	TCP	2825563	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf)	49748	10445	192.168.2.4	18.156.13.209
192.168.2.418.197.239.549777104452814860 02/07/24-02:48:28.024736	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49777	10445	192.168.2.4	18.197.239.5
192.168.2.418.197.239.549779104452814860 02/07/24-02:48:29.509018	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49779	10445	192.168.2.4	18.197.239.5
192.168.2.43.126.37.1850009104452033132 02/07/24-02:50:17.727245	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50009	10445	192.168.2.4	3.126.37.18
192.168.2.418.197.239.549797104452825564 02/07/24-02:48:40.170687	TCP	2825564	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act)	49797	10445	192.168.2.4	18.197.239.5
192.168.2.418.156.13.20949750104452033132 02/07/24-02:47:46.583296	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49750	10445	192.168.2.4	18.156.13.209
192.168.2.43.126.37.1850007104452033132 02/07/24-02:50:16.879987	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50007	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850018104452033132 02/07/24-02:50:21.478865	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50018	10445	192.168.2.4	3.126.37.18
192.168.2.418.156.13.20949757104452814856 02/07/24-02:48:01.257300	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49757	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949741104452033132 02/07/24-02:47:24.583156	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49741	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949743104452033132 02/07/24-02:47:29.526709	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49743	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949754104452033132 02/07/24-02:47:53.444454	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49754	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949971104452825564 02/07/24-02:50:00.585857	TCP	2825564	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act)	49971	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949751104452814856 02/07/24-02:47:49.208042	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49751	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949759104452814856 02/07/24-02:48:05.671637	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49759	10445	192.168.2.4	18.156.13.209
192.168.2.43.126.37.1850003104452033132 02/07/24-02:50:15.218975	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50003	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850014104452033132 02/07/24-02:50:19.814816	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50014	10445	192.168.2.4	3.126.37.18
192.168.2.418.156.13.20949753104452814856 02/07/24-02:47:51.487645	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49753	10445	192.168.2.4	18.156.13.209
192.168.2.43.126.37.1850005104452033132 02/07/24-02:50:16.052276	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50005	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850016104452033132 02/07/24-02:50:20.646603	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50016	10445	192.168.2.4	3.126.37.18
192.168.2.418.156.13.20949881104452814856 02/07/24-02:49:20.291293	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49881	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949977104452825564 02/07/24-02:50:03.059676	TCP	2825564	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act)	49977	10445	192.168.2.4	18.156.13.209
192.168.2.418.197.239.549795104452825564 02/07/24-02:48:39.124629	TCP	2825564	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act)	49795	10445	192.168.2.4	18.197.239.5
192.168.2.418.156.13.20949755104452814856 02/07/24-02:47:55.681899	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49755	10445	192.168.2.4	18.156.13.209
192.168.2.418.197.239.549804104452033132 02/07/24-02:48:43.434771	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49804	10445	192.168.2.4	18.197.239.5
192.168.2.418.197.239.549802104452033132 02/07/24-02:48:42.457528	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49802	10445	192.168.2.4	18.197.239.5
192.168.2.418.197.239.549800104452033132 02/07/24-02:48:41.483508	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49800	10445	192.168.2.4	18.197.239.5
192.168.2.418.156.13.20949872104452814860 02/07/24-02:49:14.609438	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49872	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949968104452033132 02/07/24-02:49:59.131617	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49968	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949964104452033132 02/07/24-02:49:57.472233	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49964	10445	192.168.2.4	18.156.13.209
192.168.2.418.197.239.549786104452033132 02/07/24-02:48:33.920838	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49786	10445	192.168.2.4	18.197.239.5
192.168.2.418.197.239.549788104452033132 02/07/24-02:48:35.101047	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49788	10445	192.168.2.4	18.197.239.5
192.168.2.418.156.13.20949878104452814860 02/07/24-02:49:19.049621	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49878	10445	192.168.2.4	18.156.13.209
192.168.2.418.197.239.549790104452814860 02/07/24-02:48:36.429765	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49790	10445	192.168.2.4	18.197.239.5
192.168.2.418.156.13.20949985104452033132 02/07/24-02:50:07.624958	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49985	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949989104452033132 02/07/24-02:50:09.269993	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49989	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949740104452825563 02/07/24-02:47:22.357026	TCP	2825563	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf)	49740	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949938104452814856 02/07/24-02:49:46.902623	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49938	10445	192.168.2.4	18.156.13.209
192.168.2.43.126.37.1850025104452825564 02/07/24-02:50:25.459719	TCP	2825564	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act)	50025	10445	192.168.2.4	3.126.37.18
192.168.2.418.156.13.20949959104452814856 02/07/24-02:49:55.597570	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49959	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949761104452825563 02/07/24-02:48:08.732787	TCP	2825563	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf)	49761	10445	192.168.2.4	18.156.13.209
192.168.2.418.197.239.549784104452033132 02/07/24-02:48:32.675837	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49784	10445	192.168.2.4	18.197.239.5
192.168.2.418.156.13.20949874104452814860 02/07/24-02:49:15.434838	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49874	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949966104452033132 02/07/24-02:49:58.314437	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49966	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949987104452033132 02/07/24-02:50:08.451201	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49987	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949955104452814856 02/07/24-02:49:53.953749	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49955	10445	192.168.2.4	18.156.13.209
192.168.2.418.197.239.549780104452033132 02/07/24-02:48:30.030040	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49780	10445	192.168.2.4	18.197.239.5
192.168.2.418.156.13.20949889104452033132 02/07/24-02:49:23.409631	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49889	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949936104452814856 02/07/24-02:49:46.074205	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49936	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949981104452033132 02/07/24-02:50:06.110299	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49981	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949744104452825563 02/07/24-02:47:32.136203	TCP	2825563	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf)	49744	10445	192.168.2.4	18.156.13.209
192.168.2.418.197.239.549792104452814860 02/07/24-02:48:37.543105	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49792	10445	192.168.2.4	18.197.239.5
192.168.2.418.156.13.20949960104452033132 02/07/24-02:49:55.806583	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49960	10445	192.168.2.4	18.156.13.209
192.168.2.418.197.239.549782104452033132 02/07/24-02:48:31.376407	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49782	10445	192.168.2.4	18.197.239.5
192.168.2.418.197.239.549771104452814860 02/07/24-02:48:20.527524	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49771	10445	192.168.2.4	18.197.239.5
192.168.2.418.156.13.20949868104452033132 02/07/24-02:49:11.886306	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49868	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949957104452814856 02/07/24-02:49:54.760674	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49957	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949962104452033132 02/07/24-02:49:56.641536	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49962	10445	192.168.2.4	18.156.13.209
192.168.2.418.197.239.549798104452814856 02/07/24-02:48:40.684032	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49798	10445	192.168.2.4	18.197.239.5
192.168.2.418.156.13.20949983104452033132 02/07/24-02:50:06.792688	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49983	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949742104452825563 02/07/24-02:47:27.212594	TCP	2825563	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf)	49742	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949978104452814856 02/07/24-02:50:03.477025	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49978	10445	192.168.2.4	18.156.13.209
192.168.2.43.126.37.1850002104452814856 02/07/24-02:50:15.002160	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50002	10445	192.168.2.4	3.126.37.18
192.168.2.418.197.239.549813104452033132 02/07/24-02:48:47.626576	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49813	10445	192.168.2.4	18.197.239.5
192.168.2.418.197.239.549817104452033132 02/07/24-02:48:49.393431	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49817	10445	192.168.2.4	18.197.239.5
192.168.2.43.126.37.1850001104452814856 02/07/24-02:50:14.587868	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50001	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850005104452814856 02/07/24-02:50:16.240385	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50005	10445	192.168.2.4	3.126.37.18
192.168.2.418.156.13.20949729104452033132 02/07/24-02:47:10.247288	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49729	10445	192.168.2.4	18.156.13.209
192.168.2.43.126.37.1850085104452814856 02/07/24-02:50:52.228200	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50085	10445	192.168.2.4	3.126.37.18
192.168.2.418.197.239.549810104452033132 02/07/24-02:48:46.285074	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49810	10445	192.168.2.4	18.197.239.5
192.168.2.418.197.239.549818104452033132 02/07/24-02:48:49.829263	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49818	10445	192.168.2.4	18.197.239.5
192.168.2.43.126.37.1850086104452814856 02/07/24-02:50:52.634731	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50086	10445	192.168.2.4	3.126.37.18
192.168.2.418.156.13.20949896104452814856 02/07/24-02:49:26.467110	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49896	10445	192.168.2.4	18.156.13.209
192.168.2.43.126.37.1850031104452033132 02/07/24-02:50:27.765948	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50031	10445	192.168.2.4	3.126.37.18
192.168.2.418.156.13.20949897104452814856 02/07/24-02:49:26.877802	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49897	10445	192.168.2.4	18.156.13.209
192.168.2.43.126.37.1850032104452033132 02/07/24-02:50:28.172260	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50032	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850039104452033132 02/07/24-02:50:31.050481	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50039	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850029104452033132 02/07/24-02:50:26.924256	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50029	10445	192.168.2.4	3.126.37.18
192.168.2.418.156.13.20949968104452825564 02/07/24-02:49:59.330157	TCP	2825564	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act)	49968	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949731104452033132 02/07/24-02:47:12.477428	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49731	10445	192.168.2.4	18.156.13.209
192.168.2.43.126.37.1850097104452814860 02/07/24-02:50:57.735671	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	50097	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850035104452033132 02/07/24-02:50:29.412745	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50035	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850006104452814860 02/07/24-02:50:16.665365	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	50006	10445	192.168.2.4	3.126.37.18
192.168.2.418.156.13.20949893104452814856 02/07/24-02:49:25.238285	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49893	10445	192.168.2.4	18.156.13.209
192.168.2.43.126.37.1850089104452814860 02/07/24-02:50:53.878676	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	50089	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850025104452033132 02/07/24-02:50:25.252716	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50025	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850036104452033132 02/07/24-02:50:29.823659	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50036	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850026104452033132 02/07/24-02:50:25.671913	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50026	10445	192.168.2.4	3.126.37.18
192.168.2.418.156.13.20949892104452814856 02/07/24-02:49:24.832495	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49892	10445	192.168.2.4	18.156.13.209
192.168.2.418.197.239.549814104452033132 02/07/24-02:48:48.066579	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49814	10445	192.168.2.4	18.197.239.5
192.168.2.418.197.239.549828104452033132 02/07/24-02:48:54.143580	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49828	10445	192.168.2.4	18.197.239.5
192.168.2.418.197.239.549806104452033132 02/07/24-02:48:44.379972	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49806	10445	192.168.2.4	18.197.239.5
192.168.2.418.197.239.549827104452033132 02/07/24-02:48:53.711772	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49827	10445	192.168.2.4	18.197.239.5
192.168.2.418.156.13.20949940104452814856 02/07/24-02:49:47.720350	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49940	10445	192.168.2.4	18.156.13.209
192.168.2.43.126.37.1850012104452814856 02/07/24-02:50:19.187892	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50012	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850016104452814856 02/07/24-02:50:20.851620	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50016	10445	192.168.2.4	3.126.37.18
192.168.2.418.156.13.20949739104452033132 02/07/24-02:47:19.737669	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49739	10445	192.168.2.4	18.156.13.209
192.168.2.418.197.239.549763104452814856 02/07/24-02:48:11.638589	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49763	10445	192.168.2.4	18.197.239.5
192.168.2.43.126.37.1850017104452814856 02/07/24-02:50:21.271681	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50017	10445	192.168.2.4	3.126.37.18
192.168.2.418.197.239.549800104452814860 02/07/24-02:48:41.678979	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49800	10445	192.168.2.4	18.197.239.5
192.168.2.418.156.13.20949923104452814860 02/07/24-02:49:38.762722	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49923	10445	192.168.2.4	18.156.13.209
192.168.2.418.197.239.549807104452033132 02/07/24-02:48:44.857930	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49807	10445	192.168.2.4	18.197.239.5
192.168.2.418.156.13.20949922104452814860 02/07/24-02:49:38.357545	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49922	10445	192.168.2.4	18.156.13.209
192.168.2.418.197.239.549803104452825564 02/07/24-02:48:43.148172	TCP	2825564	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act)	49803	10445	192.168.2.4	18.197.239.5
192.168.2.43.126.37.1850075104452814856 02/07/24-02:50:48.101982	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50075	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850022104452033132 02/07/24-02:50:24.005922	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50022	10445	192.168.2.4	3.126.37.18
192.168.2.418.156.13.20949885104452814856 02/07/24-02:49:21.951448	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49885	10445	192.168.2.4	18.156.13.209
192.168.2.43.126.37.1850042104452033132 02/07/24-02:50:32.290031	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50042	10445	192.168.2.4	3.126.37.18
192.168.2.418.156.13.20949737104452825563 02/07/24-02:47:15.087132	TCP	2825563	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf)	49737	10445	192.168.2.4	18.156.13.209
192.168.2.43.126.37.1850021104452033132 02/07/24-02:50:23.584787	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50021	10445	192.168.2.4	3.126.37.18
192.168.2.418.156.13.20949886104452814856 02/07/24-02:49:22.365950	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49886	10445	192.168.2.4	18.156.13.209
192.168.2.43.126.37.1850043104452033132 02/07/24-02:50:32.700485	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50043	10445	192.168.2.4	3.126.37.18
192.168.2.418.197.239.549768104452814860 02/07/24-02:48:17.558801	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49768	10445	192.168.2.4	18.197.239.5
192.168.2.418.156.13.20949889104452814856 02/07/24-02:49:23.603323	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49889	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949926104452814860 02/07/24-02:49:39.997482	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49926	10445	192.168.2.4	18.156.13.209
192.168.2.418.197.239.549821104452825564 02/07/24-02:48:51.337887	TCP	2825564	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act)	49821	10445	192.168.2.4	18.197.239.5
192.168.2.43.126.37.1850079104452814856 02/07/24-02:50:49.764600	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50079	10445	192.168.2.4	3.126.37.18
192.168.2.418.197.239.549776104452033132 02/07/24-02:48:27.039195	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49776	10445	192.168.2.4	18.197.239.5
192.168.2.418.197.239.549777104452033132 02/07/24-02:48:27.822765	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49777	10445	192.168.2.4	18.197.239.5
192.168.2.418.197.239.549797104452033132 02/07/24-02:48:39.975211	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49797	10445	192.168.2.4	18.197.239.5
192.168.2.418.156.13.20949952104452033132 02/07/24-02:49:52.503320	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49952	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949956104452033132 02/07/24-02:49:54.166672	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49956	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949974104452033132 02/07/24-02:50:01.625363	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49974	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949953104452033132 02/07/24-02:49:52.923003	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49953	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949957104452033132 02/07/24-02:49:54.568314	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49957	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949978104452033132 02/07/24-02:50:03.277142	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49978	10445	192.168.2.4	18.156.13.209
192.168.2.418.197.239.549794104452033132 02/07/24-02:48:38.395149	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49794	10445	192.168.2.4	18.197.239.5
192.168.2.418.197.239.549798104452033132 02/07/24-02:48:40.480437	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49798	10445	192.168.2.4	18.197.239.5
192.168.2.418.197.239.549773104452033132 02/07/24-02:48:22.190279	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49773	10445	192.168.2.4	18.197.239.5
192.168.2.418.156.13.20949927104452814856 02/07/24-02:49:40.419475	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49927	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949977104452033132 02/07/24-02:50:02.865115	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49977	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949943104452814856 02/07/24-02:49:48.959447	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49943	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949947104452814856 02/07/24-02:49:50.612196	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49947	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949970104452033132 02/07/24-02:49:59.970662	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49970	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949944104452814856 02/07/24-02:49:49.367370	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49944	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949948104452814856 02/07/24-02:49:51.020429	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49948	10445	192.168.2.4	18.156.13.209
192.168.2.418.197.239.549790104452033132 02/07/24-02:48:36.241569	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49790	10445	192.168.2.4	18.197.239.5
192.168.2.418.197.239.549808104452825564 02/07/24-02:48:45.541619	TCP	2825564	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act)	49808	10445	192.168.2.4	18.197.239.5
192.168.2.418.197.239.549772104452033132 02/07/24-02:48:21.259676	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49772	10445	192.168.2.4	18.197.239.5
192.168.2.418.197.239.549764104452814856 02/07/24-02:48:12.921552	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49764	10445	192.168.2.4	18.197.239.5
192.168.2.418.197.239.549793104452033132 02/07/24-02:48:37.875285	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49793	10445	192.168.2.4	18.197.239.5
192.168.2.43.126.37.1850072104452814856 02/07/24-02:50:46.865190	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50072	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850092104452814856 02/07/24-02:50:55.128829	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50092	10445	192.168.2.4	3.126.37.18
192.168.2.418.156.13.20949973104452033132 02/07/24-02:50:01.221147	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49973	10445	192.168.2.4	18.156.13.209
192.168.2.43.126.37.1850093104452814856 02/07/24-02:50:55.553355	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50093	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850071104452814856 02/07/24-02:50:46.448525	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50071	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850065104452814856 02/07/24-02:50:43.951151	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50065	10445	192.168.2.4	3.126.37.18
192.168.2.418.156.13.20949916104452814860 02/07/24-02:49:35.866844	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49916	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949950104452814856 02/07/24-02:49:51.858194	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49950	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949863104452033132 02/07/24-02:49:09.737776	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49863	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949879104452814856 02/07/24-02:49:19.458792	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49879	10445	192.168.2.4	18.156.13.209
192.168.2.418.197.239.549834104452033132 02/07/24-02:48:57.211046	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49834	10445	192.168.2.4	18.197.239.5
192.168.2.418.197.239.549838104452033132 02/07/24-02:48:58.934688	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49838	10445	192.168.2.4	18.197.239.5
192.168.2.43.126.37.1850050104452825564 02/07/24-02:50:37.744929	TCP	2825564	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act)	50050	10445	192.168.2.4	3.126.37.18
192.168.2.418.156.13.20949747104452825563 02/07/24-02:47:39.380792	TCP	2825563	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf)	49747	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949912104452814860 02/07/24-02:49:34.228225	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49912	10445	192.168.2.4	18.156.13.209
192.168.2.418.197.239.549853104452814860 02/07/24-02:49:05.541661	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49853	10445	192.168.2.4	18.197.239.5
192.168.2.43.126.37.1850091104452033132 02/07/24-02:50:54.510064	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50091	10445	192.168.2.4	3.126.37.18
192.168.2.418.156.13.20949746104452033132 02/07/24-02:47:36.766839	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49746	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949761104452814856 02/07/24-02:48:08.732787	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49761	10445	192.168.2.4	18.156.13.209
192.168.2.43.126.37.1850011104452033132 02/07/24-02:50:18.563553	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50011	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850053104452033132 02/07/24-02:50:38.777654	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50053	10445	192.168.2.4	3.126.37.18
192.168.2.418.156.13.20949939104452033132 02/07/24-02:49:47.113151	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49939	10445	192.168.2.4	18.156.13.209
192.168.2.43.126.37.1849990104452033132 02/07/24-02:50:09.800433	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49990	10445	192.168.2.4	3.126.37.18
192.168.2.418.197.239.549830104452033132 02/07/24-02:48:55.439300	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49830	10445	192.168.2.4	18.197.239.5
192.168.2.418.197.239.549778104452814860 02/07/24-02:48:28.794114	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49778	10445	192.168.2.4	18.197.239.5
192.168.2.43.126.37.1850095104452033132 02/07/24-02:50:56.698733	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50095	10445	192.168.2.4	3.126.37.18
192.168.2.418.156.13.20949758104452814856 02/07/24-02:48:03.009138	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49758	10445	192.168.2.4	18.156.13.209
192.168.2.43.126.37.1850019104452033132 02/07/24-02:50:22.033417	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50019	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850008104452033132 02/07/24-02:50:17.304139	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50008	10445	192.168.2.4	3.126.37.18
192.168.2.418.156.13.20949742104452033132 02/07/24-02:47:27.011333	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49742	10445	192.168.2.4	18.156.13.209
192.168.2.43.126.37.1850057104452033132 02/07/24-02:50:40.443160	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50057	10445	192.168.2.4	3.126.37.18
192.168.2.418.197.239.549808104452814860 02/07/24-02:48:45.541619	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49808	10445	192.168.2.4	18.197.239.5
192.168.2.43.126.37.1850046104452033132 02/07/24-02:50:33.935466	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50046	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850023104452814860 02/07/24-02:50:24.632903	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	50023	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850099104452033132 02/07/24-02:50:58.343535	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50099	10445	192.168.2.4	3.126.37.18
192.168.2.418.156.13.20949753104452033132 02/07/24-02:47:51.285372	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49753	10445	192.168.2.4	18.156.13.209
192.168.2.43.126.37.1850088104452033132 02/07/24-02:50:53.270007	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50088	10445	192.168.2.4	3.126.37.18
192.168.2.418.197.239.549804104452814860 02/07/24-02:48:43.637026	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49804	10445	192.168.2.4	18.197.239.5
192.168.2.418.197.239.549815104452814860 02/07/24-02:48:48.703271	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49815	10445	192.168.2.4	18.197.239.5
192.168.2.43.126.37.1850069104452814860 02/07/24-02:50:45.630617	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	50069	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850004104452033132 02/07/24-02:50:15.636034	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50004	10445	192.168.2.4	3.126.37.18
192.168.2.418.156.13.20949882104452814856 02/07/24-02:49:20.704524	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49882	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949754104452814856 02/07/24-02:47:53.647589	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49754	10445	192.168.2.4	18.156.13.209
192.168.2.43.126.37.1850015104452033132 02/07/24-02:50:20.229786	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50015	10445	192.168.2.4	3.126.37.18
192.168.2.418.197.239.549803104452033132 02/07/24-02:48:42.948992	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49803	10445	192.168.2.4	18.197.239.5
192.168.2.418.197.239.549846104452814860 02/07/24-02:49:02.553490	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49846	10445	192.168.2.4	18.197.239.5
192.168.2.418.197.239.549857104452814860 02/07/24-02:49:07.258929	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49857	10445	192.168.2.4	18.197.239.5
192.168.2.43.126.37.1849991104452814856 02/07/24-02:50:10.410386	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49991	10445	192.168.2.4	3.126.37.18
192.168.2.418.197.239.549824104452033132 02/07/24-02:48:52.422911	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49824	10445	192.168.2.4	18.197.239.5
192.168.2.418.197.239.549845104452033132 02/07/24-02:49:01.914914	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49845	10445	192.168.2.4	18.197.239.5
192.168.2.43.126.37.1849995104452814856 02/07/24-02:50:12.075656	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49995	10445	192.168.2.4	3.126.37.18
192.168.2.418.156.13.20949908104452033132 02/07/24-02:49:32.414223	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49908	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949929104452033132 02/07/24-02:49:41.036565	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49929	10445	192.168.2.4	18.156.13.209
192.168.2.418.197.239.549820104452033132 02/07/24-02:48:50.712281	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49820	10445	192.168.2.4	18.197.239.5
192.168.2.418.197.239.549836104452814856 02/07/24-02:48:58.259047	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49836	10445	192.168.2.4	18.197.239.5
192.168.2.418.197.239.549862104452033132 02/07/24-02:49:09.194964	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49862	10445	192.168.2.4	18.197.239.5
192.168.2.418.197.239.549841104452033132 02/07/24-02:49:00.211150	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49841	10445	192.168.2.4	18.197.239.5
192.168.2.418.156.13.20949904104452033132 02/07/24-02:49:29.580970	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49904	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949925104452033132 02/07/24-02:49:39.382771	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49925	10445	192.168.2.4	18.156.13.209
192.168.2.418.197.239.549787104452033132 02/07/24-02:48:34.517576	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49787	10445	192.168.2.4	18.197.239.5
192.168.2.418.197.239.549766104452033132 02/07/24-02:48:15.133641	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49766	10445	192.168.2.4	18.197.239.5
192.168.2.418.156.13.20949900104452033132 02/07/24-02:49:27.924064	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49900	10445	192.168.2.4	18.156.13.209
192.168.2.418.197.239.549811104452814856 02/07/24-02:48:46.931544	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49811	10445	192.168.2.4	18.197.239.5
192.168.2.418.156.13.20949921104452033132 02/07/24-02:49:37.752529	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49921	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949963104452033132 02/07/24-02:49:57.054922	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49963	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949967104452033132 02/07/24-02:49:58.724370	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49967	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949942104452033132 02/07/24-02:49:48.354337	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49942	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949946104452033132 02/07/24-02:49:49.992099	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49946	10445	192.168.2.4	18.156.13.209
192.168.2.418.197.239.549762104452033132 02/07/24-02:48:10.081277	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49762	10445	192.168.2.4	18.197.239.5
192.168.2.418.156.13.20949760104452825563 02/07/24-02:48:07.239362	TCP	2825563	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf)	49760	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949980104452033132 02/07/24-02:50:04.200622	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49980	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949988104452033132 02/07/24-02:50:08.861869	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49988	10445	192.168.2.4	18.156.13.209
192.168.2.418.197.239.549774104452814860 02/07/24-02:48:25.614681	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49774	10445	192.168.2.4	18.197.239.5
192.168.2.418.156.13.20949875104452814860 02/07/24-02:49:17.832067	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49875	10445	192.168.2.4	18.156.13.209
192.168.2.418.197.239.549799104452814856 02/07/24-02:48:41.183656	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49799	10445	192.168.2.4	18.197.239.5
192.168.2.418.197.239.549795104452814860 02/07/24-02:48:39.124629	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49795	10445	192.168.2.4	18.197.239.5
192.168.2.418.156.13.20949743104452825563 02/07/24-02:47:29.725643	TCP	2825563	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf)	49743	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949975104452814856 02/07/24-02:50:02.231437	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49975	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949954104452814856 02/07/24-02:49:53.533781	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49954	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949958104452814856 02/07/24-02:49:55.187149	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49958	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949867104452033132 02/07/24-02:49:11.432247	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49867	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949888104452033132 02/07/24-02:49:22.993647	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49888	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949937104452814856 02/07/24-02:49:46.496770	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49937	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949933104452814856 02/07/24-02:49:44.826951	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49933	10445	192.168.2.4	18.156.13.209
192.168.2.418.197.239.549783104452033132 02/07/24-02:48:32.035161	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49783	10445	192.168.2.4	18.197.239.5
192.168.2.43.126.37.1849999104452814860 02/07/24-02:50:13.745445	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49999	10445	192.168.2.4	3.126.37.18
192.168.2.418.197.239.549791104452814860 02/07/24-02:48:36.995835	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49791	10445	192.168.2.4	18.197.239.5
192.168.2.43.126.37.1850040104452814856 02/07/24-02:50:31.666762	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50040	10445	192.168.2.4	3.126.37.18
192.168.2.43.126.37.1850061104452814856 02/07/24-02:50:42.282620	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50061	10445	192.168.2.4	3.126.37.18
192.168.2.418.156.13.20949979104452814856 02/07/24-02:50:03.895890	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49979	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949971104452814860 02/07/24-02:50:00.585857	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49971	10445	192.168.2.4	18.156.13.209
192.168.2.418.156.13.20949984104452033132 02/07/24-02:50:07.207576	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49984	10445	192.168.2.4	18.156.13.209
192.168.2.43.126.37.1850082104452814856 02/07/24-02:50:50.997506	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50082	10445	192.168.2.4	3.126.37.18
192.168.2.418.197.239.549770104452814860 02/07/24-02:48:19.582955	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49770	10445	192.168.2.4	18.197.239.5
192.168.2.418.197.239.549818104452825564 02/07/24-02:48:50.024449	TCP	2825564	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act)	49818	10445	192.168.2.4	18.197.239.5

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Feb 7, 2024 02:47:09.749047041 CET	49729	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:09.953986883 CET	10445	49729	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:09.954092026 CET	49729	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:10.159293890 CET	10445	49729	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:10.159421921 CET	49729	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:10.247287989 CET	49729	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:10.452497959 CET	10445	49729	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:12.266438961 CET	49731	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:12.472743988 CET	10445	49731	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:12.472825050 CET	49731	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:12.477427959 CET	49731	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:12.679047108 CET	10445	49731	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:12.679244995 CET	49731	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:12.683372021 CET	10445	49731	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:12.885401964 CET	10445	49731	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:14.686547041 CET	49737	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:14.886682987 CET	10445	49737	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:14.886805058 CET	49737	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:14.891580105 CET	49737	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:15.087022066 CET	10445	49737	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:15.087086916 CET	10445	49737	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:15.087131977 CET	49737	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:15.087171078 CET	49737	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:15.091222048 CET	10445	49737	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:15.287005901 CET	10445	49737	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:15.287058115 CET	10445	49737	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:17.108859062 CET	49738	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:17.311333895 CET	10445	49738	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:17.311670065 CET	49738	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:17.315680027 CET	49738	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:17.514128923 CET	10445	49738	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:17.514172077 CET	10445	49738	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:17.514359951 CET	49738	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:17.514360905 CET	49738	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:17.517755032 CET	10445	49738	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:17.717011929 CET	10445	49738	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:17.717058897 CET	10445	49738	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:19.530709982 CET	49739	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:19.732428074 CET	10445	49739	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:19.732661009 CET	49739	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:19.737668991 CET	49739	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:19.934822083 CET	10445	49739	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:19.934884071 CET	10445	49739	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:19.934902906 CET	49739	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:19.934998989 CET	49739	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:19.939136028 CET	10445	49739	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:20.136979103 CET	10445	49739	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:20.137089968 CET	10445	49739	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:21.953253031 CET	49740	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:22.155812025 CET	10445	49740	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:22.155961990 CET	49740	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:22.168661118 CET	49740	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:22.356949091 CET	10445	49740	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:22.357009888 CET	10445	49740	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:22.357026100 CET	49740	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:22.357052088 CET	49740	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:22.369218111 CET	10445	49740	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:22.557703972 CET	10445	49740	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:22.557768106 CET	10445	49740	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:24.374428034 CET	49741	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:24.578258038 CET	10445	49741	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:24.578479052 CET	49741	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:24.583156109 CET	49741	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:24.783229113 CET	10445	49741	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:24.783296108 CET	10445	49741	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:24.783457041 CET	49741	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:24.783457041 CET	49741	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:24.787863970 CET	10445	49741	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:24.987545967 CET	10445	49741	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:24.987607956 CET	10445	49741	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:26.795958042 CET	49742	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:27.004009962 CET	10445	49742	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:27.004277945 CET	49742	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:27.011332989 CET	49742	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:27.212279081 CET	10445	49742	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:27.212399960 CET	10445	49742	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:27.212594032 CET	49742	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:27.212594986 CET	49742	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:27.218699932 CET	10445	49742	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:27.420326948 CET	10445	49742	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:27.420383930 CET	10445	49742	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:29.312783957 CET	49743	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:29.518704891 CET	10445	49743	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:29.519045115 CET	49743	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:29.526709080 CET	49743	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:29.725434065 CET	10445	49743	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:29.725502968 CET	10445	49743	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:29.725642920 CET	49743	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:29.725642920 CET	49743	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:29.732527971 CET	10445	49743	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:29.931193113 CET	10445	49743	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:29.931245089 CET	10445	49743	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:31.733292103 CET	49744	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:31.934135914 CET	10445	49744	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:31.934473991 CET	49744	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:31.938589096 CET	49744	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:32.135624886 CET	10445	49744	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:32.135698080 CET	10445	49744	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:32.136203051 CET	49744	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:32.139175892 CET	10445	49744	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:32.336925983 CET	10445	49744	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:34.141829967 CET	49745	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:34.350163937 CET	10445	49745	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:34.350301981 CET	49745	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:34.357790947 CET	49745	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:34.558703899 CET	10445	49745	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:34.558767080 CET	10445	49745	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:34.558952093 CET	49745	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:34.558952093 CET	49745	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:34.566298962 CET	10445	49745	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:34.767211914 CET	10445	49745	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:34.767270088 CET	10445	49745	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:36.562052011 CET	49746	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:36.762634993 CET	10445	49746	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:36.762864113 CET	49746	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:36.766839027 CET	49746	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:36.963408947 CET	10445	49746	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:36.963470936 CET	10445	49746	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:36.963797092 CET	49746	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:36.966830969 CET	10445	49746	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:37.164056063 CET	10445	49746	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:38.968761921 CET	49747	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:39.174357891 CET	10445	49747	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:39.174825907 CET	49747	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:39.189549923 CET	49747	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:39.380316019 CET	10445	49747	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:39.380379915 CET	10445	49747	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:39.380791903 CET	49747	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:39.394609928 CET	10445	49747	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:39.586241007 CET	10445	49747	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:41.390005112 CET	49748	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:41.596694946 CET	10445	49748	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:41.596960068 CET	49748	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:41.601406097 CET	49748	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:41.805063009 CET	10445	49748	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:41.805089951 CET	10445	49748	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:41.805248976 CET	49748	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:41.808928967 CET	10445	49748	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:42.011599064 CET	10445	49748	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:43.813460112 CET	49749	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:44.021342039 CET	10445	49749	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:44.021462917 CET	49749	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:44.052642107 CET	49749	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:44.229274035 CET	10445	49749	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:44.229321003 CET	10445	49749	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:44.229360104 CET	49749	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:44.229446888 CET	49749	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:44.260200024 CET	10445	49749	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:44.437179089 CET	10445	49749	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:44.437222004 CET	10445	49749	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:46.368998051 CET	49750	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:46.577033997 CET	10445	49750	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:46.577320099 CET	49750	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:46.583296061 CET	49750	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:46.785459995 CET	10445	49750	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:46.785509109 CET	10445	49750	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:46.785532951 CET	49750	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:46.785556078 CET	49750	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:46.791071892 CET	10445	49750	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:46.993478060 CET	10445	49750	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:46.993498087 CET	10445	49750	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:48.797307968 CET	49751	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:49.002031088 CET	10445	49751	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:49.002320051 CET	49751	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:49.012641907 CET	49751	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:49.207839012 CET	10445	49751	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:49.207855940 CET	10445	49751	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:49.208041906 CET	49751	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:49.217988968 CET	10445	49751	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:49.412555933 CET	10445	49751	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:51.077280998 CET	49753	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:51.282269001 CET	10445	49753	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:51.282347918 CET	49753	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:51.285372019 CET	49753	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:51.487576008 CET	10445	49753	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:51.487643957 CET	10445	49753	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:51.487644911 CET	49753	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:51.487687111 CET	49753	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:51.489965916 CET	10445	49753	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:51.692570925 CET	10445	49753	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:51.692634106 CET	10445	49753	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:53.233798981 CET	49754	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:53.440545082 CET	10445	49754	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:53.440642118 CET	49754	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:53.444453955 CET	49754	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:53.647481918 CET	10445	49754	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:53.647567034 CET	10445	49754	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:53.647588968 CET	49754	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:53.647614002 CET	49754	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:53.651437044 CET	10445	49754	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:53.854322910 CET	10445	49754	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:53.854388952 CET	10445	49754	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:55.280356884 CET	49755	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:55.480608940 CET	10445	49755	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:55.480864048 CET	49755	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:55.484029055 CET	49755	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:55.681655884 CET	10445	49755	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:55.681761980 CET	10445	49755	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:55.681899071 CET	49755	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:55.681899071 CET	49755	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:55.683696985 CET	10445	49755	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:55.881783009 CET	10445	49755	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:55.881928921 CET	10445	49755	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:57.202725887 CET	49756	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:58.216492891 CET	49756	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:59.222847939 CET	10445	49756	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:59.222918987 CET	10445	49756	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:59.222958088 CET	49756	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:59.223041058 CET	49756	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:59.226049900 CET	49756	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:59.429723024 CET	10445	49756	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:59.429785013 CET	10445	49756	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:59.429964066 CET	49756	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:59.429964066 CET	49756	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:59.433085918 CET	10445	49756	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:59.528981924 CET	49756	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:47:59.636585951 CET	10445	49756	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:59.636632919 CET	10445	49756	18.156.13.209	192.168.2.4
Feb 7, 2024 02:47:59.735977888 CET	10445	49756	18.156.13.209	192.168.2.4
Feb 7, 2024 02:48:00.858654022 CET	49757	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:48:01.057760000 CET	10445	49757	18.156.13.209	192.168.2.4
Feb 7, 2024 02:48:01.057964087 CET	49757	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:48:01.061105967 CET	49757	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:48:01.256999016 CET	10445	49757	18.156.13.209	192.168.2.4
Feb 7, 2024 02:48:01.257055044 CET	10445	49757	18.156.13.209	192.168.2.4
Feb 7, 2024 02:48:01.257299900 CET	49757	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:48:01.259751081 CET	10445	49757	18.156.13.209	192.168.2.4
Feb 7, 2024 02:48:01.456336021 CET	10445	49757	18.156.13.209	192.168.2.4
Feb 7, 2024 02:48:02.593440056 CET	49758	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:48:02.801616907 CET	10445	49758	18.156.13.209	192.168.2.4
Feb 7, 2024 02:48:02.801729918 CET	49758	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:48:02.805028915 CET	49758	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:48:03.009043932 CET	10445	49758	18.156.13.209	192.168.2.4
Feb 7, 2024 02:48:03.009110928 CET	10445	49758	18.156.13.209	192.168.2.4
Feb 7, 2024 02:48:03.009138107 CET	49758	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:48:03.009196997 CET	49758	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:48:03.011779070 CET	10445	49758	18.156.13.209	192.168.2.4
Feb 7, 2024 02:48:03.216204882 CET	10445	49758	18.156.13.209	192.168.2.4
Feb 7, 2024 02:48:03.216238022 CET	10445	49758	18.156.13.209	192.168.2.4
Feb 7, 2024 02:48:05.258470058 CET	49759	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:48:05.464803934 CET	10445	49759	18.156.13.209	192.168.2.4
Feb 7, 2024 02:48:05.465007067 CET	49759	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:48:05.468878984 CET	49759	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:48:05.671540976 CET	10445	49759	18.156.13.209	192.168.2.4
Feb 7, 2024 02:48:05.671570063 CET	10445	49759	18.156.13.209	192.168.2.4
Feb 7, 2024 02:48:05.671637058 CET	49759	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:48:05.673113108 CET	49759	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:48:05.674779892 CET	10445	49759	18.156.13.209	192.168.2.4
Feb 7, 2024 02:48:05.877949953 CET	10445	49759	18.156.13.209	192.168.2.4
Feb 7, 2024 02:48:05.879254103 CET	10445	49759	18.156.13.209	192.168.2.4
Feb 7, 2024 02:48:06.827549934 CET	49760	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:48:07.033217907 CET	10445	49760	18.156.13.209	192.168.2.4
Feb 7, 2024 02:48:07.033423901 CET	49760	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:48:07.036987066 CET	49760	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:48:07.239197016 CET	10445	49760	18.156.13.209	192.168.2.4
Feb 7, 2024 02:48:07.239216089 CET	10445	49760	18.156.13.209	192.168.2.4
Feb 7, 2024 02:48:07.239362001 CET	49760	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:48:07.242306948 CET	10445	49760	18.156.13.209	192.168.2.4
Feb 7, 2024 02:48:07.444880009 CET	10445	49760	18.156.13.209	192.168.2.4
Feb 7, 2024 02:48:08.327521086 CET	49761	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:48:08.529946089 CET	10445	49761	18.156.13.209	192.168.2.4
Feb 7, 2024 02:48:08.530134916 CET	49761	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:48:08.537271976 CET	49761	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:48:08.732608080 CET	10445	49761	18.156.13.209	192.168.2.4
Feb 7, 2024 02:48:08.732620955 CET	10445	49761	18.156.13.209	192.168.2.4
Feb 7, 2024 02:48:08.732786894 CET	49761	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:48:08.739407063 CET	10445	49761	18.156.13.209	192.168.2.4
Feb 7, 2024 02:48:08.935019970 CET	10445	49761	18.156.13.209	192.168.2.4
Feb 7, 2024 02:48:09.869939089 CET	49762	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:10.078182936 CET	10445	49762	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:10.078484058 CET	49762	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:10.081276894 CET	49762	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:10.286987066 CET	10445	49762	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:10.287048101 CET	10445	49762	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:10.287233114 CET	49762	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:10.287233114 CET	49762	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:10.289449930 CET	10445	49762	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:10.495687962 CET	10445	49762	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:10.495703936 CET	10445	49762	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:11.233583927 CET	49763	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:11.435878992 CET	10445	49763	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:11.436098099 CET	49763	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:11.439131021 CET	49763	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:11.638381004 CET	10445	49763	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:11.638480902 CET	10445	49763	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:11.638588905 CET	49763	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:11.638588905 CET	49763	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:11.641495943 CET	10445	49763	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:11.840787888 CET	10445	49763	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:11.840805054 CET	10445	49763	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:12.515265942 CET	49764	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:12.718213081 CET	10445	49764	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:12.718698978 CET	49764	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:12.721709967 CET	49764	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:12.921300888 CET	10445	49764	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:12.921420097 CET	10445	49764	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:12.921551943 CET	49764	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:12.923845053 CET	10445	49764	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:13.124120951 CET	10445	49764	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:13.752111912 CET	49765	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:13.951114893 CET	10445	49765	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:13.951267004 CET	49765	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:13.954943895 CET	49765	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:14.150381088 CET	10445	49765	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:14.150405884 CET	10445	49765	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:14.150527954 CET	49765	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:14.150527954 CET	49765	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:14.153702974 CET	10445	49765	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:14.349469900 CET	10445	49765	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:14.349505901 CET	10445	49765	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:14.922115088 CET	49766	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:15.129427910 CET	10445	49766	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:15.129630089 CET	49766	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:15.133641005 CET	49766	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:15.278616905 CET	49766	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:15.337110996 CET	10445	49766	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:15.337162971 CET	10445	49766	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:15.337523937 CET	49766	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:15.337524891 CET	49766	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:15.340759993 CET	10445	49766	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:15.485933065 CET	10445	49766	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:15.544702053 CET	10445	49766	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:15.544725895 CET	10445	49766	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:16.061853886 CET	49767	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:16.267364979 CET	10445	49767	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:16.267461061 CET	49767	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:16.272039890 CET	49767	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:16.470132113 CET	49767	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:16.473115921 CET	10445	49767	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:16.473165989 CET	10445	49767	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:16.473223925 CET	49767	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:16.477406025 CET	10445	49767	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:16.675791979 CET	10445	49767	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:16.678519964 CET	10445	49767	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:17.145936966 CET	49768	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:17.352180958 CET	10445	49768	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:17.352278948 CET	49768	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:17.356091976 CET	49768	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:17.533509970 CET	49768	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:17.558504105 CET	10445	49768	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:17.558569908 CET	10445	49768	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:17.558800936 CET	49768	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:17.561475992 CET	10445	49768	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:17.739356041 CET	10445	49768	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:17.764559031 CET	10445	49768	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:18.187711954 CET	49769	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:18.387023926 CET	10445	49769	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:18.387248039 CET	49769	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:18.390783072 CET	49769	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:18.586606979 CET	10445	49769	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:18.586674929 CET	10445	49769	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:18.586885929 CET	49769	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:18.587459087 CET	49769	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:18.589693069 CET	10445	49769	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:18.785979986 CET	10445	49769	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:18.786562920 CET	10445	49769	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:19.171097040 CET	49770	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:19.376681089 CET	10445	49770	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:19.377019882 CET	49770	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:19.380285978 CET	49770	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:19.548063993 CET	49770	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:19.582703114 CET	10445	49770	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:19.582766056 CET	10445	49770	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:19.582954884 CET	49770	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:19.584059954 CET	49770	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:19.585505009 CET	10445	49770	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:19.753547907 CET	10445	49770	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:19.753631115 CET	10445	49770	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:19.788408041 CET	10445	49770	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:19.789340019 CET	10445	49770	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:20.124901056 CET	49771	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:20.325968027 CET	10445	49771	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:20.326386929 CET	49771	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:20.330216885 CET	49771	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:20.493823051 CET	49771	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:20.527355909 CET	10445	49771	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:20.527400017 CET	10445	49771	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:20.527523994 CET	49771	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:20.527523994 CET	49771	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:20.530817032 CET	10445	49771	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:20.694816113 CET	10445	49771	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:20.694875002 CET	10445	49771	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:20.728457928 CET	10445	49771	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:20.728517056 CET	10445	49771	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:21.047447920 CET	49772	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:21.255760908 CET	10445	49772	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:21.255871058 CET	49772	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:21.259675980 CET	49772	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:21.463957071 CET	10445	49772	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:21.464023113 CET	10445	49772	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:21.464051962 CET	49772	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:21.464109898 CET	49772	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:21.467210054 CET	10445	49772	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:21.672004938 CET	10445	49772	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:21.672064066 CET	10445	49772	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:21.984273911 CET	49773	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:22.186970949 CET	10445	49773	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:22.187319994 CET	49773	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:22.190279007 CET	49773	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:22.390007973 CET	10445	49773	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:22.390074015 CET	10445	49773	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:22.390389919 CET	49773	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:22.392244101 CET	10445	49773	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:22.592642069 CET	10445	49773	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:23.202387094 CET	49774	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:24.200922966 CET	49774	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:25.406900883 CET	10445	49774	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:25.407125950 CET	49774	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:25.410919905 CET	49774	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:25.562264919 CET	49774	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:25.614450932 CET	10445	49774	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:25.614515066 CET	10445	49774	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:25.614681005 CET	49774	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:25.614681005 CET	49774	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:25.617927074 CET	10445	49774	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:25.716556072 CET	49774	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:25.771711111 CET	10445	49774	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:25.771771908 CET	10445	49774	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:25.821873903 CET	10445	49774	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:25.821959972 CET	10445	49774	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:25.923907995 CET	10445	49774	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:26.031737089 CET	49775	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:26.233334064 CET	10445	49775	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:26.233428955 CET	49775	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:26.236443996 CET	49775	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:26.381294012 CET	49775	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:26.434176922 CET	10445	49775	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:26.434240103 CET	10445	49775	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:26.434412956 CET	49775	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:26.434413910 CET	49775	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:26.437124014 CET	10445	49775	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:26.582190990 CET	10445	49775	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:26.635039091 CET	10445	49775	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:26.635062933 CET	10445	49775	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:26.829071045 CET	49776	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:27.035607100 CET	10445	49776	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:27.035789967 CET	49776	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:27.039195061 CET	49776	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:27.209379911 CET	49776	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:27.242434025 CET	10445	49776	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:27.242499113 CET	10445	49776	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:27.242680073 CET	49776	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:27.245639086 CET	10445	49776	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:27.415994883 CET	10445	49776	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:27.449311972 CET	10445	49776	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:27.609303951 CET	49777	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:27.817126036 CET	10445	49777	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:27.817266941 CET	49777	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:27.822765112 CET	49777	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:27.973562002 CET	49777	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:28.024632931 CET	10445	49777	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:28.024651051 CET	10445	49777	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:28.024735928 CET	49777	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:28.029937029 CET	10445	49777	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:28.180860043 CET	10445	49777	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:28.180876017 CET	10445	49777	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:28.233140945 CET	10445	49777	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:28.381863117 CET	49778	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:28.587512016 CET	10445	49778	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:28.587810040 CET	49778	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:28.593841076 CET	49778	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:28.759697914 CET	49778	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:28.794008017 CET	10445	49778	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:28.794025898 CET	10445	49778	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:28.794114113 CET	49778	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:28.799540997 CET	10445	49778	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:28.965655088 CET	10445	49778	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:29.000139952 CET	10445	49778	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:29.109638929 CET	49779	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:29.308913946 CET	10445	49779	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:29.309185028 CET	49779	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:29.313533068 CET	49779	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:29.465553999 CET	49779	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:29.508733034 CET	10445	49779	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:29.508852005 CET	10445	49779	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:29.509017944 CET	49779	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:29.509017944 CET	49779	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:29.512578964 CET	10445	49779	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:29.666121006 CET	10445	49779	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:29.666179895 CET	10445	49779	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:29.708348989 CET	10445	49779	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:29.708410025 CET	10445	49779	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:29.815433025 CET	49780	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:30.018367052 CET	10445	49780	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:30.018604040 CET	49780	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:30.030040026 CET	49780	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:30.188436031 CET	49780	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:30.221244097 CET	10445	49780	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:30.221309900 CET	10445	49780	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:30.221425056 CET	49780	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:30.221426010 CET	49780	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:30.232305050 CET	10445	49780	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:30.391141891 CET	10445	49780	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:30.424069881 CET	10445	49780	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:30.424132109 CET	10445	49780	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:30.499069929 CET	49781	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:30.701792002 CET	10445	49781	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:30.701951027 CET	49781	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:30.711954117 CET	49781	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:30.890388966 CET	49781	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:30.904376984 CET	10445	49781	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:30.904426098 CET	10445	49781	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:30.904740095 CET	49781	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:30.913995981 CET	10445	49781	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:31.092881918 CET	10445	49781	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:31.093133926 CET	10445	49781	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:31.107060909 CET	10445	49781	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:31.171715021 CET	49782	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:31.372632027 CET	10445	49782	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:31.372750998 CET	49782	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:31.376406908 CET	49782	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:31.547040939 CET	49782	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:31.573642969 CET	10445	49782	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:31.573708057 CET	10445	49782	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:31.573817015 CET	49782	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:31.573817015 CET	49782	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:31.576822996 CET	10445	49782	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:31.748034000 CET	10445	49782	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:31.748095989 CET	10445	49782	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:31.774545908 CET	10445	49782	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:31.774605036 CET	10445	49782	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:31.830260992 CET	49783	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:32.031069994 CET	10445	49783	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:32.031480074 CET	49783	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:32.035161018 CET	49783	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:32.186882019 CET	49783	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:32.232397079 CET	10445	49783	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:32.232462883 CET	10445	49783	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:32.232557058 CET	49783	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:32.232557058 CET	49783	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:32.235568047 CET	10445	49783	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:32.388351917 CET	10445	49783	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:32.433521986 CET	10445	49783	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:32.433578968 CET	10445	49783	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:32.468543053 CET	49784	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:32.671156883 CET	10445	49784	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:32.671367884 CET	49784	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:32.675837040 CET	49784	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:32.842133999 CET	49784	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:32.874027967 CET	10445	49784	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:32.874094963 CET	10445	49784	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:32.874243975 CET	49784	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:32.874243975 CET	49784	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:32.878043890 CET	10445	49784	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:33.046093941 CET	10445	49784	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:33.078825951 CET	10445	49784	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:33.078883886 CET	10445	49784	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:33.093660116 CET	49785	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:33.294565916 CET	10445	49785	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:33.294795036 CET	49785	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:33.297780037 CET	49785	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:33.452552080 CET	49785	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:33.495877028 CET	10445	49785	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:33.495937109 CET	10445	49785	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:33.496191978 CET	49785	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:33.498403072 CET	10445	49785	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:33.654095888 CET	10445	49785	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:33.654160976 CET	10445	49785	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:33.697349072 CET	10445	49785	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:33.703499079 CET	49786	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:33.910130024 CET	10445	49786	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:33.910232067 CET	49786	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:33.920838118 CET	49786	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:34.087341070 CET	49786	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:34.116969109 CET	10445	49786	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:34.116998911 CET	10445	49786	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:34.117161036 CET	49786	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:34.127289057 CET	10445	49786	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:34.293958902 CET	10445	49786	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:34.310525894 CET	49786	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:34.312206030 CET	49787	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:34.323630095 CET	10445	49786	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:34.513706923 CET	10445	49787	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:34.513931990 CET	49787	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:34.517575979 CET	49787	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:34.682672977 CET	49787	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:34.714859009 CET	10445	49787	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:34.714926004 CET	10445	49787	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:34.715125084 CET	49787	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:34.715646982 CET	49787	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:34.717964888 CET	10445	49787	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:34.883857012 CET	10445	49787	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:34.883919001 CET	10445	49787	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:34.888426065 CET	49787	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:34.890085936 CET	49788	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:34.916244984 CET	10445	49787	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:34.916306019 CET	10445	49787	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:35.097325087 CET	10445	49788	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:35.097558975 CET	49788	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:35.101047039 CET	49788	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:35.261516094 CET	49788	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:35.305001020 CET	10445	49788	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:35.305066109 CET	10445	49788	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:35.305226088 CET	49788	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:35.305226088 CET	49788	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:35.307991028 CET	10445	49788	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:35.466547966 CET	49788	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:35.468036890 CET	49789	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:35.468760967 CET	10445	49788	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:35.468780994 CET	10445	49788	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:35.512527943 CET	10445	49788	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:35.512557030 CET	10445	49788	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:35.668797016 CET	10445	49789	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:35.668931007 CET	49789	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:35.672276974 CET	49789	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:35.821835041 CET	49789	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:35.869935036 CET	10445	49789	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:35.869966030 CET	10445	49789	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:35.870131016 CET	49789	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:35.870131016 CET	49789	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:35.872747898 CET	10445	49789	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:36.023143053 CET	10445	49789	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:36.023202896 CET	10445	49789	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:36.028892994 CET	49789	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:36.030199051 CET	49790	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:36.070931911 CET	10445	49789	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:36.070992947 CET	10445	49789	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:36.229669094 CET	10445	49790	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:36.229978085 CET	49790	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:36.241569042 CET	49790	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:36.407556057 CET	49790	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:36.429660082 CET	10445	49790	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:36.429723024 CET	10445	49790	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:36.429764986 CET	49790	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:36.429780960 CET	49790	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:36.440906048 CET	10445	49790	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:36.575928926 CET	49790	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:36.577366114 CET	49791	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:36.607366085 CET	10445	49790	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:36.607424021 CET	10445	49790	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:36.629478931 CET	10445	49790	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:36.629620075 CET	10445	49790	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:36.786247969 CET	10445	49791	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:36.786469936 CET	49791	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:36.789943933 CET	49791	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:36.938888073 CET	49791	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:36.995388985 CET	10445	49791	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:36.995433092 CET	10445	49791	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:36.995835066 CET	49791	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:36.998414040 CET	10445	49791	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:37.138407946 CET	49791	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:37.140003920 CET	49792	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:37.147842884 CET	10445	49791	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:37.204472065 CET	10445	49791	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:37.341005087 CET	10445	49792	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:37.341345072 CET	49792	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:37.344580889 CET	49792	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:37.492265940 CET	49792	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:37.542928934 CET	10445	49792	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:37.542958975 CET	10445	49792	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:37.543104887 CET	49792	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:37.543585062 CET	49792	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:37.545828104 CET	10445	49792	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:37.669675112 CET	49792	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:37.670747042 CET	49793	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:37.693428040 CET	10445	49792	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:37.693469048 CET	10445	49792	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:37.744083881 CET	10445	49792	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:37.744421959 CET	10445	49792	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:37.871953011 CET	10445	49793	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:37.872133017 CET	49793	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:37.875284910 CET	49793	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:38.042409897 CET	49793	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:38.073424101 CET	10445	49793	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:38.073524952 CET	10445	49793	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:38.073697090 CET	49793	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:38.073697090 CET	49793	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:38.076332092 CET	10445	49793	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:38.185555935 CET	49793	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:38.187014103 CET	49794	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:38.244066000 CET	10445	49793	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:38.274985075 CET	10445	49793	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:38.275043011 CET	10445	49793	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:38.389434099 CET	10445	49794	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:38.389561892 CET	49794	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:38.395148993 CET	49794	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:38.592113018 CET	10445	49794	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:38.592147112 CET	10445	49794	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:38.592232943 CET	49794	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:38.597124100 CET	10445	49794	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:38.701122046 CET	49794	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:38.706182003 CET	49795	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:38.794841051 CET	10445	49794	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:38.915226936 CET	10445	49795	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:38.915445089 CET	49795	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:38.918548107 CET	49795	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:39.107757092 CET	49795	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:39.124355078 CET	10445	49795	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:39.124406099 CET	10445	49795	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:39.124629021 CET	49795	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:39.124629021 CET	49795	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:39.126905918 CET	10445	49795	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:39.232455015 CET	49795	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:39.237765074 CET	49796	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:39.316910982 CET	10445	49795	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:39.316972017 CET	10445	49795	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:39.333327055 CET	10445	49795	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:39.333386898 CET	10445	49795	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:39.446921110 CET	10445	49796	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:39.447149992 CET	49796	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:39.452383041 CET	49796	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:39.631711006 CET	49796	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:39.656418085 CET	10445	49796	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:39.656483889 CET	10445	49796	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:39.656704903 CET	49796	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:39.656704903 CET	49796	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:39.661087990 CET	10445	49796	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:39.764008045 CET	49796	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:39.768022060 CET	49797	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:39.841403961 CET	10445	49796	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:39.841434002 CET	10445	49796	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:39.866342068 CET	10445	49796	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:39.866370916 CET	10445	49796	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:39.969207048 CET	10445	49797	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:39.969533920 CET	49797	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:39.975210905 CET	49797	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:40.161688089 CET	49797	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:40.170587063 CET	10445	49797	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:40.170635939 CET	10445	49797	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:40.170686960 CET	49797	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:40.170713902 CET	49797	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:40.175863981 CET	10445	49797	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:40.263422966 CET	49797	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:40.265548944 CET	49798	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:40.362775087 CET	10445	49797	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:40.362828970 CET	10445	49797	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:40.371413946 CET	10445	49797	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:40.371447086 CET	10445	49797	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:40.474566936 CET	10445	49798	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:40.474694967 CET	49798	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:40.480437040 CET	49798	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:40.683924913 CET	10445	49798	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:40.683984995 CET	10445	49798	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:40.684031963 CET	49798	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:40.684075117 CET	49798	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:40.689074039 CET	10445	49798	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:40.763606071 CET	49798	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:40.765270948 CET	49799	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:40.893117905 CET	10445	49798	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:40.893245935 CET	10445	49798	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:40.973262072 CET	10445	49799	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:40.973716021 CET	49799	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:40.981466055 CET	49799	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:41.183362007 CET	10445	49799	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:41.183427095 CET	10445	49799	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:41.183655977 CET	49799	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:41.183656931 CET	49799	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:41.190634966 CET	10445	49799	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:41.263597965 CET	49799	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:41.266709089 CET	49800	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:41.391782999 CET	10445	49799	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:41.391844988 CET	10445	49799	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:41.472667933 CET	10445	49800	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:41.472908974 CET	49800	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:41.483508110 CET	49800	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:41.657624006 CET	49800	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:41.678770065 CET	10445	49800	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:41.678796053 CET	10445	49800	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:41.678978920 CET	49800	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:41.689218044 CET	10445	49800	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:41.763344049 CET	49800	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:41.765475988 CET	49801	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:41.865746021 CET	10445	49800	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:41.886107922 CET	10445	49800	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:41.967499971 CET	10445	49801	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:41.967612982 CET	49801	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:41.973510981 CET	49801	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:42.147269011 CET	49801	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:42.168956041 CET	10445	49801	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:42.169006109 CET	10445	49801	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:42.169193983 CET	49801	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:42.169194937 CET	49801	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:42.174350023 CET	10445	49801	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:42.248424053 CET	49801	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:42.250417948 CET	49802	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:42.350173950 CET	10445	49801	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:42.350239038 CET	10445	49801	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:42.373405933 CET	10445	49801	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:42.373465061 CET	10445	49801	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:42.452573061 CET	10445	49802	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:42.452666044 CET	49802	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:42.457528114 CET	49802	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:42.654616117 CET	10445	49802	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:42.654649019 CET	10445	49802	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:42.654819012 CET	49802	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:42.659161091 CET	10445	49802	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:42.732110977 CET	49802	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:42.740137100 CET	49803	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:42.856774092 CET	10445	49802	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:42.943130016 CET	10445	49803	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:42.943278074 CET	49803	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:42.948992014 CET	49803	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:43.132965088 CET	49803	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:43.148010015 CET	10445	49803	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:43.148061037 CET	10445	49803	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:43.148171902 CET	49803	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:43.148171902 CET	49803	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:43.154133081 CET	10445	49803	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:43.217979908 CET	49803	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:43.220849991 CET	49804	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:43.336143017 CET	10445	49803	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:43.336206913 CET	10445	49803	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:43.351181030 CET	10445	49803	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:43.351238012 CET	10445	49803	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:43.428596020 CET	10445	49804	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:43.428875923 CET	49804	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:43.434771061 CET	49804	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:43.599642992 CET	49804	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:43.636821985 CET	10445	49804	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:43.636892080 CET	10445	49804	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:43.637026072 CET	49804	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:43.637026072 CET	49804	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:43.642194033 CET	10445	49804	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:43.701102972 CET	49804	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:43.702583075 CET	49805	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:43.807606936 CET	10445	49804	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:43.807667017 CET	10445	49804	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:43.844603062 CET	10445	49804	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:43.844665051 CET	10445	49804	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:43.908431053 CET	10445	49805	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:43.908548117 CET	49805	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:43.912873983 CET	49805	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:44.114993095 CET	10445	49805	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:44.115113020 CET	10445	49805	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:44.115304947 CET	49805	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:44.115304947 CET	49805	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:44.118478060 CET	10445	49805	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:44.169703007 CET	49805	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:44.174233913 CET	49806	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:44.321643114 CET	10445	49805	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:44.321702003 CET	10445	49805	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:44.376216888 CET	10445	49806	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:44.376362085 CET	49806	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:44.379971981 CET	49806	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:44.578605890 CET	10445	49806	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:44.578639984 CET	10445	49806	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:44.578732967 CET	49806	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:44.578763962 CET	49806	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:44.581765890 CET	10445	49806	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:44.638864994 CET	49806	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:44.640327930 CET	49807	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:44.783409119 CET	10445	49806	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:44.783469915 CET	10445	49806	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:44.849661112 CET	10445	49807	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:44.849854946 CET	49807	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:44.857929945 CET	49807	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:45.060689926 CET	10445	49807	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:45.060755968 CET	10445	49807	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:45.061199903 CET	49807	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:45.068283081 CET	10445	49807	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:45.122876883 CET	49807	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:45.125741959 CET	49808	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:45.269232988 CET	10445	49807	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:45.333517075 CET	10445	49808	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:45.333662033 CET	49808	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:45.337105989 CET	49808	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:45.519737005 CET	49808	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:45.541389942 CET	10445	49808	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:45.541573048 CET	10445	49808	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:45.541619062 CET	49808	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:45.541636944 CET	49808	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:45.544450045 CET	10445	49808	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:45.591495037 CET	49808	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:45.596395016 CET	49809	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:45.727657080 CET	10445	49808	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:45.749305010 CET	10445	49808	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:45.749363899 CET	10445	49808	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:45.802515984 CET	10445	49809	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:45.802771091 CET	49809	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:45.806302071 CET	49809	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:46.009157896 CET	10445	49809	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:46.009228945 CET	10445	49809	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:46.009426117 CET	49809	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:46.009426117 CET	49809	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:46.012083054 CET	10445	49809	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:46.065697908 CET	49809	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:46.076514006 CET	49810	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:46.215523958 CET	10445	49809	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:46.215542078 CET	10445	49809	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:46.278119087 CET	10445	49810	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:46.278455019 CET	49810	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:46.285073996 CET	49810	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:46.480328083 CET	10445	49810	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:46.480392933 CET	10445	49810	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:46.480690002 CET	49810	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:46.480690002 CET	49810	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:46.486578941 CET	10445	49810	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:46.529301882 CET	49810	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:46.531475067 CET	49811	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:46.682483912 CET	10445	49810	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:46.682545900 CET	10445	49810	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:46.731162071 CET	10445	49811	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:46.731525898 CET	49811	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:46.735318899 CET	49811	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:46.931303024 CET	10445	49811	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:46.931330919 CET	10445	49811	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:46.931544065 CET	49811	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:46.931545019 CET	49811	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:46.934703112 CET	10445	49811	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:46.966622114 CET	49811	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:46.971088886 CET	49812	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:47.133245945 CET	10445	49811	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:47.133306980 CET	10445	49811	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:47.171925068 CET	10445	49812	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:47.172039032 CET	49812	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:47.177958965 CET	49812	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:47.373805046 CET	10445	49812	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:47.373871088 CET	10445	49812	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:47.374073029 CET	49812	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:47.378595114 CET	10445	49812	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:47.419945002 CET	49812	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:47.422045946 CET	49813	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:47.575220108 CET	10445	49812	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:47.623136997 CET	10445	49813	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:47.623455048 CET	49813	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:47.626575947 CET	49813	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:47.824729919 CET	10445	49813	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:47.824790955 CET	10445	49813	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:47.824940920 CET	49813	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:47.824940920 CET	49813	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:47.827244043 CET	10445	49813	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:47.857419014 CET	49813	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:47.860069036 CET	49814	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:48.026036024 CET	10445	49813	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:48.026097059 CET	10445	49813	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:48.061213017 CET	10445	49814	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:48.061405897 CET	49814	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:48.066579103 CET	49814	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:48.262797117 CET	10445	49814	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:48.262861013 CET	10445	49814	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:48.263022900 CET	49814	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:48.263022900 CET	49814	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:48.267724037 CET	10445	49814	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:48.295070887 CET	49814	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:48.301197052 CET	49815	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:48.465229988 CET	10445	49814	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:48.465281963 CET	10445	49814	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:48.502043009 CET	10445	49815	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:48.502218962 CET	49815	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:48.508014917 CET	49815	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:48.667521000 CET	49815	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:48.703088999 CET	10445	49815	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:48.703155041 CET	10445	49815	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:48.703270912 CET	49815	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:48.703339100 CET	49815	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:48.708230019 CET	10445	49815	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:48.732671976 CET	49815	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:48.740328074 CET	49816	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:48.868202925 CET	10445	49815	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:48.868266106 CET	10445	49815	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:48.903672934 CET	10445	49815	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:48.903727055 CET	10445	49815	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:48.942905903 CET	10445	49816	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:48.943078995 CET	49816	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:48.948309898 CET	49816	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:49.145787954 CET	10445	49816	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:49.145850897 CET	10445	49816	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:49.146202087 CET	49816	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:49.151475906 CET	10445	49816	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:49.185286999 CET	49816	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:49.187509060 CET	49817	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:49.348809958 CET	10445	49816	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:49.387522936 CET	10445	49817	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:49.387892962 CET	49817	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:49.393430948 CET	49817	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:49.588196993 CET	10445	49817	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:49.588223934 CET	10445	49817	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:49.588402033 CET	49817	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:49.588402033 CET	49817	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:49.593389988 CET	10445	49817	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:49.623123884 CET	49817	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:49.624450922 CET	49818	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:49.788381100 CET	10445	49817	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:49.788399935 CET	10445	49817	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:49.824202061 CET	10445	49818	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:49.824364901 CET	49818	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:49.829262972 CET	49818	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:50.013730049 CET	49818	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:50.024281979 CET	10445	49818	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:50.024302959 CET	10445	49818	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:50.024449110 CET	49818	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:50.028867006 CET	10445	49818	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:50.060533047 CET	49818	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:50.069437027 CET	49819	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:50.213640928 CET	10445	49818	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:50.224108934 CET	10445	49818	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:50.270831108 CET	10445	49819	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:50.270956993 CET	49819	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:50.273993969 CET	49819	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:50.472512007 CET	49819	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:50.472651005 CET	10445	49819	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:50.472690105 CET	10445	49819	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:50.472759962 CET	49819	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:50.475311041 CET	10445	49819	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:50.499706984 CET	49819	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:50.505418062 CET	49820	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:50.674271107 CET	10445	49819	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:50.674329042 CET	10445	49819	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:50.708264112 CET	10445	49820	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:50.708414078 CET	49820	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:50.712280989 CET	49820	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:50.911400080 CET	10445	49820	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:50.911467075 CET	10445	49820	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:50.911535025 CET	49820	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:50.911572933 CET	49820	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:50.914799929 CET	10445	49820	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:50.935168028 CET	49820	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:50.938220024 CET	49821	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:51.114259958 CET	10445	49820	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:51.114320993 CET	10445	49820	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:51.137829065 CET	10445	49821	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:51.138103008 CET	49821	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:51.141287088 CET	49821	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:51.320523024 CET	49821	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:51.337697029 CET	10445	49821	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:51.337759972 CET	10445	49821	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:51.337887049 CET	49821	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:51.337887049 CET	49821	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:51.340393066 CET	10445	49821	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:51.357259035 CET	49821	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:51.361973047 CET	49822	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:51.520026922 CET	10445	49821	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:51.537225962 CET	10445	49821	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:51.537245989 CET	10445	49821	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:51.563163042 CET	10445	49822	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:51.563570976 CET	49822	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:51.568465948 CET	49822	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:51.714555025 CET	49822	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:51.765067101 CET	10445	49822	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:51.765117884 CET	10445	49822	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:51.765248060 CET	49822	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:51.765248060 CET	49822	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:51.769541979 CET	10445	49822	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:51.794723034 CET	49822	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:51.796489000 CET	49823	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:51.916131973 CET	10445	49822	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:51.966556072 CET	10445	49822	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:51.966615915 CET	10445	49822	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:51.997301102 CET	10445	49823	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:51.997406006 CET	49823	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:52.001573086 CET	49823	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:52.176664114 CET	49823	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:52.198560953 CET	10445	49823	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:52.198625088 CET	10445	49823	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:52.198654890 CET	49823	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:52.198666096 CET	49823	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:52.202131033 CET	10445	49823	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:52.216442108 CET	49823	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:52.217905045 CET	49824	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:52.377989054 CET	10445	49823	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:52.399590969 CET	10445	49823	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:52.399651051 CET	10445	49823	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:52.418842077 CET	10445	49824	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:52.419174910 CET	49824	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:52.422910929 CET	49824	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:52.615931988 CET	49824	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:52.620250940 CET	10445	49824	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:52.620301008 CET	10445	49824	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:52.620351076 CET	49824	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:52.623616934 CET	10445	49824	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:52.638323069 CET	49824	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:52.640305042 CET	49825	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:52.816957951 CET	10445	49824	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:52.817013979 CET	10445	49824	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:52.820990086 CET	10445	49824	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:52.839164972 CET	10445	49825	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:52.839389086 CET	49825	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:52.844145060 CET	49825	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:53.024260998 CET	49825	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:53.038759947 CET	10445	49825	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:53.038824081 CET	10445	49825	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:53.038952112 CET	49825	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:53.038952112 CET	49825	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:53.042964935 CET	10445	49825	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:53.060264111 CET	49825	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:53.062382936 CET	49826	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:53.223507881 CET	10445	49825	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:53.223563910 CET	10445	49825	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:53.238075018 CET	10445	49825	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:53.238183975 CET	10445	49825	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:53.268759012 CET	10445	49826	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:53.269001007 CET	49826	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:53.272042036 CET	49826	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:53.425405025 CET	49826	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:53.475621939 CET	10445	49826	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:53.475687027 CET	10445	49826	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:53.475833893 CET	49826	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:53.475833893 CET	49826	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:53.478271008 CET	10445	49826	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:53.497776031 CET	49826	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:53.499398947 CET	49827	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:53.632116079 CET	10445	49826	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:53.682239056 CET	10445	49826	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:53.682260990 CET	10445	49826	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:53.707590103 CET	10445	49827	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:53.707732916 CET	49827	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:53.711771965 CET	49827	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:53.857670069 CET	49827	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:53.916304111 CET	10445	49827	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:53.916364908 CET	10445	49827	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:53.916382074 CET	49827	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:53.916415930 CET	49827	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:53.919924021 CET	10445	49827	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:53.935802937 CET	49827	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:53.939460993 CET	49828	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:54.066471100 CET	10445	49827	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:54.066586971 CET	10445	49827	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:54.124819994 CET	10445	49827	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:54.124881983 CET	10445	49827	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:54.140235901 CET	10445	49828	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:54.140480042 CET	49828	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:54.143579960 CET	49828	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:54.341700077 CET	10445	49828	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:54.341768026 CET	10445	49828	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:54.341857910 CET	49828	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:54.344187021 CET	10445	49828	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:54.344240904 CET	49828	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:54.466846943 CET	49828	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:54.468040943 CET	49829	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:54.542947054 CET	10445	49828	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:54.544686079 CET	10445	49828	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:54.668436050 CET	10445	49829	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:54.668766975 CET	49829	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:54.672348976 CET	49829	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:54.869106054 CET	10445	49829	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:54.869227886 CET	10445	49829	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:54.869319916 CET	49829	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:54.869319916 CET	49829	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:54.872462034 CET	10445	49829	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:55.069757938 CET	10445	49829	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:55.069816113 CET	10445	49829	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:55.218262911 CET	49830	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:55.426995993 CET	10445	49830	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:55.427310944 CET	49830	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:55.439300060 CET	49830	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:55.627731085 CET	49830	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:55.636003017 CET	10445	49830	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:55.636054039 CET	10445	49830	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:55.636204004 CET	49830	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:55.636204004 CET	49830	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:55.647603989 CET	10445	49830	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:55.674065113 CET	49830	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:55.675332069 CET	49831	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:55.836483955 CET	10445	49830	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:55.844597101 CET	10445	49830	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:55.844633102 CET	10445	49830	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:55.882649899 CET	10445	49831	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:55.882750034 CET	49831	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:55.885691881 CET	49831	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:56.090209007 CET	10445	49831	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:56.090235949 CET	10445	49831	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:56.090286970 CET	49831	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:56.090286970 CET	49831	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:56.092645884 CET	10445	49831	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:56.107566118 CET	49831	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:56.109136105 CET	49832	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:56.297512054 CET	10445	49831	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:56.297575951 CET	10445	49831	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:56.316077948 CET	10445	49832	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:56.316355944 CET	49832	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:56.319266081 CET	49832	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:56.510426044 CET	49832	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:56.523396015 CET	10445	49832	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:56.523443937 CET	10445	49832	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:56.523482084 CET	49832	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:56.523500919 CET	49832	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:56.525959015 CET	10445	49832	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:56.544548988 CET	49832	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:56.546267986 CET	49833	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:56.717664957 CET	10445	49832	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:56.730086088 CET	10445	49832	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:56.730123997 CET	10445	49832	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:56.751889944 CET	10445	49833	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:56.752059937 CET	49833	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:56.755307913 CET	49833	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:56.908004045 CET	49833	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:56.958024025 CET	10445	49833	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:56.958087921 CET	10445	49833	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:56.958195925 CET	49833	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:56.958195925 CET	49833	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:56.960757971 CET	10445	49833	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:56.982300043 CET	49833	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:56.991252899 CET	49834	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:57.114116907 CET	10445	49833	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:57.164000034 CET	10445	49833	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:57.164143085 CET	10445	49833	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:57.198765039 CET	10445	49834	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:57.198990107 CET	49834	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:57.211045980 CET	49834	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:57.384840965 CET	49834	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:57.406790018 CET	10445	49834	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:57.406855106 CET	10445	49834	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:57.407064915 CET	49834	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:57.418308973 CET	10445	49834	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:57.419662952 CET	49834	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:57.424488068 CET	49835	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:57.592645884 CET	10445	49834	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:57.592705011 CET	10445	49834	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:57.614691019 CET	10445	49834	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:57.630831003 CET	10445	49835	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:57.633197069 CET	49835	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:57.643135071 CET	49835	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:57.840513945 CET	10445	49835	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:57.840579033 CET	10445	49835	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:57.840647936 CET	49835	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:57.840647936 CET	49835	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:57.849421024 CET	10445	49835	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:57.857048988 CET	49835	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:57.858458042 CET	49836	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:58.047441959 CET	10445	49835	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:58.047497034 CET	10445	49835	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:58.057584047 CET	10445	49836	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:58.059237957 CET	49836	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:58.063030958 CET	49836	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:58.258866072 CET	10445	49836	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:58.258934975 CET	10445	49836	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:58.259047031 CET	49836	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:58.262017965 CET	10445	49836	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:58.279093027 CET	49836	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:58.282429934 CET	49837	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:58.458434105 CET	10445	49836	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:58.487991095 CET	10445	49837	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:58.488136053 CET	49837	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:58.492218018 CET	49837	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:58.656893015 CET	49837	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:58.694541931 CET	10445	49837	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:58.694606066 CET	10445	49837	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:58.695069075 CET	49837	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:58.697627068 CET	10445	49837	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:58.716563940 CET	49837	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:58.717766047 CET	49838	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:58.862842083 CET	10445	49837	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:58.901094913 CET	10445	49837	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:58.926907063 CET	10445	49838	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:58.927273989 CET	49838	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:58.934688091 CET	49838	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:59.115971088 CET	49838	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:59.136622906 CET	10445	49838	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:59.136687994 CET	10445	49838	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:59.136962891 CET	49838	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:59.136962891 CET	49838	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:59.143412113 CET	10445	49838	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:59.154102087 CET	49838	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:59.156704903 CET	49839	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:59.325611115 CET	10445	49838	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:59.325674057 CET	10445	49838	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:59.346177101 CET	10445	49838	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:59.346236944 CET	10445	49838	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:59.359301090 CET	10445	49839	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:59.359427929 CET	49839	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:59.362936974 CET	49839	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:59.527153969 CET	49839	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:59.562261105 CET	10445	49839	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:59.562323093 CET	10445	49839	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:59.562335014 CET	49839	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:59.562362909 CET	49839	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:59.565213919 CET	10445	49839	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:59.575874090 CET	49839	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:59.577507019 CET	49840	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:59.729933023 CET	10445	49839	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:59.729958057 CET	10445	49839	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:59.764676094 CET	10445	49839	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:59.764693975 CET	10445	49839	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:59.778584003 CET	10445	49840	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:59.778717995 CET	49840	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:59.783885956 CET	49840	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:59.953294039 CET	49840	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:59.979988098 CET	10445	49840	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:59.980055094 CET	10445	49840	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:59.980200052 CET	49840	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:59.980200052 CET	49840	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:59.984647989 CET	10445	49840	18.197.239.5	192.168.2.4
Feb 7, 2024 02:48:59.997807980 CET	49840	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:48:59.999811888 CET	49841	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:00.154989004 CET	10445	49840	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:00.181158066 CET	10445	49840	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:00.181308985 CET	10445	49840	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:00.207485914 CET	10445	49841	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:00.207685947 CET	49841	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:00.211149931 CET	49841	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:00.362457991 CET	49841	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:00.415402889 CET	10445	49841	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:00.415442944 CET	10445	49841	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:00.415601015 CET	49841	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:00.415601015 CET	49841	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:00.418338060 CET	10445	49841	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:00.435235023 CET	49841	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:00.436865091 CET	49842	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:00.570056915 CET	10445	49841	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:00.623004913 CET	10445	49841	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:00.623044014 CET	10445	49841	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:00.636174917 CET	10445	49842	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:00.636358023 CET	49842	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:00.641371012 CET	49842	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:00.835886955 CET	10445	49842	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:00.835933924 CET	10445	49842	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:00.836030006 CET	49842	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:00.836072922 CET	49842	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:00.840475082 CET	10445	49842	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:00.841558933 CET	49842	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:00.843153000 CET	49843	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:01.035136938 CET	10445	49842	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:01.035186052 CET	10445	49842	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:01.050911903 CET	10445	49843	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:01.051043987 CET	49843	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:01.054553986 CET	49843	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:01.193825960 CET	49843	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:01.259032965 CET	10445	49843	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:01.259069920 CET	10445	49843	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:01.259212017 CET	49843	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:01.261126041 CET	49843	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:01.262144089 CET	10445	49843	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:01.279011011 CET	49843	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:01.280514956 CET	49844	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:01.401940107 CET	10445	49843	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:01.467044115 CET	10445	49843	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:01.468810081 CET	10445	49843	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:01.483258009 CET	10445	49844	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:01.483469009 CET	49844	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:01.486835003 CET	49844	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:01.651123047 CET	49844	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:01.686172962 CET	10445	49844	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:01.686206102 CET	10445	49844	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:01.686398029 CET	49844	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:01.686398029 CET	49844	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:01.689080000 CET	10445	49844	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:01.700995922 CET	49844	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:01.702568054 CET	49845	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:01.854007006 CET	10445	49844	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:01.854069948 CET	10445	49844	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:01.889045000 CET	10445	49844	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:01.889110088 CET	10445	49844	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:01.910816908 CET	10445	49845	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:01.910952091 CET	49845	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:01.914913893 CET	49845	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:02.082845926 CET	49845	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:02.119903088 CET	10445	49845	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:02.119961977 CET	10445	49845	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:02.120134115 CET	49845	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:02.120135069 CET	49845	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:02.123040915 CET	10445	49845	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:02.138372898 CET	49845	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:02.141762972 CET	49846	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:02.291351080 CET	10445	49845	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:02.291378021 CET	10445	49845	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:02.328511000 CET	10445	49845	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:02.328538895 CET	10445	49845	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:02.347433090 CET	10445	49846	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:02.347542048 CET	49846	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:02.352933884 CET	49846	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:02.536130905 CET	49846	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:02.553396940 CET	10445	49846	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:02.553446054 CET	10445	49846	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:02.553489923 CET	49846	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:02.553518057 CET	49846	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:02.558413982 CET	10445	49846	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:02.560585976 CET	49846	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:02.565252066 CET	49847	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:02.742435932 CET	10445	49846	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:02.742494106 CET	10445	49846	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:02.760783911 CET	10445	49846	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:02.760839939 CET	10445	49846	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:02.767973900 CET	10445	49847	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:02.768249989 CET	49847	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:02.772449017 CET	49847	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:02.969489098 CET	10445	49847	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:02.969552040 CET	10445	49847	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:02.969733000 CET	49847	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:02.969733000 CET	49847	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:02.973010063 CET	10445	49847	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:02.982163906 CET	49847	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:02.983611107 CET	49848	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:03.170694113 CET	10445	49847	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:03.170748949 CET	10445	49847	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:03.184511900 CET	10445	49848	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:03.184740067 CET	49848	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:03.191901922 CET	49848	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:03.386347055 CET	10445	49848	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:03.386410952 CET	10445	49848	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:03.386765003 CET	49848	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:03.392708063 CET	10445	49848	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:03.404103041 CET	49848	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:03.409076929 CET	49849	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:03.587918997 CET	10445	49848	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:03.616271019 CET	10445	49849	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:03.616389036 CET	49849	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:03.620754004 CET	49849	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:03.789633989 CET	49849	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:03.823970079 CET	10445	49849	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:03.824032068 CET	10445	49849	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:03.824034929 CET	49849	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:03.824081898 CET	49849	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:03.828618050 CET	10445	49849	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:03.841698885 CET	49849	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:03.843492985 CET	49850	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:03.997282982 CET	10445	49849	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:03.997335911 CET	10445	49849	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:04.031326056 CET	10445	49849	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:04.031359911 CET	10445	49849	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:04.044408083 CET	10445	49850	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:04.044518948 CET	49850	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:04.048316002 CET	49850	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:04.219120026 CET	49850	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:04.245733023 CET	10445	49850	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:04.245784044 CET	10445	49850	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:04.245932102 CET	49850	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:04.246061087 CET	49850	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:04.248951912 CET	10445	49850	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:04.263344049 CET	49850	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:04.268095970 CET	49851	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:04.420154095 CET	10445	49850	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:04.446914911 CET	10445	49850	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:04.446968079 CET	10445	49850	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:04.468522072 CET	10445	49851	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:04.468744040 CET	49851	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:04.481049061 CET	49851	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:04.669470072 CET	10445	49851	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:04.669531107 CET	10445	49851	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:04.669672966 CET	49851	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:04.669672966 CET	49851	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:04.681427002 CET	10445	49851	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:04.685405970 CET	49851	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:04.687680960 CET	49852	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:04.870414019 CET	10445	49851	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:04.870476007 CET	10445	49851	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:04.893515110 CET	10445	49852	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:04.893807888 CET	49852	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:04.897738934 CET	49852	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:05.063266039 CET	49852	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:05.100158930 CET	10445	49852	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:05.100228071 CET	10445	49852	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:05.100332022 CET	49852	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:05.100332975 CET	49852	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:05.103410959 CET	10445	49852	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:05.125214100 CET	49852	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:05.126584053 CET	49853	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:05.269299030 CET	10445	49852	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:05.306375027 CET	10445	49852	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:05.306432962 CET	10445	49852	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:05.334110022 CET	10445	49853	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:05.334201097 CET	49853	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:05.337629080 CET	49853	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:05.524560928 CET	49853	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:05.541572094 CET	10445	49853	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:05.541620970 CET	10445	49853	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:05.541661024 CET	49853	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:05.541678905 CET	49853	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:05.544500113 CET	10445	49853	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:05.560224056 CET	49853	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:05.565000057 CET	49854	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:05.731969118 CET	10445	49853	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:05.748833895 CET	10445	49853	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:05.748893976 CET	10445	49853	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:05.770718098 CET	10445	49854	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:05.770850897 CET	49854	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:05.775221109 CET	49854	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:05.944766045 CET	49854	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:05.977087975 CET	10445	49854	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:05.977154016 CET	10445	49854	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:05.977322102 CET	49854	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:05.977322102 CET	49854	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:05.980726004 CET	10445	49854	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:05.982017994 CET	49854	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:05.984100103 CET	49855	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:06.150573969 CET	10445	49854	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:06.183099031 CET	10445	49854	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:06.183160067 CET	10445	49854	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:06.192805052 CET	10445	49855	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:06.192982912 CET	49855	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:06.196808100 CET	49855	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:06.364097118 CET	49855	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:06.402257919 CET	10445	49855	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:06.402369976 CET	10445	49855	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:06.402514935 CET	49855	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:06.402514935 CET	49855	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:06.405545950 CET	10445	49855	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:06.419646978 CET	49855	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:06.421080112 CET	49856	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:06.573607922 CET	10445	49855	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:06.611345053 CET	10445	49855	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:06.611397028 CET	10445	49855	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:06.629789114 CET	10445	49856	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:06.629947901 CET	49856	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:06.633147001 CET	49856	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:06.812722921 CET	49856	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:06.839067936 CET	10445	49856	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:06.839135885 CET	10445	49856	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:06.839272976 CET	49856	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:06.839273930 CET	49856	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:06.841541052 CET	49856	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:06.841756105 CET	10445	49856	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:06.843775988 CET	49857	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:07.021943092 CET	10445	49856	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:07.048116922 CET	10445	49856	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:07.048180103 CET	10445	49856	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:07.051114082 CET	10445	49857	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:07.051202059 CET	49857	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:07.054431915 CET	49857	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:07.215240002 CET	49857	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:07.258836031 CET	10445	49857	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:07.258896112 CET	10445	49857	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:07.258929014 CET	49857	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:07.258950949 CET	49857	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:07.261710882 CET	10445	49857	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:07.279099941 CET	49857	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:07.282021046 CET	49858	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:07.422880888 CET	10445	49857	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:07.422940969 CET	10445	49857	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:07.466464043 CET	10445	49857	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:07.466522932 CET	10445	49857	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:07.488612890 CET	10445	49858	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:07.488925934 CET	49858	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:07.493376970 CET	49858	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:07.657284021 CET	49858	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:07.695241928 CET	10445	49858	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:07.695460081 CET	10445	49858	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:07.695493937 CET	49858	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:07.695588112 CET	49858	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:07.699350119 CET	10445	49858	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:07.700891972 CET	49858	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:07.703746080 CET	49859	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:07.863861084 CET	10445	49858	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:07.901930094 CET	10445	49858	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:07.901995897 CET	10445	49858	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:07.910689116 CET	10445	49859	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:07.910960913 CET	49859	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:07.921730042 CET	49859	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:08.081630945 CET	49859	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:08.118170023 CET	10445	49859	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:08.118197918 CET	10445	49859	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:08.118334055 CET	49859	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:08.118334055 CET	49859	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:08.122816086 CET	49859	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:08.124309063 CET	49860	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:08.128812075 CET	10445	49859	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:08.288990021 CET	10445	49859	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:08.325474024 CET	10445	49859	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:08.325531006 CET	10445	49859	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:08.325931072 CET	10445	49860	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:08.326155901 CET	49860	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:08.329523087 CET	49860	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:08.522483110 CET	49860	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:08.528165102 CET	10445	49860	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:08.528213978 CET	10445	49860	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:08.528527021 CET	49860	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:08.531009912 CET	10445	49860	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:08.544718981 CET	49860	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:08.550410986 CET	49861	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:08.724498987 CET	10445	49860	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:08.730057955 CET	10445	49860	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:08.759511948 CET	10445	49861	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:08.759607077 CET	49861	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:08.762835979 CET	49861	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:08.913038969 CET	49861	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:08.969168901 CET	10445	49861	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:08.969229937 CET	10445	49861	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:08.969367027 CET	49861	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:08.969367027 CET	49861	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:08.971401930 CET	10445	49861	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:08.982371092 CET	49861	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:08.989700079 CET	49862	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:09.122327089 CET	10445	49861	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:09.178369999 CET	10445	49861	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:09.178426027 CET	10445	49861	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:09.190901041 CET	10445	49862	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:09.191221952 CET	49862	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:09.194963932 CET	49862	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:09.363640070 CET	49862	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:09.392865896 CET	10445	49862	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:09.392891884 CET	10445	49862	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:09.393117905 CET	49862	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:09.395214081 CET	49862	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:09.396087885 CET	10445	49862	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:09.404023886 CET	49862	10445	192.168.2.4	18.197.239.5
Feb 7, 2024 02:49:09.526042938 CET	49863	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:09.565042973 CET	10445	49862	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:09.594621897 CET	10445	49862	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:09.596333027 CET	10445	49862	18.197.239.5	192.168.2.4
Feb 7, 2024 02:49:09.733867884 CET	10445	49863	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:09.734131098 CET	49863	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:09.737776041 CET	49863	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:09.905962944 CET	49863	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:09.941987991 CET	10445	49863	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:09.942039013 CET	10445	49863	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:09.942200899 CET	49863	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:09.942200899 CET	49863	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:09.945086956 CET	10445	49863	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:09.950834036 CET	49863	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:09.952853918 CET	49864	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:10.113980055 CET	10445	49863	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:10.149869919 CET	10445	49863	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:10.149960041 CET	10445	49863	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:10.154632092 CET	10445	49864	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:10.155057907 CET	49864	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:10.162339926 CET	49864	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:10.332184076 CET	49864	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:10.359395981 CET	10445	49864	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:10.359461069 CET	10445	49864	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:10.359478951 CET	49864	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:10.359507084 CET	49864	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:10.366153955 CET	10445	49864	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:10.372648954 CET	49864	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:10.374192953 CET	49865	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:10.534738064 CET	10445	49864	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:10.561050892 CET	10445	49864	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:10.561285019 CET	10445	49864	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:10.581044912 CET	10445	49865	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:10.581358910 CET	49865	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:10.591790915 CET	49865	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:10.750745058 CET	49865	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:10.788626909 CET	10445	49865	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:10.788670063 CET	10445	49865	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:10.788844109 CET	49865	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:10.788844109 CET	49865	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:10.794800997 CET	49865	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:10.797184944 CET	49866	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:10.798607111 CET	10445	49865	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:10.958007097 CET	10445	49865	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:10.995846033 CET	10445	49865	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:10.995877981 CET	10445	49865	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:10.997021914 CET	10445	49866	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:10.997184992 CET	49866	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:11.002238035 CET	49866	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:11.197542906 CET	10445	49866	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:11.197588921 CET	10445	49866	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:11.197779894 CET	49866	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:11.197781086 CET	49866	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:11.201988935 CET	10445	49866	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:11.217166901 CET	49866	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:11.219836950 CET	49867	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:11.398526907 CET	10445	49866	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:11.398566008 CET	10445	49866	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:11.421854973 CET	10445	49867	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:11.421960115 CET	49867	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:11.432246923 CET	49867	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:11.625205994 CET	10445	49867	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:11.625255108 CET	10445	49867	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:11.625277996 CET	49867	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:11.625302076 CET	49867	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:11.634154081 CET	10445	49867	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:11.638394117 CET	49867	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:11.639801025 CET	49868	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:11.828541994 CET	10445	49867	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:11.828578949 CET	10445	49867	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:11.847265005 CET	10445	49868	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:11.847358942 CET	49868	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:11.886306047 CET	49868	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:12.055058002 CET	10445	49868	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:12.055123091 CET	10445	49868	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:12.055241108 CET	49868	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:12.055241108 CET	49868	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:12.060220003 CET	49868	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:12.061665058 CET	49869	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:12.093678951 CET	10445	49868	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:12.260688066 CET	10445	49869	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:12.261066914 CET	49869	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:12.262680054 CET	10445	49868	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:12.262713909 CET	10445	49868	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:12.460109949 CET	10445	49869	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:12.460150003 CET	10445	49869	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:12.460433960 CET	49869	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:13.361466885 CET	49869	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:13.372903109 CET	49869	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:13.373956919 CET	49870	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:13.560611963 CET	10445	49869	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:13.579108000 CET	10445	49870	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:13.579272985 CET	49870	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:13.582323074 CET	49870	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:13.784826040 CET	10445	49870	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:13.784893990 CET	10445	49870	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:13.784948111 CET	49870	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:13.784948111 CET	49870	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:13.785594940 CET	49870	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:13.786758900 CET	49871	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:13.786993980 CET	10445	49870	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:13.990128040 CET	10445	49870	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:13.990190029 CET	10445	49870	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:13.991432905 CET	10445	49871	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:13.991506100 CET	49871	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:13.994935989 CET	49871	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:14.191446066 CET	49871	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:14.196397066 CET	10445	49871	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:14.196445942 CET	10445	49871	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:14.196494102 CET	49871	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:14.196979046 CET	49871	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:14.198216915 CET	49872	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:14.199419975 CET	10445	49871	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:14.396358967 CET	10445	49871	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:14.400954962 CET	10445	49871	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:14.403289080 CET	10445	49872	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:14.403495073 CET	49872	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:14.406708002 CET	49872	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:14.548537970 CET	49872	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:14.609323025 CET	10445	49872	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:14.609385014 CET	10445	49872	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:14.609437943 CET	49872	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:14.609437943 CET	49872	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:14.610445976 CET	49872	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:14.611644030 CET	49873	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:14.611910105 CET	10445	49872	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:14.754090071 CET	10445	49872	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:14.754151106 CET	10445	49872	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:14.814218044 CET	10445	49873	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:14.814538002 CET	49873	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:14.814659119 CET	10445	49872	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:14.814682007 CET	10445	49872	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:14.818020105 CET	49873	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:14.976402044 CET	49873	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:15.016863108 CET	10445	49873	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:15.016959906 CET	10445	49873	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:15.017085075 CET	49873	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:15.017085075 CET	49873	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:15.018074989 CET	49873	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:15.019764900 CET	10445	49873	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:15.020311117 CET	49874	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:15.178585052 CET	10445	49873	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:15.178638935 CET	10445	49873	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:15.220870972 CET	10445	49873	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:15.220931053 CET	10445	49873	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:15.226658106 CET	10445	49874	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:15.226946115 CET	49874	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:15.230639935 CET	49874	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:15.395176888 CET	49874	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:15.434727907 CET	10445	49874	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:15.434814930 CET	10445	49874	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:15.434838057 CET	49874	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:15.434921980 CET	49874	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:15.435899019 CET	49874	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:15.437365055 CET	49875	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:15.437972069 CET	10445	49874	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:15.600822926 CET	10445	49874	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:16.466417074 CET	49875	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:17.629273891 CET	10445	49875	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:17.629326105 CET	10445	49874	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:17.629357100 CET	10445	49874	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:17.629391909 CET	10445	49875	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:17.629492044 CET	49875	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:17.629492044 CET	49875	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:17.632713079 CET	49875	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:17.730614901 CET	10445	49875	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:17.730833054 CET	49875	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:17.786994934 CET	49875	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:17.831783056 CET	10445	49875	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:17.831805944 CET	10445	49875	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:17.832067013 CET	49875	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:17.832986116 CET	49875	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:17.834587097 CET	10445	49875	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:17.835233927 CET	49876	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:17.932837963 CET	10445	49875	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:17.988928080 CET	10445	49875	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:17.988950014 CET	10445	49875	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:18.033965111 CET	10445	49875	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:18.035162926 CET	10445	49876	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:18.035336971 CET	49876	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:18.038970947 CET	49876	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:18.235707998 CET	10445	49876	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:18.235734940 CET	10445	49876	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:18.235997915 CET	49876	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:18.236690998 CET	49876	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:18.238866091 CET	10445	49876	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:18.240715981 CET	49877	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:18.435993910 CET	10445	49876	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:18.440918922 CET	10445	49877	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:18.441004038 CET	49877	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:18.444570065 CET	49877	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:18.641791105 CET	10445	49877	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:18.641844034 CET	10445	49877	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:18.641899109 CET	49877	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:18.641935110 CET	49877	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:18.643069029 CET	49877	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:18.645091057 CET	10445	49877	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:18.645172119 CET	49878	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:18.842598915 CET	10445	49877	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:18.842659950 CET	10445	49877	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:18.847038031 CET	10445	49878	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:18.847282887 CET	49878	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:18.850795984 CET	49878	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:19.036361933 CET	49878	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:19.049525976 CET	10445	49878	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:19.049547911 CET	10445	49878	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:19.049621105 CET	49878	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:19.049668074 CET	49878	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:19.050676107 CET	49878	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:19.052570105 CET	10445	49878	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:19.052970886 CET	49879	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:19.238475084 CET	10445	49878	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:19.238532066 CET	10445	49878	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:19.251414061 CET	10445	49878	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:19.251450062 CET	10445	49878	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:19.254990101 CET	10445	49879	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:19.255264044 CET	49879	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:19.261198997 CET	49879	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:19.458544970 CET	10445	49879	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:19.458671093 CET	10445	49879	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:19.458791971 CET	49879	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:19.458791971 CET	49879	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:19.460171938 CET	49879	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:19.462188005 CET	49880	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:19.463234901 CET	10445	49879	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:19.660816908 CET	10445	49879	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:19.660984039 CET	10445	49879	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:19.669275045 CET	10445	49880	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:19.669500113 CET	49880	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:19.682198048 CET	49880	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:19.877697945 CET	10445	49880	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:19.877765894 CET	10445	49880	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:19.877825975 CET	49880	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:19.877825975 CET	49880	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:19.878540039 CET	49880	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:19.879843950 CET	49881	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:19.889375925 CET	10445	49880	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:20.084961891 CET	10445	49881	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:20.085059881 CET	10445	49880	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:20.085077047 CET	10445	49880	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:20.085201979 CET	49881	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:20.088613987 CET	49881	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:20.291132927 CET	10445	49881	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:20.291158915 CET	10445	49881	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:20.291292906 CET	49881	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:20.293524981 CET	10445	49881	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:20.296437979 CET	49881	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:20.303426981 CET	49882	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:20.496228933 CET	10445	49881	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:20.503712893 CET	10445	49882	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:20.503802061 CET	49882	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:20.508009911 CET	49882	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:20.704305887 CET	10445	49882	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:20.704328060 CET	10445	49882	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:20.704524040 CET	49882	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:20.705423117 CET	49882	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:20.708167076 CET	10445	49882	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:20.709702015 CET	49883	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:20.904844999 CET	10445	49882	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:20.908332109 CET	10445	49883	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:20.908493042 CET	49883	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:20.913261890 CET	49883	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:21.106312037 CET	49883	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:21.107317924 CET	10445	49883	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:21.107340097 CET	10445	49883	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:21.107469082 CET	49883	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:21.108138084 CET	49883	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:21.109653950 CET	49884	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:21.111702919 CET	10445	49883	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:21.305268049 CET	10445	49883	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:21.306263924 CET	10445	49883	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:21.314610004 CET	10445	49884	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:21.314857960 CET	49884	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:21.321722984 CET	49884	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:21.508526087 CET	49884	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:21.520078897 CET	10445	49884	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:21.520111084 CET	10445	49884	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:21.520306110 CET	49884	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:21.526228905 CET	10445	49884	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:21.538535118 CET	49884	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:21.541001081 CET	49885	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:21.713399887 CET	10445	49884	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:21.724886894 CET	10445	49884	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:21.745734930 CET	10445	49885	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:21.746130943 CET	49885	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:21.760296106 CET	49885	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:21.951212883 CET	10445	49885	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:21.951239109 CET	10445	49885	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:21.951447964 CET	49885	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:21.951448917 CET	49885	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:21.953068018 CET	49885	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:21.954308033 CET	49886	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:21.965370893 CET	10445	49885	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:22.156366110 CET	10445	49885	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:22.156517982 CET	10445	49885	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:22.159820080 CET	10445	49886	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:22.159957886 CET	49886	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:22.172256947 CET	49886	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:22.365843058 CET	10445	49886	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:22.365866899 CET	10445	49886	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:22.365950108 CET	49886	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:22.366009951 CET	49886	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:22.370457888 CET	49886	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:22.373095036 CET	49887	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:22.377648115 CET	10445	49886	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:22.571582079 CET	10445	49886	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:22.571630001 CET	10445	49886	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:22.574470997 CET	10445	49887	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:22.574577093 CET	49887	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:22.580691099 CET	49887	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:22.776367903 CET	10445	49887	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:22.776416063 CET	10445	49887	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:22.776607990 CET	49887	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:22.776607990 CET	49887	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:22.777868032 CET	49887	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:22.780020952 CET	49888	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:22.782059908 CET	10445	49887	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:22.978161097 CET	10445	49887	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:22.978183985 CET	10445	49887	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:22.987621069 CET	10445	49888	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:22.987829924 CET	49888	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:22.993647099 CET	49888	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:23.195714951 CET	10445	49888	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:23.195815086 CET	10445	49888	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:23.196182966 CET	49888	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:23.197577953 CET	49888	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:23.201148987 CET	49889	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:23.201183081 CET	10445	49888	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:23.401993990 CET	10445	49889	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:23.402090073 CET	49889	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:23.403870106 CET	10445	49888	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:23.409631014 CET	49889	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:23.603168964 CET	10445	49889	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:23.603235960 CET	10445	49889	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:23.603322983 CET	49889	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:23.603322983 CET	49889	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:23.605405092 CET	49889	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:23.608423948 CET	49890	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:23.610243082 CET	10445	49889	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:23.804390907 CET	10445	49889	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:23.804438114 CET	10445	49889	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:23.808443069 CET	10445	49890	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:23.808547020 CET	49890	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:23.814177990 CET	49890	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:24.009001970 CET	10445	49890	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:24.009032011 CET	10445	49890	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:24.009118080 CET	49890	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:24.009146929 CET	49890	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:24.009733915 CET	49890	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:24.011116982 CET	49891	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:24.014219999 CET	10445	49890	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:24.209218025 CET	10445	49890	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:24.209248066 CET	10445	49890	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:24.211564064 CET	10445	49891	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:24.211675882 CET	49891	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:24.220282078 CET	49891	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:24.412797928 CET	10445	49891	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:24.412828922 CET	10445	49891	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:24.413314104 CET	49891	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:24.414632082 CET	49891	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:24.418107033 CET	49892	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:24.420841932 CET	10445	49891	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:24.614242077 CET	10445	49891	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:24.624921083 CET	10445	49892	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:24.625153065 CET	49892	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:24.631643057 CET	49892	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:24.832262039 CET	10445	49892	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:24.832288027 CET	10445	49892	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:24.832494974 CET	49892	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:24.832495928 CET	49892	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:24.833808899 CET	49892	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:24.837299109 CET	49893	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:24.838197947 CET	10445	49892	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:25.037602901 CET	10445	49893	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:25.037731886 CET	49893	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:25.039129019 CET	10445	49892	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:25.039144993 CET	10445	49892	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:25.043991089 CET	49893	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:25.238095999 CET	10445	49893	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:25.238117933 CET	10445	49893	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:25.238285065 CET	49893	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:25.238285065 CET	49893	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:25.239892006 CET	49893	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:25.243196011 CET	49894	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:25.244040012 CET	10445	49893	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:25.438383102 CET	10445	49893	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:25.438409090 CET	10445	49893	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:25.447664022 CET	10445	49894	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:25.450880051 CET	49894	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:25.457184076 CET	49894	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:25.655877113 CET	10445	49894	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:25.655905008 CET	10445	49894	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:25.656002045 CET	49894	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:25.657277107 CET	49894	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:25.661345005 CET	10445	49894	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:25.663903952 CET	49895	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:25.860388994 CET	10445	49894	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:25.862904072 CET	10445	49895	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:25.863193989 CET	49895	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:25.870836020 CET	49895	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:26.062599897 CET	10445	49895	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:26.062628031 CET	10445	49895	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:26.062777996 CET	49895	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:26.062865019 CET	49895	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:26.063601971 CET	49895	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:26.065651894 CET	49896	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:26.069679976 CET	10445	49895	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:26.262077093 CET	10445	49895	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:26.262108088 CET	10445	49895	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:26.265990019 CET	10445	49896	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:26.266081095 CET	49896	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:26.272506952 CET	49896	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:26.466963053 CET	10445	49896	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:26.466996908 CET	10445	49896	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:26.467109919 CET	49896	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:26.467967987 CET	49896	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:26.470210075 CET	49897	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:26.472800970 CET	10445	49896	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:26.667716980 CET	10445	49896	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:26.672040939 CET	10445	49897	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:26.675100088 CET	49897	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:26.687742949 CET	49897	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:26.877414942 CET	10445	49897	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:26.877473116 CET	10445	49897	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:26.877801895 CET	49897	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:26.878721952 CET	49897	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:26.882931948 CET	49898	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:26.889585018 CET	10445	49897	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:27.080086946 CET	10445	49897	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:27.083244085 CET	10445	49898	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:27.083947897 CET	49898	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:27.091087103 CET	49898	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:27.284495115 CET	10445	49898	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:27.284523010 CET	10445	49898	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:27.284714937 CET	49898	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:27.285765886 CET	49898	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:27.288965940 CET	49899	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:27.291217089 CET	10445	49898	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:27.485111952 CET	10445	49898	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:27.496284008 CET	10445	49899	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:27.496536970 CET	49899	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:27.503881931 CET	49899	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:27.704135895 CET	10445	49899	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:27.704194069 CET	10445	49899	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:27.704276085 CET	49899	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:27.704277039 CET	49899	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:27.705538988 CET	49899	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:27.707432985 CET	49900	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:27.711277962 CET	10445	49899	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:27.911894083 CET	10445	49899	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:27.911948919 CET	10445	49899	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:27.914395094 CET	10445	49900	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:27.914704084 CET	49900	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:27.924063921 CET	49900	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:28.122081995 CET	10445	49900	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:28.122107029 CET	10445	49900	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:28.122200012 CET	49900	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:28.123745918 CET	49900	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:28.126245975 CET	49901	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:28.131043911 CET	10445	49900	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:28.326406956 CET	10445	49901	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:28.326524973 CET	49901	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:28.329204082 CET	10445	49900	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:28.330935955 CET	49901	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:28.526930094 CET	10445	49901	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:28.526953936 CET	10445	49901	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:28.527146101 CET	49901	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:28.528521061 CET	49901	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:28.530949116 CET	10445	49901	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:28.531367064 CET	49902	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:28.727348089 CET	10445	49901	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:28.731857061 CET	10445	49902	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:28.732140064 CET	49902	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:28.735937119 CET	49902	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:28.932570934 CET	10445	49902	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:28.932593107 CET	10445	49902	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:28.932786942 CET	49902	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:28.933876038 CET	49902	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:28.935614109 CET	10445	49902	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:28.936150074 CET	49903	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:29.132915020 CET	10445	49902	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:29.136900902 CET	10445	49903	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:29.137378931 CET	49903	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:29.146311045 CET	49903	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:29.338476896 CET	10445	49903	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:29.338506937 CET	10445	49903	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:29.338901043 CET	49903	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:29.340723038 CET	49903	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:29.344115973 CET	49904	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:29.346983910 CET	10445	49903	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:29.539683104 CET	10445	49903	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:29.552200079 CET	10445	49904	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:29.552326918 CET	49904	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:29.580970049 CET	49904	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:29.760757923 CET	10445	49904	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:29.760778904 CET	10445	49904	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:29.760991096 CET	49904	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:29.789283991 CET	10445	49904	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:29.795692921 CET	49904	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:29.797655106 CET	49905	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:29.969048977 CET	10445	49904	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:29.996973038 CET	10445	49905	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:29.997220039 CET	49905	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:30.000844955 CET	49905	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:30.196733952 CET	10445	49905	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:30.196749926 CET	10445	49905	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:30.196933031 CET	49905	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:30.200079918 CET	10445	49905	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:30.293220043 CET	49905	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:30.295824051 CET	49906	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:30.396155119 CET	10445	49905	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:30.502091885 CET	10445	49906	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:30.502326012 CET	49906	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:30.504834890 CET	49906	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:30.695518970 CET	49906	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:30.708720922 CET	10445	49906	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:30.708734989 CET	10445	49906	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:30.708949089 CET	49906	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:30.709954977 CET	49906	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:30.710834980 CET	10445	49906	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:30.711532116 CET	49907	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:30.901765108 CET	10445	49906	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:30.901787043 CET	10445	49906	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:30.915049076 CET	10445	49906	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:30.917061090 CET	10445	49907	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:30.917232990 CET	49907	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:31.123246908 CET	10445	49907	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:31.123264074 CET	10445	49907	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:31.123445034 CET	49907	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:32.174135923 CET	49907	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:32.174721956 CET	49907	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:32.176028967 CET	49908	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:32.379968882 CET	10445	49907	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:32.381200075 CET	10445	49908	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:32.381412983 CET	49908	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:32.414222956 CET	49908	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:32.586767912 CET	10445	49908	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:32.586790085 CET	10445	49908	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:32.586957932 CET	49908	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:32.587435007 CET	49908	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:32.587435007 CET	49908	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:32.588788986 CET	49909	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:32.619323015 CET	10445	49908	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:32.789141893 CET	10445	49909	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:32.789357901 CET	49909	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:32.791578054 CET	49909	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:32.792145967 CET	10445	49908	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:32.792404890 CET	10445	49908	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:32.956377983 CET	49909	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:32.989927053 CET	10445	49909	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:32.989945889 CET	10445	49909	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:32.990195990 CET	49909	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:32.991753101 CET	10445	49909	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:33.004285097 CET	49909	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:33.005608082 CET	49910	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:33.156898975 CET	10445	49909	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:33.156908989 CET	10445	49909	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:33.190356016 CET	10445	49909	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:33.206146002 CET	10445	49910	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:33.206358910 CET	49910	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:33.208427906 CET	49910	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:33.369357109 CET	49910	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:33.406894922 CET	10445	49910	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:33.407083035 CET	10445	49910	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:33.407151937 CET	49910	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:33.407151937 CET	49910	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:33.407922983 CET	49910	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:33.408607006 CET	10445	49910	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:33.409943104 CET	49911	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:33.569741964 CET	10445	49910	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:33.569751978 CET	10445	49910	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:33.607709885 CET	10445	49910	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:33.607719898 CET	10445	49910	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:33.610634089 CET	10445	49911	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:33.610810041 CET	49911	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:33.613084078 CET	49911	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:33.811554909 CET	10445	49911	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:33.811568975 CET	10445	49911	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:33.811738968 CET	49911	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:33.812304020 CET	49911	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:33.813483953 CET	10445	49911	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:33.817907095 CET	49912	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:34.012407064 CET	10445	49911	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:34.022907972 CET	10445	49912	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:34.022994995 CET	49912	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:34.027956963 CET	49912	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:34.180704117 CET	49912	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:34.228169918 CET	10445	49912	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:34.228185892 CET	10445	49912	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:34.228224993 CET	49912	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:34.228240013 CET	49912	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:34.228890896 CET	49912	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:34.231172085 CET	49913	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:34.232975960 CET	10445	49912	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:34.385838032 CET	10445	49912	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:34.433092117 CET	10445	49912	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:34.433105946 CET	10445	49912	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:34.435627937 CET	10445	49913	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:34.435911894 CET	49913	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:34.438186884 CET	49913	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:34.620639086 CET	49913	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:34.640580893 CET	10445	49913	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:34.640595913 CET	10445	49913	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:34.640724897 CET	49913	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:34.641942978 CET	49913	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:34.642543077 CET	10445	49913	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:34.646347046 CET	49914	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:34.825504065 CET	10445	49913	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:34.845256090 CET	10445	49913	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:34.846906900 CET	10445	49914	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:34.847084045 CET	49914	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:34.849764109 CET	49914	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:35.023426056 CET	49914	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:35.048094988 CET	10445	49914	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:35.048113108 CET	10445	49914	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:35.048331976 CET	49914	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:35.049083948 CET	49914	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:35.050169945 CET	10445	49914	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:35.050259113 CET	49915	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:35.224169016 CET	10445	49914	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:35.224184990 CET	10445	49914	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:35.248831034 CET	10445	49914	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:35.250319004 CET	10445	49915	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:35.250435114 CET	49915	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:35.259181023 CET	49915	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:35.427594900 CET	49915	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:35.450789928 CET	10445	49915	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:35.450805902 CET	10445	49915	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:35.450918913 CET	49915	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:35.451239109 CET	49915	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:35.451565981 CET	49915	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:35.453772068 CET	49916	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:35.459233999 CET	10445	49915	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:35.627866983 CET	10445	49915	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:35.651115894 CET	10445	49915	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:35.651245117 CET	10445	49915	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:35.660079002 CET	10445	49916	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:35.660310984 CET	49916	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:35.662307024 CET	49916	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:35.819144964 CET	49916	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:35.866761923 CET	10445	49916	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:35.866801977 CET	10445	49916	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:35.866843939 CET	49916	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:35.866858959 CET	49916	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:35.867878914 CET	49916	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:35.868490934 CET	10445	49916	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:35.870001078 CET	49917	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:36.025602102 CET	10445	49916	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:36.073101044 CET	10445	49916	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:36.073137045 CET	10445	49916	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:36.076344967 CET	10445	49917	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:36.076491117 CET	49917	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:36.079246044 CET	49917	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:36.238241911 CET	49917	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:36.283116102 CET	10445	49917	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:36.283157110 CET	10445	49917	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:36.283338070 CET	49917	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:36.284766912 CET	49917	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:36.285356998 CET	10445	49917	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:36.287095070 CET	49918	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:36.444592953 CET	10445	49917	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:36.444631100 CET	10445	49917	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:36.490068913 CET	10445	49917	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:36.493818998 CET	10445	49918	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:36.493937969 CET	49918	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:36.498064995 CET	49918	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:36.678877115 CET	49918	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:36.700742960 CET	10445	49918	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:36.700783014 CET	10445	49918	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:36.701174021 CET	49918	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:36.705032110 CET	10445	49918	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:36.706293106 CET	49918	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:36.712052107 CET	49919	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:36.885503054 CET	10445	49918	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:36.885540009 CET	10445	49918	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:36.908117056 CET	10445	49918	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:36.919924021 CET	10445	49919	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:36.920450926 CET	49919	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:36.940311909 CET	49919	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:37.117486954 CET	49919	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:37.128489971 CET	10445	49919	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:37.128509045 CET	10445	49919	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:37.128562927 CET	49919	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:37.128582954 CET	49919	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:37.129475117 CET	49919	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:37.131417990 CET	49920	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:37.148133993 CET	10445	49919	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:37.325588942 CET	10445	49919	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:37.336323977 CET	10445	49919	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:37.336359024 CET	10445	49919	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:37.336867094 CET	10445	49920	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:37.337166071 CET	49920	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:37.342195988 CET	49920	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:37.492604017 CET	49920	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:37.542911053 CET	10445	49920	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:37.542951107 CET	10445	49920	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:37.543154955 CET	49920	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:37.543154955 CET	49920	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:37.544965982 CET	49920	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:37.547276020 CET	10445	49920	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:37.549740076 CET	49921	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:37.698074102 CET	10445	49920	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:37.748565912 CET	10445	49920	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:37.748600006 CET	10445	49920	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:37.749736071 CET	10445	49921	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:37.749943972 CET	49921	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:37.752528906 CET	49921	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:37.919945002 CET	49921	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:37.950041056 CET	10445	49921	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:37.950081110 CET	10445	49921	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:37.950295925 CET	49921	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:37.950989008 CET	49921	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:37.950989008 CET	49921	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:37.952203035 CET	10445	49921	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:37.953407049 CET	49922	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:38.119827986 CET	10445	49921	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:38.119868994 CET	10445	49921	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:38.150080919 CET	10445	49921	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:38.150620937 CET	10445	49921	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:38.155234098 CET	10445	49922	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:38.155308962 CET	49922	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:38.157634020 CET	49922	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:38.328578949 CET	49922	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:38.357480049 CET	10445	49922	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:38.357525110 CET	10445	49922	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:38.357544899 CET	49922	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:38.357575893 CET	49922	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:38.358462095 CET	49922	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:38.359518051 CET	10445	49922	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:38.360812902 CET	49923	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:38.530812979 CET	10445	49922	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:38.559528112 CET	10445	49922	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:38.559545040 CET	10445	49922	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:38.561141014 CET	10445	49923	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:38.561404943 CET	49923	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:38.570626974 CET	49923	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:38.750701904 CET	49923	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:38.762290001 CET	10445	49923	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:38.762341976 CET	10445	49923	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:38.762722015 CET	49923	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:38.768374920 CET	49923	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:38.770988941 CET	10445	49923	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:38.772078991 CET	49924	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:38.951402903 CET	10445	49923	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:38.963305950 CET	10445	49923	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:38.971265078 CET	10445	49924	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:38.971488953 CET	49924	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:38.973947048 CET	49924	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:39.118102074 CET	49924	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:39.170943975 CET	10445	49924	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:39.170995951 CET	10445	49924	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:39.171159983 CET	49924	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:39.171484947 CET	49924	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:39.171977043 CET	49924	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:39.172979116 CET	10445	49924	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:39.173934937 CET	49925	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:39.317596912 CET	10445	49924	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:39.317634106 CET	10445	49924	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:39.370412111 CET	10445	49924	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:39.370738983 CET	10445	49924	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:39.380601883 CET	10445	49925	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:39.380815029 CET	49925	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:39.382771015 CET	49925	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:39.566076994 CET	49925	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:39.588083982 CET	10445	49925	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:39.588120937 CET	10445	49925	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:39.588378906 CET	49925	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:39.589313030 CET	49925	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:39.589494944 CET	10445	49925	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:39.591799021 CET	49926	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:39.773262024 CET	10445	49925	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:39.773315907 CET	10445	49925	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:39.794434071 CET	10445	49926	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:39.794616938 CET	49926	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:39.795026064 CET	10445	49925	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:39.798676968 CET	49926	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:39.946690083 CET	49926	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:39.997209072 CET	10445	49926	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:39.997258902 CET	10445	49926	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:39.997482061 CET	49926	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:40.000694036 CET	10445	49926	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:40.000854969 CET	49926	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:40.003159046 CET	49927	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:40.149442911 CET	10445	49926	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:40.199608088 CET	10445	49926	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:40.210833073 CET	10445	49927	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:40.210994959 CET	49927	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:40.216309071 CET	49927	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:40.419244051 CET	10445	49927	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:40.419296026 CET	10445	49927	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:40.419475079 CET	49927	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:40.419475079 CET	49927	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:40.420686007 CET	49927	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:40.423909903 CET	10445	49927	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:40.425587893 CET	49928	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:40.625147104 CET	10445	49928	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:40.625256062 CET	49928	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:40.627161980 CET	10445	49927	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:40.627197981 CET	10445	49927	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:40.627739906 CET	49928	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:40.824934959 CET	10445	49928	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:40.824985981 CET	10445	49928	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:40.825294971 CET	49928	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:40.827012062 CET	10445	49928	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:40.830233097 CET	49928	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:40.833380938 CET	49929	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:41.024832964 CET	10445	49928	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:41.033730984 CET	10445	49929	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:41.034009933 CET	49929	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:41.036565065 CET	49929	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:41.234863043 CET	10445	49929	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:41.234914064 CET	10445	49929	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:41.234966040 CET	49929	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:41.234998941 CET	49929	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:41.237102032 CET	10445	49929	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:41.237245083 CET	49929	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:41.238671064 CET	49930	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:41.436585903 CET	10445	49929	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:41.436624050 CET	10445	49929	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:41.438879013 CET	10445	49930	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:41.439094067 CET	49930	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:41.442521095 CET	49930	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:41.639076948 CET	49930	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:41.639707088 CET	10445	49930	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:41.639745951 CET	10445	49930	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:41.639844894 CET	49930	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:41.641263962 CET	49930	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:41.642735958 CET	10445	49930	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:41.643275976 CET	49931	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:42.653907061 CET	49931	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:43.797235012 CET	10445	49930	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:43.797322035 CET	10445	49930	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:43.797331095 CET	10445	49930	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:43.797342062 CET	10445	49931	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:43.797348976 CET	10445	49931	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:43.797569990 CET	49931	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:43.800457001 CET	49931	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:43.903444052 CET	10445	49931	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:43.903853893 CET	49931	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:44.004563093 CET	10445	49931	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:44.004580975 CET	10445	49931	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:44.004924059 CET	49931	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:44.006638050 CET	49931	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:44.006848097 CET	10445	49931	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:44.010701895 CET	49932	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:44.110585928 CET	10445	49931	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:44.210817099 CET	10445	49932	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:44.211042881 CET	49932	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:44.211719990 CET	10445	49931	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:44.220258951 CET	49932	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:44.411547899 CET	10445	49932	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:44.411580086 CET	10445	49932	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:44.411663055 CET	49932	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:44.411767960 CET	49932	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:44.413079977 CET	49932	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:44.415915012 CET	49933	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:44.420183897 CET	10445	49932	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:44.611783028 CET	10445	49932	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:44.611803055 CET	10445	49932	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:44.621210098 CET	10445	49933	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:44.621304989 CET	49933	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:44.624408007 CET	49933	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:44.826845884 CET	10445	49933	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:44.826863050 CET	10445	49933	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:44.826951027 CET	49933	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:44.827886105 CET	49933	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:44.829662085 CET	49934	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:44.829796076 CET	10445	49933	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:45.032299042 CET	10445	49933	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:45.035494089 CET	10445	49934	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:45.035638094 CET	49934	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:45.038511992 CET	49934	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:45.233645916 CET	49934	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:45.241767883 CET	10445	49934	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:45.241785049 CET	10445	49934	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:45.241871119 CET	49934	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:45.243649006 CET	49934	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:45.244195938 CET	10445	49934	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:45.246567011 CET	49935	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:45.439578056 CET	10445	49934	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:45.447571039 CET	10445	49934	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:45.454049110 CET	10445	49935	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:45.454291105 CET	49935	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:45.458156109 CET	49935	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:45.662219048 CET	10445	49935	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:45.662235975 CET	10445	49935	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:45.662518978 CET	49935	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:45.665580988 CET	10445	49935	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:45.668410063 CET	49935	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:45.672595024 CET	49936	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:45.870193005 CET	10445	49935	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:45.872862101 CET	10445	49936	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:45.873171091 CET	49936	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:45.875693083 CET	49936	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:46.073848009 CET	10445	49936	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:46.073867083 CET	10445	49936	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:46.074204922 CET	49936	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:46.075776100 CET	10445	49936	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:46.080416918 CET	49936	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:46.083709955 CET	49937	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:46.274420023 CET	10445	49936	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:46.289851904 CET	10445	49937	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:46.290082932 CET	49937	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:46.292743921 CET	49937	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:46.496568918 CET	10445	49937	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:46.496592045 CET	10445	49937	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:46.496769905 CET	49937	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:46.496769905 CET	49937	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:46.497800112 CET	49937	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:46.498750925 CET	10445	49937	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:46.499856949 CET	49938	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:46.700727940 CET	10445	49938	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:46.700949907 CET	49938	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:46.703078032 CET	10445	49937	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:46.703088999 CET	10445	49937	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:46.704674006 CET	49938	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:46.902096987 CET	10445	49938	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:46.902117968 CET	10445	49938	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:46.902622938 CET	49938	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:46.903496981 CET	49938	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:46.905175924 CET	10445	49938	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:46.906276941 CET	49939	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:47.103624105 CET	10445	49938	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:47.108062029 CET	10445	49939	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:47.108257055 CET	49939	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:47.113151073 CET	49939	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:47.310551882 CET	10445	49939	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:47.310571909 CET	10445	49939	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:47.310646057 CET	49939	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:47.310678959 CET	49939	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:47.312572002 CET	49939	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:47.315165997 CET	10445	49939	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:47.315504074 CET	49940	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:47.512851000 CET	10445	49939	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:47.512888908 CET	10445	49939	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:47.517563105 CET	10445	49940	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:47.517873049 CET	49940	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:47.521399975 CET	49940	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:47.720236063 CET	10445	49940	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:47.720251083 CET	10445	49940	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:47.720350027 CET	49940	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:47.720350981 CET	49940	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:47.721312046 CET	49940	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:47.723050117 CET	10445	49940	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:47.723515987 CET	49941	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:47.922396898 CET	10445	49940	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:47.922418118 CET	10445	49940	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:47.930476904 CET	10445	49941	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:47.930723906 CET	49941	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:47.934264898 CET	49941	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:48.138092041 CET	10445	49941	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:48.138107061 CET	10445	49941	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:48.138376951 CET	49941	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:48.141156912 CET	10445	49941	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:48.141633987 CET	49941	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:48.144592047 CET	49942	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:48.345410109 CET	10445	49941	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:48.349482059 CET	10445	49942	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:48.349581957 CET	49942	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:48.354336977 CET	49942	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:48.554696083 CET	10445	49942	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:48.554716110 CET	10445	49942	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:48.554918051 CET	49942	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:48.556688070 CET	49942	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:48.559206963 CET	10445	49942	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:48.559303999 CET	49943	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:48.759084940 CET	10445	49943	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:48.759258032 CET	49943	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:48.760032892 CET	10445	49942	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:48.763561010 CET	49943	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:48.959326982 CET	10445	49943	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:48.959350109 CET	10445	49943	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:48.959446907 CET	49943	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:48.959491968 CET	49943	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:48.960481882 CET	49943	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:48.962402105 CET	49944	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:48.962990999 CET	10445	49943	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:49.159672976 CET	10445	49943	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:49.159735918 CET	10445	49943	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:49.164431095 CET	10445	49944	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:49.164804935 CET	49944	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:49.168919086 CET	49944	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:49.367244959 CET	10445	49944	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:49.367259979 CET	10445	49944	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:49.367369890 CET	49944	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:49.368860960 CET	49944	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:49.371922016 CET	10445	49944	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:49.372417927 CET	49945	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:49.569524050 CET	10445	49944	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:49.574057102 CET	10445	49945	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:49.574369907 CET	49945	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:49.578564882 CET	49945	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:49.776252985 CET	10445	49945	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:49.776283979 CET	10445	49945	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:49.776837111 CET	49945	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:49.779870033 CET	49945	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:49.780343056 CET	10445	49945	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:49.782109976 CET	49946	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:49.978996992 CET	10445	49945	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:49.987149000 CET	10445	49946	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:49.987674952 CET	49946	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:49.992099047 CET	49946	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:50.193038940 CET	10445	49946	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:50.193064928 CET	10445	49946	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:50.193398952 CET	49946	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:50.194828987 CET	49946	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:50.196944952 CET	10445	49946	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:50.198453903 CET	49947	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:50.398442030 CET	10445	49946	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:50.405050993 CET	10445	49947	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:50.405352116 CET	49947	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:50.409416914 CET	49947	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:50.611984015 CET	10445	49947	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:50.612004042 CET	10445	49947	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:50.612195969 CET	49947	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:50.613256931 CET	49947	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:50.615647078 CET	10445	49947	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:50.616689920 CET	49948	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:50.818387032 CET	10445	49948	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:50.818640947 CET	49948	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:50.818666935 CET	10445	49947	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:50.824166059 CET	49948	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:51.020350933 CET	10445	49948	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:51.020365953 CET	10445	49948	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:51.020428896 CET	49948	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:51.020474911 CET	49948	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:51.021285057 CET	49948	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:51.023322105 CET	49949	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:51.025407076 CET	10445	49948	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:51.222425938 CET	10445	49948	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:51.222453117 CET	10445	49948	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:51.228840113 CET	10445	49949	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:51.229070902 CET	49949	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:51.233092070 CET	49949	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:51.434936047 CET	10445	49949	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:51.434957981 CET	10445	49949	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:51.435395002 CET	49949	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:51.436765909 CET	49949	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:51.438740015 CET	10445	49949	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:51.441198111 CET	49950	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:51.640949011 CET	10445	49949	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:51.649374962 CET	10445	49950	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:51.649703026 CET	49950	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:51.658766031 CET	49950	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:51.857958078 CET	10445	49950	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:51.858040094 CET	10445	49950	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:51.858194113 CET	49950	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:51.858194113 CET	49950	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:51.859062910 CET	49950	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:51.866717100 CET	10445	49950	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:51.870282888 CET	49951	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:52.066308975 CET	10445	49950	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:52.066471100 CET	10445	49950	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:52.078460932 CET	10445	49951	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:52.078668118 CET	49951	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:52.086571932 CET	49951	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:52.287509918 CET	10445	49951	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:52.287625074 CET	10445	49951	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:52.288155079 CET	49951	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:52.289475918 CET	49951	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:52.294689894 CET	10445	49951	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:52.297724962 CET	49952	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:52.496942997 CET	10445	49951	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:52.499571085 CET	10445	49952	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:52.499663115 CET	49952	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:52.503319979 CET	49952	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:52.701936007 CET	10445	49952	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:52.701961994 CET	10445	49952	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:52.702104092 CET	49952	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:52.705112934 CET	10445	49952	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:52.706540108 CET	49952	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:52.713376999 CET	49953	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:52.904051065 CET	10445	49952	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:52.913916111 CET	10445	49953	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:52.914364100 CET	49953	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:52.923002958 CET	49953	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:53.114835978 CET	10445	49953	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:53.114857912 CET	10445	49953	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:53.114989996 CET	49953	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:53.114989996 CET	49953	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:53.116806030 CET	49953	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:53.118940115 CET	49954	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:53.123183966 CET	10445	49953	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:53.315448999 CET	10445	49953	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:53.315481901 CET	10445	49953	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:53.325951099 CET	10445	49954	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:53.326442003 CET	49954	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:53.341391087 CET	49954	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:53.533509016 CET	10445	49954	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:53.533538103 CET	10445	49954	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:53.533781052 CET	49954	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:53.535386086 CET	49954	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:53.539063931 CET	49955	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:53.547904968 CET	10445	49954	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:53.740360022 CET	10445	49954	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:53.745882988 CET	10445	49955	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:53.746083975 CET	49955	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:53.750046015 CET	49955	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:53.953363895 CET	10445	49955	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:53.953399897 CET	10445	49955	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:53.953748941 CET	49955	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:53.956768036 CET	10445	49955	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:53.957878113 CET	49955	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:53.961549044 CET	49956	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:54.160187006 CET	10445	49956	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:54.160494089 CET	49956	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:54.160717010 CET	10445	49955	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:54.166671991 CET	49956	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:54.359397888 CET	10445	49956	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:54.359431028 CET	10445	49956	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:54.359482050 CET	49956	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:54.359514952 CET	49956	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:54.360340118 CET	49956	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:54.362500906 CET	49957	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:54.365108967 CET	10445	49956	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:54.558443069 CET	10445	49956	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:54.558474064 CET	10445	49956	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:54.560878992 CET	10445	49957	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:54.561321020 CET	49957	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:54.568314075 CET	49957	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:54.760303020 CET	10445	49957	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:54.760333061 CET	10445	49957	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:54.760674000 CET	49957	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:54.760674953 CET	49957	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:54.763901949 CET	49957	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:54.766829967 CET	10445	49957	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:54.772054911 CET	49958	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:54.959177971 CET	10445	49957	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:54.959207058 CET	10445	49957	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:54.979156017 CET	10445	49958	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:54.979384899 CET	49958	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:54.983046055 CET	49958	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:55.186886072 CET	10445	49958	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:55.186963081 CET	10445	49958	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:55.187149048 CET	49958	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:55.187150002 CET	49958	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:55.188380957 CET	49958	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:55.189954996 CET	10445	49958	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:55.191622972 CET	49959	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:55.394088030 CET	10445	49959	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:55.394233942 CET	10445	49958	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:55.394268990 CET	10445	49958	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:55.394325018 CET	49959	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:55.397974014 CET	49959	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:55.597232103 CET	10445	49959	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:55.597296953 CET	10445	49959	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:55.597569942 CET	49959	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:55.597570896 CET	49959	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:55.598761082 CET	49959	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:55.600059032 CET	10445	49959	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:55.602242947 CET	49960	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:55.800085068 CET	10445	49959	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:55.800112963 CET	10445	49959	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:55.802874088 CET	10445	49960	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:55.802968979 CET	49960	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:55.806582928 CET	49960	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:56.004059076 CET	10445	49960	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:56.004126072 CET	10445	49960	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:56.004287958 CET	49960	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:56.005186081 CET	49960	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:56.007272959 CET	10445	49960	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:56.013416052 CET	49961	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:56.205149889 CET	10445	49960	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:56.219871998 CET	10445	49961	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:56.219959021 CET	49961	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:56.223685980 CET	49961	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:56.426302910 CET	10445	49961	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:56.426347017 CET	10445	49961	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:56.426618099 CET	49961	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:56.426618099 CET	49961	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:56.427619934 CET	49961	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:56.429640055 CET	10445	49961	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:56.430655003 CET	49962	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:56.632905960 CET	10445	49961	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:56.632963896 CET	10445	49961	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:56.637394905 CET	10445	49962	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:56.637726068 CET	49962	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:56.641535997 CET	49962	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:56.845035076 CET	10445	49962	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:56.845099926 CET	10445	49962	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:56.845293045 CET	49962	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:56.845293045 CET	49962	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:56.847034931 CET	49962	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:56.848093987 CET	10445	49962	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:56.849011898 CET	49963	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:57.049746037 CET	10445	49963	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:57.050116062 CET	49963	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:57.051942110 CET	10445	49962	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:57.051980972 CET	10445	49962	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:57.054922104 CET	49963	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:57.251102924 CET	10445	49963	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:57.251135111 CET	10445	49963	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:57.251504898 CET	49963	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:57.254873037 CET	49963	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:57.255757093 CET	10445	49963	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:57.259681940 CET	49964	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:57.452200890 CET	10445	49963	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:57.468224049 CET	10445	49964	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:57.468718052 CET	49964	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:57.472233057 CET	49964	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:57.677495956 CET	10445	49964	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:57.677525997 CET	10445	49964	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:57.677840948 CET	49964	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:57.680478096 CET	10445	49964	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:57.681956053 CET	49964	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:57.688915968 CET	49965	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:57.886342049 CET	10445	49964	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:57.889017105 CET	10445	49965	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:57.889359951 CET	49965	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:57.900278091 CET	49965	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:58.089976072 CET	10445	49965	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:58.090039968 CET	10445	49965	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:58.090233088 CET	49965	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:58.090322971 CET	49965	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:58.092726946 CET	49965	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:58.097697973 CET	49966	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:58.103292942 CET	10445	49965	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:58.290438890 CET	10445	49965	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:58.290488005 CET	10445	49965	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:58.304939032 CET	10445	49966	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:58.305394888 CET	49966	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:58.314436913 CET	49966	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:58.514058113 CET	10445	49966	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:58.514089108 CET	10445	49966	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:58.514283895 CET	49966	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:58.514283895 CET	49966	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:58.516165972 CET	49966	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:58.518804073 CET	49967	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:58.521272898 CET	10445	49966	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:58.721272945 CET	10445	49967	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:58.721303940 CET	10445	49966	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:58.721312046 CET	10445	49966	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:58.721607924 CET	49967	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:58.724370003 CET	49967	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:58.922065020 CET	10445	49967	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:58.922094107 CET	10445	49967	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:58.922327995 CET	49967	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:58.923844099 CET	49967	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:58.924387932 CET	10445	49967	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:58.927010059 CET	49968	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:59.122687101 CET	10445	49967	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:59.129025936 CET	10445	49968	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:59.129163027 CET	49968	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:59.131617069 CET	49968	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:59.323539019 CET	49968	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:59.329977989 CET	10445	49968	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:59.329999924 CET	10445	49968	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:59.330157042 CET	49968	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:59.331993103 CET	10445	49968	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:59.336157084 CET	49968	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:59.341916084 CET	49969	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:59.524384975 CET	10445	49968	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:59.530440092 CET	10445	49968	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:59.546720982 CET	10445	49969	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:59.546840906 CET	49969	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:59.551378965 CET	49969	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:59.752239943 CET	10445	49969	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:59.752269983 CET	10445	49969	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:59.752315044 CET	49969	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:59.752346039 CET	49969	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:59.753967047 CET	49969	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:59.756073952 CET	10445	49969	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:59.756170988 CET	49970	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:59.957345963 CET	10445	49969	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:59.957376957 CET	10445	49969	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:59.961405993 CET	10445	49970	18.156.13.209	192.168.2.4
Feb 7, 2024 02:49:59.961675882 CET	49970	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:49:59.970662117 CET	49970	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:00.167412996 CET	10445	49970	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:00.167447090 CET	10445	49970	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:00.167901993 CET	49970	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:00.170074940 CET	49970	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:00.172293901 CET	49971	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:00.175924063 CET	10445	49970	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:00.373404026 CET	10445	49970	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:00.377135992 CET	10445	49971	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:00.377337933 CET	49971	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:00.380644083 CET	49971	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:00.568372011 CET	49971	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:00.585480928 CET	10445	49971	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:00.585537910 CET	10445	49971	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:00.585856915 CET	49971	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:00.585856915 CET	49971	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:00.588462114 CET	10445	49971	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:00.589935064 CET	49971	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:00.593476057 CET	49972	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:00.773654938 CET	10445	49971	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:00.773701906 CET	10445	49971	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:00.791049004 CET	10445	49971	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:00.791083097 CET	10445	49971	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:00.801179886 CET	10445	49972	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:00.801331997 CET	49972	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:00.804490089 CET	49972	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:01.008199930 CET	49972	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:01.009285927 CET	10445	49972	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:01.009336948 CET	10445	49972	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:01.009452105 CET	49972	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:01.011101961 CET	49972	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:01.011984110 CET	10445	49972	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:01.016381025 CET	49973	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:01.216458082 CET	10445	49972	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:01.216511011 CET	10445	49972	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:01.216552019 CET	10445	49973	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:01.216842890 CET	49973	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:01.216945887 CET	10445	49972	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:01.221147060 CET	49973	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:01.417570114 CET	10445	49973	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:01.417598963 CET	10445	49973	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:01.417689085 CET	49973	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:01.417732000 CET	49973	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:01.420027018 CET	49973	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:01.421591043 CET	10445	49973	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:01.421905041 CET	49974	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:01.618077993 CET	10445	49973	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:01.618139029 CET	10445	49973	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:01.622615099 CET	10445	49974	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:01.622713089 CET	49974	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:01.625363111 CET	49974	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:01.823272943 CET	10445	49974	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:01.823331118 CET	10445	49974	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:01.823407888 CET	49974	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:01.823601007 CET	49974	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:01.824843884 CET	49974	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:01.825308084 CET	10445	49974	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:01.827233076 CET	49975	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:02.023525953 CET	10445	49974	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:02.023669958 CET	10445	49974	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:02.029009104 CET	10445	49975	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:02.029256105 CET	49975	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:02.032785892 CET	49975	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:02.231175900 CET	10445	49975	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:02.231224060 CET	10445	49975	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:02.231436968 CET	49975	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:02.231436968 CET	49975	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:02.234383106 CET	10445	49975	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:02.240149021 CET	49975	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:02.242317915 CET	49976	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:02.433190107 CET	10445	49975	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:02.433248043 CET	10445	49975	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:02.450229883 CET	10445	49976	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:02.450442076 CET	49976	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:02.454545975 CET	49976	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:02.635243893 CET	49976	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:02.658617973 CET	10445	49976	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:02.658680916 CET	10445	49976	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:02.658858061 CET	49976	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:02.658858061 CET	49976	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:02.659439087 CET	49976	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:02.660738945 CET	49977	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:02.662086010 CET	10445	49976	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:02.843257904 CET	10445	49976	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:02.859906912 CET	10445	49977	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:02.860313892 CET	49977	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:02.865114927 CET	49977	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:02.866569996 CET	10445	49976	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:02.866614103 CET	10445	49976	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:03.040951014 CET	49977	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:03.059437037 CET	10445	49977	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:03.059484005 CET	10445	49977	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:03.059675932 CET	49977	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:03.059676886 CET	49977	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:03.060473919 CET	49977	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:03.063776016 CET	10445	49977	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:03.067914009 CET	49978	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:03.240066051 CET	10445	49977	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:03.258898020 CET	10445	49977	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:03.258954048 CET	10445	49977	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:03.272041082 CET	10445	49978	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:03.272116899 CET	49978	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:03.277142048 CET	49978	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:03.476901054 CET	10445	49978	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:03.476965904 CET	10445	49978	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:03.477025032 CET	49978	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:03.477056980 CET	49978	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:03.478137016 CET	49978	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:03.480464935 CET	49979	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:03.481239080 CET	10445	49978	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:03.681114912 CET	10445	49978	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:03.681139946 CET	10445	49978	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:03.686743975 CET	10445	49979	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:03.689196110 CET	49979	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:03.692655087 CET	49979	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:03.895641088 CET	10445	49979	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:03.895669937 CET	10445	49979	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:03.895889997 CET	49979	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:03.898793936 CET	10445	49979	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:03.986268044 CET	49979	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:03.987598896 CET	49980	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:04.102361917 CET	10445	49979	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:04.195233107 CET	10445	49980	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:04.197233915 CET	49980	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:04.200622082 CET	49980	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:04.405011892 CET	10445	49980	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:04.405189991 CET	10445	49980	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:04.405395031 CET	49980	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:04.408071041 CET	10445	49980	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:04.613092899 CET	10445	49980	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:05.757035971 CET	49981	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:05.962467909 CET	10445	49981	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:05.962779999 CET	49981	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:06.110299110 CET	49981	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:06.168438911 CET	10445	49981	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:06.168462992 CET	10445	49981	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:06.168679953 CET	49981	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:06.169595957 CET	49981	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:06.171020985 CET	49982	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:06.315469980 CET	10445	49981	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:06.374078989 CET	10445	49981	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:06.375917912 CET	10445	49982	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:06.376064062 CET	49982	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:06.380568027 CET	49982	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:06.536094904 CET	49982	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:06.581368923 CET	10445	49982	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:06.581394911 CET	10445	49982	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:06.581470013 CET	49982	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:06.582775116 CET	49982	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:06.582775116 CET	49982	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:06.585445881 CET	49983	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:06.585531950 CET	10445	49982	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:06.741131067 CET	10445	49982	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:06.786535025 CET	10445	49982	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:06.787641048 CET	10445	49982	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:06.790174961 CET	10445	49983	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:06.790376902 CET	49983	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:06.792687893 CET	49983	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:06.972407103 CET	49983	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:06.995527983 CET	10445	49983	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:06.995579004 CET	10445	49983	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:06.995769024 CET	49983	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:06.996136904 CET	49983	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:06.997426033 CET	10445	49983	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:07.001780987 CET	49983	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:07.003984928 CET	49984	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:07.177994967 CET	10445	49983	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:07.178025961 CET	10445	49983	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:07.200964928 CET	10445	49983	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:07.200994015 CET	10445	49983	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:07.203378916 CET	10445	49984	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:07.203615904 CET	49984	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:07.207576036 CET	49984	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:07.403150082 CET	10445	49984	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:07.403207064 CET	10445	49984	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:07.403539896 CET	49984	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:07.406610966 CET	10445	49984	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:07.408045053 CET	49984	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:07.412014961 CET	49985	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:07.603023052 CET	10445	49984	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:07.619132042 CET	10445	49985	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:07.619612932 CET	49985	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:07.624958038 CET	49985	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:07.827079058 CET	10445	49985	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:07.827143908 CET	10445	49985	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:07.827188015 CET	49985	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:07.827264071 CET	49985	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:07.829070091 CET	49985	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:07.831650019 CET	10445	49985	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:07.833054066 CET	49986	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:08.034164906 CET	10445	49985	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:08.034220934 CET	10445	49985	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:08.038005114 CET	10445	49986	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:08.038103104 CET	49986	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:08.042119980 CET	49986	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:08.243479967 CET	10445	49986	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:08.243542910 CET	10445	49986	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:08.243810892 CET	49986	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:08.244688988 CET	49986	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:08.245913029 CET	49987	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:08.246908903 CET	10445	49986	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:08.446381092 CET	10445	49987	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:08.446490049 CET	49987	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:08.448893070 CET	10445	49986	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:08.451200962 CET	49987	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:08.647155046 CET	10445	49987	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:08.647218943 CET	10445	49987	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:08.647414923 CET	49987	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:08.651211977 CET	49987	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:08.651360035 CET	10445	49987	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:08.657768011 CET	49988	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:08.848334074 CET	10445	49987	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:08.858760118 CET	10445	49988	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:08.859065056 CET	49988	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:08.861869097 CET	49988	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:09.060725927 CET	10445	49988	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:09.060789108 CET	10445	49988	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:09.060841084 CET	49988	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:09.060923100 CET	49988	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:09.062172890 CET	49988	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:09.062792063 CET	10445	49988	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:09.065593004 CET	49989	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:09.262294054 CET	10445	49988	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:09.262352943 CET	10445	49988	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:09.265829086 CET	10445	49989	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:09.266066074 CET	49989	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:09.269993067 CET	49989	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:09.467575073 CET	10445	49989	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:09.467643023 CET	10445	49989	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:09.467979908 CET	49989	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:09.468736887 CET	49989	10445	192.168.2.4	18.156.13.209
Feb 7, 2024 02:50:09.470093966 CET	10445	49989	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:09.592298031 CET	49990	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:09.668591976 CET	10445	49989	18.156.13.209	192.168.2.4
Feb 7, 2024 02:50:09.793632984 CET	10445	49990	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:09.793744087 CET	49990	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:09.800432920 CET	49990	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:09.995517015 CET	10445	49990	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:09.995582104 CET	10445	49990	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:09.995785952 CET	49990	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:09.995785952 CET	49990	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:09.996145964 CET	49990	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:09.997500896 CET	49991	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:10.001446009 CET	10445	49990	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:10.197323084 CET	10445	49990	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:10.197380066 CET	10445	49990	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:10.203397989 CET	10445	49991	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:10.203507900 CET	49991	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:10.207891941 CET	49991	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:10.410084009 CET	10445	49991	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:10.410151005 CET	10445	49991	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:10.410386086 CET	49991	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:10.413722038 CET	10445	49991	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:10.416657925 CET	49991	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:10.421804905 CET	49992	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:10.616624117 CET	10445	49991	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:10.622309923 CET	10445	49992	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:10.622432947 CET	49992	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:10.626082897 CET	49992	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:10.823272943 CET	10445	49992	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:10.823333025 CET	10445	49992	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:10.823370934 CET	49992	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:10.823402882 CET	49992	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:10.825088978 CET	49992	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:10.826427937 CET	10445	49992	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:10.828001976 CET	49993	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:11.024080038 CET	10445	49992	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:11.024138927 CET	10445	49992	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:11.033487082 CET	10445	49993	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:11.033793926 CET	49993	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:11.037080050 CET	49993	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:11.222726107 CET	49993	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:11.239703894 CET	10445	49993	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:11.239725113 CET	10445	49993	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:11.239914894 CET	49993	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:11.239916086 CET	49993	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:11.242484093 CET	10445	49993	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:11.243313074 CET	49993	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:11.249933004 CET	49994	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:11.428201914 CET	10445	49993	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:11.445250988 CET	10445	49993	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:11.445283890 CET	10445	49993	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:11.456840038 CET	10445	49994	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:11.456938028 CET	49994	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:11.460738897 CET	49994	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:11.667449951 CET	10445	49994	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:11.667562008 CET	10445	49994	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:11.668040037 CET	49994	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:11.670213938 CET	49994	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:11.670984030 CET	10445	49994	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:11.672727108 CET	49995	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:11.873847961 CET	10445	49995	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:11.873986006 CET	49995	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:11.875010967 CET	10445	49994	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:11.878088951 CET	49995	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:12.075449944 CET	10445	49995	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:12.075520992 CET	10445	49995	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:12.075655937 CET	49995	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:12.075759888 CET	49995	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:12.076773882 CET	49995	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:12.078660965 CET	49996	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:12.078775883 CET	10445	49995	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:12.276669979 CET	10445	49995	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:12.276721954 CET	10445	49995	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:12.284054995 CET	10445	49996	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:12.284162998 CET	49996	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:12.287961960 CET	49996	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:12.490319967 CET	10445	49996	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:12.490372896 CET	10445	49996	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:12.490498066 CET	49996	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:12.490573883 CET	49996	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:12.493949890 CET	10445	49996	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:12.496941090 CET	49996	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:12.502532005 CET	49997	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:12.698163986 CET	10445	49996	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:12.698189020 CET	10445	49996	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:12.708515882 CET	10445	49997	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:12.708825111 CET	49997	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:12.717402935 CET	49997	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:12.915755033 CET	10445	49997	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:12.915806055 CET	10445	49997	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:12.915889978 CET	49997	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:12.915889978 CET	49997	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:12.916667938 CET	49997	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:12.918503046 CET	49998	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:12.923871040 CET	10445	49997	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:13.122013092 CET	10445	49998	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:13.122066021 CET	10445	49997	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:13.122101068 CET	10445	49997	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:13.122245073 CET	49998	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:13.126888990 CET	49998	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:13.326200962 CET	49998	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:13.329081059 CET	10445	49998	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:13.329133987 CET	10445	49998	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:13.329408884 CET	49998	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:13.329950094 CET	10445	49998	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:13.330349922 CET	49998	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:13.332848072 CET	49999	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:13.529236078 CET	10445	49998	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:13.529285908 CET	10445	49998	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:13.532012939 CET	10445	49998	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:13.538862944 CET	10445	49999	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:13.539061069 CET	49999	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:13.547538042 CET	49999	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:13.736646891 CET	49999	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:13.745358944 CET	10445	49999	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:13.745409966 CET	10445	49999	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:13.745445013 CET	49999	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:13.745481968 CET	49999	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:13.746181965 CET	49999	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:13.749731064 CET	50000	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:13.753609896 CET	10445	49999	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:13.943250895 CET	10445	49999	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:13.951567888 CET	10445	49999	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:13.951606035 CET	10445	49999	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:13.956516027 CET	10445	50000	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:13.956829071 CET	50000	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:13.960514069 CET	50000	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:14.164091110 CET	10445	50000	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:14.164155960 CET	10445	50000	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:14.164491892 CET	50000	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:14.164493084 CET	50000	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:14.166136026 CET	50000	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:14.167140961 CET	10445	50000	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:14.170310974 CET	50001	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:14.371490955 CET	10445	50000	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:14.371534109 CET	10445	50000	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:14.378680944 CET	10445	50001	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:14.378777027 CET	50001	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:14.380901098 CET	50001	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:14.587547064 CET	10445	50001	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:14.587600946 CET	10445	50001	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:14.587867975 CET	50001	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:14.589086056 CET	10445	50001	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:14.593869925 CET	50001	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:14.602991104 CET	50002	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:14.796515942 CET	10445	50001	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:14.802228928 CET	10445	50002	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:14.802344084 CET	50002	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:14.804688931 CET	50002	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:15.002039909 CET	10445	50002	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:15.002110004 CET	10445	50002	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:15.002160072 CET	50002	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:15.002213955 CET	50002	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:15.003562927 CET	50002	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:15.003801107 CET	10445	50002	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:15.007874012 CET	50003	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:15.201648951 CET	10445	50002	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:15.201695919 CET	10445	50002	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:15.215042114 CET	10445	50003	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:15.215271950 CET	50003	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:15.218975067 CET	50003	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:15.408926010 CET	50003	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:15.422583103 CET	10445	50003	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:15.422610044 CET	10445	50003	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:15.422780037 CET	50003	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:15.422780037 CET	50003	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:15.424329042 CET	50003	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:15.425854921 CET	10445	50003	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:15.427130938 CET	50004	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:15.619755983 CET	10445	50003	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:15.619831085 CET	10445	50003	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:15.631985903 CET	10445	50004	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:15.632137060 CET	50004	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:15.633061886 CET	10445	50003	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:15.633095980 CET	10445	50003	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:15.636034012 CET	50004	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:15.834029913 CET	10445	50004	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:15.834095001 CET	10445	50004	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:15.834310055 CET	50004	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:15.834311008 CET	50004	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:15.835815907 CET	50004	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:15.837184906 CET	10445	50004	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:15.838778019 CET	50005	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:16.036047935 CET	10445	50004	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:16.036107063 CET	10445	50004	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:16.039272070 CET	10445	50005	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:16.039391041 CET	50005	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:16.052275896 CET	50005	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:16.240153074 CET	10445	50005	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:16.240178108 CET	10445	50005	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:16.240385056 CET	50005	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:16.244184017 CET	50005	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:16.249738932 CET	50006	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:16.252849102 CET	10445	50005	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:16.441266060 CET	10445	50005	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:16.457026005 CET	10445	50006	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:16.457150936 CET	50006	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:16.461672068 CET	50006	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:16.641062975 CET	50006	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:16.665237904 CET	10445	50006	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:16.665364981 CET	50006	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:16.665471077 CET	10445	50006	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:16.665640116 CET	50006	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:16.667488098 CET	50006	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:16.668968916 CET	10445	50006	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:16.669802904 CET	50007	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:16.848524094 CET	10445	50006	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:16.873099089 CET	10445	50006	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:16.873146057 CET	10445	50006	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:16.875521898 CET	10445	50007	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:16.875736952 CET	50007	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:16.879987001 CET	50007	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:17.078190088 CET	50007	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:17.081727982 CET	10445	50007	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:17.081778049 CET	10445	50007	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:17.082041025 CET	50007	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:17.085552931 CET	10445	50007	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:17.088748932 CET	50007	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:17.093777895 CET	50008	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:17.284126043 CET	10445	50007	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:17.284174919 CET	10445	50007	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:17.287827015 CET	10445	50007	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:17.301270962 CET	10445	50008	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:17.301434040 CET	50008	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:17.304138899 CET	50008	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:17.455049992 CET	50008	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:17.509562969 CET	10445	50008	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:17.509627104 CET	10445	50008	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:17.510093927 CET	50008	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:17.511765957 CET	10445	50008	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:17.512804031 CET	50008	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:17.519037962 CET	50009	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:17.663106918 CET	10445	50008	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:17.718115091 CET	10445	50008	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:17.724636078 CET	10445	50009	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:17.724776030 CET	50009	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:17.727245092 CET	50009	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:17.925168037 CET	50009	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:17.930803061 CET	10445	50009	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:17.930865049 CET	10445	50009	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:17.930934906 CET	50009	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:17.931453943 CET	50009	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:17.932683945 CET	10445	50009	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:17.933372021 CET	50010	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:18.131123066 CET	10445	50009	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:18.131181955 CET	10445	50009	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:18.135837078 CET	10445	50010	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:18.136013985 CET	50010	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:18.136420965 CET	10445	50009	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:18.140199900 CET	50010	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:18.338912010 CET	10445	50010	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:18.338965893 CET	10445	50010	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:18.339174986 CET	50010	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:18.342895031 CET	10445	50010	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:18.345535994 CET	50010	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:18.352786064 CET	50011	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:18.542028904 CET	10445	50010	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:18.560623884 CET	10445	50011	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:18.560873985 CET	50011	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:18.563553095 CET	50011	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:18.764806986 CET	50011	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:18.769184113 CET	10445	50011	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:18.769208908 CET	10445	50011	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:18.769421101 CET	50011	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:18.771207094 CET	10445	50011	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:18.774162054 CET	50011	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:18.775516033 CET	50012	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:18.973154068 CET	10445	50011	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:18.977643013 CET	10445	50011	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:18.981050968 CET	10445	50012	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:18.981307030 CET	50012	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:18.986146927 CET	50012	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:19.187480927 CET	10445	50012	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:19.187597036 CET	10445	50012	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:19.187891960 CET	50012	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:19.188993931 CET	50012	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:19.191693068 CET	10445	50012	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:19.191842079 CET	50013	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:19.393539906 CET	10445	50012	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:19.394282103 CET	10445	50013	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:19.394541025 CET	50013	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:19.402728081 CET	50013	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:19.597635984 CET	10445	50013	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:19.597702980 CET	10445	50013	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:19.597770929 CET	50013	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:19.597893953 CET	50013	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:19.600819111 CET	50013	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:19.603238106 CET	50014	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:19.605178118 CET	10445	50013	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:19.800749063 CET	10445	50013	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:19.800802946 CET	10445	50013	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:19.800838947 CET	10445	50013	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:19.810602903 CET	10445	50014	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:19.810712099 CET	50014	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:19.814815998 CET	50014	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:20.007478952 CET	50014	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:20.018625975 CET	10445	50014	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:20.018676043 CET	10445	50014	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:20.018716097 CET	50014	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:20.018750906 CET	50014	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:20.019539118 CET	50014	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:20.021341085 CET	50015	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:20.022026062 CET	10445	50014	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:20.215293884 CET	10445	50014	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:20.225771904 CET	10445	50015	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:20.225989103 CET	50015	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:20.226102114 CET	10445	50014	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:20.226113081 CET	10445	50014	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:20.229785919 CET	50015	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:20.430778027 CET	10445	50015	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:20.430798054 CET	10445	50015	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:20.431092978 CET	50015	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:20.433996916 CET	10445	50015	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:20.434892893 CET	50015	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:20.437504053 CET	50016	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:20.635848045 CET	10445	50015	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:20.644088984 CET	10445	50016	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:20.644320011 CET	50016	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:20.646603107 CET	50016	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:20.851373911 CET	10445	50016	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:20.851438046 CET	10445	50016	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:20.851619959 CET	50016	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:20.851619959 CET	50016	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:20.852292061 CET	50016	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:20.853534937 CET	50017	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:20.853853941 CET	10445	50016	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:21.058557034 CET	10445	50016	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:21.058579922 CET	10445	50016	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:21.062215090 CET	10445	50017	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:21.062313080 CET	50017	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:21.066308022 CET	50017	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:21.271414995 CET	10445	50017	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:21.271473885 CET	10445	50017	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:21.271681070 CET	50017	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:21.272486925 CET	50017	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:21.274887085 CET	10445	50017	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:21.275401115 CET	50018	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:21.476550102 CET	10445	50018	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:21.476639032 CET	50018	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:21.478864908 CET	50018	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:21.480482101 CET	10445	50017	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:21.677819967 CET	10445	50018	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:21.677872896 CET	10445	50018	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:21.677947044 CET	50018	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:21.677973032 CET	50018	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:21.678963900 CET	50018	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:21.679522038 CET	10445	50018	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:21.681049109 CET	50019	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:21.879034996 CET	10445	50018	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:21.879085064 CET	10445	50018	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:21.888174057 CET	10445	50019	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:21.888341904 CET	50019	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:22.033416986 CET	50019	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:22.095870972 CET	10445	50019	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:22.095933914 CET	10445	50019	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:22.096086025 CET	50019	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:22.096086025 CET	50019	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:22.096752882 CET	50019	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:22.097965002 CET	50020	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:22.240638018 CET	10445	50019	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:22.297684908 CET	10445	50020	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:22.297837973 CET	50020	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:22.301434040 CET	50020	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:22.303322077 CET	10445	50019	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:22.303359985 CET	10445	50019	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:22.497628927 CET	10445	50020	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:22.497684002 CET	10445	50020	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:22.497854948 CET	50020	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:22.497854948 CET	50020	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:22.500751972 CET	10445	50020	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:22.697521925 CET	10445	50020	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:22.697576046 CET	10445	50020	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:23.373745918 CET	50021	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:23.582520962 CET	10445	50021	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:23.582636118 CET	50021	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:23.584786892 CET	50021	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:23.755353928 CET	50021	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:23.791388988 CET	10445	50021	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:23.791452885 CET	10445	50021	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:23.791606903 CET	50021	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:23.791608095 CET	50021	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:23.792026043 CET	50021	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:23.793200016 CET	10445	50021	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:23.793215036 CET	50022	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:23.963994980 CET	10445	50021	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:23.994916916 CET	10445	50022	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:23.995023966 CET	50022	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:23.999984980 CET	10445	50021	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:24.000021935 CET	10445	50021	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:24.005922079 CET	50022	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:24.197357893 CET	10445	50022	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:24.197423935 CET	10445	50022	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:24.197473049 CET	50022	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:24.200974941 CET	50022	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:24.207638025 CET	10445	50022	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:24.229506016 CET	50022	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:24.230946064 CET	50023	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:24.399776936 CET	10445	50022	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:24.402661085 CET	10445	50022	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:24.431763887 CET	10445	50023	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:24.431943893 CET	50023	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:24.437777996 CET	50023	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:24.584779978 CET	50023	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:24.632757902 CET	10445	50023	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:24.632781982 CET	10445	50023	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:24.632903099 CET	50023	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:24.632903099 CET	50023	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:24.633688927 CET	50023	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:24.636185884 CET	50024	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:24.638222933 CET	10445	50023	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:24.786029100 CET	10445	50023	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:24.833419085 CET	10445	50023	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:24.833468914 CET	10445	50023	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:24.837016106 CET	10445	50024	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:24.837265968 CET	50024	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:24.839242935 CET	50024	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:24.981276035 CET	50024	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:25.038244009 CET	10445	50024	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:25.038274050 CET	10445	50024	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:25.038367987 CET	50024	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:25.039125919 CET	50024	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:25.039125919 CET	50024	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:25.039807081 CET	10445	50024	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:25.041208982 CET	50025	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:25.182099104 CET	10445	50024	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:25.239278078 CET	10445	50024	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:25.240938902 CET	10445	50024	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:25.249933004 CET	10445	50025	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:25.250025988 CET	50025	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:25.252716064 CET	50025	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:25.440159082 CET	50025	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:25.459467888 CET	10445	50025	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:25.459533930 CET	10445	50025	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:25.459718943 CET	50025	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:25.459719896 CET	50025	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:25.460439920 CET	50025	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:25.461275101 CET	10445	50025	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:25.462100983 CET	50026	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:25.649108887 CET	10445	50025	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:25.649135113 CET	10445	50025	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:25.668565035 CET	10445	50025	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:25.668601990 CET	10445	50025	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:25.669848919 CET	10445	50026	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:25.669935942 CET	50026	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:25.671912909 CET	50026	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:25.878072977 CET	10445	50026	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:25.878128052 CET	10445	50026	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:25.878288031 CET	50026	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:25.878370047 CET	50026	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:25.879415989 CET	50026	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:25.879597902 CET	10445	50026	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:25.882704020 CET	50027	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:26.086285114 CET	10445	50026	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:26.086334944 CET	10445	50026	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:26.090408087 CET	10445	50027	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:26.090683937 CET	50027	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:26.099883080 CET	50027	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:26.288783073 CET	50027	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:26.298702002 CET	10445	50027	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:26.298753023 CET	10445	50027	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:26.298986912 CET	50027	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:26.299627066 CET	50027	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:26.302027941 CET	50028	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:26.307833910 CET	10445	50027	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:26.496901035 CET	10445	50027	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:26.506813049 CET	10445	50027	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:26.508090019 CET	10445	50028	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:26.508486032 CET	50028	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:26.511918068 CET	50028	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:26.714735031 CET	10445	50028	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:26.714888096 CET	10445	50028	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:26.715215921 CET	50028	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:26.715215921 CET	50028	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:26.716295958 CET	50028	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:26.717664003 CET	10445	50028	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:26.718347073 CET	50029	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:26.920612097 CET	10445	50029	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:26.920706034 CET	50029	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:26.921089888 CET	10445	50028	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:26.921128988 CET	10445	50028	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:26.924256086 CET	50029	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:27.123470068 CET	10445	50029	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:27.123537064 CET	10445	50029	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:27.123883963 CET	50029	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:27.126192093 CET	10445	50029	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:27.128055096 CET	50029	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:27.133115053 CET	50030	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:27.328480005 CET	10445	50029	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:27.344188929 CET	10445	50030	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:27.344568014 CET	50030	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:27.348658085 CET	50030	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:27.556102991 CET	10445	50030	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:27.556130886 CET	10445	50030	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:27.556231022 CET	50030	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:27.556231022 CET	50030	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:27.557246923 CET	50030	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:27.560018063 CET	10445	50030	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:27.560669899 CET	50031	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:27.761877060 CET	10445	50031	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:27.762170076 CET	50031	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:27.763452053 CET	10445	50030	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:27.763492107 CET	10445	50030	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:27.765948057 CET	50031	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:27.963684082 CET	10445	50031	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:27.963748932 CET	10445	50031	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:27.964054108 CET	50031	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:27.964055061 CET	50031	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:27.964899063 CET	50031	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:27.968017101 CET	50032	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:27.968151093 CET	10445	50031	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:28.165338039 CET	10445	50031	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:28.165397882 CET	10445	50031	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:28.167790890 CET	10445	50032	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:28.167988062 CET	50032	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:28.172260046 CET	50032	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:28.367655993 CET	10445	50032	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:28.367707968 CET	10445	50032	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:28.367882013 CET	50032	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:28.367882967 CET	50032	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:28.368663073 CET	50032	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:28.370809078 CET	50033	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:28.372534990 CET	10445	50032	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:28.567291975 CET	10445	50032	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:28.567342043 CET	10445	50032	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:28.578084946 CET	10445	50033	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:28.578393936 CET	50033	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:28.582142115 CET	50033	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:28.786339998 CET	10445	50033	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:28.786406040 CET	10445	50033	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:28.786660910 CET	50033	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:28.786660910 CET	50033	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:28.789402008 CET	50033	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:28.790220976 CET	10445	50033	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:28.791465044 CET	50034	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:28.990896940 CET	10445	50034	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:28.991367102 CET	50034	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:28.994384050 CET	10445	50033	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:28.994442940 CET	10445	50033	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:29.000897884 CET	50034	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:29.191247940 CET	10445	50034	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:29.191303015 CET	10445	50034	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:29.191708088 CET	50034	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:29.191708088 CET	50034	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:29.192887068 CET	50034	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:29.197204113 CET	50035	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:29.200946093 CET	10445	50034	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:29.392673016 CET	10445	50034	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:29.392786026 CET	10445	50034	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:29.405209064 CET	10445	50035	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:29.405777931 CET	50035	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:29.412744999 CET	50035	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:29.611149073 CET	10445	50035	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:29.611213923 CET	10445	50035	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:29.611525059 CET	50035	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:29.611525059 CET	50035	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:29.612943888 CET	50035	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:29.616277933 CET	50036	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:29.617409945 CET	10445	50035	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:29.816637039 CET	10445	50035	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:29.816706896 CET	10445	50035	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:29.817380905 CET	10445	50036	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:29.817661047 CET	50036	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:29.823658943 CET	50036	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:30.019444942 CET	10445	50036	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:30.019499063 CET	10445	50036	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:30.019712925 CET	50036	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:30.019712925 CET	50036	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:30.021748066 CET	50036	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:30.024719000 CET	10445	50036	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:30.025970936 CET	50037	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:30.220645905 CET	10445	50036	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:30.220695019 CET	10445	50036	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:30.228054047 CET	10445	50037	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:30.228425980 CET	50037	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:30.233046055 CET	50037	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:30.431034088 CET	10445	50037	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:30.431102991 CET	10445	50037	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:30.431384087 CET	50037	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:30.433162928 CET	50037	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:30.435039043 CET	10445	50037	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:30.436302900 CET	50038	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:30.634223938 CET	10445	50037	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:30.639234066 CET	10445	50038	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:30.639468908 CET	50038	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:30.642970085 CET	50038	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:30.842787981 CET	10445	50038	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:30.843061924 CET	50038	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:30.843148947 CET	10445	50038	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:30.843327999 CET	50038	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:30.844038963 CET	50038	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:30.845731974 CET	10445	50038	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:30.845985889 CET	50039	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:31.046787024 CET	10445	50038	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:31.046844959 CET	10445	50038	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:31.046885014 CET	10445	50039	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:31.046958923 CET	50039	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:31.050481081 CET	50039	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:31.247967005 CET	10445	50039	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:31.248029947 CET	10445	50039	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:31.248101950 CET	50039	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:31.248127937 CET	50039	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:31.249108076 CET	50039	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:31.251288891 CET	10445	50039	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:31.251930952 CET	50040	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:31.449232101 CET	10445	50039	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:31.449285030 CET	10445	50039	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:31.459022045 CET	10445	50040	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:31.459621906 CET	50040	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:31.467259884 CET	50040	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:31.666673899 CET	10445	50040	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:31.666724920 CET	10445	50040	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:31.666762114 CET	50040	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:31.666846991 CET	50040	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:31.667864084 CET	50040	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:31.673933983 CET	10445	50040	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:31.675306082 CET	50041	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:31.873517990 CET	10445	50040	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:31.873564959 CET	10445	50040	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:31.876086950 CET	10445	50041	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:31.876313925 CET	50041	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:31.884802103 CET	50041	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:32.077373981 CET	10445	50041	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:32.077426910 CET	10445	50041	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:32.077713966 CET	50041	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:32.078686953 CET	50041	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:32.082092047 CET	50042	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:32.085665941 CET	10445	50041	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:32.278645039 CET	10445	50041	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:32.284861088 CET	10445	50042	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:32.285130978 CET	50042	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:32.290030956 CET	50042	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:32.488177061 CET	10445	50042	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:32.488234997 CET	10445	50042	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:32.488408089 CET	50042	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:32.488408089 CET	50042	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:32.490072966 CET	50042	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:32.492686033 CET	10445	50042	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:32.492707014 CET	50043	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:32.691831112 CET	10445	50042	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:32.691893101 CET	10445	50042	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:32.693748951 CET	10445	50043	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:32.694075108 CET	50043	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:32.700484991 CET	50043	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:32.895092010 CET	10445	50043	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:32.895153999 CET	10445	50043	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:32.895210028 CET	50043	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:32.895395994 CET	50043	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:32.896019936 CET	50043	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:32.898499966 CET	50044	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:32.901207924 CET	10445	50043	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:33.096064091 CET	10445	50043	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:33.096127987 CET	10445	50043	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:33.100677013 CET	10445	50044	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:33.101330996 CET	50044	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:33.110701084 CET	50044	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:33.304136038 CET	10445	50044	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:33.304246902 CET	10445	50044	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:33.304513931 CET	50044	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:33.306276083 CET	50044	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:33.310359955 CET	50045	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:33.312980890 CET	10445	50044	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:33.506843090 CET	10445	50044	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:33.517657995 CET	10445	50045	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:33.518064976 CET	50045	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:33.527391911 CET	50045	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:33.725864887 CET	10445	50045	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:33.725965977 CET	10445	50045	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:33.726366997 CET	50045	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:33.727675915 CET	50045	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:33.729691982 CET	50046	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:33.735130072 CET	10445	50045	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:33.930758953 CET	10445	50046	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:33.931152105 CET	50046	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:33.934118032 CET	10445	50045	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:33.935466051 CET	50046	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:34.132563114 CET	10445	50046	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:34.132577896 CET	10445	50046	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:34.132806063 CET	50046	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:34.136152983 CET	50046	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:34.136266947 CET	10445	50046	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:34.142152071 CET	50047	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:34.333834887 CET	10445	50046	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:34.340976954 CET	10445	50047	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:34.341232061 CET	50047	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:34.345787048 CET	50047	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:34.540640116 CET	10445	50047	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:34.540692091 CET	10445	50047	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:34.541094065 CET	50047	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:34.544780016 CET	10445	50047	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:34.545429945 CET	50047	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:34.551121950 CET	50048	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:35.549097061 CET	50048	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:36.703221083 CET	10445	50047	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:36.703288078 CET	10445	50048	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:36.703309059 CET	10445	50048	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:36.703680992 CET	50048	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:36.707187891 CET	50048	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:36.804569006 CET	10445	50048	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:36.804689884 CET	50048	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:36.906965971 CET	10445	50048	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:36.907027960 CET	10445	50048	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:36.907517910 CET	50048	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:36.908946991 CET	50048	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:36.909812927 CET	10445	50048	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:36.911694050 CET	50049	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:37.007308960 CET	10445	50048	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:37.110385895 CET	10445	50048	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:37.116715908 CET	10445	50049	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:37.117017031 CET	50049	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:37.121449947 CET	50049	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:37.307862997 CET	50049	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:37.322638035 CET	10445	50049	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:37.322693110 CET	10445	50049	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:37.322860956 CET	50049	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:37.322861910 CET	50049	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:37.326425076 CET	10445	50049	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:37.328203917 CET	50049	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:37.331573009 CET	50050	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:37.513572931 CET	10445	50049	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:37.528337002 CET	10445	50049	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:37.528394938 CET	10445	50049	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:37.537662983 CET	10445	50050	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:37.538070917 CET	50050	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:37.547847986 CET	50050	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:37.727441072 CET	50050	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:37.744729996 CET	10445	50050	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:37.744780064 CET	10445	50050	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:37.744929075 CET	50050	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:37.744929075 CET	50050	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:37.746021986 CET	50050	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:37.747813940 CET	50051	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:37.753989935 CET	10445	50050	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:37.933948994 CET	10445	50050	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:37.934012890 CET	10445	50050	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:37.948690891 CET	10445	50051	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:37.948787928 CET	50051	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:37.951071024 CET	10445	50050	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:37.951105118 CET	10445	50050	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:37.952234030 CET	50051	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:38.149751902 CET	10445	50051	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:38.149804115 CET	10445	50051	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:38.149842024 CET	50051	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:38.149878025 CET	50051	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:38.150904894 CET	50051	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:38.152753115 CET	10445	50051	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:38.153233051 CET	50052	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:38.350794077 CET	10445	50051	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:38.350842953 CET	10445	50051	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:38.360783100 CET	10445	50052	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:38.361008883 CET	50052	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:38.364830017 CET	50052	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:38.557513952 CET	50052	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:38.568999052 CET	10445	50052	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:38.569046974 CET	10445	50052	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:38.569225073 CET	50052	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:38.570067883 CET	50052	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:38.570067883 CET	50052	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:38.572345018 CET	10445	50052	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:38.572355986 CET	50053	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:38.765604973 CET	10445	50052	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:38.775213003 CET	10445	50053	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:38.775414944 CET	50053	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:38.776762009 CET	10445	50052	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:38.777477026 CET	10445	50052	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:38.777653933 CET	50053	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:38.957465887 CET	50053	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:38.978380919 CET	10445	50053	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:38.978430033 CET	10445	50053	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:38.978595018 CET	50053	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:38.978863955 CET	50053	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:38.980293989 CET	10445	50053	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:38.982515097 CET	50053	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:38.992089987 CET	50054	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:39.160712957 CET	10445	50053	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:39.160773993 CET	10445	50053	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:39.181440115 CET	10445	50053	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:39.181561947 CET	10445	50053	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:39.197711945 CET	10445	50054	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:39.198009968 CET	50054	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:39.207165956 CET	50054	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:39.403882980 CET	10445	50054	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:39.403949976 CET	10445	50054	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:39.404217958 CET	50054	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:39.404218912 CET	50054	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:39.405849934 CET	50054	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:39.412453890 CET	10445	50054	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:39.413105965 CET	50055	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:39.609965086 CET	10445	50054	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:39.610023022 CET	10445	50054	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:39.613933086 CET	10445	50055	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:39.614020109 CET	50055	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:39.616343975 CET	50055	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:39.807260036 CET	50055	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:39.815251112 CET	10445	50055	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:39.815301895 CET	10445	50055	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:39.815335035 CET	50055	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:39.815367937 CET	50055	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:39.816319942 CET	50055	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:39.817085028 CET	10445	50055	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:39.818679094 CET	50056	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:40.008896112 CET	10445	50055	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:40.016212940 CET	10445	50055	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:40.016238928 CET	10445	50055	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:40.025237083 CET	10445	50056	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:40.025326014 CET	50056	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:40.029933929 CET	50056	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:40.232249022 CET	10445	50056	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:40.232311010 CET	10445	50056	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:40.232379913 CET	50056	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:40.232446909 CET	50056	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:40.233479977 CET	50056	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:40.235311031 CET	50057	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:40.236449957 CET	10445	50056	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:40.436384916 CET	10445	50057	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:40.436551094 CET	50057	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:40.439042091 CET	10445	50056	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:40.439125061 CET	10445	50056	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:40.443160057 CET	50057	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:40.637872934 CET	10445	50057	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:40.637969971 CET	10445	50057	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:40.638006926 CET	50057	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:40.638089895 CET	50057	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:40.641560078 CET	50057	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:40.644732952 CET	50058	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:40.648833036 CET	10445	50057	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:40.839040041 CET	10445	50057	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:40.839087963 CET	10445	50057	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:40.845489979 CET	10445	50058	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:40.845722914 CET	50058	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:40.853883982 CET	50058	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:41.046982050 CET	10445	50058	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:41.047049046 CET	10445	50058	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:41.047194958 CET	50058	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:41.047194958 CET	50058	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:41.048203945 CET	50058	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:41.049916029 CET	50059	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:41.054652929 CET	10445	50058	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:41.248363972 CET	10445	50058	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:41.248429060 CET	10445	50058	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:41.255290031 CET	10445	50059	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:41.255588055 CET	50059	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:41.259676933 CET	50059	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:41.452517033 CET	50059	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:41.461164951 CET	10445	50059	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:41.461211920 CET	10445	50059	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:41.461266994 CET	50059	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:41.461306095 CET	50059	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:41.464751005 CET	10445	50059	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:41.466373920 CET	50059	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:41.470180035 CET	50060	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:41.658154964 CET	10445	50059	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:41.666383028 CET	10445	50059	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:41.666517973 CET	10445	50059	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:41.669111013 CET	10445	50060	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:41.669186115 CET	50060	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:41.671988964 CET	50060	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:41.868613005 CET	10445	50060	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:41.868678093 CET	10445	50060	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:41.868827105 CET	50060	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:41.868827105 CET	50060	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:41.869322062 CET	50060	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:41.870673895 CET	50061	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:41.870826006 CET	10445	50060	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:42.068275928 CET	10445	50060	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:42.068331003 CET	10445	50060	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:42.075952053 CET	10445	50061	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:42.076240063 CET	50061	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:42.078365088 CET	50061	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:42.282504082 CET	10445	50061	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:42.282608032 CET	10445	50061	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:42.282619953 CET	50061	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:42.282860994 CET	50061	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:42.283478975 CET	50061	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:42.284451962 CET	10445	50061	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:42.285590887 CET	50062	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:42.488286972 CET	10445	50061	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:42.488344908 CET	10445	50061	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:42.493933916 CET	10445	50062	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:42.494175911 CET	50062	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:42.496262074 CET	50062	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:42.681912899 CET	50062	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:42.702966928 CET	10445	50062	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:42.703030109 CET	10445	50062	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:42.703325987 CET	50062	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:42.704431057 CET	50062	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:42.704534054 CET	10445	50062	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:42.714318037 CET	50063	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:42.890758038 CET	10445	50062	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:42.890786886 CET	10445	50062	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:42.911843061 CET	10445	50062	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:42.916980982 CET	10445	50063	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:42.917073965 CET	50063	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:42.919004917 CET	50063	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:43.114821911 CET	50063	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:43.119940996 CET	10445	50063	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:43.119990110 CET	10445	50063	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:43.120039940 CET	50063	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:43.121026993 CET	50063	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:43.121501923 CET	10445	50063	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:43.123626947 CET	50064	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:43.317877054 CET	10445	50063	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:43.317919970 CET	10445	50063	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:43.323216915 CET	10445	50063	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:43.326128960 CET	10445	50064	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:43.326549053 CET	50064	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:43.331096888 CET	50064	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:43.529397964 CET	10445	50064	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:43.529464006 CET	10445	50064	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:43.529931068 CET	50064	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:43.530997992 CET	50064	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:43.533235073 CET	10445	50064	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:43.533319950 CET	50065	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:43.732136011 CET	10445	50064	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:43.741875887 CET	10445	50065	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:43.742001057 CET	50065	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:43.748518944 CET	50065	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:43.950932980 CET	10445	50065	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:43.950993061 CET	10445	50065	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:43.951150894 CET	50065	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:43.951150894 CET	50065	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:43.954031944 CET	50065	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:43.955737114 CET	50066	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:43.957004070 CET	10445	50065	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:44.161004066 CET	10445	50065	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:44.161032915 CET	10445	50065	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:44.164598942 CET	10445	50066	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:44.164772034 CET	50066	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:44.168203115 CET	50066	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:44.350343943 CET	50066	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:44.373765945 CET	10445	50066	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:44.373794079 CET	10445	50066	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:44.374037027 CET	50066	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:44.375384092 CET	50066	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:44.376761913 CET	10445	50066	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:44.377705097 CET	50067	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:44.559190989 CET	10445	50066	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:44.576612949 CET	10445	50067	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:44.576911926 CET	50067	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:44.579674959 CET	50067	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:44.582724094 CET	10445	50066	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:44.772854090 CET	50067	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:44.775975943 CET	10445	50067	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:44.776024103 CET	10445	50067	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:44.776218891 CET	50067	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:44.778278112 CET	10445	50067	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:44.779747963 CET	50067	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:44.787198067 CET	50068	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:44.971926928 CET	10445	50067	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:44.971962929 CET	10445	50067	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:44.974894047 CET	10445	50067	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:44.995452881 CET	10445	50068	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:44.995565891 CET	50068	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:45.001620054 CET	50068	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:45.204055071 CET	10445	50068	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:45.204085112 CET	10445	50068	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:45.204159975 CET	50068	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:45.204160929 CET	50068	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:45.209763050 CET	10445	50068	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:45.210220098 CET	50068	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:45.213469028 CET	50069	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:45.412642956 CET	10445	50068	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:45.412672997 CET	10445	50068	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:45.421658039 CET	10445	50069	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:45.421854019 CET	50069	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:45.424079895 CET	50069	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:45.584208965 CET	50069	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:45.630419970 CET	10445	50069	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:45.630450010 CET	10445	50069	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:45.630616903 CET	50069	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:45.630616903 CET	50069	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:45.631133080 CET	50069	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:45.632152081 CET	10445	50069	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:45.632441998 CET	50070	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:45.792574883 CET	10445	50069	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:45.832922935 CET	10445	50070	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:45.833116055 CET	50070	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:45.835458040 CET	50070	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:45.838912010 CET	10445	50069	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:45.838929892 CET	10445	50069	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:46.034034967 CET	10445	50070	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:46.034068108 CET	10445	50070	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:46.034115076 CET	50070	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:46.034136057 CET	50070	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:46.034960032 CET	50070	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:46.035810947 CET	10445	50070	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:46.037328005 CET	50071	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:46.234710932 CET	10445	50070	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:46.234739065 CET	10445	50070	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:46.242523909 CET	10445	50071	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:46.242742062 CET	50071	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:46.245759010 CET	50071	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:46.448298931 CET	10445	50071	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:46.448342085 CET	10445	50071	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:46.448524952 CET	50071	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:46.448612928 CET	50071	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:46.449681997 CET	50071	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:46.450896978 CET	10445	50071	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:46.451984882 CET	50072	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:46.653846979 CET	10445	50071	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:46.653911114 CET	10445	50071	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:46.658252001 CET	10445	50072	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:46.658615112 CET	50072	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:46.662851095 CET	50072	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:46.864857912 CET	10445	50072	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:46.864913940 CET	10445	50072	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:46.865190029 CET	50072	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:46.868801117 CET	10445	50072	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:46.869395018 CET	50072	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:46.872452021 CET	50073	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:47.071341991 CET	10445	50072	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:47.075285912 CET	10445	50073	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:47.075423956 CET	50073	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:47.080106020 CET	50073	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:47.278413057 CET	10445	50073	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:47.278472900 CET	10445	50073	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:47.278520107 CET	50073	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:47.278548002 CET	50073	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:47.281722069 CET	50073	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:47.282915115 CET	10445	50073	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:47.284658909 CET	50074	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:47.481235981 CET	10445	50073	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:47.481287003 CET	10445	50073	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:47.489963055 CET	10445	50074	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:47.490073919 CET	50074	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:47.499001026 CET	50074	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:47.695615053 CET	10445	50074	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:47.695672989 CET	10445	50074	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:47.695749044 CET	50074	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:47.696939945 CET	50074	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:47.697398901 CET	50074	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:47.699615002 CET	50075	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:47.704252958 CET	10445	50074	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:47.900418043 CET	10445	50075	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:47.900624990 CET	50075	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:47.901072979 CET	10445	50074	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:47.902105093 CET	10445	50074	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:47.904279947 CET	50075	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:48.101732969 CET	10445	50075	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:48.101780891 CET	10445	50075	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:48.101982117 CET	50075	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:48.101983070 CET	50075	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:48.103218079 CET	50075	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:48.104969978 CET	10445	50075	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:48.105386019 CET	50076	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:48.303050995 CET	10445	50075	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:48.303081989 CET	10445	50075	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:48.312747002 CET	10445	50076	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:48.312902927 CET	50076	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:48.315243959 CET	50076	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:48.500561953 CET	50076	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:48.520947933 CET	10445	50076	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:48.520977974 CET	10445	50076	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:48.521109104 CET	50076	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:48.521109104 CET	50076	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:48.521919012 CET	50076	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:48.522470951 CET	10445	50076	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:48.524224997 CET	50077	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:48.708122015 CET	10445	50076	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:48.728612900 CET	10445	50076	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:48.728668928 CET	10445	50076	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:48.731914043 CET	10445	50077	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:48.732007980 CET	50077	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:48.734030962 CET	50077	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:48.939999104 CET	10445	50077	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:48.940037012 CET	10445	50077	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:48.940187931 CET	50077	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:48.941664934 CET	10445	50077	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:48.941915035 CET	50077	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:48.945435047 CET	50078	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:49.147910118 CET	10445	50077	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:49.150680065 CET	10445	50078	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:49.150772095 CET	50078	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:49.155886889 CET	50078	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:49.356610060 CET	10445	50078	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:49.356651068 CET	10445	50078	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:49.356981039 CET	50078	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:49.359237909 CET	50078	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:49.361358881 CET	10445	50078	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:49.362054110 CET	50079	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:49.562762976 CET	10445	50078	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:49.562875986 CET	10445	50079	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:49.563169003 CET	50079	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:49.570616961 CET	50079	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:49.764220953 CET	10445	50079	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:49.764286995 CET	10445	50079	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:49.764600039 CET	50079	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:49.764600992 CET	50079	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:49.765059948 CET	50079	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:49.769908905 CET	50080	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:49.771063089 CET	10445	50079	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:49.965615988 CET	10445	50079	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:49.965675116 CET	10445	50079	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:49.970530987 CET	10445	50080	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:49.970628023 CET	50080	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:49.972635031 CET	50080	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:50.171796083 CET	10445	50080	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:50.171861887 CET	10445	50080	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:50.172081947 CET	50080	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:50.172081947 CET	50080	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:50.173103094 CET	10445	50080	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:50.173525095 CET	50080	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:50.175549984 CET	50081	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:50.372864008 CET	10445	50080	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:50.372929096 CET	10445	50080	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:50.378262997 CET	10445	50081	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:50.378343105 CET	50081	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:50.380647898 CET	50081	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:50.573740959 CET	50081	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:50.581746101 CET	10445	50081	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:50.581801891 CET	10445	50081	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:50.582216024 CET	50081	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:50.583389997 CET	10445	50081	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:50.586147070 CET	50081	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:50.592036963 CET	50082	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:50.777085066 CET	10445	50081	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:50.785202026 CET	10445	50081	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:50.794234991 CET	10445	50082	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:50.794435024 CET	50082	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:50.801366091 CET	50082	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:50.996902943 CET	10445	50082	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:50.996963978 CET	10445	50082	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:50.997505903 CET	50082	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:50.999449015 CET	50082	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:51.001307964 CET	50083	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:51.003339052 CET	10445	50082	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:51.200128078 CET	10445	50082	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:51.200390100 CET	10445	50083	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:51.200587988 CET	50083	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:51.204149961 CET	50083	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:51.379034996 CET	50083	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:51.401076078 CET	10445	50083	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:51.401138067 CET	10445	50083	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:51.401365995 CET	50083	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:51.401366949 CET	50083	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:51.401853085 CET	50083	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:51.403065920 CET	10445	50083	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:51.404433966 CET	50084	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:51.578347921 CET	10445	50083	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:51.578407049 CET	10445	50083	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:51.600475073 CET	10445	50083	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:51.600512981 CET	10445	50083	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:51.605554104 CET	10445	50084	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:51.605855942 CET	50084	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:51.608546972 CET	50084	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:51.807734966 CET	10445	50084	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:51.807800055 CET	10445	50084	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:51.807975054 CET	50084	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:51.807975054 CET	50084	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:51.808788061 CET	50084	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:51.809703112 CET	10445	50084	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:51.811006069 CET	50085	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:52.009660959 CET	10445	50084	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:52.009720087 CET	10445	50084	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:52.019277096 CET	10445	50085	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:52.019349098 CET	50085	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:52.023216963 CET	50085	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:52.228106022 CET	10445	50085	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:52.228168964 CET	10445	50085	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:52.228199959 CET	50085	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:52.228228092 CET	50085	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:52.229042053 CET	50085	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:52.231380939 CET	10445	50085	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:52.231569052 CET	50086	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:52.432955027 CET	10445	50086	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:52.433079004 CET	50086	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:52.436578989 CET	10445	50085	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:52.436615944 CET	10445	50085	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:52.444947958 CET	50086	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:52.634497881 CET	10445	50086	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:52.634553909 CET	10445	50086	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:52.634731054 CET	50086	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:52.634732008 CET	50086	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:52.639326096 CET	50086	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:52.642837048 CET	50087	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:52.646384954 CET	10445	50086	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:52.836138010 CET	10445	50086	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:52.836198092 CET	10445	50086	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:52.848918915 CET	10445	50087	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:52.849215984 CET	50087	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:52.852715969 CET	50087	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:53.055695057 CET	10445	50087	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:53.055757046 CET	10445	50087	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:53.056052923 CET	50087	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:53.058365107 CET	50087	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:53.058717966 CET	10445	50087	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:53.062156916 CET	50088	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:53.262188911 CET	10445	50087	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:53.262825966 CET	10445	50088	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:53.263113022 CET	50088	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:53.270006895 CET	50088	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:53.446392059 CET	50088	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:53.464004040 CET	10445	50088	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:53.464027882 CET	10445	50088	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:53.464248896 CET	50088	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:53.464248896 CET	50088	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:53.468503952 CET	50088	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:53.470860958 CET	10445	50088	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:53.472579956 CET	50089	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:53.648274899 CET	10445	50088	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:53.648324013 CET	10445	50088	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:53.664988041 CET	10445	50088	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:53.665021896 CET	10445	50088	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:53.675240993 CET	10445	50089	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:53.675441980 CET	50089	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:53.677705050 CET	50089	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:53.853991985 CET	50089	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:53.878422022 CET	10445	50089	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:53.878506899 CET	10445	50089	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:53.878675938 CET	50089	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:53.878675938 CET	50089	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:53.879667997 CET	50089	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:53.880316973 CET	10445	50089	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:53.881544113 CET	50090	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:54.056792974 CET	10445	50089	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:54.081486940 CET	10445	50089	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:54.081521034 CET	10445	50089	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:54.088913918 CET	10445	50090	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:54.088988066 CET	50090	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:54.090975046 CET	50090	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:54.296770096 CET	10445	50090	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:54.296802998 CET	10445	50090	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:54.296839952 CET	50090	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:54.296863079 CET	50090	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:54.297736883 CET	50090	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:54.298172951 CET	10445	50090	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:54.300246954 CET	50091	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:54.504364014 CET	10445	50090	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:54.504400969 CET	10445	50090	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:54.507329941 CET	10445	50091	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:54.507426977 CET	50091	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:54.510063887 CET	50091	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:54.714780092 CET	10445	50091	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:54.714818001 CET	10445	50091	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:54.714947939 CET	50091	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:54.716130018 CET	50091	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:54.716130018 CET	50091	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:54.717083931 CET	10445	50091	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:54.718291998 CET	50092	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:54.922369003 CET	10445	50091	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:54.923378944 CET	10445	50092	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:54.923403978 CET	10445	50091	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:54.923504114 CET	50092	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:55.021502972 CET	50092	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:55.128647089 CET	10445	50092	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:55.128684998 CET	10445	50092	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:55.128829002 CET	50092	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:55.128921032 CET	50092	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:55.138606071 CET	50092	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:55.140486002 CET	50093	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:55.226461887 CET	10445	50092	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:55.333884954 CET	10445	50092	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:55.333928108 CET	10445	50092	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:55.346353054 CET	10445	50093	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:55.346445084 CET	50093	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:55.355132103 CET	50093	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:55.553256035 CET	10445	50093	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:55.553272963 CET	10445	50093	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:55.553354979 CET	50093	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:55.560740948 CET	10445	50093	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:55.760014057 CET	10445	50093	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:55.932888031 CET	50094	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:56.138983011 CET	10445	50094	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:56.139081001 CET	50094	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:56.173451900 CET	50094	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:56.345357895 CET	10445	50094	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:56.345405102 CET	10445	50094	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:56.345418930 CET	50094	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:56.345453024 CET	50094	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:56.379436970 CET	10445	50094	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:56.489723921 CET	50094	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:56.491843939 CET	50095	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:56.551681995 CET	10445	50094	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:56.551717997 CET	10445	50094	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:56.696572065 CET	10445	50095	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:56.696739912 CET	50095	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:56.698733091 CET	50095	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:56.902940035 CET	10445	50095	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:56.902978897 CET	10445	50095	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:56.903059959 CET	50095	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:56.903139114 CET	50095	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:56.904006004 CET	50095	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:56.905486107 CET	10445	50095	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:56.905528069 CET	50096	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:57.108254910 CET	10445	50095	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:57.108293056 CET	10445	50095	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:57.112946033 CET	10445	50096	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:57.113025904 CET	50096	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:57.115037918 CET	50096	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:57.306211948 CET	50096	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:57.321918964 CET	10445	50096	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:57.321954966 CET	10445	50096	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:57.321986914 CET	10445	50096	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:57.322016954 CET	50096	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:57.332036972 CET	50096	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:57.333513021 CET	50097	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:57.513190985 CET	10445	50096	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:57.513227940 CET	10445	50096	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:57.528897047 CET	10445	50096	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:57.534198046 CET	10445	50097	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:57.534420967 CET	50097	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:57.536415100 CET	50097	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:57.692238092 CET	50097	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:57.735388994 CET	10445	50097	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:57.735459089 CET	10445	50097	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:57.735671043 CET	50097	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:57.736916065 CET	10445	50097	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:57.737456083 CET	50097	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:57.738718987 CET	50098	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:57.893492937 CET	10445	50097	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:57.936512947 CET	10445	50097	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:57.937927961 CET	10445	50098	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:57.938157082 CET	50098	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:57.940815926 CET	50098	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:58.123589039 CET	50098	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:58.137672901 CET	10445	50098	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:58.137737989 CET	10445	50098	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:58.137933016 CET	50098	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:58.138637066 CET	50098	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:58.139750957 CET	10445	50098	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:58.140434027 CET	50099	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:58.323199034 CET	10445	50098	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:58.323255062 CET	10445	50098	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:58.337105989 CET	10445	50098	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:58.340575933 CET	10445	50099	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:58.340648890 CET	50099	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:58.343534946 CET	50099	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:58.541383982 CET	10445	50099	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:58.541445971 CET	10445	50099	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:58.541481972 CET	50099	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:58.541552067 CET	50099	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:58.542407990 CET	50099	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:58.543584108 CET	10445	50099	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:58.544737101 CET	50100	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:58.742050886 CET	10445	50099	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:58.742106915 CET	10445	50099	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:58.746752024 CET	10445	50100	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:58.746850967 CET	50100	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:58.749696970 CET	50100	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:58.905987978 CET	50100	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:58.949312925 CET	10445	50100	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:58.949376106 CET	10445	50100	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:58.949402094 CET	50100	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:58.949420929 CET	50100	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:58.951471090 CET	10445	50100	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:58.952485085 CET	50100	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:58.960840940 CET	50101	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:59.108118057 CET	10445	50100	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:59.108172894 CET	10445	50100	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:59.152843952 CET	10445	50100	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:59.152900934 CET	10445	50100	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:59.169642925 CET	10445	50101	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:59.169785023 CET	50101	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:59.379515886 CET	10445	50101	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:59.379633904 CET	10445	50101	3.126.37.18	192.168.2.4
Feb 7, 2024 02:50:59.379837036 CET	50101	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:59.432101965 CET	50101	10445	192.168.2.4	3.126.37.18
Feb 7, 2024 02:50:59.639940977 CET	10445	50101	3.126.37.18	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Feb 7, 2024 02:47:08.124551058 CET	55139	53	192.168.2.4	1.1.1.1
Feb 7, 2024 02:47:08.245831013 CET	53	55139	1.1.1.1	192.168.2.4
Feb 7, 2024 02:48:09.748958111 CET	54168	53	192.168.2.4	1.1.1.1
Feb 7, 2024 02:48:09.868848085 CET	53	54168	1.1.1.1	192.168.2.4
Feb 7, 2024 02:49:09.405209064 CET	53540	53	192.168.2.4	1.1.1.1
Feb 7, 2024 02:49:09.524755001 CET	53	53540	1.1.1.1	192.168.2.4
Feb 7, 2024 02:50:09.469938993 CET	64930	53	192.168.2.4	1.1.1.1
Feb 7, 2024 02:50:09.590905905 CET	53	64930	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Feb 7, 2024 02:47:08.124551058 CET	192.168.2.4	1.1.1.1	0x935f	Standard query (0)	2.tcp.eu.ngrok.io	A (IP address)	IN (0x0001)	false
Feb 7, 2024 02:48:09.748958111 CET	192.168.2.4	1.1.1.1	0xde9f	Standard query (0)	2.tcp.eu.ngrok.io	A (IP address)	IN (0x0001)	false
Feb 7, 2024 02:49:09.405209064 CET	192.168.2.4	1.1.1.1	0x62d1	Standard query (0)	2.tcp.eu.ngrok.io	A (IP address)	IN (0x0001)	false
Feb 7, 2024 02:50:09.469938993 CET	192.168.2.4	1.1.1.1	0x7cab	Standard query (0)	2.tcp.eu.ngrok.io	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Feb 7, 2024 02:47:08.245831013 CET	1.1.1.1	192.168.2.4	0x935f	No error (0)	2.tcp.eu.ngrok.io	18.156.13.209	A (IP address)	IN (0x0001)	false
Feb 7, 2024 02:48:09.868848085 CET	1.1.1.1	192.168.2.4	0xde9f	No error (0)	2.tcp.eu.ngrok.io	18.197.239.5	A (IP address)	IN (0x0001)	false
Feb 7, 2024 02:49:09.524755001 CET	1.1.1.1	192.168.2.4	0x62d1	No error (0)	2.tcp.eu.ngrok.io	18.156.13.209	A (IP address)	IN (0x0001)	false
Feb 7, 2024 02:50:09.590905905 CET	1.1.1.1	192.168.2.4	0x7cab	No error (0)	2.tcp.eu.ngrok.io	3.126.37.18	A (IP address)	IN (0x0001)	false

Target ID:	0
Start time:	02:46:51
Start date:	07/02/2024
Path:	C:\Users\user\Desktop\4xKDL5YCfQ.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\Desktop\4xKDL5YCfQ.exe
Imagebase:	0xe10000
File size:	37'888 bytes
MD5 hash:	0CD936FB66BDE4378C21BB48FD093FF8
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Njrat, Description: Yara detected Njrat, Source: 00000000.00000000.1609993394.0000000000E12000.00000002.00000001.01000000.00000003.sdmp, Author: Joe Security Rule: Windows_Trojan_Njrat_30f3c220, Description: unknown, Source: 00000000.00000000.1609993394.0000000000E12000.00000002.00000001.01000000.00000003.sdmp, Author: unknown Rule: njrat1, Description: Identify njRat, Source: 00000000.00000000.1609993394.0000000000E12000.00000002.00000001.01000000.00000003.sdmp, Author: Brian Wallace @botnet_hunter
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	1
Start time:	02:46:58
Start date:	07/02/2024
Path:	C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe"
Imagebase:	0xf80000
File size:	37'888 bytes
MD5 hash:	0CD936FB66BDE4378C21BB48FD093FF8
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Njrat, Description: Yara detected Njrat, Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe, Author: Joe Security Rule: Windows_Trojan_Njrat_30f3c220, Description: unknown, Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe, Author: unknown Rule: njrat1, Description: Identify njRat, Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe, Author: Brian Wallace @botnet_hunter Rule: MALWARE_Win_NjRAT, Description: Detects NjRAT / Bladabindi, Source: C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe, Author: ditekSHen
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 95%, ReversingLabs Detection: 85%, Virustotal, Browse
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	02:47:04
Start date:	07/02/2024
Path:	C:\Windows\SysWOW64\netsh.exe
Wow64 process (32bit):	true
Commandline:	netsh firewall add allowedprogram "C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe" "AnubisSearchFree.exe" ENABLE
Imagebase:	0x1560000
File size:	82'432 bytes
MD5 hash:	4E89A1A088BE715D6C946E55AB07C7DF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	02:47:04
Start date:	07/02/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Execution Graph

Execution Coverage:	11.3%
Dynamic/Decrypted Code Coverage:	100%
Signature Coverage:	0%
Total number of Nodes:	37
Total number of Limit Nodes:	1

Callgraph

Executed
Not Executed
Opacity -> Relevance
Disassembly available

Executed Functions

Function 05710310 Relevance: 7.7, Strings: 6, Instructions: 195
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

2l, xrefs: 057104E9
-[Ek^, xrefs: 057104DA, 057104DF
2l, xrefs: 0571048B
2l, xrefs: 05710554
[Ek^, xrefs: 05710545, 0571054A
=[Ek^, xrefs: 05710477, 0571047C

Memory Dump Source

Source File: 00000000.00000002.1678636110.0000000005710000.00000040.00000800.00020000.00000000.sdmp, Offset: 05710000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5710000_4xKDL5YCfQ.jbxd

Similarity

API ID:
String ID: [Ek^$-[Ek^$2l$2l$2l$=[Ek^
API String ID: 0-2040334698
Opcode ID: 1271d1b29ea2b8b5614dd7274caa077b3b02f52c61596c7a75c828054a052f92
Instruction ID: e433d8c36715b1043c4813a416d4f9bd927aac2141738676c7ba75ffc5c22810
Opcode Fuzzy Hash: 1271d1b29ea2b8b5614dd7274caa077b3b02f52c61596c7a75c828054a052f92
Instruction Fuzzy Hash: 79610330B042018BC758DB3984196BE37E7BBC5204B05446AE80ADF3E5DF39CC4AA7E6

Uniqueness

Uniqueness Score: -1.00%

Function 057103BD Relevance: 7.6, Strings: 6, Instructions: 135
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

2l, xrefs: 057104E9
-[Ek^, xrefs: 057104DA, 057104DF
2l, xrefs: 0571048B
2l, xrefs: 05710554
[Ek^, xrefs: 05710545, 0571054A
=[Ek^, xrefs: 05710477, 0571047C

Memory Dump Source

Source File: 00000000.00000002.1678636110.0000000005710000.00000040.00000800.00020000.00000000.sdmp, Offset: 05710000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5710000_4xKDL5YCfQ.jbxd

Similarity

API ID:
String ID: [Ek^$-[Ek^$2l$2l$2l$=[Ek^
API String ID: 0-2040334698
Opcode ID: 324d64cadfb82985951c11c8009affbce2e7ec4ad70fe255f3cbdd240fa799a3
Instruction ID: fa17310964880a4a54490b4b041589fa193a207df5cd1ce36dd1d40e234f9f34
Opcode Fuzzy Hash: 324d64cadfb82985951c11c8009affbce2e7ec4ad70fe255f3cbdd240fa799a3
Instruction Fuzzy Hash: D041E530B005528BCB58AB7980256BD32D7BFD5248B04446AE806DF7E4DF38CD0AA7E7

Uniqueness

Uniqueness Score: -1.00%

Function 05710938 Relevance: 3.0, Strings: 2, Instructions: 498
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

:@k, xrefs: 05710B23
\Ol, xrefs: 05710EB9

Memory Dump Source

Source File: 00000000.00000002.1678636110.0000000005710000.00000040.00000800.00020000.00000000.sdmp, Offset: 05710000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5710000_4xKDL5YCfQ.jbxd

Similarity

API ID:
String ID: :@k$\Ol
API String ID: 0-2913639173
Opcode ID: 9f35dbd74ca797e206cae40d0a35e8161ced9122de6459dd1d0732f6ef8c0f04
Instruction ID: d897590ff714e991de8f40b34c2b6b5f73ba1e35f78a6a5b93ad8dd05a840466
Opcode Fuzzy Hash: 9f35dbd74ca797e206cae40d0a35e8161ced9122de6459dd1d0732f6ef8c0f04
Instruction Fuzzy Hash: F0027A34B00251CFCB18EB78D455AAE77E2FF88208F148069D806DB7A5DF399C59DBA1

Uniqueness

Uniqueness Score: -1.00%

Function 0155A612 Relevance: 1.6, APIs: 1, Instructions: 89
synchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateMutexW.KERNELBASE(?,?), ref: 0155A6B9

Memory Dump Source

Source File: 00000000.00000002.1678227594.000000000155A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0155A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_155a000_4xKDL5YCfQ.jbxd

Similarity

API ID: CreateMutex
String ID:
API String ID: 1964310414-0
Opcode ID: 98325a75536121239aebebe3f94eccb66372f01f6c895b9b12c5b21e748bc076
Instruction ID: 17a862db1ac8d2a86a7781ae962f6d650b2609d3f89bab3d3b3c839db6d1abd0
Opcode Fuzzy Hash: 98325a75536121239aebebe3f94eccb66372f01f6c895b9b12c5b21e748bc076
Instruction Fuzzy Hash: 7A31B3715093805FE712CB65DC95B96BFF8EF06214F08849AE984CF292D375E909CB71

Uniqueness

Uniqueness Score: -1.00%

Function 0155A361 Relevance: 1.6, APIs: 1, Instructions: 85
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegQueryValueExW.KERNELBASE(?,00000E24,F412D788,00000000,00000000,00000000,00000000), ref: 0155A40C

Memory Dump Source

Source File: 00000000.00000002.1678227594.000000000155A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0155A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_155a000_4xKDL5YCfQ.jbxd

Similarity

API ID: QueryValue
String ID:
API String ID: 3660427363-0
Opcode ID: bfb1272602bddfe3e3c78a568f92e066065945d53ef4a9bde3668c9d2774475d
Instruction ID: 471fa777cb6059c8766cd383eece980915ed326ded05e75872ca72fc49d4a6f8
Opcode Fuzzy Hash: bfb1272602bddfe3e3c78a568f92e066065945d53ef4a9bde3668c9d2774475d
Instruction Fuzzy Hash: 8E319C71508780AFE722CB15CC84B96BFF8EF06214F08859AE985CB293D364E948CB71

Uniqueness

Uniqueness Score: -1.00%

Function 0155A462 Relevance: 1.6, APIs: 1, Instructions: 77
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegSetValueExW.KERNELBASE(?,00000E24,F412D788,00000000,00000000,00000000,00000000), ref: 0155A4F8

Memory Dump Source

Source File: 00000000.00000002.1678227594.000000000155A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0155A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_155a000_4xKDL5YCfQ.jbxd

Similarity

API ID: Value
String ID:
API String ID: 3702945584-0
Opcode ID: ec04cccaa0bcb36ecfec0f07160f875b0f142521246de44c3f667d608dec9d98
Instruction ID: a86938f68d787463bc71d65abaf8b43acdd90be2e59ed97a372a0e220497bc61
Opcode Fuzzy Hash: ec04cccaa0bcb36ecfec0f07160f875b0f142521246de44c3f667d608dec9d98
Instruction Fuzzy Hash: 7D21F172504380AFEB228F55CC54FA7BFB8EF06210F08859AE985CB252D364E848CB71

Uniqueness

Uniqueness Score: -1.00%

Function 0155AA07 Relevance: 1.6, APIs: 1, Instructions: 72
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CopyFileW.KERNELBASE(?,?,?), ref: 0155AA86

Memory Dump Source

Source File: 00000000.00000002.1678227594.000000000155A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0155A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_155a000_4xKDL5YCfQ.jbxd

Similarity

API ID: CopyFile
String ID:
API String ID: 1304948518-0
Opcode ID: aebfa9d7e5b2b38564f063457bf7b0c59c5bca7ac8fd739b946d3e08e27ce4fb
Instruction ID: 5e654413718eaa5dc920aa532364cd8243f3357633e6b408dccc2266980476aa
Opcode Fuzzy Hash: aebfa9d7e5b2b38564f063457bf7b0c59c5bca7ac8fd739b946d3e08e27ce4fb
Instruction Fuzzy Hash: 7F21A1B15093809FE752CB25DC95B56BFF8EF06210F09849AED84CF163D264D908CB61

Uniqueness

Uniqueness Score: -1.00%

Function 0155A646 Relevance: 1.6, APIs: 1, Instructions: 72
synchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateMutexW.KERNELBASE(?,?), ref: 0155A6B9

Memory Dump Source

Source File: 00000000.00000002.1678227594.000000000155A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0155A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_155a000_4xKDL5YCfQ.jbxd

Similarity

API ID: CreateMutex
String ID:
API String ID: 1964310414-0
Opcode ID: aa30e0031d419a7414e45f50cee7446ff8ae168e183dd49eba144007c7540b83
Instruction ID: baf33cc2bf36f81cca81d57a02adb5c75b5b774c059c0ab5d45834f372b486fc
Opcode Fuzzy Hash: aa30e0031d419a7414e45f50cee7446ff8ae168e183dd49eba144007c7540b83
Instruction Fuzzy Hash: 0421B0716002409FE720CB69DD85BAAFBE8EF04214F04886AED49CF641D375E908CA72

Uniqueness

Uniqueness Score: -1.00%

Function 0155A392 Relevance: 1.6, APIs: 1, Instructions: 69
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegQueryValueExW.KERNELBASE(?,00000E24,F412D788,00000000,00000000,00000000,00000000), ref: 0155A40C

Memory Dump Source

Source File: 00000000.00000002.1678227594.000000000155A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0155A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_155a000_4xKDL5YCfQ.jbxd

Similarity

API ID: QueryValue
String ID:
API String ID: 3660427363-0
Opcode ID: e3c852e17c91b228ffb9b52d25751ee304a2b9d917f87cb94e4a8a983036f6c7
Instruction ID: 3422538f8d115fc74657038141c9e0b177f4f1add315e6b05ca4dfd2e08aa1a3
Opcode Fuzzy Hash: e3c852e17c91b228ffb9b52d25751ee304a2b9d917f87cb94e4a8a983036f6c7
Instruction Fuzzy Hash: 6721CD71600604AFEB60CF59CC84FA6FBECEF04614F08855AEE45CB652D360E948CAB2

Uniqueness

Uniqueness Score: -1.00%

Function 0155A486 Relevance: 1.6, APIs: 1, Instructions: 65
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegSetValueExW.KERNELBASE(?,00000E24,F412D788,00000000,00000000,00000000,00000000), ref: 0155A4F8

Memory Dump Source

Source File: 00000000.00000002.1678227594.000000000155A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0155A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_155a000_4xKDL5YCfQ.jbxd

Similarity

API ID: Value
String ID:
API String ID: 3702945584-0
Opcode ID: 6915b1d9a969523886b9402d0ff421fc228924346f67170d6811a04c289488a9
Instruction ID: 5b9b3785b6c11a110e09f69f84a960db95323f2b765fcbfc5bccea5267d10d77
Opcode Fuzzy Hash: 6915b1d9a969523886b9402d0ff421fc228924346f67170d6811a04c289488a9
Instruction Fuzzy Hash: D311D072600600AFEB618E55DC85FABFBECEF14614F08855AED49CB742D370E548CAB2

Uniqueness

Uniqueness Score: -1.00%

Function 0155A2D2 Relevance: 1.6, APIs: 1, Instructions: 61
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

SetErrorMode.KERNELBASE(?), ref: 0155A330

Memory Dump Source

Source File: 00000000.00000002.1678227594.000000000155A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0155A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_155a000_4xKDL5YCfQ.jbxd

Similarity

API ID: ErrorMode
String ID:
API String ID: 2340568224-0
Opcode ID: 241cd832ed8ec789019b265af4d07202edbe5cb71c1b4a6d1773c9ea1ae51139
Instruction ID: 64ac4a26da9aa33e6a0ca321993535ae25eb338ca9452faed0da1aca0e31d85e
Opcode Fuzzy Hash: 241cd832ed8ec789019b265af4d07202edbe5cb71c1b4a6d1773c9ea1ae51139
Instruction Fuzzy Hash: 19212C7140E3C05FD7138B25DC95A56BFB4AF47224F0980DBDD848F1A3C269A808DB62

Uniqueness

Uniqueness Score: -1.00%

Function 0155AC24 Relevance: 1.6, APIs: 1, Instructions: 60
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ShellExecuteExW.SHELL32(?), ref: 0155AC80

Memory Dump Source

Source File: 00000000.00000002.1678227594.000000000155A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0155A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_155a000_4xKDL5YCfQ.jbxd

Similarity

API ID: ExecuteShell
String ID:
API String ID: 587946157-0
Opcode ID: 5a70e778680f4d3d7e0e8c0ac29eaf288c17ec896a3bf4b893237bfc2d86c1fc
Instruction ID: 3c05d17216a89697b871668769b090c3b92bbdaa31003dae0a870e44805d76bd
Opcode Fuzzy Hash: 5a70e778680f4d3d7e0e8c0ac29eaf288c17ec896a3bf4b893237bfc2d86c1fc
Instruction Fuzzy Hash: 951190715093809FDB12CB29DC95B56BFB8EF46220F0884EBED45CF252D265E908CB62

Uniqueness

Uniqueness Score: -1.00%

Function 0155A8A4 Relevance: 1.6, APIs: 1, Instructions: 59
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

SetFileAttributesW.KERNELBASE(?,?), ref: 0155A903

Memory Dump Source

Source File: 00000000.00000002.1678227594.000000000155A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0155A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_155a000_4xKDL5YCfQ.jbxd

Similarity

API ID: AttributesFile
String ID:
API String ID: 3188754299-0
Opcode ID: ce082d9c73c8a5ba49a2a7d5f351c8d8c671f0cbe2368d15385cacd5e424dbf1
Instruction ID: 8638504f1cf38e117e17492aca90575384b23b073ee3e66cd2e255382846f275
Opcode Fuzzy Hash: ce082d9c73c8a5ba49a2a7d5f351c8d8c671f0cbe2368d15385cacd5e424dbf1
Instruction Fuzzy Hash: 3C1190715083809FDB11CF25DC95B56BFF8EF46220F0984AAED85CF252D238E948CB62

Uniqueness

Uniqueness Score: -1.00%

Function 0155AA3E Relevance: 1.6, APIs: 1, Instructions: 53
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CopyFileW.KERNELBASE(?,?,?), ref: 0155AA86

Memory Dump Source

Source File: 00000000.00000002.1678227594.000000000155A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0155A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_155a000_4xKDL5YCfQ.jbxd

Similarity

API ID: CopyFile
String ID:
API String ID: 1304948518-0
Opcode ID: 607846118299fa566512f879e567510673d71bbda573792ca45af6a65ed19e83
Instruction ID: 589a156e62b971a3fb5f0ee0a22e4f2515f9d61a7948ce0b20eed56bb58bb0bb
Opcode Fuzzy Hash: 607846118299fa566512f879e567510673d71bbda573792ca45af6a65ed19e83
Instruction Fuzzy Hash: A711A171A002009FEB90CF29D995B66FBE8FF15220F08856AED49CF746D274E904CA72

Uniqueness

Uniqueness Score: -1.00%

Function 0155A8C6 Relevance: 1.5, APIs: 1, Instructions: 48
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

SetFileAttributesW.KERNELBASE(?,?), ref: 0155A903

Memory Dump Source

Source File: 00000000.00000002.1678227594.000000000155A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0155A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_155a000_4xKDL5YCfQ.jbxd

Similarity

API ID: AttributesFile
String ID:
API String ID: 3188754299-0
Opcode ID: 7b37a245f4f36d89a75211b518f15e25ebe57ca25e4ca8e9df10bb6f1419b861
Instruction ID: b08a3e993bcbb0ba26b7d1ab419d6dccf231220c81dcc15bf770938208d2b43c
Opcode Fuzzy Hash: 7b37a245f4f36d89a75211b518f15e25ebe57ca25e4ca8e9df10bb6f1419b861
Instruction Fuzzy Hash: 6501D2756002008FEB50CF29D885766FBE8EF14220F0884ABDD45CF742D334D544CE62

Uniqueness

Uniqueness Score: -1.00%

Function 0155AC46 Relevance: 1.5, APIs: 1, Instructions: 47COMMON

Download Yara Rule

APIs

ShellExecuteExW.SHELL32(?), ref: 0155AC80

Memory Dump Source

Source File: 00000000.00000002.1678227594.000000000155A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0155A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_155a000_4xKDL5YCfQ.jbxd

Similarity

API ID: ExecuteShell
String ID:
API String ID: 587946157-0
Opcode ID: be3cf73a948ceeb1633376aaf5afa98d7a532af03f4b586eaf166a896b70c36d
Instruction ID: 5355d127d48ee4c9651d8c21ac4e11d76080ea79337d11e689cd7106a819e5c0
Opcode Fuzzy Hash: be3cf73a948ceeb1633376aaf5afa98d7a532af03f4b586eaf166a896b70c36d
Instruction Fuzzy Hash: BC018C71A042048FEB50CF29D895766BBE8EF05220F08C4ABED49CF746D275E508CFA2

Uniqueness

Uniqueness Score: -1.00%

Function 0155A2FE Relevance: 1.5, APIs: 1, Instructions: 35COMMON

Download Yara Rule

APIs

SetErrorMode.KERNELBASE(?), ref: 0155A330

Memory Dump Source

Source File: 00000000.00000002.1678227594.000000000155A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0155A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_155a000_4xKDL5YCfQ.jbxd

Similarity

API ID: ErrorMode
String ID:
API String ID: 2340568224-0
Opcode ID: 9cc24cf84035def94b42db9e10d2efad6968e17d0db5a86643deab0453889d2c
Instruction ID: 2f138b191469a55c72e93d9422d6874d5895bb2ba4a8cc9aa03eeaa5905323b3
Opcode Fuzzy Hash: 9cc24cf84035def94b42db9e10d2efad6968e17d0db5a86643deab0453889d2c
Instruction Fuzzy Hash: 43F0D7319042008FDB608F09E889765FBE0EF19329F08C19ACD084F352E2B9E408CEA2

Uniqueness

Uniqueness Score: -1.00%

Function 05710080 Relevance: .1, Instructions: 130COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1678636110.0000000005710000.00000040.00000800.00020000.00000000.sdmp, Offset: 05710000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5710000_4xKDL5YCfQ.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4edccb2cfb67aa4fae2010d2b482c59fccdd90e2d896c8787c7c9c16b4d8f97e
Instruction ID: afb5dc5efe0b0e5bca879282588c7f53e9d202e6faec4689dd895d813c5de6e5
Opcode Fuzzy Hash: 4edccb2cfb67aa4fae2010d2b482c59fccdd90e2d896c8787c7c9c16b4d8f97e
Instruction Fuzzy Hash: 17519730A05686CFC744DF38E59548A77B2FBA1308B008569E1048F76DDF389C2DEB92

Uniqueness

Uniqueness Score: -1.00%

Function 05710007 Relevance: .1, Instructions: 69COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1678636110.0000000005710000.00000040.00000800.00020000.00000000.sdmp, Offset: 05710000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5710000_4xKDL5YCfQ.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 763450399b7264f2fbe27d6ccd9fe503efc6c481e192b7a3c081f408b33766c3
Instruction ID: c1431210a71c405cfa38f6519bda6fe090344f46e87d6d58b0eb2bc789f8758d
Opcode Fuzzy Hash: 763450399b7264f2fbe27d6ccd9fe503efc6c481e192b7a3c081f408b33766c3
Instruction Fuzzy Hash: 7B01C06444E3C04FDB43873898649A17FB0AE0322474F81DBD4C4CF0A3E25E988AD732

Uniqueness

Uniqueness Score: -1.00%

Function 015405DF Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1678194029.0000000001540000.00000040.00000020.00020000.00000000.sdmp, Offset: 01540000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1540000_4xKDL5YCfQ.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d8f9580d96d8147e5e6e7965bb26d982ef9f3be594646e7f7cbcf36cab4cef27
Instruction ID: 3af35ceeeab5c504f103ace7c4a39522edecbc7b2de7e49990533dfc0a07d3dc
Opcode Fuzzy Hash: d8f9580d96d8147e5e6e7965bb26d982ef9f3be594646e7f7cbcf36cab4cef27
Instruction Fuzzy Hash: 0A0186B65097805FD7118F16EC40862FFE8EF96620709C4AFEC49CB652D125A908CBB2

Uniqueness

Uniqueness Score: -1.00%

Function 0571088B Relevance: .0, Instructions: 44COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1678636110.0000000005710000.00000040.00000800.00020000.00000000.sdmp, Offset: 05710000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5710000_4xKDL5YCfQ.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7c5eedcb44bcfc96b99c5014cae0a7e32ac2178c14ce7383de13bd735e0ddf9c
Instruction ID: 9a9b020b9d594c241c86cbe8cc4db9e4902557e61718379e1018f7689b24ded9
Opcode Fuzzy Hash: 7c5eedcb44bcfc96b99c5014cae0a7e32ac2178c14ce7383de13bd735e0ddf9c
Instruction Fuzzy Hash: C4016174605643DFC740EB79D46845DBBE2FBA4218F44882DE4858F365EF758809DB83

Uniqueness

Uniqueness Score: -1.00%

Function 01540606 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1678194029.0000000001540000.00000040.00000020.00020000.00000000.sdmp, Offset: 01540000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1540000_4xKDL5YCfQ.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cc1e7a4173da87668700e13cd7b7eb57cc1762e52e431e028e6c1ae872b6d525
Instruction ID: 00a750321ce64c45ca19a3473f049600dd6d9d6238b4f1d725d811b7ef750421
Opcode Fuzzy Hash: cc1e7a4173da87668700e13cd7b7eb57cc1762e52e431e028e6c1ae872b6d525
Instruction Fuzzy Hash: 97E092B6604A044B9750CF0AFC81452F7D8EB94631718C07FDC0D8B701D239F508CEA5

Uniqueness

Uniqueness Score: -1.00%

Function 015523F4 Relevance: .0, Instructions: 15COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1678214046.0000000001552000.00000040.00000800.00020000.00000000.sdmp, Offset: 01552000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1552000_4xKDL5YCfQ.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 760123a35d0c376783c1528617d216a7ac02a71ced239e1df4c22f45aeeab6eb
Instruction ID: 62d22eca034a509d3d8797bdbeca4310bedde0ca9fe931b0cf61d30def456823
Opcode Fuzzy Hash: 760123a35d0c376783c1528617d216a7ac02a71ced239e1df4c22f45aeeab6eb
Instruction Fuzzy Hash: 14D05E792057C1CFE3169A1CC1A4B993FE8BB61714F4A44FAAC008F763C768D581D700

Uniqueness

Uniqueness Score: -1.00%

Function 015523BC Relevance: .0, Instructions: 14COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1678214046.0000000001552000.00000040.00000800.00020000.00000000.sdmp, Offset: 01552000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1552000_4xKDL5YCfQ.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8149f91a3fa5f03bdb15ae57d47f1d5c253f2c7595f2f78d967ba14737a27099
Instruction ID: b9f99c16dcc70215d2f7aa8caf17b1552bd56fb79189bb68bb98a8f87a146764
Opcode Fuzzy Hash: 8149f91a3fa5f03bdb15ae57d47f1d5c253f2c7595f2f78d967ba14737a27099
Instruction Fuzzy Hash: BCD05E342002818BD715DA0CC6E4F5D3BD8BB50B14F1A44E9AC108F762C7A4D8C1CB00

Uniqueness

Uniqueness Score: -1.00%

Analysis Process: AnubisSearchFree.exePID: 5804, Parent PID: 6680COMMON

Execution Graph

Execution Coverage:	16.1%
Dynamic/Decrypted Code Coverage:	100%
Signature Coverage:	2.2%
Total number of Nodes:	135
Total number of Limit Nodes:	6

Executed Functions

Function 058B27C7 Relevance: 1.6, APIs: 1, Instructions: 75COMMON

Download Yara Rule

APIs

AdjustTokenPrivileges.KERNELBASE(?,?,?,?,?,?), ref: 058B2847

Memory Dump Source

Source File: 00000001.00000002.4073365684.00000000058B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 058B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_58b0000_AnubisSearchFree.jbxd

Similarity

API ID: AdjustPrivilegesToken
String ID:
API String ID: 2874748243-0
Opcode ID: 8989b2aa26bcec031105af5110bd6af404bd30cc196f82c390ef30051fb4f246
Instruction ID: 75665c5bee68f0cb98b40a16ca6d3356cd792c0bc52291b1378ea01a5f614269
Opcode Fuzzy Hash: 8989b2aa26bcec031105af5110bd6af404bd30cc196f82c390ef30051fb4f246
Instruction Fuzzy Hash: 1521B1755097809FEB128F25DC45BA2BFB8AF06210F08849AE985CF663D270D918CB62

Uniqueness

Uniqueness Score: -1.00%

Function 058B27FE Relevance: 1.6, APIs: 1, Instructions: 52COMMON

Download Yara Rule

APIs

AdjustTokenPrivileges.KERNELBASE(?,?,?,?,?,?), ref: 058B2847

Memory Dump Source

Source File: 00000001.00000002.4073365684.00000000058B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 058B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_58b0000_AnubisSearchFree.jbxd

Similarity

API ID: AdjustPrivilegesToken
String ID:
API String ID: 2874748243-0
Opcode ID: 87ff5720b47f614aeb900a32db6a133194a50a837ecd0d360e8c152927e52552
Instruction ID: 9e423fb4a83ec44305d086b833ee20a1d05b1487970fd331ff42181ecb13163b
Opcode Fuzzy Hash: 87ff5720b47f614aeb900a32db6a133194a50a837ecd0d360e8c152927e52552
Instruction Fuzzy Hash: F4119175A006049FEB21CF55D885BA2FBE8FF04210F08846AED46CB752D371E814CF62

Uniqueness

Uniqueness Score: -1.00%

Function 0175A09A Relevance: 1.5, APIs: 1, Instructions: 42networkCOMMON

Download Yara Rule

APIs

recv.WS2_32(?,?,?,?), ref: 0175A0D5

Memory Dump Source

Source File: 00000001.00000002.4071022616.000000000175A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0175A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_175a000_AnubisSearchFree.jbxd

Similarity

API ID: recv
String ID:
API String ID: 1507349165-0
Opcode ID: 57cf78409234226e63b95d747954d18a634e08f9ee63529d7e68c483125a1a9b
Instruction ID: 15d9c3b6847ea27c36a4c9449f6edf1f13d907d9a4dcd955e283ff816e2c44fb
Opcode Fuzzy Hash: 57cf78409234226e63b95d747954d18a634e08f9ee63529d7e68c483125a1a9b
Instruction Fuzzy Hash: F001B1715006409FDB61CF59D884B61FBE4EF44320F08C5AADD498B656D3B5E418CF62

Uniqueness

Uniqueness Score: -1.00%

Function 01A21120 Relevance: 1.6, APIs: 1, Instructions: 115
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

KiUserExceptionDispatcher.NTDLL ref: 01A21147

Memory Dump Source

Source File: 00000001.00000002.4071452670.0000000001A20000.00000040.00000800.00020000.00000000.sdmp, Offset: 01A20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1a20000_AnubisSearchFree.jbxd

Similarity

API ID: DispatcherExceptionUser
String ID:
API String ID: 6842923-0
Opcode ID: b0dff24e0a7e6825f1afd7d357240fa12bafc6f2ff7b2f14039698a750202263
Instruction ID: 5920964007d7dff6d24f7a1206349dba0c3ab5cbb16bfde6494ad2d01e0ddaa4
Opcode Fuzzy Hash: b0dff24e0a7e6825f1afd7d357240fa12bafc6f2ff7b2f14039698a750202263
Instruction Fuzzy Hash: 4E41A031B002118FDB14DF78C9946AEB7E6EF84214B588079D909CB39AEF39DD45CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 01A21111 Relevance: 1.6, APIs: 1, Instructions: 108
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

KiUserExceptionDispatcher.NTDLL ref: 01A21147

Memory Dump Source

Source File: 00000001.00000002.4071452670.0000000001A20000.00000040.00000800.00020000.00000000.sdmp, Offset: 01A20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1a20000_AnubisSearchFree.jbxd

Similarity

API ID: DispatcherExceptionUser
String ID:
API String ID: 6842923-0
Opcode ID: 1e5492b6c8990eb371e5917f821da28c1253696ec50975155772ead7a469f263
Instruction ID: be1043beb12171b589005ab463db391e5568e0543fdfddbdaff9bba7bf6d4035
Opcode Fuzzy Hash: 1e5492b6c8990eb371e5917f821da28c1253696ec50975155772ead7a469f263
Instruction Fuzzy Hash: E541A431B003118FCB14DF78C8946AAB7E6EF84254B588479D909CB39AEF39DD45CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 0175BB42 Relevance: 1.6, APIs: 1, Instructions: 103
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileW.KERNELBASE(?,?,?,?,?,?), ref: 0175BC01

Memory Dump Source

Source File: 00000001.00000002.4071022616.000000000175A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0175A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_175a000_AnubisSearchFree.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 60deed0dd3edba478481e913645608d26a2bd4c854eb9edd1f4d7ac8522295c3
Instruction ID: 1f7b86f06ee002c8bb6995b637a9619376e4b39bfa532b6bff8148709ba9e5ad
Opcode Fuzzy Hash: 60deed0dd3edba478481e913645608d26a2bd4c854eb9edd1f4d7ac8522295c3
Instruction Fuzzy Hash: 8031A0B1504780AFE722CF65DC44BA2BFF8EF06314F08849AE9848B652D275E909DB71

Uniqueness

Uniqueness Score: -1.00%

Function 058B22D2 Relevance: 1.6, APIs: 1, Instructions: 99
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegCreateKeyExW.KERNELBASE(?,00000E24), ref: 058B2399

Memory Dump Source

Source File: 00000001.00000002.4073365684.00000000058B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 058B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_58b0000_AnubisSearchFree.jbxd

Similarity

API ID: Create
String ID:
API String ID: 2289755597-0
Opcode ID: e46190e7b8460683e0895d35fbee49912906f1692cc16dd187af3c8189f494e1
Instruction ID: a5cd5735d5568511e4ad66d7a7ff8ef8f6bff61e34c369d8f5c947d074c193ee
Opcode Fuzzy Hash: e46190e7b8460683e0895d35fbee49912906f1692cc16dd187af3c8189f494e1
Instruction Fuzzy Hash: 6E31A272504744AFE722CB65CD84FA7BFFCEF09210F08459AE985CB662D364E948CB61

Uniqueness

Uniqueness Score: -1.00%

Function 058B0187 Relevance: 1.6, APIs: 1, Instructions: 98
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegQueryValueExW.KERNELBASE(?,00000E24,?,?), ref: 058B024E

Memory Dump Source

Source File: 00000001.00000002.4073365684.00000000058B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 058B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_58b0000_AnubisSearchFree.jbxd

Similarity

API ID: QueryValue
String ID:
API String ID: 3660427363-0
Opcode ID: 5468889dbc606e8cc2e5c0524e54380b1c9939dd869dd389542e636749fe3303
Instruction ID: 09cdbcd2d320ba667e86d15aef6817657f469076f5abd37daf92b6c34ab46907
Opcode Fuzzy Hash: 5468889dbc606e8cc2e5c0524e54380b1c9939dd869dd389542e636749fe3303
Instruction Fuzzy Hash: 0E316F6510E7C0AFD3139B258C65A61BFB4EF47610B0E45CBE884CF6A3D259A909C7B2

Uniqueness

Uniqueness Score: -1.00%

Function 058B0FBC Relevance: 1.6, APIs: 1, Instructions: 93
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

getaddrinfo.WS2_32(?,00000E24), ref: 058B1083

Memory Dump Source

Source File: 00000001.00000002.4073365684.00000000058B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 058B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_58b0000_AnubisSearchFree.jbxd

Similarity

API ID: getaddrinfo
String ID:
API String ID: 300660673-0
Opcode ID: c472a0ec6274697c14be73545ace3823b836dbd9b17b85e63c70c1078008a58f
Instruction ID: 5d8995a01baa383d6c4e6b185d6489eaee0d1e80692381a59dc46bd095d45d64
Opcode Fuzzy Hash: c472a0ec6274697c14be73545ace3823b836dbd9b17b85e63c70c1078008a58f
Instruction Fuzzy Hash: A631ADB1500340AFE721CB61CD84FA6BBACEB04314F04489AFA48DB682D3B5A94DCB71

Uniqueness

Uniqueness Score: -1.00%

Function 058B0EB4 Relevance: 1.6, APIs: 1, Instructions: 92
timeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetProcessTimes.KERNELBASE(?,00000E24,2662C61B,00000000,00000000,00000000,00000000), ref: 058B0F51

Memory Dump Source

Source File: 00000001.00000002.4073365684.00000000058B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 058B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_58b0000_AnubisSearchFree.jbxd

Similarity

API ID: ProcessTimes
String ID:
API String ID: 1995159646-0
Opcode ID: 244d6abb7f5c2aa01442c1342cefa3ae18d4e0e6fccf60cec564c857fbd062e6
Instruction ID: 22b03c9c1092840d3f095754596127c64dfa71e4d558f2ac60e05e524198637e
Opcode Fuzzy Hash: 244d6abb7f5c2aa01442c1342cefa3ae18d4e0e6fccf60cec564c857fbd062e6
Instruction Fuzzy Hash: 7631C471509780AFE7128B65DC44BA6BFB8EF46324F08849AE884DF292D3659909C771

Uniqueness

Uniqueness Score: -1.00%

Function 058B124A Relevance: 1.6, APIs: 1, Instructions: 92COMMON

Download Yara Rule

APIs

GetVolumeInformationA.KERNELBASE(?,00000E24,?,?), ref: 058B130A

Memory Dump Source

Source File: 00000001.00000002.4073365684.00000000058B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 058B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_58b0000_AnubisSearchFree.jbxd

Similarity

API ID: InformationVolume
String ID:
API String ID: 2039140958-0
Opcode ID: 792409a4ef5ea655c88e5542fd3bbf71e0d0ef4c23e8fc0a460eb7dbdf5dea04
Instruction ID: 50fdf47cc749ae87df348f4b3066a7978ca4ae9fa9bf135ec5247dce27544ed3
Opcode Fuzzy Hash: 792409a4ef5ea655c88e5542fd3bbf71e0d0ef4c23e8fc0a460eb7dbdf5dea04
Instruction Fuzzy Hash: 4631607150D3C16FD3138B358C61AA2BFB4AF47210F1981DBE8C4DF6A3D225A959C7A2

Uniqueness

Uniqueness Score: -1.00%

Function 0175AB1E Relevance: 1.6, APIs: 1, Instructions: 91registryCOMMON

Download Yara Rule

APIs

RegOpenKeyExW.KERNELBASE(?,00000E24), ref: 0175ABD1

Memory Dump Source

Source File: 00000001.00000002.4071022616.000000000175A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0175A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_175a000_AnubisSearchFree.jbxd

Similarity

API ID: Open
String ID:
API String ID: 71445658-0
Opcode ID: 3dc7319342352571b8b768a6788726938d7416cb482d83fab9fda4a28545def4
Instruction ID: 1c34d8dff70c6bb49c8a01a6304e7f6cb1fe57d79574169ec3a720827f52e0a2
Opcode Fuzzy Hash: 3dc7319342352571b8b768a6788726938d7416cb482d83fab9fda4a28545def4
Instruction Fuzzy Hash: CA31B3715097846FE7228B65CC84FA6BFBCEF06210F08859AE985CB253D364A94DC771

Uniqueness

Uniqueness Score: -1.00%

Function 0175A612 Relevance: 1.6, APIs: 1, Instructions: 89synchronizationCOMMON

Download Yara Rule

APIs

CreateMutexW.KERNELBASE(?,?), ref: 0175A6B9

Memory Dump Source

Source File: 00000001.00000002.4071022616.000000000175A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0175A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_175a000_AnubisSearchFree.jbxd

Similarity

API ID: CreateMutex
String ID:
API String ID: 1964310414-0
Opcode ID: 0b141b84c92635c6ea2a8710dcfa4762097a73b4c67b4c21023f1cebd2daf75a
Instruction ID: 3e627bccd3a409e7722c1b26a03607c056b5a5b129ce4f63845d5f36d0714362
Opcode Fuzzy Hash: 0b141b84c92635c6ea2a8710dcfa4762097a73b4c67b4c21023f1cebd2daf75a
Instruction Fuzzy Hash: 8431A1B15093805FE712CB65CC85B96FFF8EF06210F0884AAE984CB292D375E909CB71

Uniqueness

Uniqueness Score: -1.00%

Function 058B07B0 Relevance: 1.6, APIs: 1, Instructions: 89COMMON

Download Yara Rule

APIs

ConvertStringSecurityDescriptorToSecurityDescriptorW.ADVAPI32(?,00000E24), ref: 058B0847

Memory Dump Source

Source File: 00000001.00000002.4073365684.00000000058B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 058B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_58b0000_AnubisSearchFree.jbxd

Similarity

API ID: DescriptorSecurity$ConvertString
String ID:
API String ID: 3907675253-0
Opcode ID: de59dafdc72c8670b971d8b8edf89423ae38fb4963e15c945feeff608b4f9df8
Instruction ID: c6941ac0f707c60befc32716dcc42bde7cb83acb3749bec02b5169b08f3bebbd
Opcode Fuzzy Hash: de59dafdc72c8670b971d8b8edf89423ae38fb4963e15c945feeff608b4f9df8
Instruction Fuzzy Hash: 5231BF72504384AFE7218B65DC45FA7BFBCEF45210F0884AAF984CB652D364E948CB61

Uniqueness

Uniqueness Score: -1.00%

Function 058B22FE Relevance: 1.6, APIs: 1, Instructions: 86registryCOMMON

Download Yara Rule

APIs

RegCreateKeyExW.KERNELBASE(?,00000E24), ref: 058B2399

Memory Dump Source

Source File: 00000001.00000002.4073365684.00000000058B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 058B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_58b0000_AnubisSearchFree.jbxd

Similarity

API ID: Create
String ID:
API String ID: 2289755597-0
Opcode ID: 016606ea16a4d6027237225d01bb609150d550ad8ad70dda5a59e7ced7c62068
Instruction ID: 296595693a42dc3f5c0c51dfc43234b8640a7bce39fc5d6023a3e1c772baf805
Opcode Fuzzy Hash: 016606ea16a4d6027237225d01bb609150d550ad8ad70dda5a59e7ced7c62068
Instruction Fuzzy Hash: 7B21A076600604AFEB31CE55CD44FA7BBECEF08614F08865AED4AC7761D370E9488A61

Uniqueness

Uniqueness Score: -1.00%

Function 0175A361 Relevance: 1.6, APIs: 1, Instructions: 85registryCOMMON

Download Yara Rule

APIs

RegQueryValueExW.KERNELBASE(?,00000E24,2662C61B,00000000,00000000,00000000,00000000), ref: 0175A40C

Memory Dump Source

Source File: 00000001.00000002.4071022616.000000000175A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0175A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_175a000_AnubisSearchFree.jbxd

Similarity

API ID: QueryValue
String ID:
API String ID: 3660427363-0
Opcode ID: 38e75d9e2a3d7c61149e7bdb4134d47408a38d9f824c173a3458951ad6ca809f
Instruction ID: 5429e57fa4cb49ead95d51dfcbdddf23f0802955059e478023fb1b4416a18d1f
Opcode Fuzzy Hash: 38e75d9e2a3d7c61149e7bdb4134d47408a38d9f824c173a3458951ad6ca809f
Instruction Fuzzy Hash: FE317F75505740AFE762CB15CC84B92BFB8EF06214F08859AE945CB292D364E949CB61

Uniqueness

Uniqueness Score: -1.00%

Function 058B0FDE Relevance: 1.6, APIs: 1, Instructions: 84COMMON

Download Yara Rule

APIs

getaddrinfo.WS2_32(?,00000E24), ref: 058B1083

Memory Dump Source

Source File: 00000001.00000002.4073365684.00000000058B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 058B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_58b0000_AnubisSearchFree.jbxd

Similarity

API ID: getaddrinfo
String ID:
API String ID: 300660673-0
Opcode ID: b394ad507158e219498ce40b420afb03a8e80a3f1714070bb15cad828b28957f
Instruction ID: d947f2a71de4911e5cc4e723e73188e793f84dd9c43991fdad4c1a7bb222cc51
Opcode Fuzzy Hash: b394ad507158e219498ce40b420afb03a8e80a3f1714070bb15cad828b28957f
Instruction Fuzzy Hash: A221BF71500204AEFB20DB65CD84FFAFBACEB04714F04485AFA49DA681D7B5A94DCB71

Uniqueness

Uniqueness Score: -1.00%

Function 0175BC58 Relevance: 1.6, APIs: 1, Instructions: 80COMMON

Download Yara Rule

APIs

GetFileType.KERNELBASE(?,00000E24,2662C61B,00000000,00000000,00000000,00000000), ref: 0175BCED

Memory Dump Source

Source File: 00000001.00000002.4071022616.000000000175A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0175A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_175a000_AnubisSearchFree.jbxd

Similarity

API ID: FileType
String ID:
API String ID: 3081899298-0
Opcode ID: 2414d5f31307f4c0673bba73402d292d0c3916f7ab03604e212f9398d79ee48f
Instruction ID: 8e37da2674475f153c74217e625c4f5cd4f257ddf20e4594fd1ed3a6fac46acb
Opcode Fuzzy Hash: 2414d5f31307f4c0673bba73402d292d0c3916f7ab03604e212f9398d79ee48f
Instruction Fuzzy Hash: 152128B55097806FD7138B25DC81BA2BFBCEF47324F1880DAED848B293D264A949C771

Uniqueness

Uniqueness Score: -1.00%

Function 058B2571 Relevance: 1.6, APIs: 1, Instructions: 80COMMON

Download Yara Rule

APIs

select.WS2_32(?,?,?,?,?), ref: 058B2600

Memory Dump Source

Source File: 00000001.00000002.4073365684.00000000058B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 058B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_58b0000_AnubisSearchFree.jbxd

Similarity

API ID: select
String ID:
API String ID: 1274211008-0
Opcode ID: 562c4249ecc03b8a7ffbdbaaa74c6e9fdbac52212fa88dd71ba7b8e819c2d869
Instruction ID: 6e87b6631c08cad14c29619de93518279f33590e379e6520c4effa86812e5692
Opcode Fuzzy Hash: 562c4249ecc03b8a7ffbdbaaa74c6e9fdbac52212fa88dd71ba7b8e819c2d869
Instruction Fuzzy Hash: 43215E755093809FD712CF25DC54BA2BFF8FF06210F08849AED85CB262D264E949CB61

Uniqueness

Uniqueness Score: -1.00%

Function 058B2949 Relevance: 1.6, APIs: 1, Instructions: 79COMMON

Download Yara Rule

APIs

GetExitCodeProcess.KERNELBASE(?,00000E24,2662C61B,00000000,00000000,00000000,00000000), ref: 058B29D0

Memory Dump Source

Source File: 00000001.00000002.4073365684.00000000058B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 058B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_58b0000_AnubisSearchFree.jbxd

Similarity

API ID: CodeExitProcess
String ID:
API String ID: 3861947596-0
Opcode ID: c6febaa7d1e2ff4552ea026f1dd7a06437417b0f38977c8734d9f5bda3156de8
Instruction ID: 2bec01564cd9ec73eb99423d5f4349456f9a790088fbe4302497f0ae6b6940d9
Opcode Fuzzy Hash: c6febaa7d1e2ff4552ea026f1dd7a06437417b0f38977c8734d9f5bda3156de8
Instruction Fuzzy Hash: 1321A4B15093806FE712CB25DC95FE6BFB8EF46224F0884DAE944DF293D264A948C771

Uniqueness

Uniqueness Score: -1.00%

Function 0175A462 Relevance: 1.6, APIs: 1, Instructions: 77registryCOMMON

Download Yara Rule

APIs

RegSetValueExW.KERNELBASE(?,00000E24,2662C61B,00000000,00000000,00000000,00000000), ref: 0175A4F8

Memory Dump Source

Source File: 00000001.00000002.4071022616.000000000175A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0175A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_175a000_AnubisSearchFree.jbxd

Similarity

API ID: Value
String ID:
API String ID: 3702945584-0
Opcode ID: fe434ad06335e621e59831e8b532e58dd3a65636dbfd09ff5b9f8c7590ee89aa
Instruction ID: 39788cb1e2a3a8133284c3328a3f069e3293da8452ffbfc0163fb66a6bb71c48
Opcode Fuzzy Hash: fe434ad06335e621e59831e8b532e58dd3a65636dbfd09ff5b9f8c7590ee89aa
Instruction Fuzzy Hash: 0B21C1B25043806FE7228F15CC44FA7FFB8EF46210F08859AE985CB652C364E848CB71

Uniqueness

Uniqueness Score: -1.00%

Function 058B0966 Relevance: 1.6, APIs: 1, Instructions: 77fileCOMMON

Download Yara Rule

APIs

MapViewOfFile.KERNELBASE ref: 058B09FA

Memory Dump Source

Source File: 00000001.00000002.4073365684.00000000058B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 058B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_58b0000_AnubisSearchFree.jbxd

Similarity

API ID: FileView
String ID:
API String ID: 3314676101-0
Opcode ID: 4f927ed63b029edb1b48865966695d58ce65103003c26382c558972a54c2c1cf
Instruction ID: b51bccd302a54b9f0837e27488ac4a69afd9c7123ef7891e1281415563d8c120
Opcode Fuzzy Hash: 4f927ed63b029edb1b48865966695d58ce65103003c26382c558972a54c2c1cf
Instruction Fuzzy Hash: 1421B171505340AFE722CF55CD44FA6FBF8EF09214F04889EE9888B252D375E548CB61

Uniqueness

Uniqueness Score: -1.00%

Function 058B027A Relevance: 1.6, APIs: 1, Instructions: 77networkCOMMON

Download Yara Rule

APIs

WSASocketW.WS2_32(?,?,?,?,?), ref: 058B0306

Memory Dump Source

Source File: 00000001.00000002.4073365684.00000000058B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 058B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_58b0000_AnubisSearchFree.jbxd

Similarity

API ID: Socket
String ID:
API String ID: 38366605-0
Opcode ID: a89533aa9db3af117235713acd583c8445aaabd5e7ee54bc4fc8105041b27ed5
Instruction ID: 54bf79aaf2cb2116d61acd47ab594ee9013d4bb37c7d1a4003e11cffbc3d1f65
Opcode Fuzzy Hash: a89533aa9db3af117235713acd583c8445aaabd5e7ee54bc4fc8105041b27ed5
Instruction Fuzzy Hash: 4B21B471505340AFE721CF55CD45FA6FFF8EF09210F08849EE9858B652D375A508CB61

Uniqueness

Uniqueness Score: -1.00%

Function 0175BB82 Relevance: 1.6, APIs: 1, Instructions: 76fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNELBASE(?,?,?,?,?,?), ref: 0175BC01

Memory Dump Source

Source File: 00000001.00000002.4071022616.000000000175A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0175A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_175a000_AnubisSearchFree.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: e79afe24bf73f7836772cf87aff39e49ccf0ffcb447e017bc83482c03f53392e
Instruction ID: 478516d426674304f0a0032bada9d9ce2553f6e2afe4d049d40f2db6abff0141
Opcode Fuzzy Hash: e79afe24bf73f7836772cf87aff39e49ccf0ffcb447e017bc83482c03f53392e
Instruction Fuzzy Hash: E421B271600200AFEB61CF69CD85B66FBE8EF08214F048459ED498B752D3B1E508CB71

Uniqueness

Uniqueness Score: -1.00%

Function 058B07D6 Relevance: 1.6, APIs: 1, Instructions: 76COMMON

Download Yara Rule

APIs

ConvertStringSecurityDescriptorToSecurityDescriptorW.ADVAPI32(?,00000E24), ref: 058B0847

Memory Dump Source

Source File: 00000001.00000002.4073365684.00000000058B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 058B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_58b0000_AnubisSearchFree.jbxd

Similarity

API ID: DescriptorSecurity$ConvertString
String ID:
API String ID: 3907675253-0
Opcode ID: a7a75a67530795c97e87967a6b632fa200fdce80316d1e79bd8a3af777dd1837
Instruction ID: d9e63c1bf5f6ee89998f1d0c15ea1d0dd97cd2608ba5a568a1f8bc4f4868194c
Opcode Fuzzy Hash: a7a75a67530795c97e87967a6b632fa200fdce80316d1e79bd8a3af777dd1837
Instruction Fuzzy Hash: 1421C272A00204AFEB20DF65DD45FABBBACEF04614F04846AED45CB741D374E948CAB2

Uniqueness

Uniqueness Score: -1.00%

Function 058B2640 Relevance: 1.6, APIs: 1, Instructions: 76COMMON

Download Yara Rule

APIs

LookupPrivilegeValueW.ADVAPI32(?,?,?), ref: 058B26C6

Memory Dump Source

Source File: 00000001.00000002.4073365684.00000000058B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 058B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_58b0000_AnubisSearchFree.jbxd

Similarity

API ID: LookupPrivilegeValue
String ID:
API String ID: 3899507212-0
Opcode ID: e2ff5a6ee77175a3d17dd764175209a3e4085caf19e43445cd9818263f5f5ca8
Instruction ID: 756c6624e9843df91f8f3527feb759aacb5dde631de0b249fc2cd776fd236e2a
Opcode Fuzzy Hash: e2ff5a6ee77175a3d17dd764175209a3e4085caf19e43445cd9818263f5f5ca8
Instruction Fuzzy Hash: 0621A4B65093805FE712CB25DC55BA2BFA8AF47224F0C84DAED49CF253D265E808CB71

Uniqueness

Uniqueness Score: -1.00%

Function 058B06CA Relevance: 1.6, APIs: 1, Instructions: 75registryCOMMON

Download Yara Rule

APIs

RegQueryValueExW.KERNELBASE(?,00000E24,2662C61B,00000000,00000000,00000000,00000000), ref: 058B075C

Memory Dump Source

Source File: 00000001.00000002.4073365684.00000000058B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 058B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_58b0000_AnubisSearchFree.jbxd

Similarity

API ID: QueryValue
String ID:
API String ID: 3660427363-0
Opcode ID: dc4b6999fb7bde62e1984f2c2441a111dcc40af6ad97b5f16df9facc5d3a0ae0
Instruction ID: 94215148e14e11562ebb6aad70c8f310771b9a44029f16b16946dd4effdb3370
Opcode Fuzzy Hash: dc4b6999fb7bde62e1984f2c2441a111dcc40af6ad97b5f16df9facc5d3a0ae0
Instruction Fuzzy Hash: BF218C72505740AFE722CB15DC88FA3FBFCEF45210F08849AE945CB252D365E949CB65

Uniqueness

Uniqueness Score: -1.00%

Function 0175AB52 Relevance: 1.6, APIs: 1, Instructions: 74registryCOMMON

Download Yara Rule

APIs

RegOpenKeyExW.KERNELBASE(?,00000E24), ref: 0175ABD1

Memory Dump Source

Source File: 00000001.00000002.4071022616.000000000175A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0175A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_175a000_AnubisSearchFree.jbxd

Similarity

API ID: Open
String ID:
API String ID: 71445658-0
Opcode ID: 98338694d0cc6dbd0b6d74c1529a1a4fe6be47c2265c369c48393b0d9e9b1f8a
Instruction ID: 9efb1600ba596bad3f55b874f4efa1d085b319b25bb4f54e586eeda11fa47498
Opcode Fuzzy Hash: 98338694d0cc6dbd0b6d74c1529a1a4fe6be47c2265c369c48393b0d9e9b1f8a
Instruction Fuzzy Hash: 4D21CF72500604AFE7219F55CD84FABFBECEF18214F04856AED458B642D774E54C8AB2

Uniqueness

Uniqueness Score: -1.00%

Function 058B0006 Relevance: 1.6, APIs: 1, Instructions: 74fileCOMMON

Download Yara Rule

APIs

ReadFile.KERNELBASE(?,00000E24,2662C61B,00000000,00000000,00000000,00000000), ref: 058B0091

Memory Dump Source

Source File: 00000001.00000002.4073365684.00000000058B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 058B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_58b0000_AnubisSearchFree.jbxd

Similarity

API ID: FileRead
String ID:
API String ID: 2738559852-0
Opcode ID: a23edaaf32d146277144c87fae3cc31d200e17ed741940fe61e5dfd593e79e93
Instruction ID: fa0ecafc72d6fa636094383f243585fe04987e680dd19036caed75bf5d193c0e
Opcode Fuzzy Hash: a23edaaf32d146277144c87fae3cc31d200e17ed741940fe61e5dfd593e79e93
Instruction Fuzzy Hash: D521B071505380AFE722CF55CC84FA7BBB8EF46210F08849AE984DB252D365A908CB72

Uniqueness

Uniqueness Score: -1.00%

Function 058B2B17 Relevance: 1.6, APIs: 1, Instructions: 73COMMON

Download Yara Rule

APIs

SetProcessWorkingSetSize.KERNEL32(?,00000E24,2662C61B,00000000,00000000,00000000,00000000), ref: 058B2B93

Memory Dump Source

Source File: 00000001.00000002.4073365684.00000000058B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 058B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_58b0000_AnubisSearchFree.jbxd

Similarity

API ID: ProcessSizeWorking
String ID:
API String ID: 3584180929-0
Opcode ID: 4f6c44ae7cc9c94682ae1047841f6f0259d3d294176af65856ec10abffc763d1
Instruction ID: 707f933acf91ae3ddd2d471fbf15a7af72b481028f1917ab8cfacfb7356f2688
Opcode Fuzzy Hash: 4f6c44ae7cc9c94682ae1047841f6f0259d3d294176af65856ec10abffc763d1
Instruction Fuzzy Hash: 5C21D471509380AFE722CF25CC94FE6BFB8EF46210F08849AE945DB252D374A948CB75

Uniqueness

Uniqueness Score: -1.00%

Function 058B2A33 Relevance: 1.6, APIs: 1, Instructions: 73COMMON

Download Yara Rule

APIs

GetProcessWorkingSetSize.KERNEL32(?,00000E24,2662C61B,00000000,00000000,00000000,00000000), ref: 058B2AAF

Memory Dump Source

Source File: 00000001.00000002.4073365684.00000000058B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 058B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_58b0000_AnubisSearchFree.jbxd

Similarity

API ID: ProcessSizeWorking
String ID:
API String ID: 3584180929-0
Opcode ID: 4f6c44ae7cc9c94682ae1047841f6f0259d3d294176af65856ec10abffc763d1
Instruction ID: 25fac438dc12a226e8a5ec44aba8297f6b1374a7f486a41b74e6f4db1e4c5c89
Opcode Fuzzy Hash: 4f6c44ae7cc9c94682ae1047841f6f0259d3d294176af65856ec10abffc763d1
Instruction Fuzzy Hash: 2921D7B15053806FE721CB15CC94FA6BFBCEF45210F08849AE945CB252D374A948CB71

Uniqueness

Uniqueness Score: -1.00%

Function 0175A646 Relevance: 1.6, APIs: 1, Instructions: 72synchronizationCOMMON

Download Yara Rule

APIs

CreateMutexW.KERNELBASE(?,?), ref: 0175A6B9

Memory Dump Source

Source File: 00000001.00000002.4071022616.000000000175A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0175A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_175a000_AnubisSearchFree.jbxd

Similarity

API ID: CreateMutex
String ID:
API String ID: 1964310414-0
Opcode ID: 01dd3ffc5c9f191e24d7285e3af895bd40bb7bebfe8e0abae678129c15728f36
Instruction ID: bd0010da84c1727ff02aa9ba8202fe684859a8fcdef3b292e0674ed7120fdbab
Opcode Fuzzy Hash: 01dd3ffc5c9f191e24d7285e3af895bd40bb7bebfe8e0abae678129c15728f36
Instruction Fuzzy Hash: CA21D4716002009FE760CF69CD85BA6FBE8EF04310F048869ED49CB741D7B1E909CA72

Uniqueness

Uniqueness Score: -1.00%

Function 058B0BFD Relevance: 1.6, APIs: 1, Instructions: 72COMMON

Download Yara Rule

APIs

shutdown.WS2_32(?,00000E24,2662C61B,00000000,00000000,00000000,00000000), ref: 058B0C80

Memory Dump Source

Source File: 00000001.00000002.4073365684.00000000058B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 058B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_58b0000_AnubisSearchFree.jbxd

Similarity

API ID: shutdown
String ID:
API String ID: 2510479042-0
Opcode ID: e1a03a099fd7117dd3474740b45124e6d8ec4ec13021486ef928305c14b7c7d5
Instruction ID: 058994d80b8e20bfc3606acc928da1668be8bc3893864840e3ecb7d8350653f8
Opcode Fuzzy Hash: e1a03a099fd7117dd3474740b45124e6d8ec4ec13021486ef928305c14b7c7d5
Instruction Fuzzy Hash: E82195B1509384AFD7128B15DC54BA6BFB8EF46210F0884DAE984DB252C368A548CBB2

Uniqueness

Uniqueness Score: -1.00%

Function 0175A392 Relevance: 1.6, APIs: 1, Instructions: 69registryCOMMON

Download Yara Rule

APIs

RegQueryValueExW.KERNELBASE(?,00000E24,2662C61B,00000000,00000000,00000000,00000000), ref: 0175A40C

Memory Dump Source

Source File: 00000001.00000002.4071022616.000000000175A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0175A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_175a000_AnubisSearchFree.jbxd

Similarity

API ID: QueryValue
String ID:
API String ID: 3660427363-0
Opcode ID: 55bcb0ac26c916d2adc1d6e7eda8eb0f706f3a0b0ec0e97a25c9a20b6c013a80
Instruction ID: b15b0da932dab7bf43f0aa79b77fd2d3d019c5c602b43d809abc6eefe7db064a
Opcode Fuzzy Hash: 55bcb0ac26c916d2adc1d6e7eda8eb0f706f3a0b0ec0e97a25c9a20b6c013a80
Instruction Fuzzy Hash: 40219075600604AFE761CF59CC84FA6FBECEF04614F08856AED45CB652D3B0E949CAB2

Uniqueness

Uniqueness Score: -1.00%

Function 058B24AB Relevance: 1.6, APIs: 1, Instructions: 69COMMON

Download Yara Rule

APIs

ioctlsocket.WS2_32(?,00000E24,2662C61B,00000000,00000000,00000000,00000000), ref: 058B2527

Memory Dump Source

Source File: 00000001.00000002.4073365684.00000000058B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 058B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_58b0000_AnubisSearchFree.jbxd

Similarity

API ID: ioctlsocket
String ID:
API String ID: 3577187118-0
Opcode ID: eff1dc9b1af2acc8b488050ada7386819b227990258690296ff72bcf2dc7b8cb
Instruction ID: 00ca7bd2c3f4f3bee16b7aa32100be958079cf12bc3797fc6e0ca3402591eed3
Opcode Fuzzy Hash: eff1dc9b1af2acc8b488050ada7386819b227990258690296ff72bcf2dc7b8cb
Instruction Fuzzy Hash: EF21C3715093806FE722CF15CC94FA6BFB8EF46210F08849AE949DB252C374A508CBB2

Uniqueness

Uniqueness Score: -1.00%

Function 0175A710 Relevance: 1.6, APIs: 1, Instructions: 68COMMON

Download Yara Rule

APIs

FindCloseChangeNotification.KERNELBASE(?), ref: 0175A780

Memory Dump Source

Source File: 00000001.00000002.4071022616.000000000175A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0175A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_175a000_AnubisSearchFree.jbxd

Similarity

API ID: ChangeCloseFindNotification
String ID:
API String ID: 2591292051-0
Opcode ID: d532331a4c4c67afa9a7095928e4b70de02e2443bc7d1365c8eaa693e6a3f0eb
Instruction ID: 04023f6d86f68aa3d40ec25549333fe18e294d2d7cc4c02cf889b0c865a8d2fa
Opcode Fuzzy Hash: d532331a4c4c67afa9a7095928e4b70de02e2443bc7d1365c8eaa693e6a3f0eb
Instruction Fuzzy Hash: D8213AB55043809FD702CF25DC85792BFB4EF02320F0884EBEC858B653D2759909CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 058B118E Relevance: 1.6, APIs: 1, Instructions: 67networkCOMMON

Download Yara Rule

APIs

WSAConnect.WS2_32(?,?,?,?,?,?,?), ref: 058B120A

Memory Dump Source

Source File: 00000001.00000002.4073365684.00000000058B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 058B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_58b0000_AnubisSearchFree.jbxd

Similarity

API ID: Connect
String ID:
API String ID: 3144859779-0
Opcode ID: 560f6967d2a8a87681d28053251d102a90fd6ca0766ee93e909a9fcad420a677
Instruction ID: e6df4dad2c81301d1eb3b1c467bbddd72398cd8541943f31a20e67fdcf154871
Opcode Fuzzy Hash: 560f6967d2a8a87681d28053251d102a90fd6ca0766ee93e909a9fcad420a677
Instruction Fuzzy Hash: 5921C271508380AFDB228F55DC44BA2BFF8EF06210F08849AED85CB263D275A818DB61

Uniqueness

Uniqueness Score: -1.00%

Function 058B0986 Relevance: 1.6, APIs: 1, Instructions: 67fileCOMMON

Download Yara Rule

APIs

MapViewOfFile.KERNELBASE ref: 058B09FA

Memory Dump Source

Source File: 00000001.00000002.4073365684.00000000058B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 058B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_58b0000_AnubisSearchFree.jbxd

Similarity

API ID: FileView
String ID:
API String ID: 3314676101-0
Opcode ID: 0494a2370bc094d1877cfde440950c31c0d41356c02482099c81444a193158c4
Instruction ID: 60fcf4e69cd95860abbc17e4a5b58a4b0664f5986aebb6cb16ccf08e566d1451
Opcode Fuzzy Hash: 0494a2370bc094d1877cfde440950c31c0d41356c02482099c81444a193158c4
Instruction Fuzzy Hash: 8D21C371500204EFE721CF55DD85FA6FBE8EF09224F048459E9498B751D375E548CB72

Uniqueness

Uniqueness Score: -1.00%

Function 058B029A Relevance: 1.6, APIs: 1, Instructions: 67networkCOMMON

Download Yara Rule

APIs

WSASocketW.WS2_32(?,?,?,?,?), ref: 058B0306

Memory Dump Source

Source File: 00000001.00000002.4073365684.00000000058B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 058B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_58b0000_AnubisSearchFree.jbxd

Similarity

API ID: Socket
String ID:
API String ID: 38366605-0
Opcode ID: a8530afef19d6d377b2e1a23db905f8138d7e35b03af8378079edb69ef0c9383
Instruction ID: 58a253725d4c8b492e72f9475db7b936f4e744c49d63a228a838fb23e00e48c7
Opcode Fuzzy Hash: a8530afef19d6d377b2e1a23db905f8138d7e35b03af8378079edb69ef0c9383
Instruction Fuzzy Hash: 3821CF71500200AFEB21CF55CD49BA6FBE8EF08224F04885AED898B751D3B5E548CB72

Uniqueness

Uniqueness Score: -1.00%

Function 058B1526 Relevance: 1.6, APIs: 1, Instructions: 66libraryCOMMON

Download Yara Rule

APIs

LoadLibraryA.KERNELBASE(?,00000E24), ref: 058B15AF

Memory Dump Source

Source File: 00000001.00000002.4073365684.00000000058B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 058B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_58b0000_AnubisSearchFree.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: a62a0906560438bcaba8ba82ed0fcc7802a0ba09d1ca41f2e9b8ff0e6735380e
Instruction ID: ab5b13a8331e99bdac7cb7cb9fac4e7465601d2439629be2e2aa28f6e52f2f19
Opcode Fuzzy Hash: a62a0906560438bcaba8ba82ed0fcc7802a0ba09d1ca41f2e9b8ff0e6735380e
Instruction Fuzzy Hash: F011E4715043406FE721CB15DC85FE6FBB8EF45320F08809AF9488B292C2A4A948CB62

Uniqueness

Uniqueness Score: -1.00%

Function 0175A486 Relevance: 1.6, APIs: 1, Instructions: 65registryCOMMON

Download Yara Rule

APIs

RegSetValueExW.KERNELBASE(?,00000E24,2662C61B,00000000,00000000,00000000,00000000), ref: 0175A4F8

Memory Dump Source

Source File: 00000001.00000002.4071022616.000000000175A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0175A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_175a000_AnubisSearchFree.jbxd

Similarity

API ID: Value
String ID:
API String ID: 3702945584-0
Opcode ID: 57bfb65cc4f3c09b22aa9c2a704401355b1f09837c3ed9926afdba681f79c6de
Instruction ID: f8def571968a1468c4a96183cbb11453249b3d72a177630737169875e570976b
Opcode Fuzzy Hash: 57bfb65cc4f3c09b22aa9c2a704401355b1f09837c3ed9926afdba681f79c6de
Instruction Fuzzy Hash: 7711D3B2600600AFE7618E19CC45FA7FBECEF04614F08856AED45CB742D3B0E548CAB2

Uniqueness

Uniqueness Score: -1.00%

Function 058B06EA Relevance: 1.6, APIs: 1, Instructions: 65registryCOMMON

Download Yara Rule

APIs

RegQueryValueExW.KERNELBASE(?,00000E24,2662C61B,00000000,00000000,00000000,00000000), ref: 058B075C

Memory Dump Source

Source File: 00000001.00000002.4073365684.00000000058B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 058B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_58b0000_AnubisSearchFree.jbxd

Similarity

API ID: QueryValue
String ID:
API String ID: 3660427363-0
Opcode ID: e00eef057a85af78950b01df82a6b55d997eb624423e4b5f419b7b63a09cc06c
Instruction ID: 9b59c011d1bcffa24373d8087c9685fcd924dbd5ce46f58629663556b1e36069
Opcode Fuzzy Hash: e00eef057a85af78950b01df82a6b55d997eb624423e4b5f419b7b63a09cc06c
Instruction Fuzzy Hash: 21119D72600604AEE721CE15DC88FE7F7ECEF04614F08845AED46CA752D3A1E949CEB6

Uniqueness

Uniqueness Score: -1.00%

Function 058B0EF2 Relevance: 1.6, APIs: 1, Instructions: 64timeCOMMON

Download Yara Rule

APIs

GetProcessTimes.KERNELBASE(?,00000E24,2662C61B,00000000,00000000,00000000,00000000), ref: 058B0F51

Memory Dump Source

Source File: 00000001.00000002.4073365684.00000000058B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 058B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_58b0000_AnubisSearchFree.jbxd

Similarity

API ID: ProcessTimes
String ID:
API String ID: 1995159646-0
Opcode ID: 6b9cdf5b3b90fc8347c017d6e67cac5da12161cec422f9681158d9e981122c72
Instruction ID: 33ad75695b0865fd02b6cd7b7cc6d5a8b8c739b4d036fd64277126ab2a28c388
Opcode Fuzzy Hash: 6b9cdf5b3b90fc8347c017d6e67cac5da12161cec422f9681158d9e981122c72
Instruction Fuzzy Hash: 7711B171600200AFEB218F55DD85BA7B7A8EF04214F04845AED45CA791D374E9488BB2

Uniqueness

Uniqueness Score: -1.00%

Function 058B0626 Relevance: 1.6, APIs: 1, Instructions: 62COMMON

Download Yara Rule

APIs

GetComputerNameW.KERNEL32(?,00000E24,?,?), ref: 058B06A2

Memory Dump Source

Source File: 00000001.00000002.4073365684.00000000058B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 058B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_58b0000_AnubisSearchFree.jbxd

Similarity

API ID: ComputerName
String ID:
API String ID: 3545744682-0
Opcode ID: 99d7b4b0023b3b6f2f6e27883785505ceed5d0e6e1b8c41f6c18b7b65ba79704
Instruction ID: bbabec3b0bcadc76d9ea706afe8337b0ab2f5642b3524ec18b0db1151f4f7819
Opcode Fuzzy Hash: 99d7b4b0023b3b6f2f6e27883785505ceed5d0e6e1b8c41f6c18b7b65ba79704
Instruction Fuzzy Hash: D811C8B1505340AFD3118B16CC41F76BFB8EFC6620F15819AEC489B782D625B919CBB2

Uniqueness

Uniqueness Score: -1.00%

Function 058B2B3A Relevance: 1.6, APIs: 1, Instructions: 62COMMON

Download Yara Rule

APIs

SetProcessWorkingSetSize.KERNEL32(?,00000E24,2662C61B,00000000,00000000,00000000,00000000), ref: 058B2B93

Memory Dump Source

Source File: 00000001.00000002.4073365684.00000000058B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 058B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_58b0000_AnubisSearchFree.jbxd

Similarity

API ID: ProcessSizeWorking
String ID:
API String ID: 3584180929-0
Opcode ID: 22f07bb89717b5a1a9a968980ab02d410addba884d1f682dd183c76854e9d6ad
Instruction ID: f1143eaf9a610abdabb5d74828c93ddc8b278a3bfd9f6105ac9fc18c68caf134
Opcode Fuzzy Hash: 22f07bb89717b5a1a9a968980ab02d410addba884d1f682dd183c76854e9d6ad
Instruction Fuzzy Hash: 8211E275600204AFF720CF15CC84BE6B7ACEF05224F08846AED09CB741D774E9488AB6

Uniqueness

Uniqueness Score: -1.00%

Function 058B2A56 Relevance: 1.6, APIs: 1, Instructions: 62COMMON

Download Yara Rule

APIs

GetProcessWorkingSetSize.KERNEL32(?,00000E24,2662C61B,00000000,00000000,00000000,00000000), ref: 058B2AAF

Memory Dump Source

Source File: 00000001.00000002.4073365684.00000000058B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 058B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_58b0000_AnubisSearchFree.jbxd

Similarity

API ID: ProcessSizeWorking
String ID:
API String ID: 3584180929-0
Opcode ID: 22f07bb89717b5a1a9a968980ab02d410addba884d1f682dd183c76854e9d6ad
Instruction ID: 6caf7eacd55c9104c3888e9a2c6aad44b6bb93fb6ac6ce333bf375c81d5e2b28
Opcode Fuzzy Hash: 22f07bb89717b5a1a9a968980ab02d410addba884d1f682dd183c76854e9d6ad
Instruction Fuzzy Hash: CF1108B56002009FE720CF15CC84BE6B7ACEF05214F08846AED45CB741D3B4E9488AB5

Uniqueness

Uniqueness Score: -1.00%

Function 0175B2A7 Relevance: 1.6, APIs: 1, Instructions: 61COMMON

Download Yara Rule

APIs

DuplicateHandle.KERNELBASE(?,?,?,?,?,?,?), ref: 0175B312

Memory Dump Source

Source File: 00000001.00000002.4071022616.000000000175A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0175A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_175a000_AnubisSearchFree.jbxd

Similarity

API ID: DuplicateHandle
String ID:
API String ID: 3793708945-0
Opcode ID: dbc24cce0918d0387194a76749087af3a89023b6d09051ced9fe7e49bcf509b3
Instruction ID: 31c3a7d3bddfc45add589955d7b8f45b0f5085cc4b33d48d3cdc13110357c322
Opcode Fuzzy Hash: dbc24cce0918d0387194a76749087af3a89023b6d09051ced9fe7e49bcf509b3
Instruction Fuzzy Hash: 25118171409780AFDB228F55DC44B62FFF4EF4A310F0888DAED858B563D275A518DB62

Uniqueness

Uniqueness Score: -1.00%

Function 058B297A Relevance: 1.6, APIs: 1, Instructions: 61COMMON

Download Yara Rule

APIs

GetExitCodeProcess.KERNELBASE(?,00000E24,2662C61B,00000000,00000000,00000000,00000000), ref: 058B29D0

Memory Dump Source

Source File: 00000001.00000002.4073365684.00000000058B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 058B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_58b0000_AnubisSearchFree.jbxd

Similarity

API ID: CodeExitProcess
String ID:
API String ID: 3861947596-0
Opcode ID: b9500963382c2a3b9f5701a6cbeb10db936ce08f51b0a0efff1dab0a7a281de9
Instruction ID: ec18bfee3b49757f4e21cac3c593fee6cc8b588786bfab5a0366396783e46851
Opcode Fuzzy Hash: b9500963382c2a3b9f5701a6cbeb10db936ce08f51b0a0efff1dab0a7a281de9
Instruction Fuzzy Hash: 5C11E775600204AFE720CF15DC85FF6B7ACDF45224F04846AED49DB741D3B4E9488AB6

Uniqueness

Uniqueness Score: -1.00%

Function 058B0032 Relevance: 1.6, APIs: 1, Instructions: 60fileCOMMON

Download Yara Rule

APIs

ReadFile.KERNELBASE(?,00000E24,2662C61B,00000000,00000000,00000000,00000000), ref: 058B0091

Memory Dump Source

Source File: 00000001.00000002.4073365684.00000000058B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 058B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_58b0000_AnubisSearchFree.jbxd

Similarity

API ID: FileRead
String ID:
API String ID: 2738559852-0
Opcode ID: 22bdf3373c066fef7a4684f362d24eed80da229bc70ee1e8ba7e72542e018c67
Instruction ID: f61b3905609d765dbae755c2bb8a7c36eec1f1c13d4f4069428184a8f19c29c4
Opcode Fuzzy Hash: 22bdf3373c066fef7a4684f362d24eed80da229bc70ee1e8ba7e72542e018c67
Instruction Fuzzy Hash: 1611DD72500204AFEB21CF55CD84FA6BBA8EF04224F08885AEE49CA641D375A5088BB2

Uniqueness

Uniqueness Score: -1.00%

Function 058B24CE Relevance: 1.6, APIs: 1, Instructions: 58COMMON

Download Yara Rule

APIs

ioctlsocket.WS2_32(?,00000E24,2662C61B,00000000,00000000,00000000,00000000), ref: 058B2527

Memory Dump Source

Source File: 00000001.00000002.4073365684.00000000058B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 058B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_58b0000_AnubisSearchFree.jbxd

Similarity

API ID: ioctlsocket
String ID:
API String ID: 3577187118-0
Opcode ID: 9e89a626c974f289e5599f878740746ee1324edc7d6ac6f392655847dd6881ee
Instruction ID: 37ec6a0fbba7567f9b11e4d6d55b8dffdae24247c247eb9add473d19f9348b46
Opcode Fuzzy Hash: 9e89a626c974f289e5599f878740746ee1324edc7d6ac6f392655847dd6881ee
Instruction Fuzzy Hash: 1E11C175500204AEEB61CF55CC84BE6F7ACEF44724F08845AED49CB741C3B4A6088AB6

Uniqueness

Uniqueness Score: -1.00%

Function 0175AA81 Relevance: 1.6, APIs: 1, Instructions: 57comCOMMON

Download Yara Rule

APIs

OleInitialize.OLE32(?), ref: 0175AAE0

Memory Dump Source

Source File: 00000001.00000002.4071022616.000000000175A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0175A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_175a000_AnubisSearchFree.jbxd

Similarity

API ID: Initialize
String ID:
API String ID: 2538663250-0
Opcode ID: 8562e5a9b2e0b795258a604aee13b7a20fd9c94502ea24cf75bf88a893f58812
Instruction ID: 928561fdbe65d6b99536b2e54ad8d87653fa2270bb3b2e49832f27dd908fa54b
Opcode Fuzzy Hash: 8562e5a9b2e0b795258a604aee13b7a20fd9c94502ea24cf75bf88a893f58812
Instruction Fuzzy Hash: 541186715493C05FDB528B25DC54792BFB4DF47210F0888DAED848F153C2759558DBA2

Uniqueness

Uniqueness Score: -1.00%

Function 058B0C2A Relevance: 1.6, APIs: 1, Instructions: 57COMMON

Download Yara Rule

APIs

shutdown.WS2_32(?,00000E24,2662C61B,00000000,00000000,00000000,00000000), ref: 058B0C80

Memory Dump Source

Source File: 00000001.00000002.4073365684.00000000058B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 058B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_58b0000_AnubisSearchFree.jbxd

Similarity

API ID: shutdown
String ID:
API String ID: 2510479042-0
Opcode ID: 25f2f214e13461230a49d1927509640b338009abf28b9669de1ebfd2b012f290
Instruction ID: a3553d7945ba6bc3120e12da2407dd7c10043d721484a5d988fed95811585339
Opcode Fuzzy Hash: 25f2f214e13461230a49d1927509640b338009abf28b9669de1ebfd2b012f290
Instruction Fuzzy Hash: 4C11C271600204AEEB21CF15DD94BE6BBECEF45724F088496ED48DB741D3B4E9488AB6

Uniqueness

Uniqueness Score: -1.00%

Function 0175A2D2 Relevance: 1.6, APIs: 1, Instructions: 56COMMON

Download Yara Rule

APIs

SetErrorMode.KERNELBASE(?), ref: 0175A330

Memory Dump Source

Source File: 00000001.00000002.4071022616.000000000175A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0175A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_175a000_AnubisSearchFree.jbxd

Similarity

API ID: ErrorMode
String ID:
API String ID: 2340568224-0
Opcode ID: 68eb95076b0c1582c3c756a0aa9704c3a2464d2049867c1bd7a9d2d853ac77ba
Instruction ID: f1d64678136ba869922f97d038d7582d3f34acefdf1922d9bcaaaab2872a5a38
Opcode Fuzzy Hash: 68eb95076b0c1582c3c756a0aa9704c3a2464d2049867c1bd7a9d2d853ac77ba
Instruction Fuzzy Hash: 751182714093C06FDB138B15DC54662BFB4DF47224F0880DBED848B263C275A918D772

Uniqueness

Uniqueness Score: -1.00%

Function 058B1546 Relevance: 1.6, APIs: 1, Instructions: 56libraryCOMMON

Download Yara Rule

APIs

LoadLibraryA.KERNELBASE(?,00000E24), ref: 058B15AF

Memory Dump Source

Source File: 00000001.00000002.4073365684.00000000058B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 058B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_58b0000_AnubisSearchFree.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: af096adeb94613d463430d95281ed4826a48ed4545f1c58f30502b8ba6e8e0d6
Instruction ID: ba2428fe157c666eed84bb87026122da9ef5ab5e8a22f82e10aaa272597c77bb
Opcode Fuzzy Hash: af096adeb94613d463430d95281ed4826a48ed4545f1c58f30502b8ba6e8e0d6
Instruction Fuzzy Hash: DB11A071600204AEE720CB15DD85FF6B7A8DB04724F188059ED098A781D2A4AA48CAA6

Uniqueness

Uniqueness Score: -1.00%

Function 058B25AA Relevance: 1.6, APIs: 1, Instructions: 55COMMON

Download Yara Rule

APIs

select.WS2_32(?,?,?,?,?), ref: 058B2600

Memory Dump Source

Source File: 00000001.00000002.4073365684.00000000058B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 058B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_58b0000_AnubisSearchFree.jbxd

Similarity

API ID: select
String ID:
API String ID: 1274211008-0
Opcode ID: c08b1f9348c27b0adc503909fdab74c3b83e4dd8986f40510485ea79e7758909
Instruction ID: fb6e7e30dfc73ed4730590b8a4635470630c5a4030338353fb42fb44d4fe0c41
Opcode Fuzzy Hash: c08b1f9348c27b0adc503909fdab74c3b83e4dd8986f40510485ea79e7758909
Instruction Fuzzy Hash: 0B115B756042049FEB60CF19D884BA2F7E9EF05610F0885AADD4ACB752D3B4E948CB62

Uniqueness

Uniqueness Score: -1.00%

Function 0175A078 Relevance: 1.6, APIs: 1, Instructions: 54networkCOMMON

Download Yara Rule

APIs

recv.WS2_32(?,?,?,?), ref: 0175A0D5

Memory Dump Source

Source File: 00000001.00000002.4071022616.000000000175A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0175A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_175a000_AnubisSearchFree.jbxd

Similarity

API ID: recv
String ID:
API String ID: 1507349165-0
Opcode ID: b4ef82dffafc9db44d578b24d42763971d87f7549f01920716cf3e8dde84e7a2
Instruction ID: c6acafce8283562513436dedee16eff05708173c59c17e758e2261fa9df17687
Opcode Fuzzy Hash: b4ef82dffafc9db44d578b24d42763971d87f7549f01920716cf3e8dde84e7a2
Instruction Fuzzy Hash: DB1194715097809FDB22CF15DC44B52FFB4EF46214F0884AAED848B553C275A518CB62

Uniqueness

Uniqueness Score: -1.00%

Function 058B267E Relevance: 1.6, APIs: 1, Instructions: 53COMMON

Download Yara Rule

APIs

LookupPrivilegeValueW.ADVAPI32(?,?,?), ref: 058B26C6

Memory Dump Source

Source File: 00000001.00000002.4073365684.00000000058B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 058B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_58b0000_AnubisSearchFree.jbxd

Similarity

API ID: LookupPrivilegeValue
String ID:
API String ID: 3899507212-0
Opcode ID: e9edf6d6c6a74d55b997405d686a3227a24b35cd7cf378e03ed1d631fd97d74a
Instruction ID: 26cc2ba338985d41beda37a3c22d8d96ea6d8d6d73e82d49fe361c699f79232e
Opcode Fuzzy Hash: e9edf6d6c6a74d55b997405d686a3227a24b35cd7cf378e03ed1d631fd97d74a
Instruction Fuzzy Hash: 4211E5756002008FEB10DF19CC85BA2FBECEF15220F0884AADD06CB751D2B0E808CB72

Uniqueness

Uniqueness Score: -1.00%

Function 0175BC9A Relevance: 1.6, APIs: 1, Instructions: 52COMMON

Download Yara Rule

APIs

GetFileType.KERNELBASE(?,00000E24,2662C61B,00000000,00000000,00000000,00000000), ref: 0175BCED

Memory Dump Source

Source File: 00000001.00000002.4071022616.000000000175A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0175A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_175a000_AnubisSearchFree.jbxd

Similarity

API ID: FileType
String ID:
API String ID: 3081899298-0
Opcode ID: 07d31e9c4b3aba4f800c3bc915523a1edbc279ccdc4de24bc500fe2b4ff60630
Instruction ID: e3296ef492af0c6a58c19e4783e606f343e9d9273918c1306f1f81e0b2268e3c
Opcode Fuzzy Hash: 07d31e9c4b3aba4f800c3bc915523a1edbc279ccdc4de24bc500fe2b4ff60630
Instruction Fuzzy Hash: B601D271600304AEE761CB1ADD85BF6F7A8DF45724F18C09AED088B742D7B4E5488AB6

Uniqueness

Uniqueness Score: -1.00%

Function 0175A9E4 Relevance: 1.6, APIs: 1, Instructions: 51COMMON

Download Yara Rule

APIs

WaitForInputIdle.USER32(?,?), ref: 0175AA3B

Memory Dump Source

Source File: 00000001.00000002.4071022616.000000000175A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0175A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_175a000_AnubisSearchFree.jbxd

Similarity

API ID: IdleInputWait
String ID:
API String ID: 2200289081-0
Opcode ID: 3ab11367f7d80cf91697b284b3b31d3619d1295f703cec2415161fc3cc4a1a33
Instruction ID: 89991b7f1ab3aecec77673c6b08812b88032a7f22bf0cbb0f04f1619b66016ab
Opcode Fuzzy Hash: 3ab11367f7d80cf91697b284b3b31d3619d1295f703cec2415161fc3cc4a1a33
Instruction Fuzzy Hash: 0711A3715097809FDB128F15DD84B52FFB4EF46220F0884EAED858F263D275A908CB62

Uniqueness

Uniqueness Score: -1.00%

Function 058B11BE Relevance: 1.5, APIs: 1, Instructions: 49networkCOMMON

Download Yara Rule

APIs

WSAConnect.WS2_32(?,?,?,?,?,?,?), ref: 058B120A

Memory Dump Source

Source File: 00000001.00000002.4073365684.00000000058B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 058B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_58b0000_AnubisSearchFree.jbxd

Similarity

API ID: Connect
String ID:
API String ID: 3144859779-0
Opcode ID: 608d0cc777f54f9343a515f5009d1f5c9199efb7ae3a54e5937ed7fa1a5467d8
Instruction ID: 26c8fb0ee5e50f41c63caeaeb676b7d8594f5dafecb8173a4ba14d7d16753ef8
Opcode Fuzzy Hash: 608d0cc777f54f9343a515f5009d1f5c9199efb7ae3a54e5937ed7fa1a5467d8
Instruction Fuzzy Hash: FB115E715006449FEB20CF55D888BA6FBE9EF08610F08855ADD45CB722D375E918CF62

Uniqueness

Uniqueness Score: -1.00%

Function 058B12BA Relevance: 1.5, APIs: 1, Instructions: 47COMMON

Download Yara Rule

APIs

GetVolumeInformationA.KERNELBASE(?,00000E24,?,?), ref: 058B130A

Memory Dump Source

Source File: 00000001.00000002.4073365684.00000000058B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 058B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_58b0000_AnubisSearchFree.jbxd

Similarity

API ID: InformationVolume
String ID:
API String ID: 2039140958-0
Opcode ID: b5ab86e5ad830844f23b94cc496b2092ce1f8a4374578594bafd90450a9bbbad
Instruction ID: 5640930dacd71b24c35788b8d5d25bba25bc5f2c0201b26f06cae42be946759c
Opcode Fuzzy Hash: b5ab86e5ad830844f23b94cc496b2092ce1f8a4374578594bafd90450a9bbbad
Instruction Fuzzy Hash: 8401B1B1A00200ABD310DF16CD85B76FBE8FB88A20F14811AEC089BB41D731F915CBE5

Uniqueness

Uniqueness Score: -1.00%

Function 0175B2CE Relevance: 1.5, APIs: 1, Instructions: 45COMMON

Download Yara Rule

APIs

DuplicateHandle.KERNELBASE(?,?,?,?,?,?,?), ref: 0175B312

Memory Dump Source

Source File: 00000001.00000002.4071022616.000000000175A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0175A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_175a000_AnubisSearchFree.jbxd

Similarity

API ID: DuplicateHandle
String ID:
API String ID: 3793708945-0
Opcode ID: 0c208a247c620efb471bc488965b42e42f96b0d50e60e82b8ff81e2c04b07780
Instruction ID: 52540b19cba5592e6712ecd2aa43b675f0496011e4abf8636c09b14b5ae49b01
Opcode Fuzzy Hash: 0c208a247c620efb471bc488965b42e42f96b0d50e60e82b8ff81e2c04b07780
Instruction Fuzzy Hash: BF01AD32900640DFDB618F55D884B62FBE1EF08720F08889AEE494B652D376E018CF62

Uniqueness

Uniqueness Score: -1.00%

Function 0175A74E Relevance: 1.5, APIs: 1, Instructions: 43COMMON

Download Yara Rule

APIs

FindCloseChangeNotification.KERNELBASE(?), ref: 0175A780

Memory Dump Source

Source File: 00000001.00000002.4071022616.000000000175A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0175A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_175a000_AnubisSearchFree.jbxd

Similarity

API ID: ChangeCloseFindNotification
String ID:
API String ID: 2591292051-0
Opcode ID: 00dd0dc9dc772a751d9ddc7f1b4cdc394652518aabf2841e86236b3725be0c65
Instruction ID: 9db125acec8ebadd2ce37b48a80e29cd5a2f6d61f51d5e54ed95d37349c6370d
Opcode Fuzzy Hash: 00dd0dc9dc772a751d9ddc7f1b4cdc394652518aabf2841e86236b3725be0c65
Instruction Fuzzy Hash: 3D01F7716002008FDB50CF19D985765FBE4DF05220F08C8BBDD468F746D2B5E404CEA2

Uniqueness

Uniqueness Score: -1.00%

Function 058B01FE Relevance: 1.5, APIs: 1, Instructions: 43registryCOMMON

Download Yara Rule

APIs

RegQueryValueExW.KERNELBASE(?,00000E24,?,?), ref: 058B024E

Memory Dump Source

Source File: 00000001.00000002.4073365684.00000000058B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 058B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_58b0000_AnubisSearchFree.jbxd

Similarity

API ID: QueryValue
String ID:
API String ID: 3660427363-0
Opcode ID: 82805237ae7c6c211b0b965330370e94fa30e86771dad334405eb6aab92f33ba
Instruction ID: 50e8a76673c44461eaccf6b3651de871da0fa0f2dba04d61e160cf3386c1728a
Opcode Fuzzy Hash: 82805237ae7c6c211b0b965330370e94fa30e86771dad334405eb6aab92f33ba
Instruction Fuzzy Hash: C001A271500600ABD310DF1ACD86B66FBE8FB88A20F14811AEC089BB41D771F955CBE5

Uniqueness

Uniqueness Score: -1.00%

Function 058B0652 Relevance: 1.5, APIs: 1, Instructions: 43COMMON

Download Yara Rule

APIs

GetComputerNameW.KERNEL32(?,00000E24,?,?), ref: 058B06A2

Memory Dump Source

Source File: 00000001.00000002.4073365684.00000000058B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 058B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_58b0000_AnubisSearchFree.jbxd

Similarity

API ID: ComputerName
String ID:
API String ID: 3545744682-0
Opcode ID: dea29f8d38687876cac211b83db62c4ade89ba0faa11720a7ad9df69692098f0
Instruction ID: e2e8072f3ef508550c9a58b09bad10649aeef73d6917d1a811742f76d246f4be
Opcode Fuzzy Hash: dea29f8d38687876cac211b83db62c4ade89ba0faa11720a7ad9df69692098f0
Instruction Fuzzy Hash: 4F01A271500600ABD310DF1ACD86B66FBE8FB88A20F148159EC089BB41D771F955CBE5

Uniqueness

Uniqueness Score: -1.00%

Function 0175AA06 Relevance: 1.5, APIs: 1, Instructions: 40COMMON

Download Yara Rule

APIs

WaitForInputIdle.USER32(?,?), ref: 0175AA3B

Memory Dump Source

Source File: 00000001.00000002.4071022616.000000000175A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0175A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_175a000_AnubisSearchFree.jbxd

Similarity

API ID: IdleInputWait
String ID:
API String ID: 2200289081-0
Opcode ID: bfbda7c666a565544549cc245061656e5d25117a8cfa5d5c1597ce5f35b53d1b
Instruction ID: b8011e8ea84f48a45f43d074e745b6672518864b3fd7af9b1a8ed9ca77a99b98
Opcode Fuzzy Hash: bfbda7c666a565544549cc245061656e5d25117a8cfa5d5c1597ce5f35b53d1b
Instruction Fuzzy Hash: EE01F2719002409FDB50CF09D984762FBE4EF04220F08C8AADD498F306D2B5E608CFA2

Uniqueness

Uniqueness Score: -1.00%

Function 0175AAAE Relevance: 1.5, APIs: 1, Instructions: 39comCOMMON

Download Yara Rule

APIs

OleInitialize.OLE32(?), ref: 0175AAE0

Memory Dump Source

Source File: 00000001.00000002.4071022616.000000000175A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0175A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_175a000_AnubisSearchFree.jbxd

Similarity

API ID: Initialize
String ID:
API String ID: 2538663250-0
Opcode ID: 082de4aca4ff95bfe0954330e80eb0b1a38b9fdb941c93c7ebc66413b8df86ee
Instruction ID: bb553c3500b11468ad8fa5a7d8683c63cb258e65d063ffdde8cb9b08a432c946
Opcode Fuzzy Hash: 082de4aca4ff95bfe0954330e80eb0b1a38b9fdb941c93c7ebc66413b8df86ee
Instruction Fuzzy Hash: EE01D671A002409FDB50CF19D984761FBE4DF45220F08C8EADD488F746D3B5E544CEA2

Uniqueness

Uniqueness Score: -1.00%

Function 0175A2FE Relevance: 1.5, APIs: 1, Instructions: 35COMMON

Download Yara Rule

APIs

SetErrorMode.KERNELBASE(?), ref: 0175A330

Memory Dump Source

Source File: 00000001.00000002.4071022616.000000000175A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0175A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_175a000_AnubisSearchFree.jbxd

Similarity

API ID: ErrorMode
String ID:
API String ID: 2340568224-0
Opcode ID: 982a321b369e0192dc16c9191a05dddf5a55fcd7554d96fc0de2af448d2675f9
Instruction ID: f729f2965c5e15b10b50b7d6686a779127e5df67ea52b003c282e19c1dea4a5d
Opcode Fuzzy Hash: 982a321b369e0192dc16c9191a05dddf5a55fcd7554d96fc0de2af448d2675f9
Instruction Fuzzy Hash: 24F08C75904644DFDB508F09E885761FBE4EF05624F08C1AADD494B753D2F5E408CEA2

Uniqueness

Uniqueness Score: -1.00%

Function 05D22108 Relevance: .1, Instructions: 60COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4073526489.0000000005D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 05D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_5d20000_AnubisSearchFree.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0c7dd444e576c280937fef14a90e981aca14dee84eedf878fe82b399e1526f3e
Instruction ID: de7cbb42f331d4b4594d2a5387f707ae0fd93b37803f36ff3e059244bb62ecd6
Opcode Fuzzy Hash: 0c7dd444e576c280937fef14a90e981aca14dee84eedf878fe82b399e1526f3e
Instruction Fuzzy Hash: 8311BAB5A08341AFD340CF19D880A5BFBE4FBD8664F04895EF998D7311D231E9048FA6

Uniqueness

Uniqueness Score: -1.00%

Function 01A60814 Relevance: .1, Instructions: 59COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4071522284.0000000001A60000.00000040.00000020.00020000.00000000.sdmp, Offset: 01A60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1a60000_AnubisSearchFree.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 74d78e703c7ef26ec3f86e2b536c8ec490989a7beda11bbde0a7e497633ec607
Instruction ID: 9c2db901604b4bbb256c93018ce11d9a8e7e500ab70154f42f92773c34758a6f
Opcode Fuzzy Hash: 74d78e703c7ef26ec3f86e2b536c8ec490989a7beda11bbde0a7e497633ec607
Instruction Fuzzy Hash: F611D631604280DFD716CB14D640B25BBE9EB99708F28C9ACF5495BB53C77BD853CA81

Uniqueness

Uniqueness Score: -1.00%

Function 01A607E4 Relevance: .1, Instructions: 58COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4071522284.0000000001A60000.00000040.00000020.00020000.00000000.sdmp, Offset: 01A60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1a60000_AnubisSearchFree.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 315e923695d7eec0855eff2c8057444a1e413171a8d47249f9aa16ee30244951
Instruction ID: 3700a7a3fb6609c8030f29ea3c51ee2e00fd8817dcf153417f8e5f996d7bb1b4
Opcode Fuzzy Hash: 315e923695d7eec0855eff2c8057444a1e413171a8d47249f9aa16ee30244951
Instruction Fuzzy Hash: 8B215E3554D3C49FC703CB20C990B51BFB1EF86618F1986EEE8894B6A3C37A9846DB51

Uniqueness

Uniqueness Score: -1.00%

Function 0176B274 Relevance: .1, Instructions: 52COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4071070132.000000000176A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0176A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_176a000_AnubisSearchFree.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 073b451e027e698440a3214bbc8318e8b1f71caccf68b264f14e465a5cf06d2e
Instruction ID: 667b22b042b158391c3b9ec370400f522d778a803ea4bf41cec7d02b0962ee06
Opcode Fuzzy Hash: 073b451e027e698440a3214bbc8318e8b1f71caccf68b264f14e465a5cf06d2e
Instruction Fuzzy Hash: E511A8B5A08301AFD350CF19DC81A5BFBE8EB98660F04895EF95997311D271E9088FA2

Uniqueness

Uniqueness Score: -1.00%

Function 01A605E0 Relevance: .0, Instructions: 44COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4071522284.0000000001A60000.00000040.00000020.00020000.00000000.sdmp, Offset: 01A60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1a60000_AnubisSearchFree.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2c0480369e7edea5e92513b54bf425ebb1a18c1583aad91c19d6064d343f0daa
Instruction ID: d0288fde098e2fd711f5051433a08106101d6f34ef522857e66762602e2d61a2
Opcode Fuzzy Hash: 2c0480369e7edea5e92513b54bf425ebb1a18c1583aad91c19d6064d343f0daa
Instruction Fuzzy Hash: B6F0F9B65087406FD7118B16AC40867FBA8EF85620708C49FFC498B742D225F804CBB2

Uniqueness

Uniqueness Score: -1.00%

Function 01A607C4 Relevance: .0, Instructions: 40COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4071522284.0000000001A60000.00000040.00000020.00020000.00000000.sdmp, Offset: 01A60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1a60000_AnubisSearchFree.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b5c820dcec83031bbc8bc77940d7966dbae04e34f8e7c6902a7f2854e4aee952
Instruction ID: b22f472c2d278d4443789ee2c5aa25701708c15ac63870208ad43cf5e18a08c0
Opcode Fuzzy Hash: b5c820dcec83031bbc8bc77940d7966dbae04e34f8e7c6902a7f2854e4aee952
Instruction Fuzzy Hash: C3014035149780CFC303CF14D640B11BBB5EF8A618F1986EAE9844B663C33A9C56CF91

Uniqueness

Uniqueness Score: -1.00%

Function 01A608D0 Relevance: .0, Instructions: 31COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4071522284.0000000001A60000.00000040.00000020.00020000.00000000.sdmp, Offset: 01A60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1a60000_AnubisSearchFree.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e6850d79e688ef7387407e307c00caab001beb49244c143f541758b1d055de9a
Instruction ID: 451e49adddb66d7c212b2cac8daae4080d79541dad7431c0985c2daf41befc19
Opcode Fuzzy Hash: e6850d79e688ef7387407e307c00caab001beb49244c143f541758b1d055de9a
Instruction Fuzzy Hash: D5F01D35144644DFC706CF04D680B15FBA6EB89718F24CAADE94917B52C737E853DA81

Uniqueness

Uniqueness Score: -1.00%

Function 01A60606 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4071522284.0000000001A60000.00000040.00000020.00020000.00000000.sdmp, Offset: 01A60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1a60000_AnubisSearchFree.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0c68934d19c075adda6ce4fc1fcfa17528c3718e54342da1307f3d76b25a4515
Instruction ID: 51bd7e9d0ff06e17c846fc97173829369d675b5152060c4007910c6e874bbbb7
Opcode Fuzzy Hash: 0c68934d19c075adda6ce4fc1fcfa17528c3718e54342da1307f3d76b25a4515
Instruction Fuzzy Hash: 0AE092B6600A008B9750CF0BEC81462F7D8EB84630B08C47FDC0D8B701D275F508CEA5

Uniqueness

Uniqueness Score: -1.00%

Function 05D22173 Relevance: .0, Instructions: 26COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4073526489.0000000005D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 05D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_5d20000_AnubisSearchFree.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1ac2ce9a619c65b00c373910d19481b768de386fc7becc1f4251e8baaf95e995
Instruction ID: 31fad36af967e20dbd9cad332ccc4762c594da6e4fba29de2ef024075a7744ad
Opcode Fuzzy Hash: 1ac2ce9a619c65b00c373910d19481b768de386fc7becc1f4251e8baaf95e995
Instruction Fuzzy Hash: E6E0D8F254020067D3508E0A9C85F62FBDCDB94A31F04C467ED081B742D171B51489E6

Uniqueness

Uniqueness Score: -1.00%

Function 05D21A1F Relevance: .0, Instructions: 26COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4073526489.0000000005D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 05D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_5d20000_AnubisSearchFree.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 182586bb39d531e8d9f08322f1917bfdc4b0ea349a0e477ba26d0f302fdc7150
Instruction ID: 3214911306002709922673b5202b8bf0863665489fe487c28a267082f2bacef3
Opcode Fuzzy Hash: 182586bb39d531e8d9f08322f1917bfdc4b0ea349a0e477ba26d0f302fdc7150
Instruction Fuzzy Hash: 2DE0D8F250020067D3509E0A9C86F63FBD8DB90A30F04C457ED085B712D172B514CDE6

Uniqueness

Uniqueness Score: -1.00%

Function 0176B2C3 Relevance: .0, Instructions: 26COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4071070132.000000000176A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0176A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_176a000_AnubisSearchFree.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4ca256a8e124f614e0972e2408d99f4b4ceb06795fddf39c237613562d33fe1f
Instruction ID: b66d82822c279f3790790ec407e40cd3f1215dfcb5ba64ebeb2c488f04ef33df
Opcode Fuzzy Hash: 4ca256a8e124f614e0972e2408d99f4b4ceb06795fddf39c237613562d33fe1f
Instruction Fuzzy Hash: DDE0D8F254020467D3508E0A9C85F62F798DB90A31F04C557ED085B752D171B504C9F6

Uniqueness

Uniqueness Score: -1.00%

Function 017523F4 Relevance: .0, Instructions: 15COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4071007431.0000000001752000.00000040.00000800.00020000.00000000.sdmp, Offset: 01752000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1752000_AnubisSearchFree.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 22f0c904eb746f81b027047ec4dd789a51a3cd3734bb21abb44419b0f02d554b
Instruction ID: 99de51dc1176ecdd3c6027a1fbd6a407e338b3a2c6ca92d85ef1673f506e9075
Opcode Fuzzy Hash: 22f0c904eb746f81b027047ec4dd789a51a3cd3734bb21abb44419b0f02d554b
Instruction Fuzzy Hash: E2D05E793057C18FE3169A1CC1A4B957FE8AB61714F5A44F9AC008B763C7A8D981D640

Uniqueness

Uniqueness Score: -1.00%

Function 017523BC Relevance: .0, Instructions: 14COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4071007431.0000000001752000.00000040.00000800.00020000.00000000.sdmp, Offset: 01752000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1752000_AnubisSearchFree.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: edbb921a2e7580fbd01c53b0140c46276fe0ab80f9aa1e1e15e8a9ce2baac562
Instruction ID: 72d08b85e55ef78aa35a3d12ce315529d506158373b8ae0f5f2b81daa4fe0722
Opcode Fuzzy Hash: edbb921a2e7580fbd01c53b0140c46276fe0ab80f9aa1e1e15e8a9ce2baac562
Instruction Fuzzy Hash: 25D05E342002818BD755DA0CC6D4F597BD8AB50B14F1A44ECAC108B763C7B4D8C1CA00

Uniqueness

Uniqueness Score: -1.00%

Description:	Adversaries may move onto systems, possibly those on disconnected or air-gapped networks, by copying malware to removable media and taking advantage of Autorun features when the media is inserted into a system and executes. In the case of Lateral Movement, this may occur through modification of executable files stored on removable media or by copying malware and renaming it to look like a legitimate file to trick users into executing it on a separate system. In the case of Initial Access, this may occur through manual manipulation of the media, modification of systems used to initially format the media, or modification to the media's firmware itself.
Tactics:	Initial Access, Lateral Movement
Data Sources:	Drive: Drive Creation, File: File Access, File: File Creation, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	Module: Module Load, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify access tokens to operate under a different user or system security context to perform actions and bypass access controls. Windows uses access tokens to determine the ownership of a running process. A user can manipulate access tokens to make a running process appear as though it is the child of a different process or belongs to someone other than the user that started the process. When this occurs, the process also takes on the security context associated with the new token.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Active Directory: Active Directory Object Modification, Command: Command Execution, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, User Account: User Account Metadata
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use methods of capturing user input to obtain credentials or collect information. During normal system usage, users often provide credentials to various different locations, such as login pages/portals or system dialog boxes. Input capture mechanisms may be transparent to the user (e.g. Credential API Hooking ) or rely on deceiving the user into providing input into what they believe to be a genuine service (e.g. Web Portal Capture ).
Tactics:	Collection, Credential Access
Data Sources:	Driver: Driver Load, File: File Modification, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to gather information about attached peripheral devices and components connected to a computer system.Peripheral devices could include auxiliary resources that support a variety of functionalities such as keyboards, printers, cameras, smart card readers, or removable storage. The information may be used to enhance their awareness of the system and network environment or may be used for further actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report 4xKDL5YCfQ.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: Njrat

Yara Signatures

Initial Sample

Dropped Files

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Snort Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Spreading

Networking

Key, Mouse, Clipboard, Microphone and Screen Capturing

E-Banking Fraud

System Summary

Data Obfuscation

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v2.0_32\UsageLogs\4xKDL5YCfQ.exe.log

C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe

C:\Users\user\AppData\Local\Temp\AnubisSearchFree.exe:Zone.Identifier

\Device\ConDrv

Static File Info

General

File Icon

Static PE Info

General

Entrypoint Preview

Windows Analysis Report
4xKDL5YCfQ.exe

Function 05710310 Relevance: 7.7, Strings: 6, Instructions: 195
COMMON

Function 057103BD Relevance: 7.6, Strings: 6, Instructions: 135
COMMON

Function 05710938 Relevance: 3.0, Strings: 2, Instructions: 498
COMMON

Function 0155A612 Relevance: 1.6, APIs: 1, Instructions: 89
synchronizationCOMMON

Function 0155A361 Relevance: 1.6, APIs: 1, Instructions: 85
registryCOMMON

Function 0155A462 Relevance: 1.6, APIs: 1, Instructions: 77
registryCOMMON

Function 0155AA07 Relevance: 1.6, APIs: 1, Instructions: 72
fileCOMMON

Function 0155A646 Relevance: 1.6, APIs: 1, Instructions: 72
synchronizationCOMMON

Function 0155A392 Relevance: 1.6, APIs: 1, Instructions: 69
registryCOMMON

Function 0155A486 Relevance: 1.6, APIs: 1, Instructions: 65
registryCOMMON

Function 0155A2D2 Relevance: 1.6, APIs: 1, Instructions: 61
COMMON

Function 0155AC24 Relevance: 1.6, APIs: 1, Instructions: 60
COMMON

Function 0155A8A4 Relevance: 1.6, APIs: 1, Instructions: 59
COMMON

Function 0155AA3E Relevance: 1.6, APIs: 1, Instructions: 53
fileCOMMON

Function 0155A8C6 Relevance: 1.5, APIs: 1, Instructions: 48
COMMON